This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Mqwh3Aj9Me_Mmht0lgWZxdbibQI.roa File: Mqwh3Aj9Me_Mmht0lgWZxdbibQI.roa (raw, json) Hash identifier: L5/yVNVSyivEu/Z4ltYrPSS1srmAk1/pQN9yG7rd0Bc= Subject key identifier: 32:AC:21:DC:08:FD:31:EF:CC:9A:1B:74:96:05:99:C5:D6:E2:6D:02 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC724E84E841320D674923B0BD6CE6 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Mqwh3Aj9Me_Mmht0lgWZxdbibQI.roa Signing time: Thu 01 Jan 2026 14:18:17 +0000 ROA not before: Thu 01 Jan 2026 14:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213372 IP address blocks: 150.241.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:72:4e:84:e8:41:32:0d:67:49:23:b0:bd:6c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32ac21dc08fd31efcc9a1b74960599c5d6e26d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:40:6a:29:f2:09:10:32:b0:0c:1d:ec:55:52: 99:b9:b0:f5:c0:b3:d7:d5:79:46:eb:94:21:c1:e8: f8:03:a5:98:36:b8:09:7b:09:63:ba:31:04:32:d5: 76:39:e4:70:ad:d0:a1:79:23:bf:97:74:14:47:33: 4f:b8:a8:e0:01:c1:f1:e4:34:97:d6:fa:38:61:a8: 94:07:99:c4:86:8b:fd:e1:fb:1b:a8:60:b4:19:d7: d1:18:e5:0b:d1:c1:fc:3f:8d:92:e8:3f:cf:99:a6: 9f:8e:9f:05:e7:64:46:0d:14:f9:55:98:1d:46:d8: b1:ee:51:37:e4:b2:77:16:8a:16:c9:0e:bf:08:81: bb:f2:03:5b:5c:b4:fa:bf:98:ec:f0:42:98:bf:23: 57:90:df:10:95:2f:d9:79:82:f7:22:52:56:d1:e9: 14:e0:f5:99:19:67:1c:11:d0:f3:74:0b:71:bc:f6: 85:73:b4:97:aa:a3:44:3a:cd:e6:10:d7:dd:ce:83: c0:24:f1:40:98:4c:e4:f7:9c:f3:cb:11:e4:0a:d0: 37:a7:bb:f6:d4:2e:19:5b:89:cb:94:ab:98:29:88: 39:42:2a:a9:48:cb:fe:e1:1d:b8:b4:8d:22:0e:1a: 35:b8:80:5a:c5:79:27:9b:be:50:c9:f7:72:db:ca: 8c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AC:21:DC:08:FD:31:EF:CC:9A:1B:74:96:05:99:C5:D6:E2:6D:02 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Mqwh3Aj9Me_Mmht0lgWZxdbibQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.241.67.0/24 Signature Algorithm: sha256WithRSAEncryption 14:47:85:70:0e:18:56:f4:83:63:b8:cc:11:06:26:4e:64:ca: 3e:6c:22:d3:a5:ac:24:81:de:ea:0d:8a:53:06:1e:0a:5d:75: 29:83:82:d1:28:ea:fc:76:55:d1:0d:e1:f0:6f:4b:d9:c5:a3: 20:52:b6:8c:05:a4:48:af:6e:15:be:82:7f:0b:58:7d:37:c6: 72:4e:a1:8f:02:28:bc:c0:ab:48:22:63:76:cd:82:20:3c:c0: 9d:30:a7:d8:65:96:7d:ca:66:d9:a5:d1:2c:27:ef:5c:4c:a9: 85:4a:74:d8:d9:fc:44:2f:4b:16:1f:c8:15:9e:d1:88:6a:32: 50:3e:d3:ab:7a:9e:34:45:a0:02:96:d5:83:00:50:76:c3:dd: af:28:6a:e7:d4:b2:1f:57:1e:f5:1d:ec:39:e6:dd:56:f1:90: fc:01:ac:12:29:99:e6:bb:99:38:be:7b:98:3e:c4:35:d2:69: b7:5d:bc:c8:d5:f4:f4:53:32:4c:8f:f8:57:ed:0a:f4:7d:22: f7:b5:e5:7a:d2:ff:dd:2f:98:a7:74:ff:f3:c7:63:dc:b4:a8: c4:7b:5f:02:35:5d:20:32:bb:9a:d6:60:74:8b:e3:42:87:26: 07:0c:83:19:e6:1f:02:0b:85:88:cd:f4:ce:2a:28:e0:0f:c7: 07:f7:7c:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57HJOhOhBMg1nSSOwvWzmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmFjMjFkYzA4ZmQzMWVmY2M5YTFiNzQ5NjA1OTljNWQ2ZTI2ZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0BqKfIJEDKwDB3sVVKZubD1wLPX 1XlG65Qhwej4A6WYNrgJewljujEEMtV2OeRwrdCheSO/l3QURzNPuKjgAcHx5DSX 1vo4YaiUB5nEhov94fsbqGC0GdfRGOUL0cH8P42S6D/Pmaafjp8F52RGDRT5VZgd Rtix7lE35LJ3FooWyQ6/CIG78gNbXLT6v5js8EKYvyNXkN8QlS/ZeYL3IlJW0ekU 4PWZGWccEdDzdAtxvPaFc7SXqqNEOs3mENfdzoPAJPFAmEzk95zzyxHkCtA3p7v2 1C4ZW4nLlKuYKYg5QiqpSMv+4R24tI0iDho1uIBaxXknm75Qyfdy28qMCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDKsIdwI/THvzJobdJYFmcXW4m0CMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvTXF3aDNBajlNZV9NbWh0MGxnV1p4ZGJpYlFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvFDMA0G CSqGSIb3DQEBCwUAA4IBAQAUR4VwDhhW9INjuMwRBiZOZMo+bCLTpawkgd7qDYpT Bh4KXXUpg4LRKOr8dlXRDeHwb0vZxaMgUraMBaRIr24VvoJ/C1h9N8ZyTqGPAii8 wKtIImN2zYIgPMCdMKfYZZZ9ymbZpdEsJ+9cTKmFSnTY2fxEL0sWH8gVntGIajJQ PtOrep40RaACltWDAFB2w92vKGrn1LIfVx71Hew55t1W8ZD8AawSKZnmu5k4vnuY PsQ10mm3XbzI1fT0UzJMj/hX7Qr0fSL3teV60v/dL5indP/zx2PctKjEe18CNV0g Mrua1mB0i+NChyYHDIMZ5h8CC4WIzfTOKijgD8cH93zF -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:11 2026 by rpki-client