This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/mLP8hJfkKuFCcAFM12IKvqrV0Wg.roa File: mLP8hJfkKuFCcAFM12IKvqrV0Wg.roa (raw, json) Hash identifier: GH+C4wu3PmP6y6bN9fXn8BsiVQBWLpumcdfrnPol6Vk= Subject key identifier: 98:B3:FC:84:97:E4:2A:E1:42:70:01:4C:D7:62:0A:BE:AA:D5:D1:68 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C68A9A601B4F435DD8208AF011B1C2 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/mLP8hJfkKuFCcAFM12IKvqrV0Wg.roa Signing time: Thu 01 Jan 2026 04:17:38 +0000 ROA not before: Thu 01 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60397 IP address blocks: 84.236.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8a:9a:60:1b:4f:43:5d:d8:20:8a:f0:11:b1:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98b3fc8497e42ae14270014cd7620abeaad5d168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c5:be:ea:1d:19:96:c1:f7:bb:19:5d:41:f6: eb:d7:ef:2c:fc:32:c5:dd:ce:4a:71:10:5e:dd:1e: 86:10:24:16:6b:dd:b1:8d:76:7a:c1:23:25:c8:41: 4f:21:fe:48:ec:21:e1:15:f1:1c:89:65:4d:2f:37: 27:56:3e:25:f9:98:81:bd:2a:cc:cc:aa:ea:46:62: c2:48:c6:c9:fb:9e:e1:30:84:84:ee:89:0e:ef:8f: 35:bb:5a:bf:02:51:63:a0:57:c8:4b:71:7c:94:1b: db:df:92:6a:11:a8:40:7f:e3:12:45:d5:09:7c:51: 32:7d:e6:f5:fc:cd:4e:c1:48:48:2a:02:23:32:ef: a5:81:5b:07:b6:df:a2:7e:15:29:dc:4e:38:40:75: 3c:c3:ee:78:af:43:54:ed:87:a9:29:7d:f9:17:14: 77:e8:46:d0:0d:18:55:ee:be:e7:b9:7b:8e:b7:9d: c8:0e:d4:12:f4:15:33:3d:1d:e8:6e:4d:55:c5:86: b2:44:7c:c0:29:9d:78:5e:4b:8e:08:13:58:fa:11: 16:93:33:06:f3:e7:62:2a:4f:85:46:4a:4f:89:36: 7d:a5:0a:d3:94:58:5e:8d:18:09:c4:e3:2d:4b:d9: e6:ec:41:ee:3c:ef:58:2e:ff:14:12:51:b7:5d:d6: 53:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B3:FC:84:97:E4:2A:E1:42:70:01:4C:D7:62:0A:BE:AA:D5:D1:68 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/mLP8hJfkKuFCcAFM12IKvqrV0Wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.236.152.0/24 Signature Algorithm: sha256WithRSAEncryption 08:d0:57:17:7d:da:97:2a:de:41:c1:61:26:b8:ff:64:1c:b2: 46:ec:11:04:d7:c3:12:5c:62:e5:d2:48:fc:6b:88:2e:d9:60: f3:5a:af:dc:88:49:d6:77:9b:f0:94:8d:c6:1c:f1:02:0e:5f: 48:92:f4:6e:57:c3:10:e6:ed:ef:65:3b:ed:f7:77:10:19:39: 73:c4:01:a7:62:d2:44:68:b1:29:7f:9e:d2:54:fa:84:8d:01: 53:3d:bf:92:92:eb:fa:2e:1e:72:ac:b3:54:5b:3c:60:03:ac: e0:6d:14:e5:20:2d:2c:87:d2:07:9a:f5:41:15:1b:85:35:02: c3:35:17:c2:6f:97:f9:9e:c7:b0:75:b8:49:d3:6a:72:94:9b: 04:c0:58:84:92:c5:99:a0:ca:ff:ea:d2:58:e0:16:3b:00:db: 57:b2:06:46:88:cd:c4:ed:0c:05:51:93:71:20:c0:7d:23:12: 73:42:96:62:cd:c3:c7:b3:48:e5:2c:34:06:0d:3d:f7:4f:6a: 6a:91:95:50:f0:49:c8:0c:8f:61:7b:23:1b:af:6d:2f:83:d9: e6:43:fe:50:dc:05:e9:73:15:10:c4:fb:57:75:b1:46:ac:03: 62:3d:f6:e0:0c:1d:cb:a8:44:dc:f2:06:48:61:2e:4c:ed:4d: db:92:27:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xoqaYBtPQ13YIIrwEbHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGIzZmM4NDk3ZTQyYWUxNDI3MDAxNGNkNzYyMGFiZWFhZDVkMTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMW+6h0ZlsH3uxldQfbr1+8s/DLF 3c5KcRBe3R6GECQWa92xjXZ6wSMlyEFPIf5I7CHhFfEciWVNLzcnVj4l+ZiBvSrM zKrqRmLCSMbJ+57hMISE7okO7481u1q/AlFjoFfIS3F8lBvb35JqEahAf+MSRdUJ fFEyfeb1/M1OwUhIKgIjMu+lgVsHtt+ifhUp3E44QHU8w+54r0NU7YepKX35FxR3 6EbQDRhV7r7nuXuOt53IDtQS9BUzPR3obk1VxYayRHzAKZ14XkuOCBNY+hEWkzMG 8+diKk+FRkpPiTZ9pQrTlFhejRgJxOMtS9nm7EHuPO9YLv8UElG3XdZT7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJiz/ISX5CrhQnABTNdiCr6q1dFoMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvbUxQOGhKZmtLdUZDY0FGTTEySUt2cXJWMFdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVOyYMA0G CSqGSIb3DQEBCwUAA4IBAQAI0FcXfdqXKt5BwWEmuP9kHLJG7BEE18MSXGLl0kj8 a4gu2WDzWq/ciEnWd5vwlI3GHPECDl9IkvRuV8MQ5u3vZTvt93cQGTlzxAGnYtJE aLEpf57SVPqEjQFTPb+Skuv6Lh5yrLNUWzxgA6zgbRTlIC0sh9IHmvVBFRuFNQLD NRfCb5f5nsewdbhJ02pylJsEwFiEksWZoMr/6tJY4BY7ANtXsgZGiM3E7QwFUZNx IMB9IxJzQpZizcPHs0jlLDQGDT33T2pqkZVQ8EnIDI9heyMbr20vg9nmQ/5Q3AXp cxUQxPtXdbFGrANiPfbgDB3LqETc8gZIYS5M7U3bkicL -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:29 2026 by rpki-client