This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/mq48_sBKvAEWvtf8WzXrPhnKlKI.roa File: mq48_sBKvAEWvtf8WzXrPhnKlKI.roa (raw, json) Hash identifier: 7dt1YErJg3/qsgZU38eup42hAog0One7x1CvO3l5p0E= Subject key identifier: 9A:AE:3C:FE:C0:4A:BC:01:16:BE:D7:FC:5B:35:EB:3E:19:CA:94:A2 Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06 Certificate serial: 019B7D5D34628DCF9344ABCDD081AB18012A Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/mq48_sBKvAEWvtf8WzXrPhnKlKI.roa Signing time: Fri 02 Jan 2026 06:20:18 +0000 ROA not before: Fri 02 Jan 2026 06:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209824 IP address blocks: 91.221.223.0/24 maxlen: 24 217.113.54.0/23 maxlen: 23 217.113.54.0/24 maxlen: 24 2a13:e700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:34:62:8d:cf:93:44:ab:cd:d0:81:ab:18:01:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06 Validity Not Before: Jan 2 06:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9aae3cfec04abc0116bed7fc5b35eb3e19ca94a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:cb:71:d2:c0:7c:01:02:11:8a:bc:3a:be: 08:57:ae:66:af:4e:af:5b:cd:72:ea:5c:0b:6c:78: ac:89:6f:56:88:5d:5c:d9:da:4c:fa:10:84:d8:a3: 09:fe:bb:93:7b:28:6d:17:4d:4e:aa:cf:ae:af:c6: 36:dd:02:9e:95:bb:c3:cb:2e:7d:c8:eb:17:ee:e7: a6:8c:c0:34:8e:59:df:ae:59:91:92:44:a4:fb:f4: f4:7c:3e:c0:7d:1b:3d:47:19:7e:3a:df:65:9e:24: 6e:71:8e:20:c7:10:9a:16:56:77:86:be:84:93:f2: 59:60:73:10:23:fe:77:dd:3b:e9:10:91:4d:ee:18: 01:da:27:87:a1:45:24:ae:ee:d2:d9:21:27:2d:f9: 76:8b:70:9f:97:4b:e0:1d:73:88:0a:e1:76:7d:b4: 1b:8b:3c:4d:50:b4:37:11:a4:b5:6a:8b:c3:cb:84: 71:8f:60:51:85:2b:31:9c:b9:b0:5d:31:06:18:bd: 84:f8:0b:0a:3c:45:60:90:ae:f7:fa:ba:84:9b:a5: e8:10:f8:fe:ba:49:74:20:55:c1:ea:a2:04:fa:1a: fb:65:51:b3:68:6e:80:e3:1b:00:94:0e:11:47:89: a8:c5:6e:7c:9f:a8:de:0e:a4:20:90:57:08:e7:1d: 20:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AE:3C:FE:C0:4A:BC:01:16:BE:D7:FC:5B:35:EB:3E:19:CA:94:A2 X509v3 Authority Key Identifier: keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/mq48_sBKvAEWvtf8WzXrPhnKlKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.223.0/24 217.113.54.0/23 IPv6: 2a13:e700::/48 Signature Algorithm: sha256WithRSAEncryption 59:42:62:b8:b0:3d:8f:ee:a0:0e:78:6a:21:a0:b8:12:e2:85: 88:8c:60:c7:66:33:b4:ea:e8:d7:c3:47:2c:be:f8:82:15:91: ad:6e:12:51:d1:26:d9:a3:42:ad:3c:e9:d7:c5:9a:24:cd:76: 49:20:ea:a5:f8:ef:f8:35:d5:0e:ee:dd:08:a5:f0:e7:35:2e: 9b:08:ef:73:60:ba:f3:7c:2f:8e:07:98:54:1e:49:b3:50:56: cd:1f:0c:eb:ba:f9:2d:b5:ce:9c:00:13:d3:b6:46:99:44:f3: f9:c6:74:52:6b:3b:26:58:b0:96:96:69:cf:26:bc:d7:b7:fd: 6e:a4:4b:c8:98:1d:b8:05:64:9c:88:53:8e:0e:5b:eb:1a:ff: 8c:1e:60:f4:87:58:2a:9d:8e:ae:11:d0:0f:38:50:91:f3:b7: f0:a6:62:69:11:b3:ca:a7:f8:b6:de:b9:f6:65:1a:c0:1f:1b: bd:a0:9b:17:8a:0a:c4:fe:8c:62:e9:42:50:b7:87:ec:ce:2c: 86:b8:8f:92:89:23:bc:a9:14:df:5c:f8:d6:15:71:d4:5e:9f: 2d:2b:3d:40:49:c5:82:33:3e:a7:c2:0d:70:f5:08:33:43:ca: 2e:83:a2:49:bd:88:19:d6:79:9c:1f:c8:7a:da:44:81:8c:ba: 65:e1:e6:a2 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9XTRijc+TRKvN0IGrGAEqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDVjYTExMWMwMDkzYjU2NTE0MjE1YmU0NjdiNTE1ZGRh NTZjMDYwHhcNMjYwMTAyMDYyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWFlM2NmZWMwNGFiYzAxMTZiZWQ3ZmM1YjM1ZWIzZTE5Y2E5NGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzzLcdLAfAECEYq8Or4IV65mr06v W81y6lwLbHisiW9WiF1c2dpM+hCE2KMJ/ruTeyhtF01Oqs+ur8Y23QKelbvDyy59 yOsX7uemjMA0jlnfrlmRkkSk+/T0fD7AfRs9Rxl+Ot9lniRucY4gxxCaFlZ3hr6E k/JZYHMQI/533TvpEJFN7hgB2ieHoUUkru7S2SEnLfl2i3Cfl0vgHXOICuF2fbQb izxNULQ3EaS1aovDy4Rxj2BRhSsxnLmwXTEGGL2E+AsKPEVgkK73+rqEm6XoEPj+ ukl0IFXB6qIE+hr7ZVGzaG6A4xsAlA4RR4moxW58n6jeDqQgkFcI5x0gDQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJquPP7ASrwBFr7X/Fs16z4ZypSiMB8GA1UdIwQY MBaAFAwFyhEcAJO1ZRQhW+RntRXdpWwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQt NmEzNjcwNWJiYTZmLzEvbXE0OF9zQkt2QUVXdnRmOFd6WHJQaG5LbEtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQtNmEzNjcwNWJiYTZm LzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW93fAwQB 2XE2MA8EAgACMAkDBwAqE+cAAAAwDQYJKoZIhvcNAQELBQADggEBAFlCYriwPY/u oA54aiGguBLihYiMYMdmM7Tq6NfDRyy++IIVka1uElHRJtmjQq086dfFmiTNdkkg 6qX47/g11Q7u3Qil8Oc1LpsI73NguvN8L44HmFQeSbNQVs0fDOu6+S21zpwAE9O2 RplE8/nGdFJrOyZYsJaWac8mvNe3/W6kS8iYHbgFZJyIU44OW+sa/4weYPSHWCqd jq4R0A84UJHzt/CmYmkRs8qn+LbeufZlGsAfG72gmxeKCsT+jGLpQlC3h+zOLIa4 j5KJI7ypFN9c+NYVcdReny0rPUBJxYIzPqfCDXD1CDNDyi6Dokm9iBnWeZwfyHra RIGMumXh5qI= -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:28 2026 by rpki-client