This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/Mlne1IYUugYsEEIS3jxaVdlC9Tk.roa File: Mlne1IYUugYsEEIS3jxaVdlC9Tk.roa (raw, json) Hash identifier: 7DS29eRcsAN4a+co4sNfgsE+ZaIkRf7RxGeM93m+Nac= Subject key identifier: 32:59:DE:D4:86:14:BA:06:2C:10:42:12:DE:3C:5A:55:D9:42:F5:39 Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Certificate serial: 019B7A5AFEE6D348E594D8A08A9A2090C2D8 Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/Mlne1IYUugYsEEIS3jxaVdlC9Tk.roa Signing time: Thu 01 Jan 2026 16:19:02 +0000 ROA not before: Thu 01 Jan 2026 16:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205516 IP address blocks: 5.35.80.0/24 maxlen: 24 5.35.81.0/24 maxlen: 24 37.233.81.0/24 maxlen: 24 45.94.23.0/24 maxlen: 24 45.130.145.0/24 maxlen: 24 45.133.234.0/24 maxlen: 24 45.139.29.0/24 maxlen: 24 45.145.6.0/24 maxlen: 24 77.73.232.0/24 maxlen: 24 83.222.22.0/23 maxlen: 24 89.40.233.0/24 maxlen: 24 89.169.36.0/23 maxlen: 24 90.156.252.0/23 maxlen: 24 91.193.25.0/24 maxlen: 24 91.218.140.0/24 maxlen: 24 91.218.141.0/24 maxlen: 24 109.94.211.0/24 maxlen: 24 109.196.165.0/24 maxlen: 24 178.236.16.0/24 maxlen: 24 178.236.17.0/24 maxlen: 24 193.28.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fe:e6:d3:48:e5:94:d8:a0:8a:9a:20:90:c2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3259ded48614ba062c104212de3c5a55d942f539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e3:3a:0d:2c:20:e2:cf:6a:02:de:86:8b:a9: 00:a6:43:8e:89:78:46:af:78:61:5d:6d:84:21:e3: 2b:4b:07:c7:00:d7:3d:0a:2a:45:cc:27:55:df:7a: 5c:7c:c7:c2:ab:d4:a3:56:2b:27:c2:6b:68:29:1c: d7:ca:64:7e:d6:09:7a:ce:35:c4:ca:96:43:35:3f: fb:99:9e:c8:9b:55:3c:a7:43:6b:ec:63:91:44:27: 23:b0:94:8e:7b:25:97:a4:15:dc:e2:80:86:62:a1: 2e:a2:4b:58:81:46:1a:8a:06:e8:13:bc:8c:2c:ed: cf:52:07:42:3b:e5:b7:cb:e4:81:c5:87:ef:6d:d9: e6:ee:66:98:5c:d8:6a:5a:96:2b:96:f2:de:e1:88: 00:73:68:bb:a7:82:a2:b4:af:8d:d6:1e:05:3f:e5: 17:f0:cb:69:50:01:12:5a:39:19:e5:63:6d:c3:bf: 5b:6d:5e:7e:cb:cd:af:d3:d7:b0:bc:dd:da:60:0e: 7e:ba:f3:0d:7c:9a:8c:fe:83:36:13:39:a6:f0:f3: 15:cb:4d:88:04:1d:58:e7:8b:fa:ac:ad:6f:3e:5b: e4:30:5b:95:65:9e:07:9b:7c:e0:0f:06:56:e7:18: 87:d1:a6:be:dd:c1:9f:95:19:b8:71:0b:c1:69:7d: 0c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:59:DE:D4:86:14:BA:06:2C:10:42:12:DE:3C:5A:55:D9:42:F5:39 X509v3 Authority Key Identifier: keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/Mlne1IYUugYsEEIS3jxaVdlC9Tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.80.0/23 37.233.81.0/24 45.94.23.0/24 45.130.145.0/24 45.133.234.0/24 45.139.29.0/24 45.145.6.0/24 77.73.232.0/24 83.222.22.0/23 89.40.233.0/24 89.169.36.0/23 90.156.252.0/23 91.193.25.0/24 91.218.140.0/23 109.94.211.0/24 109.196.165.0/24 178.236.16.0/23 193.28.186.