This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/kMQMIFFfz9dDImfwz8m7mtdpugQ.roa File: kMQMIFFfz9dDImfwz8m7mtdpugQ.roa (raw, json) Hash identifier: hBaL6GBKYyDCaTVjdM3YLuqqOTSlZ1kpqqMVd30MX+Y= Subject key identifier: 90:C4:0C:20:51:5F:CF:D7:43:22:67:F0:CF:C9:BB:9A:D7:69:BA:04 Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302 Certificate serial: 019B7834BC4A7A9711FA851102C1BF51E9FB Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/kMQMIFFfz9dDImfwz8m7mtdpugQ.roa Signing time: Thu 01 Jan 2026 06:18:00 +0000 ROA not before: Thu 01 Jan 2026 06:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196763 IP address blocks: 93.190.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:bc:4a:7a:97:11:fa:85:11:02:c1:bf:51:e9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302 Validity Not Before: Jan 1 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90c40c20515fcfd7432267f0cfc9bb9ad769ba04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:49:aa:6c:48:d2:aa:5f:c3:5b:d2:9b:16:c7: af:f0:72:7a:31:1c:e2:0f:89:b5:36:ac:ce:87:a7: c4:da:a8:eb:93:8e:f3:79:66:d9:ba:0e:74:89:13: 71:0a:6e:d3:3a:e6:7a:a8:15:5a:78:8b:26:05:5b: 42:e9:37:41:2c:92:c8:86:0c:a3:2b:1b:92:3c:86: 2b:c9:80:85:36:30:8c:02:d4:c6:1f:9a:02:01:53: 10:22:1a:24:31:dd:41:14:d0:58:25:4b:60:27:10: d5:8a:f7:1e:ae:49:6d:54:88:fb:7c:11:a9:29:f2: 87:7a:3b:c1:02:1a:05:69:fe:72:43:e6:b1:a5:f2: 02:a6:6a:43:78:81:25:97:9b:ea:97:3d:15:0c:2c: ec:a8:0a:e4:49:91:de:70:c2:9b:fb:a8:78:e8:a0: 29:09:67:35:09:39:d6:81:3b:84:72:d0:38:4e:14: 35:25:3f:b5:05:a6:d9:c5:99:c6:e5:d4:bb:7e:69: 81:7c:cb:86:fb:62:4e:f4:42:a2:21:66:46:6c:17: 80:7e:c2:8d:ce:ac:69:be:fa:33:94:b2:3c:dd:b1: a0:e5:ef:ae:59:7c:f7:62:48:05:28:00:5d:fe:3e: 92:db:a7:ff:2a:ec:4c:69:bf:dc:59:5a:74:6a:65: f4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C4:0C:20:51:5F:CF:D7:43:22:67:F0:CF:C9:BB:9A:D7:69:BA:04 X509v3 Authority Key Identifier: keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/kMQMIFFfz9dDImfwz8m7mtdpugQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.190.232.0/21 Signature Algorithm: sha256WithRSAEncryption 6d:a5:b8:86:8c:14:e1:04:87:84:e1:31:3c:76:59:ca:b5:91: c4:81:72:8b:05:28:6d:f7:25:16:15:f8:17:71:5a:71:84:9e: 5f:aa:5e:f8:aa:06:03:bb:06:55:83:6c:70:6d:f5:42:84:00: bb:f0:ea:40:28:1a:ad:5f:fd:fb:c2:ca:0e:03:d8:e6:aa:a6: 72:0a:39:0e:c0:28:87:03:49:e7:9d:69:d1:e6:64:2e:7c:d2: a7:df:1f:98:0a:99:c8:6b:f2:37:ce:ed:14:2a:2a:5c:09:82: 8f:25:bc:93:94:fb:9c:51:ef:4d:c9:d3:dc:2f:f3:6a:14:02: db:04:5a:b6:8e:04:e3:c0:55:7b:68:c2:a7:1f:ab:ea:0e:08: 7f:1f:58:47:a8:60:47:8e:9c:9a:4c:32:01:b4:58:d8:bc:e1: 88:7d:fc:59:06:f2:67:09:d9:98:81:a9:41:0f:10:99:ae:60: 14:16:58:de:34:25:78:8b:67:13:ea:e7:03:21:c2:86:61:86: dc:9c:22:6c:f6:31:2e:ad:7c:ca:dd:7c:73:88:35:89:80:21: fe:65:1d:33:cb:65:7c:92:95:fc:73:8e:8c:92:39:8c:c4:4e: 85:a9:95:7c:24:3e:ca:c1:03:a1:a1:5f:99:92:d5:0b:2c:52: 1a:09:3c:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLxKepcR+oURAsG/Uen7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYTdjZThiYWNiZWNlZWIxNmY2MDBiNjA3ZDFiZmQwODAz M2IzMDIwHhcNMjYwMTAxMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGM0MGMyMDUxNWZjZmQ3NDMyMjY3ZjBjZmM5YmI5YWQ3NjliYTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUmqbEjSql/DW9KbFsev8HJ6MRzi D4m1NqzOh6fE2qjrk47zeWbZug50iRNxCm7TOuZ6qBVaeIsmBVtC6TdBLJLIhgyj KxuSPIYryYCFNjCMAtTGH5oCAVMQIhokMd1BFNBYJUtgJxDVivcerkltVIj7fBGp KfKHejvBAhoFaf5yQ+axpfICpmpDeIEll5vqlz0VDCzsqArkSZHecMKb+6h46KAp CWc1CTnWgTuEctA4ThQ1JT+1BabZxZnG5dS7fmmBfMuG+2JO9EKiIWZGbBeAfsKN zqxpvvozlLI83bGg5e+uWXz3YkgFKABd/j6S26f/KuxMab/cWVp0amX0vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJDEDCBRX8/XQyJn8M/Ju5rXaboEMB8GA1UdIwQY MBaAFIGnzousvs7rFvYAtgfRv9CAM7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzct YjI3ZDg3MzBhMjcwLzEva01RTUlGRmZ6OWRESW1md3o4bTdtdGRwdWdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzctYjI3ZDg3MzBhMjcw LzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXb7oMA0G CSqGSIb3DQEBCwUAA4IBAQBtpbiGjBThBIeE4TE8dlnKtZHEgXKLBSht9yUWFfgX cVpxhJ5fql74qgYDuwZVg2xwbfVChAC78OpAKBqtX/37wsoOA9jmqqZyCjkOwCiH A0nnnWnR5mQufNKn3x+YCpnIa/I3zu0UKipcCYKPJbyTlPucUe9NydPcL/NqFALb BFq2jgTjwFV7aMKnH6vqDgh/H1hHqGBHjpyaTDIBtFjYvOGIffxZBvJnCdmYgalB DxCZrmAUFljeNCV4i2cT6ucDIcKGYYbcnCJs9jEurXzK3XxziDWJgCH+ZR0zy2V8 kpX8c46MkjmMxE6FqZV8JD7KwQOhoV+ZktULLFIaCTz0 -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:15 2026 by rpki-client