This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/pMQXxEOhNC3L03-8jdBql4cTmpo.roa File: pMQXxEOhNC3L03-8jdBql4cTmpo.roa (raw, json) Hash identifier: L9l8VW8pVLnWaC4+KRR231nu9MmbKspDVI+1+UNnt7E= Subject key identifier: A4:C4:17:C4:43:A1:34:2D:CB:D3:7F:BC:8D:D0:6A:97:87:13:9A:9A Certificate issuer: /CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34 Certificate serial: 019B7B35DDC1C104C17F63AD1FDD37EB71E0 Authority key identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/pMQXxEOhNC3L03-8jdBql4cTmpo.roa Signing time: Thu 01 Jan 2026 20:18:06 +0000 ROA not before: Thu 01 Jan 2026 20:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 807 IP address blocks: 193.57.173.0/24 maxlen: 24 193.57.200.0/24 maxlen: 24 193.57.223.0/24 maxlen: 24 193.57.224.0/24 maxlen: 24 2a0f:8640::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:dd:c1:c1:04:c1:7f:63:ad:1f:dd:37:eb:71:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34 Validity Not Before: Jan 1 20:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4c417c443a1342dcbd37fbc8dd06a9787139a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:70:08:35:ed:fb:4e:16:bf:bb:5b:6a:dd:ab: 9a:d8:a3:85:b4:d7:19:0b:a7:25:29:2b:3e:5a:bf: d7:1a:33:f2:a4:a3:47:5a:ee:c4:ed:41:6a:c4:34: 27:69:c1:75:69:a8:9f:5e:4c:e4:f4:ef:5a:62:e0: b6:86:04:cb:ae:30:4b:d3:75:85:93:c5:aa:e2:3a: a7:89:72:f4:42:b6:8b:65:90:0e:22:4c:de:7d:0f: 01:ff:de:e2:a1:7f:25:cd:6b:cb:7a:71:72:f5:37: a5:fe:d1:0f:94:52:7e:19:96:5c:11:ee:9c:57:27: 18:bc:0c:8b:71:3d:36:1a:87:d3:f4:25:5d:6e:9a: 3a:a0:5e:e2:3e:e1:49:47:72:5a:5e:71:80:58:c9: a5:89:4a:a2:a0:d5:06:80:8d:0e:b2:3b:77:3b:6a: a8:92:95:28:68:6a:ad:2e:52:66:ff:02:3e:01:75: 31:53:aa:b3:0e:e3:50:97:4a:ae:f7:e5:09:62:17: af:2e:f6:ac:c2:6c:73:f6:e3:2f:ef:64:0e:f1:79: 4c:73:9f:07:de:f0:9c:6e:e6:95:30:bf:7d:da:0e: 96:a7:c2:93:40:fb:b1:6c:c2:88:f2:f6:a7:ad:55: 82:fa:92:69:78:ed:06:86:08:8b:7b:a5:44:2e:a2: 05:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C4:17:C4:43:A1:34:2D:CB:D3:7F:BC:8D:D0:6A:97:87:13:9A:9A X509v3 Authority Key Identifier: keyid:5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/pMQXxEOhNC3L03-8jdBql4cTmpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.173.0/24 193.57.200.0/24 193.57.223.0-193.57.224.255 IPv6: 2a0f:8640::/29 Signature Algorithm: sha256WithRSAEncryption d3:4f:4d:86:e0:ab:9b:5f:07:46:6f:99:0f:08:5c:97:45:01: 6d:25:82:08:80:06:d4:ea:92:3b:dc:30:5f:32:a8:42:bc:a8: