This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/MLKMacBMFV4gke1USMwBulpcuiM.roa File: MLKMacBMFV4gke1USMwBulpcuiM.roa (raw, json) Hash identifier: Yv65CwSn2eRUWGy7RP9p9DBa5QwldQ0pPgHm21tyEPY= Subject key identifier: 30:B2:8C:69:C0:4C:15:5E:20:91:ED:54:48:CC:01:BA:5A:5C:BA:23 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6ACE11422FEC64881ED6203CB6202 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/MLKMacBMFV4gke1USMwBulpcuiM.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397194 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ac:e1:14:22:fe:c6:48:81:ed:62:03:cb:62:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30b28c69c04c155e2091ed5448cc01ba5a5cba23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:60:20:ed:a7:47:e9:77:f3:30:48:0f:55:93: 8e:af:b6:3d:ae:0a:a9:04:11:11:74:51:31:5c:d9: dc:93:4f:41:73:89:b3:b7:88:0d:08:61:34:7f:82: 33:93:4c:29:ba:48:a2:e2:36:61:73:1a:8a:e8:88: 51:03:cc:3f:ef:94:5c:8a:f8:b5:96:e2:71:0c:fc: 28:ab:81:ed:2b:4d:7d:f3:cd:01:36:85:57:0f:4b: 61:fa:5a:4a:c4:d3:f0:08:17:19:37:dc:be:2a:f3: e6:6d:96:53:86:ac:ec:a8:7c:91:34:70:ab:e8:16: 8f:82:60:fb:54:06:f7:24:27:16:50:d2:86:5f:d9: cb:a7:b1:cb:d6:f0:dd:6a:35:53:35:b3:af:40:e9: 0e:b7:15:28:63:bd:b0:a6:1d:5d:d4:80:28:b1:7f: f7:30:b6:0a:20:fe:c3:2e:81:e3:92:43:ce:de:fc: 7d:8c:90:3a:9a:67:f8:aa:cd:95:76:dd:44:76:c8: c5:a6:d3:d7:f2:ca:cd:05:d3:08:9b:6d:4e:b6:59: a0:2a:4b:7f:dc:90:95:54:17:7d:ff:90:cf:3b:d2: 65:de:13:1f:d4:09:40:b4:45:c2:c9:75:64:79:88: bd:e6:08:54:65:21:df:bd:08:ad:4f:1c:d0:ea:11: 9e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B2:8C:69:C0:4C:15:5E:20:91:ED:54:48:CC:01:BA:5A:5C:BA:23 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/MLKMacBMFV4gke1USMwBulpcuiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 58:b8:8d:98:6d:2d:89:34:64:3d:f8:1e:09:ef:08:7a:d1:b7: 02:1e:e6:11:b7:db:da:d6:b4:2e:b6:5e:9b:ff:27:d8:cb:fe: 6f:65:92:01:e5:cc:6e:44:75:41:e2:62:21:3e:25:56:12:88: 5f:24:7a:e8:8c:e3:c1:32:17:90:f4:52:70:c1:74:35:e2:82: e3:a7:2a:1e:0b:cf:96:90:f8:f0:24:83:d3:a8:18:42:7a:b2: 55:1f:43:23:bb:fb:ae:3f:a7:61:7f:f4:bd:0b:5c:64:42:2c: ea:a7:67:87:e1:f6:b2:27:74:30:d9:dd:fb:1e:60:26:05:12: 73:1d:e8:84:e4:6c:dc:b5:45:77:1f:ff:89:c0:99:76:9a:9f: d4:26:7d:62:f5:8d:01:4e:ec:1b:42:1a:83:c8:ba:a6:7c:02: 0a:10:19:7f:5f:30:ec:c3:9d:6a:78:83:ee:1c:aa:77:9b:ef: d3:05:ff:7a:3c:6f:db:0d:6c:c4:24:1c:0e:ef:b2:e2:2a:13: 6b:2b:f4:f5:a6:a0:ac:2f:a5:1c:8b:de:0e:14:09:06:4d:e9: 56:4a:7d:bc:3e:a0:d0:a9:5c:07:1d:2d:ea:67:e6:f2:83:24: 57:5e:8f:1b:ee:34:10:16:ce:1b:57:b9:21:bc:0a:25:f0:45: c7:5b:da:46 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqzhFCL+xkiB7WIDy2ICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGIyOGM2OWMwNGMxNTVlMjA5MWVkNTQ0OGNjMDFiYTVhNWNiYTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2Ag7adH6XfzMEgPVZOOr7Y9rgqp BBERdFExXNnck09Bc4mzt4gNCGE0f4Izk0wpukii4jZhcxqK6IhRA8w/75Rcivi1 luJxDPwoq4HtK019880BNoVXD0th+lpKxNPwCBcZN9y+KvPmbZZThqzsqHyRNHCr 6BaPgmD7VAb3JCcWUNKGX9nLp7HL1vDdajVTNbOvQOkOtxUoY72wph1d1IAosX/3 MLYKIP7DLoHjkkPO3vx9jJA6mmf4qs2Vdt1EdsjFptPX8srNBdMIm21OtlmgKkt/ 3JCVVBd9/5DPO9Jl3hMf1AlAtEXCyXVkeYi95ghUZSHfvQitTxzQ6hGedwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDCyjGnATBVeIJHtVEjMAbpaXLojMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvTUxLTWFjQk1GVjRna2UxVVNNd0J1bHBjdWlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAFi4jZhtLYk0ZD34HgnvCHrRtwIe5hG3 29rWtC62Xpv/J9jL/m9lkgHlzG5EdUHiYiE+JVYSiF8keuiM48EyF5D0UnDBdDXi guOnKh4Lz5aQ+PAkg9OoGEJ6slUfQyO7+64/p2F/9L0LXGRCLOqnZ4fh9rIndDDZ 3fseYCYFEnMd6ITkbNy1RXcf/4nAmXaan9QmfWL1jQFO7BtCGoPIuqZ8AgoQGX9f MOzDnWp4g+4cqneb79MF/3o8b9sNbMQkHA7vsuIqE2sr9PWmoKwvpRyL3g4UCQZN 6VZKfbw+oNCpXAcdLepn5vKDJFdejxvuNBAWzhtXuSG8CiXwRcdb2kY= -----END CERTIFICATE-----Generated at Mon Jan 26 05:01:28 2026 by rpki-client