This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/mlSBu9TMzRv1cMksxUNnCbKCFl0.roa File: mlSBu9TMzRv1cMksxUNnCbKCFl0.roa (raw, json) Hash identifier: 2BjuTtcqQP3+XgVLMLJcS2zD2YXPkZIw27QDfsAhCoI= Subject key identifier: 9A:54:81:BB:D4:CC:CD:1B:F5:70:C9:2C:C5:43:67:09:B2:82:16:5D Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa Certificate serial: 019B7EA69A1D147200C48E9859FE9FC7E21B Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/mlSBu9TMzRv1cMksxUNnCbKCFl0.roa Signing time: Fri 02 Jan 2026 12:20:06 +0000 ROA not before: Fri 02 Jan 2026 12:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42926 IP address blocks: 185.248.94.0/24 maxlen: 24 185.248.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9a:1d:14:72:00:c4:8e:98:59:fe:9f:c7:e2:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa Validity Not Before: Jan 2 12:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a5481bbd4cccd1bf570c92cc5436709b282165d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c2:cb:ad:f8:dd:e8:60:61:39:c1:f9:05:30: 54:ba:76:76:65:b9:84:fc:8b:f5:2b:e7:4f:da:3c: 4f:6d:0d:0a:e4:e7:44:79:6c:4f:74:4e:8d:e1:61: a5:15:6c:c6:d5:75:ee:e8:24:c3:24:39:c1:ee:42: ff:2a:08:e9:a4:07:44:6a:58:a8:cc:7d:59:5b:9f: 66:69:0b:66:ff:ad:3d:e6:d0:9e:81:e7:da:c8:33: 44:9f:b6:be:97:92:64:12:6d:19:17:90:a8:d5:4a: 56:90:fc:7e:30:59:19:cf:6d:e3:40:f0:6a:08:93: 46:e9:54:6a:6d:cf:e1:7f:15:08:9d:5a:1e:cb:ef: 99:c3:57:6d:1b:ff:19:51:37:83:b9:da:6a:39:f2: 91:84:1c:05:32:b3:be:1e:bb:09:ec:12:cc:9b:f4: a2:50:b8:14:b3:3e:36:b0:4b:f8:4a:55:b9:9d:8f: e8:a1:dd:5c:0d:28:0d:55:79:37:14:b3:f0:aa:72: f1:28:87:7b:c6:d1:1e:51:76:2d:e3:e0:00:7a:84: a6:0f:90:cc:4f:d5:7b:f9:da:93:06:0c:77:57:23: b6:61:41:32:fc:ea:b8:aa:d8:19:4a:81:89:d3:62: eb:48:e2:95:4f:03:b9:0c:ce:5b:d5:30:93:61:4c: bc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:54:81:BB:D4:CC:CD:1B:F5:70:C9:2C:C5:43:67:09:B2:82:16:5D X509v3 Authority Key Identifier: keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/mlSBu9TMzRv1cMksxUNnCbKCFl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.94.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:ce:b1:dd:8c:4a:77:c1:aa:46:fe:8f:af:ee:25:27:74:bc: 11:b3:d0:c9:fc:d8:41:2b:cd:47:f9:92:80:77:b2:96:f3:5c: 76:82:65:47:20:56:8b:73:23:cb:e0:fd:bd:e4:01:28:94:03: 49:f4:ec:a8:52:44:ae:94:2a:1c:e8:c3:0d:df:e4:c6:78:7c: 34:1f:40:a6:86:0c:0e:c6:8d:ef:53:38:88:b6:57:1f:30:1a: 56:13:20:a7:2c:a4:b3:04:18:12:c0:a1:86:15:ec:2d:62:3a: a8:39:71:09:8b:fa:3b:a1:cb:71:d2:91:3c:b6:64:5f:00:cd: 3c:8f:47:ab:53:b3:c5:de:12:83:d3:7d:8c:40:34:95:a2:da: ea:b6:ef:32:28:ab:88:46:29:ba:fc:12:4b:4f:d3:fd:e7:af: 5c:9a:f8:58:7d:9e:41:b9:69:69:26:b5:b1:99:98:37:82:09: 1a:8c:4d:2e:93:81:42:8a:b9:66:d0:f0:02:6b:4f:cd:53:6e: 18:b2:d5:85:82:8c:60:ab:c9:5b:6c:c8:33:c4:f3:40:da:60: cf:13:c2:d3:ae:52:14:9e:5f:44:87:48:69:3f:c6:db:86:89: d6:62:46:d5:f9:77:e3:0d:25:16:82:f3:b6:2b:d7:8a:0a:45: 40:fb:47:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppodFHIAxI6YWf6fx+IbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNTI5NDVkMjMxZjVmOGE5NzRiZTcxMmU4NzE4YWI1MGYw NGNmZmEwHhcNMjYwMTAyMTIyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTU0ODFiYmQ0Y2NjZDFiZjU3MGM5MmNjNTQzNjcwOWIyODIxNjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcLLrfjd6GBhOcH5BTBUunZ2ZbmE /Iv1K+dP2jxPbQ0K5OdEeWxPdE6N4WGlFWzG1XXu6CTDJDnB7kL/KgjppAdEalio zH1ZW59maQtm/6095tCegefayDNEn7a+l5JkEm0ZF5Co1UpWkPx+MFkZz23jQPBq CJNG6VRqbc/hfxUInVoey++Zw1dtG/8ZUTeDudpqOfKRhBwFMrO+HrsJ7BLMm/Si ULgUsz42sEv4SlW5nY/ood1cDSgNVXk3FLPwqnLxKId7xtEeUXYt4+AAeoSmD5DM T9V7+dqTBgx3VyO2YUEy/Oq4qtgZSoGJ02LrSOKVTwO5DM5b1TCTYUy8jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJpUgbvUzM0b9XDJLMVDZwmyghZdMB8GA1UdIwQY MBaAFFpSlF0jH1+Kl0vnEuhxirUPBM/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2xLVVhTTWZYNHFYUy1jUzZIR0t0UThFel9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mMTA3ZDYtNThmZC00MzIzLThmNTEt MmU0MWZmM2UwYTZmLzEvbWxTQnU5VE16UnYxY01rc3hVTm5DYktDRmwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mMTA3ZDYtNThmZC00MzIzLThmNTEtMmU0MWZmM2UwYTZm LzEvV2xLVVhTTWZYNHFYUy1jUzZIR0t0UThFel9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufheMA0G CSqGSIb3DQEBCwUAA4IBAQA/zrHdjEp3wapG/o+v7iUndLwRs9DJ/NhBK81H+ZKA d7KW81x2gmVHIFaLcyPL4P295AEolANJ9OyoUkSulCoc6MMN3+TGeHw0H0CmhgwO xo3vUziItlcfMBpWEyCnLKSzBBgSwKGGFewtYjqoOXEJi/o7octx0pE8tmRfAM08 j0erU7PF3hKD032MQDSVotrqtu8yKKuIRim6/BJLT9P9569cmvhYfZ5BuWlpJrWx mZg3ggkajE0uk4FCirlm0PACa0/NU24YstWFgoxgq8lbbMgzxPNA2mDPE8LTrlIU nl9Eh0hpP8bbhonWYkbV+XfjDSUWgvO2K9eKCkVA+0dY -----END CERTIFICATE-----Generated at Mon Jan 26 11:40:03 2026 by rpki-client