This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/mle5l9onvzOKjJkGxBdMMEzHzFk.roa File: mle5l9onvzOKjJkGxBdMMEzHzFk.roa (raw, json) Hash identifier: RQr1Xm4c0zALnq6+MVgOiMthhqp0SNomTNBL9iMlkL4= Subject key identifier: 9A:57:B9:97:DA:27:BF:33:8A:8C:99:06:C4:17:4C:30:4C:C7:CC:59 Certificate issuer: /CN=595b7899893b9e248be6155df445f630ae5d6872 Certificate serial: 019B7C130D84A96C14C9D6ADDDC6D1482F1A Authority key identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/mle5l9onvzOKjJkGxBdMMEzHzFk.roa Signing time: Fri 02 Jan 2026 00:19:42 +0000 ROA not before: Fri 02 Jan 2026 00:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21369 IP address blocks: 157.203.6.0/23 maxlen: 23 157.203.6.0/24 maxlen: 24 157.203.7.0/24 maxlen: 24 157.203.36.0/23 maxlen: 23 157.203.36.0/24 maxlen: 24 157.203.37.0/24 maxlen: 24 157.203.40.0/23 maxlen: 23 157.203.40.0/24 maxlen: 24 157.203.41.0/24 maxlen: 24 157.203.42.0/23 maxlen: 23 157.203.42.0/24 maxlen: 24 157.203.43.0/24 maxlen: 24 157.203.48.0/23 maxlen: 23 157.203.48.0/24 maxlen: 24 157.203.49.0/24 maxlen: 24 157.203.52.0/23 maxlen: 23 157.203.52.0/24 maxlen: 24 157.203.53.0/24 maxlen: 24 157.203.56.0/23 maxlen: 23 157.203.56.0/24 maxlen: 24 157.203.57.0/24 maxlen: 24 157.203.58.0/23 maxlen: 23 157.203.59.0/24 maxlen: 24 157.203.60.0/23 maxlen: 23 157.203.60.0/24 maxlen: 24 157.203.61.0/24 maxlen: 24 157.203.62.0/23 maxlen: 23 157.203.62.0/24 maxlen: 24 157.203.92.0/23 maxlen: 23 157.203.120.0/23 maxlen: 23 157.203.120.0/24 maxlen: 24 157.203.142.0/24 maxlen: 24 157.203.143.0/24 maxlen: 24 157.203.176.0/23 maxlen: 23 157.203.176.0/24 maxlen: 24 157.203.177.0/24 maxlen: 24 157.203.178.0/23 maxlen: 23 157.203.178.0/24 maxlen: 24 157.203.179.0/24 maxlen: 24 157.203.180.0/23 maxlen: 23 157.203.180.0/24 maxlen: 24 157.203.181.0/24 maxlen: 24 157.203.242.0/23 maxlen: 23 157.203.242.0/24 maxlen: 24 157.203.243.0/24 maxlen: 24 157.203.254.0/23 maxlen: 23 157.203.254.0/24 maxlen: 24 157.203.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:0d:84:a9:6c:14:c9:d6:ad:dd:c6:d1:48:2f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=595b7899893b9e248be6155df445f630ae5d6872 Validity Not Before: Jan 2 00:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a57b997da27bf338a8c9906c4174c304cc7cc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:73:b0:6c:6d:9e:77:21:76:45:f0:84:bb: dd:2c:94:a2:af:6e:b8:a1:51:80:53:2b:80:8c:40: 2f:22:c4:ef:f9:e6:a1:ed:2c:70:79:61:9b:3a:8a: 47:d1:dc:b4:45:4a:e4:6d:a9:ef:55:20:46:9f:96: cb:2f:54:0c:b3:ff:fc:2d:7d:42:45:8e:56:52:43: 3f:44:a0:e8:5f:20:7c:79:06:52:2b:e1:15:db:3d: 63:bb:16:f0:63:62:18:1a:b5:83:6f:51:37:22:29: 45:d5:a0:8b:5e:a2:16:54:17:b8:24:6a:21:79:50: ac:0f:03:a0:a4:a2:a0:07:79:c2:99:d2:56:c9:57: 57:02:d8:3a:53:c9:20:12:85:45:83:b5:9f:2f:40: d5:2d:45:62:80:61:c4:19:d2:34:78:d0:1e:4a:35: e9:bb:fc:2f:4d:60:fe:72:b1:64:dc:1c:c9:da:0c: ef:5b:92:91:fc:d0:84:fa:4f:37:d7:92:26:43:ed: 2e:a5:fd:46:74:ff:45:23:71:a6:ff:56:37:a5:e3: db:4e:a5:6a:a3:ce:b6:47:2b:ad:6b:57:4e:f9:b8: e9:cd:0b:30:40:08:7c:d5:5f:00:1d:39:e8:0d:85: cf:0b:b5:53:3e:d6:85:37:21:a6:a6:e1:78:0d:1f: 83:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:57:B9:97:DA:27:BF:33:8A:8C:99:06:C4:17:4C:30:4C:C7:CC:59 X509v3 Authority Key Identifier: keyid:59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/mle5l9onvzOKjJkGxBdMMEzHzFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.203.6.0/23 157.203.36.0/23 157.203.40.0/22 157.203.48.0/23 157.203.52.0/23 157.203.56.0/21 157.203.92.0/23 157.203.120.0/23 157.203.142.0/23 157.203.176.0-157.203.181.255 157.203.242.0/23 157.203.254.0/23 Signature Algorithm: sha256WithRSAEncryption 06:73:6b:84:04:0a:eb:6e:09:b4:1d:b0:31:86:80:28:83:89: a9:72:62:b4:54:26:b0:74:7a:35:9e:10:a3:0b:28:a2:20:a1: e5:d2:8e:fd:2d:fd:6f:4f:65:c0:a6:e6:18:a9:9b:cc:11:40: 64:e9:5e:a4:70:e0:51:5c:9b:d8:b8:4d:1f:67:41:dc:f3:7b: d9:2d:41:fa:99:0b:90:bb:1d:ab:17:b5:58:8a:2a:1a:66:bb: db:c2:86:96:80:e0:b0:45:7f:8c:95:f7:52:30:a1:79:d5:20: 0b:3b:77:e7:16:b8:e6:21:36:d8:70:4e:22:84:7a:5b:05:49: b6:55:e3:26:0b:01:21:a3:f3:85:ed:e2:ea:89:4c:83:d3:42: 70:91:c6:1e:22:5a:50:56:07:39:b3:d1:86:3d:15:39:10:49: 14:85:18:46:1e:b9:61:fc:de:89:cc:86:81:96:f4:1e:d2:b8: a7:85:32:ce:5e:18:57:68:af:2b:37:44:42:bb:11:e3:01:26: 1b:7b:4a:a4:be:c3:ed:5c:18:11:dc:bc:eb:76:59:09:e5:37: 2a:d2:67:0f:a4:03:7a:6b:70:73:69:6b:f1:cd:e6:24:5b:b7: bd:bd:ab:c8:4c:05:37:5c:c9:06:44:f1:a0:71:79:30:ac:9f: 72:da:0e:0c -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZt8Ew2EqWwUydat3cbRSC8aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NWI3ODk5ODkzYjllMjQ4YmU2MTU1ZGY0NDVmNjMwYWU1 ZDY4NzIwHhcNMjYwMTAyMDAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTU3Yjk5N2RhMjdiZjMzOGE4Yzk5MDZjNDE3NGMzMDRjYzdjYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9lzsGxtnnchdkXwhLvdLJSir264 oVGAUyuAjEAvIsTv+eah7SxweWGbOopH0dy0RUrkbanvVSBGn5bLL1QMs//8LX1C RY5WUkM/RKDoXyB8eQZSK+EV2z1juxbwY2IYGrWDb1E3IilF1aCLXqIWVBe4JGoh eVCsDwOgpKKgB3nCmdJWyVdXAtg6U8kgEoVFg7WfL0DVLUVigGHEGdI0eNAeSjXp u/wvTWD+crFk3BzJ2gzvW5KR/NCE+k8315ImQ+0upf1GdP9FI3Gm/1Y3pePbTqVq o862Ryuta1dO+bjpzQswQAh81V8AHTnoDYXPC7VTPtaFNyGmpuF4DR+DRQIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFJpXuZfaJ78zioyZBsQXTDBMx8xZMB8GA1UdIwQY MBaAFFlbeJmJO54ki+YVXfRF9jCuXWhyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1Z0NG1ZazduaVNMNWhWZDlFWDJNSzVkYUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83OWI3YTEtYjNjOC00NWE2LWI5OTEt N2M3OGViNWIyZDk0LzEvbWxlNWw5b252ek9LakprR3hCZE1NRXpIekZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83OWI3YTEtYjNjOC00NWE2LWI5OTEtN2M3OGViNWIyZDk0 LzEvV1Z0NG1ZazduaVNMNWhWZDlFWDJNSzVkYUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQBncsGAwQB ncskAwQCncsoAwQBncswAwQBncs0AwQDncs4AwQBnctcAwQBnct4AwQBncuOMAwD BASdy7ADBAGdy7QDBAGdy/IDBAGdy/4wDQYJKoZIhvcNAQELBQADggEBAAZza4QE CutuCbQdsDGGgCiDialyYrRUJrB0ejWeEKMLKKIgoeXSjv0t/W9PZcCm5hipm8wR QGTpXqRw4FFcm9i4TR9nQdzze9ktQfqZC5C7HasXtViKKhpmu9vChpaA4LBFf4yV 91IwoXnVIAs7d+cWuOYhNthwTiKEelsFSbZV4yYLASGj84Xt4uqJTIPTQnCRxh4i WlBWBzmz0YY9FTkQSRSFGEYeuWH83onMhoGW9B7SuKeFMs5eGFdorys3REK7EeMB Jht7SqS+w+1cGBHcvOt2WQnlNyrSZw+kA3prcHNpa/HN5iRbt729q8hMBTdcyQZE 8aBxeTCsn3LaDgw= -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:31 2026 by rpki-client