This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa File: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (raw, json) Hash identifier: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0= Subject key identifier: 31:01:44:36:B4:89:D4:EE:30:DE:E1:23:D1:B5:8D:9A:72:09:90:CD Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81 Certificate serial: 019B79EC9FD4B59B888DDB9A2DB02AAA9681 Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa Signing time: Thu 01 Jan 2026 14:18:29 +0000 ROA not before: Thu 01 Jan 2026 14:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1836 IP address blocks: 194.116.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9f:d4:b5:9b:88:8d:db:9a:2d:b0:2a:aa:96:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81 Validity Not Before: Jan 1 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31014436b489d4ee30dee123d1b58d9a720990cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:71:dc:69:29:2c:c5:c7:13:78:5f:3f:36:21: b2:ea:04:d4:d3:36:5f:e3:03:23:bc:70:6d:65:fe: 64:47:ff:c3:3d:48:94:8d:2e:90:3e:d2:ab:c7:7d: 64:bd:e9:e2:70:1b:7f:05:15:72:72:77:ac:99:80: 2f:12:41:b8:9d:e5:cc:54:aa:b8:6d:a3:9c:89:94: 95:71:f6:d9:1a:63:c6:6e:1e:f9:41:0b:e2:94:6d: 1b:54:e4:8d:2f:48:84:43:f3:ae:e7:ad:95:54:26: c7:13:e2:5c:19:ac:4b:a0:44:32:42:af:c2:19:dd: 1f:74:f3:55:ec:53:77:f3:e6:46:23:5b:8e:61:79: aa:4c:c0:84:97:61:56:e0:9b:b4:7f:cb:5f:e3:e0: 20:8a:23:c1:79:13:e7:ed:db:bf:1d:a6:d6:7e:4c: 6d:c0:8c:72:16:b0:9a:cd:2d:80:b7:fd:b6:24:be: fc:0f:d4:64:a7:7f:9c:2b:49:9d:58:24:ef:86:af: 2d:ab:ad:e5:60:fa:87:73:10:26:40:81:9e:fb:1a: f5:2a:bb:0b:44:45:35:fc:b1:5d:6b:8a:18:0f:7e: 33:a9:a0:0b:0e:35:2d:b9:d6:15:61:ab:38:ba:ce: cd:da:fd:01:68:c7:99:87:72:71:98:39:6f:5a:00: 24:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:01:44:36:B4:89:D4:EE:30:DE:E1:23:D1:B5:8D:9A:72:09:90:CD X509v3 Authority Key Identifier: keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.116.180.0/23 Signature Algorithm: sha256WithRSAEncryption 82:66:93:7c:7a:f8:ae:8a:eb:5a:df:c9:24:cc:07:66:a8:5b: 64:65:8d:b5:28:1c:3f:2a:d2:bf:c2:fc:d6:68:44:27:3f:aa: fb:96:54:33:c4:aa:a1:10:f7:18:e3:5b:73:be:0d:0d:6d:c5: 9d:7f:40:37:4c:d4:d3:06:b5:72:87:79:2d:3e:df:cd:53:27: 6a:43:3d:18:9a:0f:ce:12:12:05:3a:3b:f0:d2:2e:bb:ae:e4: 7a:80:3e:5f:94:95:93:36:82:25:bb:34:4a:e3:af:82:39:2f: 27:2d:48:ff:f6:a2:86:4e:cf:33:53:0a:43:e5:03:4a:a4:a6: a7:2f:1e:81:b9:ff:1b:33:e0:b4:cd:5a:e7:98:a3:7c:cf:5c: f3:a7:06:f2:aa:8f:cd:c0:53:42:f8:3b:32:66:3a:09:b0:e3: c0:77:b4:18:bb:67:63:e1:16:f1:68:e8:25:4c:cb:78:d9:ee: 0f:fd:f3:0b:e4:a0:d8:5a:54:ef:ad:bc:00:c3:46:48:c9:fa: c4:14:c2:50:5c:65:12:98:2f:c8:65:fe:f2:74:46:f6:c9:90: d7:c1:1e:e8:7c:a7:16:ca:23:73:0b:39:d5:b2:c4:9e:49:ce: a2:9e:f8:a6:f8:2c:2d:e2:d0:95:b9:39:c5:c7:00:24:f6:b4: 64:e6:6a:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57J/UtZuIjduaLbAqqpaBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYTRkMTQyZDQxMGFhYjA5MDUxMTJjNGFlNTc5MDc2YzBl NmRjODEwHhcNMjYwMTAxMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTAxNDQzNmI0ODlkNGVlMzBkZWUxMjNkMWI1OGQ5YTcyMDk5MGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nHcaSksxccTeF8/NiGy6gTU0zZf 4wMjvHBtZf5kR//DPUiUjS6QPtKrx31kvenicBt/BRVycnesmYAvEkG4neXMVKq4 baOciZSVcfbZGmPGbh75QQvilG0bVOSNL0iEQ/Ou562VVCbHE+JcGaxLoEQyQq/C Gd0fdPNV7FN38+ZGI1uOYXmqTMCEl2FW4Ju0f8tf4+AgiiPBeRPn7du/HabWfkxt wIxyFrCazS2At/22JL78D9Rkp3+cK0mdWCTvhq8tq63lYPqHcxAmQIGe+xr1KrsL REU1/LFda4oYD34zqaALDjUtudYVYas4us7N2v0BaMeZh3JxmDlvWgAkhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDEBRDa0idTuMN7hI9G1jZpyCZDNMB8GA1UdIwQY MBaAFMGk0ULUEKqwkFESxK5XkHbA5tyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xODA1N2EtN2MyOC00NGIwLWIzNDYt OTkwOTc2NzBiNDRlLzEvTVFGRU5yU0oxTzR3M3VFajBiV05tbklKa00wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xODA1N2EtN2MyOC00NGIwLWIzNDYtOTkwOTc2NzBiNDRl LzEvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwnS0MA0G CSqGSIb3DQEBCwUAA4IBAQCCZpN8eviuiuta38kkzAdmqFtkZY21KBw/KtK/wvzW aEQnP6r7llQzxKqhEPcY41tzvg0NbcWdf0A3TNTTBrVyh3ktPt/NUydqQz0Ymg/O EhIFOjvw0i67ruR6gD5flJWTNoIluzRK46+COS8nLUj/9qKGTs8zUwpD5QNKpKan Lx6Buf8bM+C0zVrnmKN8z1zzpwbyqo/NwFNC+DsyZjoJsOPAd7QYu2dj4RbxaOgl TMt42e4P/fML5KDYWlTvrbwAw0ZIyfrEFMJQXGUSmC/IZf7ydEb2yZDXwR7ofKcW yiNzCznVssSeSc6invim+Cwt4tCVuTnFxwAk9rRk5mpv -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:23 2026 by rpki-client