This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/ML7UkJFE6LlihRpTm5h-PoqRSVs.roa File: ML7UkJFE6LlihRpTm5h-PoqRSVs.roa (raw, json) Hash identifier: g+qfBPw45UpoVjFRiQZEbaH4MwvqddJi1qo+sHrhaFE= Subject key identifier: 30:BE:D4:90:91:44:E8:B9:62:85:1A:53:9B:98:7E:3E:8A:91:49:5B Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8 Certificate serial: 019B7F14D819EBAD8C968AC2965D2B70A33B Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/ML7UkJFE6LlihRpTm5h-PoqRSVs.roa Signing time: Fri 02 Jan 2026 14:20:31 +0000 ROA not before: Fri 02 Jan 2026 14:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208374 IP address blocks: 185.215.68.0/24 maxlen: 24 185.215.69.0/24 maxlen: 24 2a0b:880:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d8:19:eb:ad:8c:96:8a:c2:96:5d:2b:70:a3:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8 Validity Not Before: Jan 2 14:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30bed4909144e8b962851a539b987e3e8a91495b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:1a:13:7a:9f:79:af:88:15:6f:9d:af:5f: 31:e6:6d:5c:43:9c:3f:51:f9:be:e2:08:ba:56:6c: 09:aa:1e:42:9f:74:aa:79:f6:96:15:53:79:57:38: 6e:67:b0:78:75:3a:a0:75:a9:de:da:68:26:c3:b6: 72:5c:98:4b:c0:75:aa:71:4c:74:12:b3:19:42:a5: 75:7a:7d:d1:67:3d:bf:00:b8:a5:11:60:65:33:25: 31:8a:ff:21:d3:4b:4e:4e:ea:c6:78:b1:7c:9c:83: 7c:b2:f1:e6:7f:96:5e:f3:78:4f:67:5d:af:17:d3: e7:77:4c:bf:8c:cb:5c:bd:0c:75:8a:a1:00:dc:f9: 7e:d1:ef:56:31:32:ee:dd:2a:90:67:0b:4e:fc:39: 19:84:95:76:fe:97:46:01:a7:2e:85:ab:97:4a:35: b4:51:b7:bf:49:e5:6c:0b:ef:2b:4e:b6:86:5a:7c: 55:ae:5b:19:e2:e1:2f:ca:75:23:af:3e:cf:36:67: 17:75:20:2a:c0:ae:63:06:5f:37:45:af:5d:3a:46: e1:9f:af:93:0f:64:28:09:bb:f0:9d:61:88:00:e1: 7e:5f:c0:9c:f7:6a:0d:c5:9e:c5:43:f7:1f:94:dc: 71:e7:52:c5:bd:7f:07:34:d7:0b:e2:19:09:0e:c7: bd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BE:D4:90:91:44:E8:B9:62:85:1A:53:9B:98:7E:3E:8A:91:49:5B X509v3 Authority Key Identifier: keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/ML7UkJFE6LlihRpTm5h-PoqRSVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.215.68.0/23 IPv6: 2a0b:880:f000::/36 Signature Algorithm: sha256WithRSAEncryption 18:66:38:ec:57:83:0f:e8:6a:26:33:20:3b:44:71:7a:dc:99: 6e:4d:84:05:06:5d:6e:9d:8f:37:7d:56:97:79:34:89:c0:f4: a3:11:fc:e9:63:af:47:31:21:96:1d:d1:9a:7a:54:ff:42:47: 5b:b9:f3:e0:6e:7b:af:56:47:c8:52:86:50:1e:6b:a3:19:d8: 10:82:dc:8f:ac:62:77:35:55:45:8b:d8:3a:e7:50:57:4d:00: 52:f2:b7:78:fd:e0:9c:b8:d6:78:c7:64:2e:43:66:72:e3:1b: 15:2d:e6:fb:5a:33:85:34:fd:8d:6c:55:81:c5:7f:8d:ba:59: ac:31:9b:b2:63:43:3c:55:d7:64:06:34:62:31:17:a9:99:7f: 96:b1:bd:67:40:5d:a1:48:8b:a9:e5:bc:15:d6:43:c3:a0:f7: 7d:76:35:a0:8e:c1:c4:d5:19:65:4a:a2:c7:e5:51:37:8b:d6: 0c:3a:fd:0c:ae:13:52:23:45:2d:cc:88:dc:29:c2:89:97:81: 7f:5a:ac:2f:ef:73:62:61:01:8a:95:e0:99:84:c5:07:fa:c1: 03:5c:b1:5a:3f:a0:14:d1:aa:80:bf:61:77:b9:a7:e3:f3:9a: f5:f9:48:0d:ef:88:e8:31:6b:95:6b:8e:7b:e3:db:11:bc:05: 17:b3:31:fd -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt/FNgZ662MlorCll0rcKM7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2OTVjYjg2NTg2Y2JmZDI0NjJhZmEwNTJjOTZhMjVjMTYy ODMwYTgwHhcNMjYwMTAyMTQyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGJlZDQ5MDkxNDRlOGI5NjI4NTFhNTM5Yjk4N2UzZThhOTE0OTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVIaE3qfea+IFW+dr18x5m1cQ5w/ Ufm+4gi6VmwJqh5Cn3SqefaWFVN5VzhuZ7B4dTqgdane2mgmw7ZyXJhLwHWqcUx0 ErMZQqV1en3RZz2/ALilEWBlMyUxiv8h00tOTurGeLF8nIN8svHmf5Ze83hPZ12v F9Pnd0y/jMtcvQx1iqEA3Pl+0e9WMTLu3SqQZwtO/DkZhJV2/pdGAacuhauXSjW0 Ube/SeVsC+8rTraGWnxVrlsZ4uEvynUjrz7PNmcXdSAqwK5jBl83Ra9dOkbhn6+T D2QoCbvwnWGIAOF+X8Cc92oNxZ7FQ/cflNxx51LFvX8HNNcL4hkJDse9FwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFDC+1JCRROi5YoUaU5uYfj6KkUlbMB8GA1UdIwQY MBaAFNaVy4ZYbL/SRir6BSyWolwWKDCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTkt YTVjZDgxYjVlMDBiLzEvTUw3VWtKRkU2TGxpaFJwVG01aC1Qb3FSU1ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTktYTVjZDgxYjVlMDBi LzEvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBuddEMA4E AgACMAgDBgQqCwiA8DANBgkqhkiG9w0BAQsFAAOCAQEAGGY47FeDD+hqJjMgO0Rx etyZbk2EBQZdbp2PN31Wl3k0icD0oxH86WOvRzEhlh3RmnpU/0JHW7nz4G57r1ZH yFKGUB5roxnYEILcj6xidzVVRYvYOudQV00AUvK3eP3gnLjWeMdkLkNmcuMbFS3m +1ozhTT9jWxVgcV/jbpZrDGbsmNDPFXXZAY0YjEXqZl/lrG9Z0BdoUiLqeW8FdZD w6D3fXY1oI7BxNUZZUqix+VRN4vWDDr9DK4TUiNFLcyI3CnCiZeBf1qsL+9zYmEB ipXgmYTFB/rBA1yxWj+gFNGqgL9hd7mn4/Oa9flIDe+I6DFrlWuOe+PbEbwFF7Mx /Q== -----END CERTIFICATE-----Generated at Mon Feb 2 07:54:47 2026 by rpki-client