This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/mlq23mwn4gLppdq_n5N8dl-i1JU.roa File: mlq23mwn4gLppdq_n5N8dl-i1JU.roa (raw, json) Hash identifier: mWWAMciQpKRURn7RkDiPvmb9dly+JR/rksPzC6qiQJI= Subject key identifier: 9A:5A:B6:DE:6C:27:E2:02:E9:A5:DA:BF:9F:93:7C:76:5F:A2:D4:95 Certificate issuer: /CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359 Certificate serial: 019B7E3910E939C72161F9C2BEC45716C2D8 Authority key identifier: 7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/mlq23mwn4gLppdq_n5N8dl-i1JU.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64433 IP address blocks: 185.117.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:10:e9:39:c7:21:61:f9:c2:be:c4:57:16:c2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359 Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a5ab6de6c27e202e9a5dabf9f937c765fa2d495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:f7:8d:36:49:83:74:ca:55:c3:c9:10:37: fa:d1:9a:0c:45:9c:9b:7c:b4:81:52:7c:89:17:2b: 40:ab:f7:fe:e3:04:ea:e3:73:f6:28:ff:e1:ef:35: 31:74:86:bb:3c:f2:98:a3:d9:a0:01:4b:81:63:98: df:5e:4a:d4:64:fe:d9:29:79:22:b3:f1:3f:95:44: 88:50:73:88:f6:24:c9:d2:8c:83:82:3e:0d:b7:bb: d3:7e:c0:f4:c3:e9:1e:43:4f:51:f2:f8:25:87:65: 4e:8d:e0:17:40:a6:ef:7a:cc:fe:e7:41:c3:dd:c8: 72:55:63:a6:60:0a:fd:22:0d:47:4d:f4:11:c3:99: 8e:97:0f:42:07:da:1f:06:41:38:16:de:b9:25:76: d5:47:85:08:73:25:68:a0:f5:40:71:3a:09:7c:a0: 54:0e:87:01:fe:22:0c:11:06:17:35:e0:1c:bf:8c: 10:d8:05:52:40:07:a8:d5:24:fb:31:f6:e8:08:fe: 8f:0a:f1:35:4f:7e:10:93:ac:9c:0d:4a:8a:97:98: fe:8d:d1:52:48:41:21:c9:9f:e8:d1:e1:fd:34:8f: 37:97:8a:9a:ed:47:d7:57:85:dd:ed:9e:3b:18:f9: bf:9f:05:e2:d8:c1:7d:2b:66:ee:9d:09:94:8e:19: 19:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5A:B6:DE:6C:27:E2:02:E9:A5:DA:BF:9F:93:7C:76:5F:A2:D4:95 X509v3 Authority Key Identifier: keyid:7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/mlq23mwn4gLppdq_n5N8dl-i1JU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.29.0/24 Signature Algorithm: sha256WithRSAEncryption ab:ed:d9:37:45:02:65:3b:98:24:89:f9:0a:88:3e:da:58:e4: bb:bd:8a:ef:55:64:b7:99:84:e1:a1:cf:6a:d0:e8:06:69:d2: e5:20:73:d3:fc:eb:2e:5d:12:49:92:8c:14:de:a7:8d:f7:a1: c7:b1:46:cf:a6:7a:70:98:1f:f6:28:e1:38:b4:9d:9c:bb:22: ee:24:da:52:91:36:36:96:02:7b:99:28:cd:5b:94:ae:d7:b6: cc:56:f6:ef:74:78:ef:43:1c:98:89:cd:cd:c9:0a:a3:8b:d5: 04:b4:81:29:c7:49:75:41:b2:b6:25:23:bb:27:7d:57:fb:20: 2b:68:72:9d:0e:2d:1e:b5:e7:90:3f:46:a8:1f:38:ed:84:cb: b9:e5:ce:cf:0b:cc:21:0d:9b:75:6f:ee:35:80:20:ad:35:d0: 0c:b5:25:97:6a:0c:46:72:b4:6c:5b:2c:e7:d4:35:19:4e:5a: 8a:d2:a0:b0:1f:4e:1d:21:34:6d:7b:30:43:9f:ee:90:1c:48: fd:27:92:96:f8:18:cd:7a:32:42:c5:0b:fb:82:89:96:96:ac: 11:61:49:7c:ea:dd:4a:60:15:a7:ac:f1:ac:52:b1:70:69:b4: 7d:6b:94:33:9d:62:57:0a:a8:42:8e:e5:04:16:08:c6:3b:14: da:00:55:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORDpOcchYfnCvsRXFsLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZTVjMGY5NWFiN2JlOGI4NWY3MTFmYTQzMzY2NWMxNGU2 ZTkzNTkwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTVhYjZkZTZjMjdlMjAyZTlhNWRhYmY5ZjkzN2M3NjVmYTJkNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLz3jTZJg3TKVcPJEDf60ZoMRZyb fLSBUnyJFytAq/f+4wTq43P2KP/h7zUxdIa7PPKYo9mgAUuBY5jfXkrUZP7ZKXki s/E/lUSIUHOI9iTJ0oyDgj4Nt7vTfsD0w+keQ09R8vglh2VOjeAXQKbvesz+50HD 3chyVWOmYAr9Ig1HTfQRw5mOlw9CB9ofBkE4Ft65JXbVR4UIcyVooPVAcToJfKBU DocB/iIMEQYXNeAcv4wQ2AVSQAeo1ST7MfboCP6PCvE1T34Qk6ycDUqKl5j+jdFS SEEhyZ/o0eH9NI83l4qa7UfXV4Xd7Z47GPm/nwXi2MF9K2bunQmUjhkZcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJpatt5sJ+IC6aXav5+TfHZfotSVMB8GA1UdIwQY MBaAFH7lwPlat76LhfcR+kM2ZcFObpNZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnVYQS1WcTN2b3VGOXhINlF6Wmx3VTV1azFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hODM4ODYtOGI0YS00YjIzLWI0YWEt OTAxOTRiZDY4NDI4LzEvbWxxMjNtd240Z0xwcGRxX241TjhkbC1pMUpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9hODM4ODYtOGI0YS00YjIzLWI0YWEtOTAxOTRiZDY4NDI4 LzEvZnVYQS1WcTN2b3VGOXhINlF6Wmx3VTV1azFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXUdMA0G CSqGSIb3DQEBCwUAA4IBAQCr7dk3RQJlO5gkifkKiD7aWOS7vYrvVWS3mYThoc9q 0OgGadLlIHPT/OsuXRJJkowU3qeN96HHsUbPpnpwmB/2KOE4tJ2cuyLuJNpSkTY2 lgJ7mSjNW5Su17bMVvbvdHjvQxyYic3NyQqji9UEtIEpx0l1QbK2JSO7J31X+yAr aHKdDi0eteeQP0aoHzjthMu55c7PC8whDZt1b+41gCCtNdAMtSWXagxGcrRsWyzn 1DUZTlqK0qCwH04dITRtezBDn+6QHEj9J5KW+BjNejJCxQv7gomWlqwRYUl86t1K YBWnrPGsUrFwabR9a5QznWJXCqhCjuUEFgjGOxTaAFUk -----END CERTIFICATE-----Generated at Mon Jan 26 08:59:00 2026 by rpki-client