This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mLpGwvaBCGQ_BuimCETnqi5mmgU.roa File: mLpGwvaBCGQ_BuimCETnqi5mmgU.roa (raw, json) Hash identifier: Dk4zpCMIVevVBEJVFBTXRFNrIkmQSIUCX+NzjpRCb+8= Subject key identifier: 98:BA:46:C2:F6:81:08:64:3F:06:E8:A6:08:44:E7:AA:2E:66:9A:05 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84BD67F42EEB041801D343A5F9BCD6 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mLpGwvaBCGQ_BuimCETnqi5mmgU.roa Signing time: Fri 02 Jan 2026 16:22:44 +0000 ROA not before: Fri 02 Jan 2026 16:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50438 IP address blocks: 93.170.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:bd:67:f4:2e:eb:04:18:01:d3:43:a5:f9:bc:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98ba46c2f68108643f06e8a60844e7aa2e669a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:58:01:69:83:ae:5e:d8:7d:eb:6c:97:45: 71:fc:6d:1b:77:be:38:ec:bb:7d:e7:65:ec:79:c3: 6d:76:e6:13:e5:d1:65:b8:54:e0:56:07:e4:0f:5b: 25:2a:51:4d:d0:73:23:e7:d6:d7:c3:b8:d3:56:fb: eb:c0:4f:8c:91:7e:f6:18:ce:12:ee:58:d7:06:74: 25:22:4b:76:5d:e2:89:96:64:00:5b:b7:57:69:c4: b0:3e:be:18:c7:59:e8:5e:e8:7a:a2:8f:ca:2d:ad: 78:64:6a:58:c1:66:5c:ce:00:04:9f:88:49:aa:cf: 72:fc:56:5d:ec:11:9d:ce:25:f1:64:38:04:2e:d0: cd:4d:f9:d0:a7:f7:eb:f3:fa:cf:d1:62:a4:da:1e: 73:b5:ee:bf:6c:aa:96:36:d2:59:c9:70:16:72:c2: 0d:ea:49:fb:8b:f9:58:98:38:41:4d:6a:96:98:ce: 21:7c:b3:71:57:42:9e:d4:7b:1c:3b:fb:4d:fa:dc: f9:54:72:c5:a7:76:6c:95:f7:46:4a:36:d7:63:8a: 3c:63:5b:36:4b:37:b5:ce:19:16:fb:79:49:e2:0b: c2:3c:65:f1:0c:8b:fd:8d:f1:40:1c:0c:43:0f:d0: e0:a3:3b:08:df:c0:c3:47:85:4f:da:17:d7:30:7f: 24:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BA:46:C2:F6:81:08:64:3F:06:E8:A6:08:44:E7:AA:2E:66:9A:05 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mLpGwvaBCGQ_BuimCETnqi5mmgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.28.0/22 Signature Algorithm: sha256WithRSAEncryption 53:00:fa:bc:cd:f1:b9:95:2a:6b:8c:87:0f:23:ba:59:fc:51: 0f:2f:82:fc:11:db:a5:cc:b3:80:74:51:0c:2d:87:ea:a3:98: 7b:40:93:d6:ca:e3:56:6b:af:a5:50:51:c0:e0:d4:e4:5d:56: 0b:dc:81:23:51:66:b2:6b:9f:84:5e:1f:c6:1f:9d:2d:c8:85: 2f:fd:fd:43:a6:c0:44:d0:f5:85:ff:19:24:d0:0d:5e:dc:9d: 1b:b1:5a:9d:cf:03:bb:14:62:f4:fa:74:93:21:15:80:fe:04: 6b:87:9c:e4:7c:99:97:3f:f3:ec:dc:89:96:66:12:74:ee:2b: 38:f2:da:a3:dd:67:f4:00:01:c2:9e:64:22:04:f5:f8:77:a2: 27:4c:16:11:a0:94:4b:09:a9:ba:6c:fe:08:e4:5f:d7:e9:37: 0e:0a:aa:08:da:ce:df:bc:0c:4f:e4:f7:44:fa:e4:a8:8c:2a: 4d:82:e0:5d:d5:0f:2f:39:21:40:4a:82:2b:fb:d9:22:ab:2c: ad:f4:54:61:30:77:c0:85:74:7d:5d:a7:13:82:82:c7:31:7d: 9e:af:9a:41:cf:2b:f3:7c:5b:7a:1c:2e:4d:a5:35:53:89:7c: 57:d8:64:7a:3b:18:f0:35:4a:46:8e:5c:10:40:89:87:d5:04: b7:97:14:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hL1n9C7rBBgB00Ol+bzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGJhNDZjMmY2ODEwODY0M2YwNmU4YTYwODQ0ZTdhYTJlNjY5YTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArexYAWmDrl7Yfetsl0Vx/G0bd744 7Lt952XsecNtduYT5dFluFTgVgfkD1slKlFN0HMj59bXw7jTVvvrwE+MkX72GM4S 7ljXBnQlIkt2XeKJlmQAW7dXacSwPr4Yx1noXuh6oo/KLa14ZGpYwWZczgAEn4hJ qs9y/FZd7BGdziXxZDgELtDNTfnQp/fr8/rP0WKk2h5zte6/bKqWNtJZyXAWcsIN 6kn7i/lYmDhBTWqWmM4hfLNxV0Ke1HscO/tN+tz5VHLFp3ZslfdGSjbXY4o8Y1s2 Sze1zhkW+3lJ4gvCPGXxDIv9jfFAHAxDD9DgozsI38DDR4VP2hfXMH8kqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJi6RsL2gQhkPwbopghE56ouZpoFMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvbUxwR3d2YUJDR1FfQnVpbUNFVG5xaTVtbWdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXaocMA0G CSqGSIb3DQEBCwUAA4IBAQBTAPq8zfG5lSprjIcPI7pZ/FEPL4L8EdulzLOAdFEM LYfqo5h7QJPWyuNWa6+lUFHA4NTkXVYL3IEjUWaya5+EXh/GH50tyIUv/f1DpsBE 0PWF/xkk0A1e3J0bsVqdzwO7FGL0+nSTIRWA/gRrh5zkfJmXP/Ps3ImWZhJ07is4 8tqj3Wf0AAHCnmQiBPX4d6InTBYRoJRLCam6bP4I5F/X6TcOCqoI2s7fvAxP5PdE +uSojCpNguBd1Q8vOSFASoIr+9kiqyyt9FRhMHfAhXR9XacTgoLHMX2er5pBzyvz fFt6HC5NpTVTiXxX2GR6OxjwNUpGjlwQQImH1QS3lxQ/ -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:03 2026 by rpki-client