This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/mlYmnVk7tfafnI6kiO70u3KwOd4.roa File: mlYmnVk7tfafnI6kiO70u3KwOd4.roa (raw, json) Hash identifier: aIB+G3W1ZT0F+2BUxBkAvXSCuJ9063goygtNArKpnqA= Subject key identifier: 9A:56:26:9D:59:3B:B5:F6:9F:9C:8E:A4:88:EE:F4:BB:72:B0:39:DE Certificate issuer: /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19 Certificate serial: 019AA0E777B9F51172222811767C19EAECC1 Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/mlYmnVk7tfafnI6kiO70u3KwOd4.roa Signing time: Thu 20 Nov 2025 10:55:15 +0000 ROA not before: Thu 20 Nov 2025 10:55:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6762 IP address blocks: 78.40.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:e7:77:b9:f5:11:72:22:28:11:76:7c:19:ea:ec:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19 Validity Not Before: Nov 20 10:55:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9a56269d593bb5f69f9c8ea488eef4bb72b039de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6c:84:c8:91:91:f2:f9:b8:8a:ee:90:5b:91: 24:40:3c:95:d5:cb:1d:fd:bc:f7:ed:4d:96:96:8b: 87:12:ae:b4:42:65:0a:23:f7:fc:35:cc:16:9d:05: 1c:af:eb:5f:bb:ab:1b:0d:2d:1f:76:5f:5f:63:1e: d0:fb:07:3b:42:1f:6d:a3:9b:ee:4a:4a:4a:c5:c1: ac:1f:00:8a:6c:62:23:81:fc:56:99:b9:47:ea:80: 1d:05:91:f8:1c:97:ee:82:d1:29:a5:55:95:f3:b2: 96:99:6f:92:6d:96:1a:bc:bc:87:bf:e8:f4:a9:6b: 5f:1e:ac:fa:5c:fc:42:a9:6b:92:49:ba:a1:4c:ed: a2:93:43:bc:b7:dc:f5:11:0e:5e:29:6f:84:05:b4: 6e:77:e6:da:cd:9d:9f:50:a3:5a:55:a1:4e:61:ee: a6:a9:13:d9:b8:eb:01:a5:27:5d:31:50:3e:20:14: 0d:a5:28:56:0d:bb:8e:2a:70:6c:fd:f3:02:b2:f1: 0c:aa:3d:cf:f6:15:54:09:18:a2:5a:09:56:86:b9: 4a:fe:35:95:96:12:41:ba:77:78:19:40:2b:23:39: f2:db:26:ca:75:e1:1e:2d:22:ed:e6:29:f5:6c:24: 93:67:67:e1:f3:72:de:ea:7d:74:23:69:25:ec:4c: e8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:56:26:9D:59:3B:B5:F6:9F:9C:8E:A4:88:EE:F4:BB:72:B0:39:DE X509v3 Authority Key Identifier: keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/mlYmnVk7tfafnI6kiO70u3KwOd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.62.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:9f:f4:6d:9a:ee:12:b1:aa:a7:37:ff:73:be:d8:96:c1:94: 68:f3:50:d1:33:09:77:44:ac:c8:5b:d7:10:42:4c:c4:6a:67: b1:e9:48:6f:54:f3:8a:5f:0f:11:79:ba:32:73:7a:ea:f0:a7: a4:02:cd:cf:05:be:51:6f:f8:09:7a:05:3e:8e:fc:89:46:e5: 69:24:71:48:d8:26:f3:85:8e:bc:b3:f8:0d:d3:87:80:9d:22: bb:60:ab:d1:95:70:bb:2e:09:1f:12:40:55:7f:d8:64:b1:48: 30:f4:04:50:ab:8d:83:8d:b4:3c:57:c7:1d:27:fb:30:3f:64: 24:c3:0e:68:61:40:78:c0:15:c6:02:ed:83:87:15:31:1b:11: 44:15:82:45:b0:55:66:88:ba:2f:0b:53:4b:55:9e:a3:c5:d8: 26:ea:7d:a6:8a:90:96:72:49:32:6c:32:11:e0:8c:f6:b6:6c: ce:36:4a:93:3f:cc:aa:96:b7:a5:ee:6a:6c:a1:d6:d5:cf:e4: 23:fd:c4:62:78:3c:20:0f:f5:a4:0f:05:b1:3e:2f:6c:34:86: 27:d6:36:b5:2d:b7:c4:d9:bc:b6:99:a0:45:29:01:dd:8b:cb: f3:04:24:f0:19:4c:b9:84:bd:a1:94:53:d6:c2:96:9e:57:04: 23:db:0c:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqg53e59RFyIigRdnwZ6uzBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZTJhZWQ5YWYzYTRiZTU2MGFhMTliOTI4NDZjNWZiZTEx YzliMTkwHhcNMjUxMTIwMTA1NTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTU2MjY5ZDU5M2JiNWY2OWY5YzhlYTQ4OGVlZjRiYjcyYjAzOWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2yEyJGR8vm4iu6QW5EkQDyV1csd /bz37U2WlouHEq60QmUKI/f8NcwWnQUcr+tfu6sbDS0fdl9fYx7Q+wc7Qh9to5vu SkpKxcGsHwCKbGIjgfxWmblH6oAdBZH4HJfugtEppVWV87KWmW+SbZYavLyHv+j0 qWtfHqz6XPxCqWuSSbqhTO2ik0O8t9z1EQ5eKW+EBbRud+bazZ2fUKNaVaFOYe6m qRPZuOsBpSddMVA+IBQNpShWDbuOKnBs/fMCsvEMqj3P9hVUCRiiWglWhrlK/jWV lhJBund4GUArIzny2ybKdeEeLSLt5in1bCSTZ2fh83Le6n10I2kl7Ezo4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJpWJp1ZO7X2n5yOpIju9LtysDneMB8GA1UdIwQY MBaAFBjirtmvOkvlYKoZuShGxfvhHJsZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yMzkxZWQtZjI4NS00Mjg2LWFmMmYt ZDI1NTFjZGRlNGFmLzEvbWxZbW5Wazd0ZmFmbkk2a2lPNzB1M0t3T2Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yMzkxZWQtZjI4NS00Mjg2LWFmMmYtZDI1NTFjZGRlNGFm LzEvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTig+MA0G CSqGSIb3DQEBCwUAA4IBAQAKn/Rtmu4SsaqnN/9zvtiWwZRo81DRMwl3RKzIW9cQ QkzEamex6UhvVPOKXw8Reboyc3rq8KekAs3PBb5Rb/gJegU+jvyJRuVpJHFI2Cbz hY68s/gN04eAnSK7YKvRlXC7LgkfEkBVf9hksUgw9ARQq42DjbQ8V8cdJ/swP2Qk ww5oYUB4wBXGAu2DhxUxGxFEFYJFsFVmiLovC1NLVZ6jxdgm6n2mipCWckkybDIR 4Iz2tmzONkqTP8yqlrel7mpsodbVz+Qj/cRieDwgD/WkDwWxPi9sNIYn1ja1LbfE 2by2maBFKQHdi8vzBCTwGUy5hL2hlFPWwpaeVwQj2wwv -----END CERTIFICATE-----Generated at Sat Dec 6 18:23:24 2025 by rpki-client