This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/qMXcH8GKPtZKcC7oXNX1oSyED7Q.roa File: qMXcH8GKPtZKcC7oXNX1oSyED7Q.roa (raw, json) Hash identifier: 1tbxCaHbYh4w/bTWHNKN1f4HzQQFR2Btp4iUYuLrWWY= Subject key identifier: A8:C5:DC:1F:C1:8A:3E:D6:4A:70:2E:E8:5C:D5:F5:A1:2C:84:0F:B4 Certificate issuer: /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0 Certificate serial: 019B7D5D057790232D3ABE8C9BDEDB3FE3D0 Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/qMXcH8GKPtZKcC7oXNX1oSyED7Q.roa Signing time: Fri 02 Jan 2026 06:20:06 +0000 ROA not before: Fri 02 Jan 2026 06:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12989 IP address blocks: 194.54.180.0/24 maxlen: 24 194.54.181.0/24 maxlen: 24 194.54.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:05:77:90:23:2d:3a:be:8c:9b:de:db:3f:e3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0 Validity Not Before: Jan 2 06:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8c5dc1fc18a3ed64a702ee85cd5f5a12c840fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:67:6e:e3:fd:e0:b0:9d:af:37:9b:71:39:44: d4:9e:b5:b9:1b:53:52:f6:a3:8e:bb:24:a9:4a:9e: 7e:4b:34:9b:2c:02:b3:fe:49:52:94:f6:35:68:56: 65:8f:f0:ec:f0:65:42:f2:46:6e:a0:78:6a:f4:16: 26:ea:93:f3:06:e0:cb:99:c8:b1:65:c7:e3:0c:25: 6e:71:04:9f:0c:8f:6f:26:c6:b3:9e:dc:8a:fc:25: c2:6b:e7:86:79:ae:fd:a5:68:94:52:88:97:42:7d: 32:cc:20:fb:6f:4d:74:ec:18:e2:ce:4f:48:12:0c: 09:df:f4:cb:af:54:96:af:70:24:fd:4c:bc:e7:e1: 45:9e:0c:24:eb:28:c0:2e:36:44:4d:33:16:92:ef: c0:f2:c5:f9:ed:27:de:a6:44:5d:bc:48:09:b3:27: c7:fc:13:21:f9:81:ac:b0:ea:6a:66:ce:9a:62:d2: 91:f4:6c:3b:fb:e8:d8:8b:2a:ca:9c:94:7b:d0:51: 58:b8:4c:de:fc:87:17:39:74:a0:9d:df:71:d5:7e: 12:52:79:78:a1:5f:8f:7c:fc:cf:53:f6:f7:98:d1: bc:a8:fa:db:55:b8:4f:ac:1c:38:32:a4:78:48:d4: 3a:6b:e8:8e:60:c1:f2:2d:03:61:4b:03:9d:32:5d: 4e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C5:DC:1F:C1:8A:3E:D6:4A:70:2E:E8:5C:D5:F5:A1:2C:84:0F:B4 X509v3 Authority Key Identifier: keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/qMXcH8GKPtZKcC7oXNX1oSyED7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.54.180.0-194.54.182.255 Signature Algorithm: sha256WithRSAEncryption 8a:82:e4:8f:c4:c8:5e:23:f2:80:64:ae:eb:f8:0c:65:cf:62: 23:ae:3d:7f:e5:2f:b9:77:e0:c9:e5:26:08:90:89:1d:8a:89: b2:8d:84:68:b1:0b:e8:4c:68:f0:da:3e:d3:9c:fb:00:51:08: 33:77:f1:fa:58:ce:be:62:e0:0d:69:a3:e8:c8:0e:71:1a:3c: 32:13:71:86:1c:8f:4f:fa:57:d8:70:20:d3:5a:ed:60:38:f6: 15:aa:d6:9b:f7:fe:9d:d3:a1:a8:3a:1a:bf:27:fb:d6:1f:e9: 81:d2:7f:bd:1a:0c:58:44:c5:22:6e:14:50:64:f7:08:bc:b2: 88:69:15:a0:04:e7:fd:b5:99:ad:32:d1:96:72:bb:52:8e:d0: 96:2a:d9:56:1c:01:41:3c:e1:17:bd:a8:71:78:95:56:24:c5: 07:d7:11:68:19:c8:aa:08:22:0b:dc:63:84:2c:ac:75:8c:c4: 19:5e:ce:8d:8a:17:b5:ef:a9:05:77:5b:35:21:f3:2f:32:a2: 3c:a7:0a:72:bf:f9:dc:cf:d4:d8:17:90:94:3d:a1:eb:c3:2d: 97:98:fb:96:2b:a4:e7:5a:dd:82:c2:8a:dc:6d:30:ff:c9:01: ef:63:06:66:c7:98:e9:8c:21:67:59:ce:26:28:9c:57:a0:5e: 87:36:c7:e4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9XQV3kCMtOr6Mm97bP+PQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNWU3NmY5MjlkMjFiNTg2ZjQyZTMwZjdkOWIwMDM5OWIz ZGNiZjAwHhcNMjYwMTAyMDYyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGM1ZGMxZmMxOGEzZWQ2NGE3MDJlZTg1Y2Q1ZjVhMTJjODQwZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mdu4/3gsJ2vN5txOUTUnrW5G1NS 9qOOuySpSp5+SzSbLAKz/klSlPY1aFZlj/Ds8GVC8kZuoHhq9BYm6pPzBuDLmcix ZcfjDCVucQSfDI9vJsazntyK/CXCa+eGea79pWiUUoiXQn0yzCD7b0107Bjizk9I EgwJ3/TLr1SWr3Ak/Uy85+FFngwk6yjALjZETTMWku/A8sX57SfepkRdvEgJsyfH /BMh+YGssOpqZs6aYtKR9Gw7++jYiyrKnJR70FFYuEze/IcXOXSgnd9x1X4SUnl4 oV+PfPzPU/b3mNG8qPrbVbhPrBw4MqR4SNQ6a+iOYMHyLQNhSwOdMl1OewIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKjF3B/Bij7WSnAu6FzV9aEshA+0MB8GA1UdIwQY MBaAFJpedvkp0htYb0LjD32bADmbPcvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83NjdkNmQtMzZjOC00MDNiLTgxYjAt YjRhYWEyM2ZkYWE5LzEvcU1YY0g4R0tQdFpLY0M3b1hOWDFvU3lFRDdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS83NjdkNmQtMzZjOC00MDNiLTgxYjAtYjRhYWEyM2ZkYWE5 LzEvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALCNrQD BADCNrYwDQYJKoZIhvcNAQELBQADggEBAIqC5I/EyF4j8oBkruv4DGXPYiOuPX/l L7l34MnlJgiQiR2KibKNhGixC+hMaPDaPtOc+wBRCDN38fpYzr5i4A1po+jIDnEa PDITcYYcj0/6V9hwINNa7WA49hWq1pv3/p3Toag6Gr8n+9Yf6YHSf70aDFhExSJu FFBk9wi8sohpFaAE5/21ma0y0ZZyu1KO0JYq2VYcAUE84Re9qHF4lVYkxQfXEWgZ yKoIIgvcY4QsrHWMxBlezo2KF7XvqQV3WzUh8y8yojynCnK/+dzP1NgXkJQ9oevD LZeY+5YrpOda3YLCitxtMP/JAe9jBmbHmOmMIWdZziYonFegXoc2x+Q= -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:52 2026 by rpki-client