This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/ml7gG0A_mVQfOFzP3FHFwuQkr2A.roa File: ml7gG0A_mVQfOFzP3FHFwuQkr2A.roa (raw, json) Hash identifier: wWznWI3pS+Ln2wiCRlmdeHQDHSW6bkqR14q4qqXsCjc= Subject key identifier: 9A:5E:E0:1B:40:3F:99:54:1F:38:5C:CF:DC:51:C5:C2:E4:24:AF:60 Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a Certificate serial: 019B77C6990A3EE0D694C683C41154C72B90 Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/ml7gG0A_mVQfOFzP3FHFwuQkr2A.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6799 IP address blocks: 194.125.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:99:0a:3e:e0:d6:94:c6:83:c4:11:54:c7:2b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a5ee01b403f99541f385ccfdc51c5c2e424af60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:24:63:f7:23:24:f6:e5:24:68:5e:70:f6:9b: 26:1d:a4:16:87:4b:f7:c6:0d:0d:10:22:28:d6:91: f0:1f:d2:48:a5:00:a9:e1:be:25:98:e5:b1:f6:30: bf:55:f2:84:63:01:cd:7a:0e:8e:35:3d:1b:a9:f3: ef:b4:58:b1:79:80:ec:72:5b:45:d6:75:35:2b:f1: cd:68:b9:11:5a:e4:60:05:f1:c7:1f:1b:40:10:29: 30:63:4f:95:10:56:f8:38:03:29:5a:f2:da:c0:ca: d8:84:68:75:56:27:35:af:eb:31:ec:de:b1:26:08: fb:a9:ae:9f:ac:01:a1:e5:1b:6f:72:0e:02:f4:97: 64:1e:c2:d6:55:65:e2:87:1e:41:1c:07:26:31:4a: cc:21:6b:82:23:07:09:97:75:bd:a7:eb:c3:3c:18: b1:ce:0e:27:61:20:65:e8:9b:fd:8f:27:d0:ba:fb: 4d:77:e8:e8:f9:2b:05:76:ae:3b:2b:5c:9d:35:8f: 50:8f:eb:80:8b:3b:72:ca:c5:70:72:f7:e7:c6:5b: 9a:49:59:ac:04:9d:06:59:04:56:98:60:00:ab:63: ec:d0:22:40:fe:f9:a4:92:e8:a5:98:f0:13:69:cd: 0c:15:17:5a:93:b0:7d:3f:c9:3c:0e:12:c3:95:f6: 5d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5E:E0:1B:40:3F:99:54:1F:38:5C:CF:DC:51:C5:C2:E4:24:AF:60 X509v3 Authority Key Identifier: keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/ml7gG0A_mVQfOFzP3FHFwuQkr2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.125.252.0/23 Signature Algorithm: sha256WithRSAEncryption 80:1e:23:75:db:62:7a:f5:7a:f3:84:63:61:44:9e:8c:0a:40: 8f:93:a9:ac:21:76:7e:99:ed:83:3a:d5:f4:8b:e0:3c:11:5f: 96:cd:e7:f2:4f:61:67:9f:37:01:5b:43:fc:68:9d:84:90:db: 99:8a:03:31:d7:ff:41:a8:d8:2c:17:18:ac:a1:9f:a5:45:5c: e1:4f:82:fd:ec:e3:61:e9:88:ed:0f:2f:23:3b:4f:22:71:7e: 34:5b:13:5e:4d:4e:3b:58:78:57:ea:a4:95:d9:88:67:a9:22: 8d:a9:f6:f8:01:2c:a1:b2:0b:07:ae:42:76:58:54:75:a8:3e: cf:79:6b:6b:39:48:c4:56:f4:46:0a:b5:ae:7a:4c:49:e0:e4: dd:b8:64:c3:ae:ce:a3:40:ba:f1:c7:38:fb:a5:bf:53:6a:73: 05:90:2c:95:69:db:a4:96:71:92:ce:97:cb:1a:12:68:5c:bb: 77:6c:86:e5:43:ca:53:49:45:2a:18:7a:b9:0e:4a:e7:c3:cd: 1d:85:cf:f0:9d:d1:5d:e5:29:dc:e8:c2:49:05:86:c0:02:70: a3:63:f6:b5:4c:51:1f:d7:e6:73:a4:69:6f:65:cb:21:b8:8f: 56:bb:5e:37:b9:b1:eb:f5:d2:db:06:df:f4:65:6b:f6:68:e6: 7d:60:ad:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpkKPuDWlMaDxBFUxyuQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOWNmZDE1NzQ0MWY2OTQyOGRkMWY2MzYxY2E0ZjRhZTQy Y2IzOGEwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTVlZTAxYjQwM2Y5OTU0MWYzODVjY2ZkYzUxYzVjMmU0MjRhZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSRj9yMk9uUkaF5w9psmHaQWh0v3 xg0NECIo1pHwH9JIpQCp4b4lmOWx9jC/VfKEYwHNeg6ONT0bqfPvtFixeYDscltF 1nU1K/HNaLkRWuRgBfHHHxtAECkwY0+VEFb4OAMpWvLawMrYhGh1Vic1r+sx7N6x Jgj7qa6frAGh5Rtvcg4C9JdkHsLWVWXihx5BHAcmMUrMIWuCIwcJl3W9p+vDPBix zg4nYSBl6Jv9jyfQuvtNd+jo+SsFdq47K1ydNY9Qj+uAiztyysVwcvfnxluaSVms BJ0GWQRWmGAAq2Ps0CJA/vmkkuilmPATac0MFRdak7B9P8k8DhLDlfZd9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJpe4BtAP5lUHzhcz9xRxcLkJK9gMB8GA1UdIwQY MBaAFKuc/RV0QfaUKN0fY2HKT0rkLLOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUt OTU0ZjI2OTEzZjQzLzEvbWw3Z0cwQV9tVlFmT0Z6UDNGSEZ3dVFrcjJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUtOTU0ZjI2OTEzZjQz LzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwn38MA0G CSqGSIb3DQEBCwUAA4IBAQCAHiN122J69XrzhGNhRJ6MCkCPk6msIXZ+me2DOtX0 i+A8EV+WzefyT2FnnzcBW0P8aJ2EkNuZigMx1/9BqNgsFxisoZ+lRVzhT4L97ONh 6YjtDy8jO08icX40WxNeTU47WHhX6qSV2YhnqSKNqfb4ASyhsgsHrkJ2WFR1qD7P eWtrOUjEVvRGCrWuekxJ4OTduGTDrs6jQLrxxzj7pb9TanMFkCyVaduklnGSzpfL GhJoXLt3bIblQ8pTSUUqGHq5Dkrnw80dhc/wndFd5Snc6MJJBYbAAnCjY/a1TFEf 1+ZzpGlvZcshuI9Wu143ubHr9dLbBt/0ZWv2aOZ9YK2Z -----END CERTIFICATE-----Generated at Mon Jan 26 16:22:10 2026 by rpki-client