This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/mQ4cgFT5nNGIaARyhi69lPPnFEo.roa File: mQ4cgFT5nNGIaARyhi69lPPnFEo.roa (raw, json) Hash identifier: xtuo2cKIp++mdKs5fmJgrWF8Lt6PS/ruxbhnedxwNqE= Subject key identifier: 99:0E:1C:80:54:F9:9C:D1:88:68:04:72:86:2E:BD:94:F3:E7:14:4A Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0 Certificate serial: 019B7BA4D544F26E1E0A1FA059C45C7BF475 Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/mQ4cgFT5nNGIaARyhi69lPPnFEo.roa Signing time: Thu 01 Jan 2026 22:19:18 +0000 ROA not before: Thu 01 Jan 2026 22:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207990 IP address blocks: 185.5.145.0/24 maxlen: 32 185.5.146.0/24 maxlen: 32 193.142.132.0/24 maxlen: 32 193.142.133.0/24 maxlen: 32 193.142.134.0/24 maxlen: 32 193.142.135.0/24 maxlen: 32 193.228.72.0/24 maxlen: 32 193.228.73.0/24 maxlen: 32 193.228.74.0/24 maxlen: 32 193.228.75.0/24 maxlen: 32 194.33.156.0/24 maxlen: 32 194.33.157.0/24 maxlen: 32 194.33.158.0/24 maxlen: 32 194.33.159.0/24 maxlen: 32 194.34.128.0/24 maxlen: 32 194.34.129.0/24 maxlen: 32 194.34.130.0/24 maxlen: 32 194.34.131.0/24 maxlen: 32 194.110.48.0/24 maxlen: 32 194.110.49.0/24 maxlen: 32 194.110.50.0/24 maxlen: 32 194.110.51.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d5:44:f2:6e:1e:0a:1f:a0:59:c4:5c:7b:f4:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0 Validity Not Before: Jan 1 22:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=990e1c8054f99cd188680472862ebd94f3e7144a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:69:ea:32:20:6a:bc:09:29:3c:5e:82:ba: 19:3d:54:1f:cd:34:c9:45:02:09:e1:a2:a5:23:39: 4a:47:0b:46:1a:20:4d:c8:c4:06:d2:d9:72:e3:ad: 93:8a:36:06:81:66:c8:f9:3f:68:b7:7b:8f:55:d7: 78:76:93:aa:6e:12:78:02:3e:d0:5a:1a:e1:b0:b3: cf:67:57:ed:93:54:f6:97:90:ef:1d:7b:32:99:63: 02:75:0a:1b:2b:2f:13:63:e5:13:36:91:c7:eb:3a: 29:e8:48:ea:66:63:18:77:0c:ce:38:47:d7:ae:0d: f4:94:f7:cb:24:b2:26:e5:14:89:84:2f:db:16:8f: 93:ad:37:5a:c1:f6:f6:c9:55:1a:8e:6a:8a:6d:8c: b4:57:c4:0e:d9:b6:8d:ca:cf:a3:11:5c:d2:80:a6: 67:10:ad:fe:58:fb:ac:30:ff:6e:4b:19:62:a5:13: fa:f3:45:cb:c8:37:18:5a:c4:69:37:43:21:77:a1: 82:02:8e:4d:e1:f1:06:ac:6a:3e:09:26:17:d7:a6: ce:17:8e:9c:b8:59:ed:90:b5:d3:0d:69:5e:61:ff: 65:a2:cd:bc:db:9c:3f:c1:01:a9:ad:14:d6:44:63: a8:f2:7f:e6:46:de:d9:96:ae:fb:48:0a:f4:0d:09: 26:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0E:1C:80:54:F9:9C:D1:88:68:04:72:86:2E:BD:94:F3:E7:14:4A X509v3 Authority Key Identifier: keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/mQ4cgFT5nNGIaARyhi69lPPnFEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.5.145.0-185.5.146.255 193.142.132.0/22 193.228.72.0/22 194.33.156.0/22 194.34.128.0/22 194.110.48.