This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/l-MTLKLVkCPLyVnX6_jxbVIMUkY.roa File: l-MTLKLVkCPLyVnX6_jxbVIMUkY.roa (raw, json) Hash identifier: ntncx83xvrR7GXBUBSWIBKho03vJeQ/rhh6Pkr3gi58= Subject key identifier: 97:E3:13:2C:A2:D5:90:23:CB:C9:59:D7:EB:F8:F1:6D:52:0C:52:46 Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a Certificate serial: 019B783484160E6BC412580B5CCE874B79EA Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/l-MTLKLVkCPLyVnX6_jxbVIMUkY.roa Signing time: Thu 01 Jan 2026 06:17:46 +0000 ROA not before: Thu 01 Jan 2026 06:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41865 IP address blocks: 94.158.128.0/20 maxlen: 20 94.158.128.0/21 maxlen: 21 94.158.136.0/21 maxlen: 21 193.34.0.0/22 maxlen: 22 193.34.0.0/23 maxlen: 23 193.34.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:84:16:0e:6b:c4:12:58:0b:5c:ce:87:4b:79:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a Validity Not Before: Jan 1 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97e3132ca2d59023cbc959d7ebf8f16d520c5246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:47:2a:64:e0:7e:9b:b6:84:ff:d6:56:3a: f4:e2:4d:4b:63:7a:e3:f2:4e:3f:31:e7:20:c9:20: 9a:60:fd:c6:93:29:82:c5:24:36:34:97:d5:d7:bc: 4e:f4:1f:13:80:3d:8b:ae:06:d0:4d:60:a5:3f:e3: e3:ac:5e:5a:65:dd:7f:c2:0b:a5:3b:ec:97:fa:39: 84:20:11:f5:b5:7c:c2:88:9c:56:31:b0:f5:c4:6a: 71:4b:4b:6e:40:16:fc:33:c0:5c:11:b6:8e:fc:4e: ab:a3:66:a8:a8:0c:31:0e:7c:40:01:39:3a:c0:f9: 6e:c5:e0:e0:d0:a5:22:e3:b1:d5:37:ff:f4:b0:24: d9:04:fd:e3:55:3c:c9:c5:e8:a7:cd:59:b7:a2:d2: bf:5b:02:f3:1c:dd:a5:a4:32:6f:6c:f6:6b:cc:00: 41:3d:c3:34:f5:d0:8e:b7:19:4d:77:c4:73:a3:0f: e4:72:54:82:71:42:78:60:fa:9f:d9:80:92:24:76: d5:46:c8:36:eb:06:37:17:f8:86:1e:34:03:d0:ec: 7f:50:a1:95:4a:da:63:b4:e6:d9:ee:86:82:1d:d8: aa:5b:97:a3:d9:4d:d6:0a:95:e6:9f:6c:6a:d8:40: 84:b0:b4:42:38:ad:65:5f:f2:d3:66:d5:57:14:39: a0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E3:13:2C:A2:D5:90:23:CB:C9:59:D7:EB:F8:F1:6D:52:0C:52:46 X509v3 Authority Key Identifier: keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/l-MTLKLVkCPLyVnX6_jxbVIMUkY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.158.128.0/20 193.34.0.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:82:a0:ce:8e:6a:76:c0:a3:9d:ea:c1:9d:c8:1b:62:ed:47: 39:1b:56:61:47:17:7f:f1:8a:81:46:dd:8e:62:bb:92:73:31: 94:74:47:db:4a:d5:bf:2a:57:3f:c8:82:fb:69:b7:05:71:cb: 3f:ab:8d:e4:92:cf:b4:23:40:1d:15:99:96:93:49:bd:79:84: 5f:90:02:3b:6e:6e:96:c5:33:d7:12:a7:88:c1:b7:a8:ee:89: 38:f7:41:11:e8:f4:07:ea:21:3f:c9:8d:62:4f:dd:bb:a2:b2: c6:d1:f4:5e:3f:a6:3b:ab:37:a6:6f:d8:52:24:5f:42:8a:9a: c1:c7:cb:64:2a:06:df:c1:9f:fb:1b:08:4b:4e:b0:23:ef:29: c7:3c:fe:99:04:14:8c:cd:39:73:1e:4e:c4:8e:4a:b8:ee:8b: 6f:b7:8a:8b:d4:fb:62:92:6f:a1:d1:ef:c6:66:41:5a:ed:8b: 3f:0e:54:f2:d4:36:db:9d:34:dc:a6:71:02:b4:aa:46:0f:f0: d1:52:51:31:94:94:ed:a1:7a:a4:40:49:7a:7f:ff:07:40:83: 30:1c:0d:30:34:7e:6a:1d:9c:35:66:97:c1:e2:d0:a2:37:2e: b5:9e:e9:c3:5e:88:81:41:38:4f:e9:cb:3c:7e:82:46:f7:02: a7:83:03:75 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NIQWDmvEElgLXM6HS3nqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOTMxZjI2NWE4NDcxZDMyY2U4NDQ5ZDllMTg2ZjBkYzcx MTRhN2EwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2UzMTMyY2EyZDU5MDIzY2JjOTU5ZDdlYmY4ZjE2ZDUyMGM1MjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0BHKmTgfpu2hP/WVjr04k1LY3rj 8k4/MecgySCaYP3GkymCxSQ2NJfV17xO9B8TgD2LrgbQTWClP+PjrF5aZd1/wgul O+yX+jmEIBH1tXzCiJxWMbD1xGpxS0tuQBb8M8BcEbaO/E6ro2aoqAwxDnxAATk6 wPluxeDg0KUi47HVN//0sCTZBP3jVTzJxeinzVm3otK/WwLzHN2lpDJvbPZrzABB PcM09dCOtxlNd8Rzow/kclSCcUJ4YPqf2YCSJHbVRsg26wY3F/iGHjQD0Ox/UKGV StpjtObZ7oaCHdiqW5ej2U3WCpXmn2xq2ECEsLRCOK1lX/LTZtVXFDmgBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJfjEyyi1ZAjy8lZ1+v48W1SDFJGMB8GA1UdIwQY MBaAFDyTHyZahHHTLOhEnZ4Ybw3HEUp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEt NWUwMDI2MzAzNjI5LzEvbC1NVExLTFZrQ1BMeVZuWDZfanhiVklNVWtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEtNWUwMDI2MzAzNjI5 LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEXp6AAwQC wSIAMA0GCSqGSIb3DQEBCwUAA4IBAQCMgqDOjmp2wKOd6sGdyBti7Uc5G1ZhRxd/ 8YqBRt2OYruSczGUdEfbStW/Klc/yIL7abcFccs/q43kks+0I0AdFZmWk0m9eYRf kAI7bm6WxTPXEqeIwbeo7ok490ER6PQH6iE/yY1iT927orLG0fReP6Y7qzemb9hS JF9CiprBx8tkKgbfwZ/7GwhLTrAj7ynHPP6ZBBSMzTlzHk7Ejkq47otvt4qL1Pti km+h0e/GZkFa7Ys/DlTy1DbbnTTcpnECtKpGD/DRUlExlJTtoXqkQEl6f/8HQIMw HA0wNH5qHZw1ZpfB4tCiNy61nunDXoiBQThP6cs8foJG9wKngwN1 -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:57 2026 by rpki-client