This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/MlrnVSg-D0WgaZMr-y5tTMSAriU.roa File: MlrnVSg-D0WgaZMr-y5tTMSAriU.roa (raw, json) Hash identifier: WIj5Ec9a2W/Di7tEM8lKik0rbLBOSepO4AecZmXJzEM= Subject key identifier: 32:5A:E7:55:28:3E:0F:45:A0:69:93:2B:FB:2E:6D:4C:C4:80:AE:25 Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b Certificate serial: 019BFE5432037C09EDA1B697BFA336E26C9C Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/MlrnVSg-D0WgaZMr-y5tTMSAriU.roa Signing time: Tue 27 Jan 2026 07:21:29 +0000 ROA not before: Tue 27 Jan 2026 07:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 185.36.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:54:32:03:7c:09:ed:a1:b6:97:bf:a3:36:e2:6c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b Validity Not Before: Jan 27 07:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=325ae755283e0f45a069932bfb2e6d4cc480ae25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:23:ed:26:cf:63:29:b4:80:01:58:3d:ab:6e: 23:be:95:4f:d0:8a:2f:a7:e9:c7:5e:12:61:e0:0e: 23:17:03:87:1f:8b:a7:3b:e3:3b:cd:67:27:74:a8: 1e:12:b1:d2:32:05:f6:47:84:c0:d6:32:d2:08:43: 96:bf:68:f0:db:da:3d:5f:17:a2:ca:0c:13:94:e5: f2:a1:91:b9:91:ac:c8:d8:c9:8d:c5:bb:7c:56:d8: 01:52:f6:f7:8f:ce:d8:8e:8c:32:31:a6:45:d5:d6: a0:d3:fb:e7:c6:15:03:ba:d8:7e:51:b9:1b:4f:ad: 48:84:fd:a2:51:4c:21:ae:78:e5:59:72:0f:2e:3a: b1:19:d9:18:65:1a:ff:55:9c:86:00:9c:a4:ee:87: f9:82:ce:5a:5e:70:a3:5a:9a:21:1f:84:04:9c:67: 7b:59:f6:0d:24:54:f9:a7:f9:bb:44:4e:21:06:00: 59:04:48:fc:9a:54:76:3f:2b:db:40:a3:d7:1d:fe: 69:79:23:05:3a:17:3b:9c:f7:72:78:d1:3b:af:1c: 83:fd:34:5b:ff:90:da:9e:fb:1b:b3:00:58:f9:0b: 6f:e9:40:bb:31:fe:cd:d5:f0:8f:96:04:ce:76:89: 33:c2:44:ac:81:cf:10:30:b8:af:9c:26:92:f1:5d: da:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5A:E7:55:28:3E:0F:45:A0:69:93:2B:FB:2E:6D:4C:C4:80:AE:25 X509v3 Authority Key Identifier: keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/MlrnVSg-D0WgaZMr-y5tTMSAriU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.127.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:90:c1:bb:70:92:01:b5:00:48:f7:f3:68:0d:a3:22:93:2a: 57:3d:61:37:1e:9b:8d:40:c7:25:49:de:86:62:c3:89:bb:b5: ee:e4:ab:38:6c:9b:99:71:e9:e6:2f:ff:98:71:9c:67:93:96: 77:d7:7a:18:f7:0d:30:67:f8:27:dc:4e:a6:3a:d7:6f:68:99: fa:a1:da:aa:d9:ff:78:35:f8:22:2c:82:83:81:0a:ab:ff:4f: 57:00:3b:f4:93:81:8f:b6:2e:a7:60:4b:4c:55:17:c5:b1:24: 6e:44:2d:01:93:13:db:9d:0f:90:62:16:cf:6f:d3:ba:16:fa: b9:02:63:f5:fc:e5:59:de:9d:e0:55:e3:d2:8a:bf:08:b3:ab: c5:71:03:62:1d:d0:98:73:75:a5:32:7b:fe:40:4b:6b:94:92: 22:da:6d:51:f9:58:c1:af:86:85:59:36:05:d5:63:4e:d9:72: a3:3b:ab:36:d2:27:07:41:e3:53:5d:87:32:2d:04:b6:78:1a: 15:78:d7:12:36:48:21:3a:24:e3:ab:86:d5:92:f9:b1:4e:f2: e7:97:e7:77:dd:4b:84:da:b1:30:2c:dd:63:33:e9:3b:c2:ff: a6:34:bb:d5:0e:10:d3:16:0a:23:d0:ce:b9:ab:f5:eb:f3:ab: fe:84:05:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv+VDIDfAntobaXv6M24mycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx MjMwN2IwHhcNMjYwMTI3MDcyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjVhZTc1NTI4M2UwZjQ1YTA2OTkzMmJmYjJlNmQ0Y2M0ODBhZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCPtJs9jKbSAAVg9q24jvpVP0Iov p+nHXhJh4A4jFwOHH4unO+M7zWcndKgeErHSMgX2R4TA1jLSCEOWv2jw29o9Xxei ygwTlOXyoZG5kazI2MmNxbt8VtgBUvb3j87YjowyMaZF1dag0/vnxhUDuth+Ubkb T61IhP2iUUwhrnjlWXIPLjqxGdkYZRr/VZyGAJyk7of5gs5aXnCjWpohH4QEnGd7 WfYNJFT5p/m7RE4hBgBZBEj8mlR2PyvbQKPXHf5peSMFOhc7nPdyeNE7rxyD/TRb /5DanvsbswBY+Qtv6UC7Mf7N1fCPlgTOdokzwkSsgc8QMLivnCaS8V3ajwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDJa51UoPg9FoGmTK/subUzEgK4lMB8GA1UdIwQY MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt NWI4NzgyNWMwN2VlLzEvTWxyblZTZy1EMFdnYVpNci15NXRUTVNBcmlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSR/MA0G CSqGSIb3DQEBCwUAA4IBAQA8kMG7cJIBtQBI9/NoDaMikypXPWE3HpuNQMclSd6G YsOJu7Xu5Ks4bJuZcenmL/+YcZxnk5Z313oY9w0wZ/gn3E6mOtdvaJn6odqq2f94 NfgiLIKDgQqr/09XADv0k4GPti6nYEtMVRfFsSRuRC0BkxPbnQ+QYhbPb9O6Fvq5 AmP1/OVZ3p3gVePSir8Is6vFcQNiHdCYc3WlMnv+QEtrlJIi2m1R+VjBr4aFWTYF 1WNO2XKjO6s20icHQeNTXYcyLQS2eBoVeNcSNkghOiTjq4bVkvmxTvLnl+d33UuE 2rEwLN1jM+k7wv+mNLvVDhDTFgoj0M65q/Xr86v+hAVZ -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:41 2026 by rpki-client