This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/_muqkDefxMn6elW9A6x3-u89qsI.roa File: _muqkDefxMn6elW9A6x3-u89qsI.roa (raw, json) Hash identifier: hm15ty/qT5a1amDhQKBPxEwo6xcyPJbCH7A9J8+gqhU= Subject key identifier: FE:6B:AA:90:37:9F:C4:C9:FA:7A:55:BD:03:AC:77:FA:EF:3D:AA:C2 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019B77C75B53F84DA45D7B6BDAF2B5C2971C Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/_muqkDefxMn6elW9A6x3-u89qsI.roa Signing time: Thu 01 Jan 2026 04:18:32 +0000 ROA not before: Thu 01 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39810 IP address blocks: 89.187.0.0/23 maxlen: 24 89.187.2.0/24 maxlen: 24 89.187.3.0/24 maxlen: 24 2a10:e400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5b:53:f8:4d:a4:5d:7b:6b:da:f2:b5:c2:97:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe6baa90379fc4c9fa7a55bd03ac77faef3daac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:72:4e:f8:cb:d6:71:96:b9:ae:97:0c:41:83: f1:bc:fa:35:21:fc:3e:28:d7:c3:46:00:de:2a:ee: 32:52:c7:4e:78:8c:79:34:0c:1b:25:e5:23:ff:df: 27:92:ce:e1:63:b5:a1:db:a0:5e:62:f8:4b:18:85: 25:5f:91:91:73:da:d6:84:a7:2b:05:a8:71:ca:c5: 08:81:04:bd:5d:72:e7:a8:5a:4b:89:e1:a1:40:5f: f7:ce:08:a0:1e:de:8b:c9:e5:7e:ed:fc:78:5d:2b: 32:6d:a5:63:a4:e7:1a:49:0d:0f:ea:22:c1:86:e8: ca:52:c2:7c:2a:10:16:01:67:e5:fa:84:5c:df:2e: 8e:aa:8e:52:58:27:50:6e:30:cf:45:39:2e:10:ae: e3:27:f2:ca:b0:ed:b2:a5:80:8b:62:33:d5:16:6f: 01:df:18:5a:41:af:2d:02:9b:a1:b2:d1:33:7f:6c: f6:37:7d:90:0c:af:da:0d:d0:ac:82:c7:77:ce:da: 66:73:5e:c9:15:ce:ce:57:2d:65:26:7f:4c:3a:97: f5:45:fb:ee:20:b8:2f:9d:f8:f7:ba:53:c6:c0:37: be:d6:53:40:d0:a2:8a:6a:59:8f:4d:67:92:9f:df: 86:84:6f:93:e4:31:29:71:20:e2:e5:a8:63:77:30: f4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6B:AA:90:37:9F:C4:C9:FA:7A:55:BD:03:AC:77:FA:EF:3D:AA:C2 X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/_muqkDefxMn6elW9A6x3-u89qsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.0.0/22 IPv6: 2a10:e400::/29 Signature Algorithm: sha256WithRSAEncryption ad:64:fe:39:77:b7:fc:bd:d6:d0:84:6e:62:9d:a3:e9:cf:c5: 4d:f4:bf:e6:50:36:99:fb:66:91:30:c4:39:3a:27:d5:05:e5: 25:fd:b9:82:31:27:42:de:13:dd:11:f4:c6:2b:9e:8c:17:e5: dc:35:02:c2:8a:e4:fc:b9:5b:85:b6:2b:e8:15:82:49:12:e5: e7:de:5d:23:f5:19:68:01:c2:9c:ed:0b:d8:c7:45:24:60:5a: 61:db:3c:32:ea:5f:19:9a:72:0e:24:1e:8b:dd:b0:ec:47:f7: 8a:83:6b:f2:1b:0e:89:73:f5:b7:5e:30:3c:d2:bf:d3:08:dd: 44:c5:1b:00:1c:85:72:57:e5:9e:94:6d:25:f0:55:5c:e1:c4: 6c:05:71:1d:e1:8e:1c:79:24:ee:a6:4f:ae:78:b0:ca:4d:54: 6c:89:ae:90:b4:ab:9d:56:e5:a1:3c:60:1d:5b:f1:b4:00:ca: 2c:08:93:97:5b:4c:f2:26:30:58:c7:fa:35:e0:19:9d:05:0a: cd:7b:05:55:db:af:03:5c:8f:69:5b:36:6b:e7:45:a0:ce:a0: e8:77:f5:8b:97:66:00:bd:9b:8a:d5:b3:87:df:40:bd:13:5b: 0b:67:45:40:80:a4:d0:cd:2a:6d:db:2d:a8:87:98:43:dd:d8: e0:b3:7e:08 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x1tT+E2kXXtr2vK1wpccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTZiYWE5MDM3OWZjNGM5ZmE3YTU1YmQwM2FjNzdmYWVmM2RhYWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHJO+MvWcZa5rpcMQYPxvPo1Ifw+ KNfDRgDeKu4yUsdOeIx5NAwbJeUj/98nks7hY7Wh26BeYvhLGIUlX5GRc9rWhKcr BahxysUIgQS9XXLnqFpLieGhQF/3zgigHt6LyeV+7fx4XSsybaVjpOcaSQ0P6iLB hujKUsJ8KhAWAWfl+oRc3y6Oqo5SWCdQbjDPRTkuEK7jJ/LKsO2ypYCLYjPVFm8B 3xhaQa8tApuhstEzf2z2N32QDK/aDdCsgsd3ztpmc17JFc7OVy1lJn9MOpf1Rfvu ILgvnfj3ulPGwDe+1lNA0KKKalmPTWeSn9+GhG+T5DEpcSDi5ahjdzD0FQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFP5rqpA3n8TJ+npVvQOsd/rvParCMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvX211cWtEZWZ4TW42ZWxXOUE2eDMtdTg5cXNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCWbsAMA0E AgACMAcDBQMqEOQAMA0GCSqGSIb3DQEBCwUAA4IBAQCtZP45d7f8vdbQhG5inaPp z8VN9L/mUDaZ+2aRMMQ5OifVBeUl/bmCMSdC3hPdEfTGK56MF+XcNQLCiuT8uVuF tivoFYJJEuXn3l0j9RloAcKc7QvYx0UkYFph2zwy6l8ZmnIOJB6L3bDsR/eKg2vy Gw6Jc/W3XjA80r/TCN1ExRsAHIVyV+WelG0l8FVc4cRsBXEd4Y4ceSTupk+ueLDK TVRsia6QtKudVuWhPGAdW/G0AMosCJOXW0zyJjBYx/o14BmdBQrNewVV268DXI9p WzZr50WgzqDod/WLl2YAvZuK1bOH30C9E1sLZ0VAgKTQzSpt2y2oh5hD3djgs34I -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:28 2026 by rpki-client