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:f1:df:01:e0:35:5a:4c:f7:fe:0f:73:50:85:20:43:d5:4a: 16:20:92:71:95:8b:85:e0:dc:44:b9:fb:1d:ad:0c:8a:a1:4d: 1d:54:10:1d:14:c8:94:15:06:5c:66:c9:67:67:c6:7e:a5:40: 1f:24:4b:7c:af:86:55:34:91:b3:4f:cb:fc:f8:37:db:32:dd: 1d:0c:41:fa:a9:40:04:2f:3c:e6:fb:1f:94:36:74:eb:96:f4: 62:95:3d:8f:8e:29:e0:25:43:f1:45:5f:83:28:51:62:88:ca: 77:f1:58:bf:a2:4e:0c:8d:0b:4b:03:14:de:b1:b4:3d:d1:6d: eb:32:ad:35:d9:1a:68:cf:dc:5a:66:fb:f7:d2:08:29:84:76: 6d:9b:29:ca:d9:7f:20:f0:1a:ac:70:07:14:78:6f:06:1e:70: 29:11:81:40:48:2f:60:a3:6d:a6:18:4d:18:11:61:90:c8:54: d0:60:50:fa:d7:dd:7d:fe:61:f6:e3:6e:3f:46:32:c8:0f:e3: 7e:66:b5:d9:1f:91:3b:0c:d7:e1:98:82:5d:60:2c:f2:40:c5: 8e:c8:07:bd:63:c8:ea:28:da:ea:f0:e5:93:97:eb:0b:ed:47: 5d:73:b3:63:ad:f1:39:d8:ce:2a:f5:cd:aa:b2:44:0f:1b:a9: 51:75:95:07 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt7pNVE8m4eCh+gWcRce/R1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZDQ0OTE5ZmRkMDhhZmI5YTRkMGE4Nzc4OTIzMDExMjUx ZGQ3ZjAwHhcNMjYwMTAxMjIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTBlMWM4MDU0Zjk5Y2QxODg2ODA0NzI4NjJlYmQ5NGYzZTcxNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocJp6jIgarwJKTxegroZPVQfzTTJ RQIJ4aKlIzlKRwtGGiBNyMQG0tly462TijYGgWbI+T9ot3uPVdd4dpOqbhJ4Aj7Q WhrhsLPPZ1ftk1T2l5DvHXsymWMCdQobKy8TY+UTNpHH6zop6EjqZmMYdwzOOEfX rg30lPfLJLIm5RSJhC/bFo+TrTdawfb2yVUajmqKbYy0V8QO2baNys+jEVzSgKZn EK3+WPusMP9uSxlipRP680XLyDcYWsRpN0Mhd6GCAo5N4fEGrGo+CSYX16bOF46c uFntkLXTDWleYf9los2825w/wQGprRTWRGOo8n/mRt7Zlq77SAr0DQkmlQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFJkOHIBU+ZzRiGgEcoYuvZTz5xRKMB8GA1UdIwQY MBaAFDLUSRn90Ir7mk0Kh3iSMBElHdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQt YTRmN2IwODhiYzFhLzEvbVE0Y2dGVDVuTkdJYUFSeWhpNjlsUFBuRkVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQtYTRmN2IwODhiYzFh LzEvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAC5BZED BAC5BZIDBALBjoQDBALB5EgDBALCIZwDBALCIoADBALCbjAwDQYJKoZIhvcNAQEL BQADggEBAErx3wHgNVpM9/4Pc1CFIEPVShYgknGVi4Xg3ES5+x2tDIqhTR1UEB0U yJQVBlxmyWdnxn6lQB8kS3yvhlU0kbNPy/z4N9sy3R0MQfqpQAQvPOb7H5Q2dOuW 9GKVPY+OKeAlQ/FFX4MoUWKIynfxWL+iTgyNC0sDFN6xtD3RbesyrTXZGmjP3Fpm +/fSCCmEdm2bKcrZfyDwGqxwBxR4bwYecCkRgUBIL2CjbaYYTRgRYZDIVNBgUPrX 3X3+Yfbjbj9GMsgP435mtdkfkTsM1+GYgl1gLPJAxY7IB71jyOoo2urw5ZOX6wvt R11zs2Ot8TnYzir1zaqyRA8bqVF1lQc= -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:50 2026 by rpki-client