a1:05:a0:91:c9:a8:79:6e:01:b3:14:5d:c4:37:ee:05:75:aa: f4:f8:01:82:4b:b8:3d:9d:15:58:d6:9a:a2:ce:eb:f3:ce:6e: 88:6e:a4:2c:d2:97:12:31:be:30:75:8a:94:21:94:83:57:ff: b6:fc:3b:b5:05:2f:0e:8b:72:dd:6a:6b:27:e4:a0:8a:0c:e1: 81:3b:7a:3e:0b:8e:14:57:d1:b5:bf:41:2a:61:0e:12:19:45: 25:18:c3:4f:ba:aa:0a:31:17:c5:34:10:e4:54:b6:15:45:97: 1b:1f:17:95:0e:06:0f:4d:3c:0c:28:f2:61:df:4d:aa:13:fb: 6a:62:87:89:5a:40:28:64:7c:14:d5:40:05:14:88:a7:5b:50: 22:ff:4d:72:58:d0:c1:b6:fc:be:fd:01:e3:b2:35:bf:83:b7: 64:84:94:ff:f1:09:ee:7b:7b:19:23:e5:21:7a:b0:64:e8:ba: 71:f8:7e:9e:07:a3:48:d1:23:da:cd:84:59:cd:07:0e:a7:a3: 8e:58:60:6c:e3:5f:fc:e6:0c:f6:8b:f8:ec:92:31:bf:5d:6d: 30:7e:f8:3d -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt7Nd3BwQTBf2OtH90363HgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViY2Q0MGQxMGI1NmYzYjUzMmZhMGRmZDAxZDgxN2VmOTNk YTFhMzQwHhcNMjYwMTAxMjAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGM0MTdjNDQzYTEzNDJkY2JkMzdmYmM4ZGQwNmE5Nzg3MTM5YTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXAINe37Tha/u1tq3aua2KOFtNcZ C6clKSs+Wr/XGjPypKNHWu7E7UFqxDQnacF1aaifXkzk9O9aYuC2hgTLrjBL03WF k8Wq4jqniXL0QraLZZAOIkzefQ8B/97ioX8lzWvLenFy9Tel/tEPlFJ+GZZcEe6c VycYvAyLcT02GofT9CVdbpo6oF7iPuFJR3JaXnGAWMmliUqioNUGgI0Osjt3O2qo kpUoaGqtLlJm/wI+AXUxU6qzDuNQl0qu9+UJYhevLvaswmxz9uMv72QO8XlMc58H 3vCcbuaVML992g6Wp8KTQPuxbMKI8vanrVWC+pJpeO0GhgiLe6VELqIFmwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFKTEF8RDoTQty9N/vI3QapeHE5qaMB8GA1UdIwQY MBaAFFvNQNELVvO1MvoN/QHYF++T2ho0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzgxQTBRdFc4N1V5LWczOUFkZ1g3NVBhR2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZmY3NTgtNGI4My00NzNkLWIwNzIt YTJjZTFjYzhiODdmLzEvcE1RWHhFT2hOQzNMMDMtOGpkQnFsNGNUbXBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iZmY3NTgtNGI4My00NzNkLWIwNzItYTJjZTFjYzhiODdm LzEvVzgxQTBRdFc4N1V5LWczOUFkZ1g3NVBhR2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQAwTmtAwQA wTnIMAwDBADBOd8DBADBOeAwDQQCAAIwBwMFAyoPhkAwDQYJKoZIhvcNAQELBQAD ggEBANNPTYbgq5tfB0ZvmQ8IXJdFAW0lggiABtTqkjvcMF8yqEK8qKEFoJHJqHlu AbMUXcQ37gV1qvT4AYJLuD2dFVjWmqLO6/PObohupCzSlxIxvjB1ipQhlINX/7b8 O7UFLw6Lct1qayfkoIoM4YE7ej4LjhRX0bW/QSphDhIZRSUYw0+6qgoxF8U0EORU thVFlxsfF5UOBg9NPAwo8mHfTaoT+2pih4laQChkfBTVQAUUiKdbUCL/TXJY0MG2 /L79AeOyNb+Dt2SElP/xCe57exkj5SF6sGTounH4fp4Ho0jRI9rNhFnNBw6no45Y YGzjX/zmDPaL+OySMb9dbTB++D0= -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:51 2026 by rpki-client