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:49:43:0c:19:7a:ff:41:2d:e0:7c:7e:2e:ce:8e:3d:2c:d0: 7c:b7:eb:1e:f6:93:32:41:36:77:03:01:00:4f:47:7c:6c:1c: 4c:6b:dc:b5:63:43:9a:19:9a:ec:3e:5c:47:42:86:15:62:eb: 71:c2:d6:89:fc:54:e6:f2:d0:f7:a6:e3:e9:43:b6:ab:35:e8: 66:35:62:8e:63:4a:a7:46:76:44:8d:d1:8b:b8:c9:d0:97:61: 66:4f:0c:44:37:01:40:f2:b2:06:56:81:df:81:f6:d2:6a:e3: d8:5c:5e:a1:5e:ad:5e:36:74:af:e6:d9:1b:45:85:d4:22:16: 94:e8:02:96:c2:39:a2:8a:7b:b8:f8:0d:6c:07:55:26:70:2f: 9b:27:1e:a6:a6:eb:23:cc:51:8e:9f:0a:1b:7c:3c:a7:a9:7f: 94:1d:aa:00:c2:cd:b5:4e:67:41:0a:15:6a:07:56:82:6d:32: 99:d9:39:19:b4:9d:f7:2a:10:4b:9d:b4:dd:bc:15:d0:01:17: 61:3f:91:64:34:a9:ae:b3:88:dc:1a:34:55:2d:9f:be:be:19: a5:30:6d:11:fe:fd:a1:36:57:bd:a0:71:fe:62:4a:c1:68:95: 87:8f:32:18:10:98:ba:4b:b4:cb:14:53:2b:b3:4d:30:1a:d7: 0a:01:b9:da -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZt6Wv7m00jllNigipogkMLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1 ZmQxNmEwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjU5ZGVkNDg2MTRiYTA2MmMxMDQyMTJkZTNjNWE1NWQ5NDJmNTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+M6DSwg4s9qAt6Gi6kApkOOiXhG r3hhXW2EIeMrSwfHANc9CipFzCdV33pcfMfCq9SjVisnwmtoKRzXymR+1gl6zjXE ypZDNT/7mZ7Im1U8p0Nr7GORRCcjsJSOeyWXpBXc4oCGYqEuoktYgUYaigboE7yM LO3PUgdCO+W3y+SBxYfvbdnm7maYXNhqWpYrlvLe4YgAc2i7p4KitK+N1h4FP+UX 8MtpUAESWjkZ5WNtw79bbV5+y82v09ewvN3aYA5+uvMNfJqM/oM2Ezmm8PMVy02I BB1Y54v6rK1vPlvkMFuVZZ4Hm3zgDwZW5xiH0aa+3cGflRm4cQvBaX0McQIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFDJZ3tSGFLoGLBBCEt48WlXZQvU5MB8GA1UdIwQY MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt ZDgzZWQxNDBkMjhkLzEvTWxuZTFJWVV1Z1lzRUVJUzNqeGFWZGxDOVRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAQUjUAME ACXpUQMEAC1eFwMEAC2CkQMEAC2F6gMEAC2LHQMEAC2RBgMEAE1J6AMEAVPeFgME AFko6QMEAVmpJAMEAVqc/AMEAFvBGQMEAVvajAMEAG1e0wMEAG3EpQMEAbLsEAME AMEcujANBgkqhkiG9w0BAQsFAAOCAQEALUlDDBl6/0Et4Hx+Ls6OPSzQfLfrHvaT MkE2dwMBAE9HfGwcTGvctWNDmhma7D5cR0KGFWLrccLWifxU5vLQ96bj6UO2qzXo ZjVijmNKp0Z2RI3Ri7jJ0JdhZk8MRDcBQPKyBlaB34H20mrj2FxeoV6tXjZ0r+bZ G0WF1CIWlOgClsI5oop7uPgNbAdVJnAvmycepqbrI8xRjp8KG3w8p6l/lB2qAMLN tU5nQQoVagdWgm0ymdk5GbSd9yoQS5203bwV0AEXYT+RZDSprrOI3Bo0VS2fvr4Z pTBtEf79oTZXvaBx/mJKwWiVh48yGBCYuku0yxRTK7NNMBrXCgG52g== -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:10 2026 by rpki-client