This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/mXL1X85TdcGEp3q4fFdmkGmAK3M.roa File: mXL1X85TdcGEp3q4fFdmkGmAK3M.roa (raw, json) Hash identifier: WMCdCZwprhQ6uNa1QSjr1PiJOMw+SaSTGq3euH7xzeI= Subject key identifier: 99:72:F5:5F:CE:53:75:C1:84:A7:7A:B8:7C:57:66:90:69:80:2B:73 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EB3B8A2C27DB1E9343A6066D8197E Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/mXL1X85TdcGEp3q4fFdmkGmAK3M.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33825 IP address blocks: 88.203.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b3:b8:a2:c2:7d:b1:e9:34:3a:60:66:d8:19:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9972f55fce5375c184a77ab87c57669069802b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e0:77:44:ae:ec:37:77:7a:b2:5c:ae:0b:3f: b3:50:ac:3e:59:ec:a0:1c:91:b8:5d:e3:6d:ab:93: 67:89:42:bb:46:4a:bf:28:05:57:68:73:49:e3:d3: ee:6d:9d:72:9e:fd:4b:f3:6a:57:9f:17:07:fa:d9: 99:43:35:b3:45:7a:a3:9b:b1:89:f2:d9:bf:a6:14: a5:7c:42:42:07:cb:cd:3a:3c:fc:0b:50:0a:1c:8f: 5a:57:da:e4:8d:0c:8a:ab:28:25:70:46:81:18:7e: e3:f5:54:a0:6e:de:c3:f7:b2:c2:48:b3:a7:8c:aa: 53:3e:b6:e7:1c:5a:20:4f:2a:71:db:87:e8:31:f6: 10:6a:fe:74:98:60:d0:0c:8a:9d:c4:f4:57:7c:1f: 71:7a:d5:85:52:b4:09:e0:3d:d6:15:ab:31:92:5a: 7b:dc:57:bb:67:09:51:cd:bb:53:26:58:ee:c7:8f: 02:d2:bd:fb:b8:73:3f:46:25:92:e7:c9:72:9a:ce: 45:83:57:6b:33:33:6d:18:eb:7d:5c:0d:8a:05:41: d3:87:e7:04:09:d4:a0:48:2a:fe:4a:5f:9b:cb:de: d2:1b:f7:1f:4d:25:4a:1c:f9:b3:82:24:ec:15:84: d9:93:c5:47:5c:d4:e6:a1:ea:eb:35:fe:f8:5d:64: 29:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:72:F5:5F:CE:53:75:C1:84:A7:7A:B8:7C:57:66:90:69:80:2B:73 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/mXL1X85TdcGEp3q4fFdmkGmAK3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.203.238.0/24 Signature Algorithm: sha256WithRSAEncryption 27:3b:e6:89:cd:64:8e:19:da:45:71:eb:c5:dd:77:44:f6:84: f3:e1:af:8f:f7:ac:e5:33:0b:b5:c1:59:7c:71:47:69:1f:d5: 2d:8b:e4:2f:c5:d7:27:0d:2e:c5:48:d7:57:20:4b:d0:66:0b: d6:d8:7d:85:e8:60:cb:dc:eb:99:9d:e7:20:56:5a:b1:c3:f2: 95:29:4f:ef:b5:d7:51:c8:2c:8c:8b:eb:e5:80:a4:8f:0b:62: 1a:7d:14:51:60:be:19:87:ac:b8:cf:5b:6f:4f:43:12:32:24: 05:11:0c:1c:df:39:eb:df:e6:11:b2:d4:19:cb:27:44:fc:02: b3:36:ca:62:2f:0b:6c:47:23:15:e9:8f:54:fc:de:67:f1:d4: 15:61:de:7c:6d:95:3b:7b:6b:9e:9c:fe:71:d5:68:78:8b:ad: d7:ba:a0:a0:dc:48:74:f6:e9:c1:7c:40:f8:5d:7d:c5:c2:ae: 8e:6f:99:ff:a3:66:bd:8d:42:60:e6:76:de:9a:5f:c2:1c:b9: 6a:53:ad:30:49:bc:e8:15:89:92:80:22:53:b2:89:ca:01:cb: 6d:c1:be:c3:ef:f6:ea:78:67:d4:e5:72:61:4c:42:f3:12:2c: 29:d6:9d:2e:68:51:29:cf:d3:d7:c8:08:a7:07:b7:70:50:2e: 84:38:9c:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5frO4osJ9sek0OmBm2Bl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTcyZjU1ZmNlNTM3NWMxODRhNzdhYjg3YzU3NjY5MDY5ODAyYjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluB3RK7sN3d6slyuCz+zUKw+Weyg HJG4XeNtq5NniUK7Rkq/KAVXaHNJ49PubZ1ynv1L82pXnxcH+tmZQzWzRXqjm7GJ 8tm/phSlfEJCB8vNOjz8C1AKHI9aV9rkjQyKqyglcEaBGH7j9VSgbt7D97LCSLOn jKpTPrbnHFogTypx24foMfYQav50mGDQDIqdxPRXfB9xetWFUrQJ4D3WFasxklp7 3Fe7ZwlRzbtTJljux48C0r37uHM/RiWS58lyms5Fg1drMzNtGOt9XA2KBUHTh+cE CdSgSCr+Sl+by97SG/cfTSVKHPmzgiTsFYTZk8VHXNTmoerrNf74XWQpOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJly9V/OU3XBhKd6uHxXZpBpgCtzMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvbVhMMVg4NVRkY0dFcDNxNGZGZG1rR21BSzNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWMvuMA0G CSqGSIb3DQEBCwUAA4IBAQAnO+aJzWSOGdpFcevF3XdE9oTz4a+P96zlMwu1wVl8 cUdpH9Uti+QvxdcnDS7FSNdXIEvQZgvW2H2F6GDL3OuZnecgVlqxw/KVKU/vtddR yCyMi+vlgKSPC2IafRRRYL4Zh6y4z1tvT0MSMiQFEQwc3znr3+YRstQZyydE/AKz NspiLwtsRyMV6Y9U/N5n8dQVYd58bZU7e2uenP5x1Wh4i63XuqCg3Eh09unBfED4 XX3Fwq6Ob5n/o2a9jUJg5nbeml/CHLlqU60wSbzoFYmSgCJTsonKActtwb7D7/bq eGfU5XJhTELzEiwp1p0uaFEpz9PXyAinB7dwUC6EOJy9 -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:27 2026 by rpki-client