This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/MLkUvkA6uDTMU8BTbvTCb2LlDLQ.roa File: MLkUvkA6uDTMU8BTbvTCb2LlDLQ.roa (raw, json) Hash identifier: VagX+oyv5O56sokc/qHDCjREdjly46AXJeRdXSrzpR0= Subject key identifier: 30:B9:14:BE:40:3A:B8:34:CC:53:C0:53:6E:F4:C2:6F:62:E5:0C:B4 Certificate issuer: /CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f Certificate serial: 019B7B353BAB2023C92EDCAB3DD2A4002435 Authority key identifier: 57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/MLkUvkA6uDTMU8BTbvTCb2LlDLQ.roa Signing time: Thu 01 Jan 2026 20:17:24 +0000 ROA not before: Thu 01 Jan 2026 20:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203953 IP address blocks: 80.210.64.0/20 maxlen: 20 185.15.72.0/22 maxlen: 22 185.50.192.0/22 maxlen: 22 185.118.248.0/22 maxlen: 22 185.181.220.0/22 maxlen: 22 195.192.232.0/22 maxlen: 22 212.237.128.0/20 maxlen: 20 213.32.240.0/21 maxlen: 21 217.61.216.0/21 maxlen: 21 2a05:f6c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3b:ab:20:23:c9:2e:dc:ab:3d:d2:a4:00:24:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f Validity Not Before: Jan 1 20:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30b914be403ab834cc53c0536ef4c26f62e50cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d8:93:57:b1:14:16:67:10:2a:94:0a:f6:8b: cd:02:57:1e:e3:9a:4f:97:5b:19:35:f8:86:74:f3: ce:75:c2:89:96:79:11:9c:48:9c:bf:b9:5a:b4:9d: 30:77:5b:44:53:17:49:08:8d:04:34:ec:6d:aa:d4: 0b:c7:15:99:2e:71:09:63:b7:b3:be:50:ea:9e:b0: af:e6:f2:b9:67:6a:73:89:4c:31:d6:4b:9a:59:52: 98:15:d5:ce:00:94:18:a7:24:72:55:15:3c:7c:ac: 7e:ef:57:90:26:96:22:4b:92:75:8d:ef:e7:4a:e9: 51:64:7e:87:09:21:59:45:8a:e5:a1:50:4c:59:f4: 10:13:8b:2e:7c:69:c5:e3:dc:59:aa:e6:d3:cc:5f: 8f:ee:f1:3f:4e:0f:d7:00:3b:68:0f:d1:02:fa:b8: c0:b0:68:c1:5f:cd:b4:23:31:7d:a5:81:80:7f:1e: 79:d6:e6:6b:17:b2:68:c9:03:e1:d9:94:71:84:4c: 77:83:7b:76:ad:3a:7e:72:1c:0f:9e:6b:71:b0:f9: a7:76:77:c8:ec:02:e3:dd:19:0e:04:21:9e:3b:64: 2f:ee:96:f3:f0:8a:a4:a7:d6:c9:84:65:03:55:a6: 90:32:33:f0:be:8d:74:85:b1:8e:77:49:95:6b:c3: 42:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B9:14:BE:40:3A:B8:34:CC:53:C0:53:6E:F4:C2:6F:62:E5:0C:B4 X509v3 Authority Key Identifier: keyid:57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/MLkUvkA6uDTMU8BTbvTCb2LlDLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.210.64.0/20 185.15.72.0/22 185.50.192.0/22 185.118.248.0/22 185.181.220.0/22 195.192.232.0/22 212.237.128.0/20 213.32.240.0/21 217.61.216.0/21 IPv6: 2a05:f6c0::/29 Signature Algorithm: sha256WithRSAEncryption 27:c3:eb:8f:76:6c:e3:50:47:1f:26:2a:39:d2:58:c8:f2:e3: 6f:8c:ae:f1:c0:2e:b3:bf:dc:12:2a:05:5e:9f:14:24:17:60: 95:7e:24:7a:a8:d8:a0:9f:f9:d9:ef:a9:96:02:90:11:30:19: 59:b6:7d:56:df:57:ed:02:32:10:02:7c:db:50:5b:a2:49:8e: af:9f:59:a8:f1:92:e3:39:68:c3:b8:56:bc:19:e2:04:73:47: 87:b4:16:b9:cd:fe:82:53:46:ca:d9:ff:e7:1e:46:53:78:cc: 84:73:5f:b4:7e:63:3b:e1:20:98:1d:16:ab:df:11:02:70:08: fe:cd:b8:d5:da:24:65:fa:2f:b3:96:69:11:f2:18:be:87:7b: a0:67:b5:1f:f4:bd:04:ef:0f:70:e1:5c:68:f0:f2:ea:1f:18: fb:57:4c:e5:0e:fd:4e:5f:d9:ca:11:09:9e:e8:e9:fe:66:b3: 68:5f:9f:e7:61:4b:9b:08:0e:4e:b6:d3:59:77:d9:98:c5:ef: 8c:d7:04:40:c8:ac:a4:af:59:17:94:f4:52:93:d2:77:2d:a4: 06:e1:4d:2d:00:c8:90:78:63:3f:97:0c:91:a2:9c:75:9c:f0: 60:32:c9:ee:a8:7d:a4:b9:7b:71:80:84:62:d5:f5:84:98:26: b2:32:a6:f2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt7NTurICPJLtyrPdKkACQ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3Yjc3MTE4YmQ1NmIyYjNiNDQ5OWM1NjZhN2M2NDhhYWQ3 YTZlOWYwHhcNMjYwMTAxMjAxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGI5MTRiZTQwM2FiODM0Y2M1M2MwNTM2ZWY0YzI2ZjYyZTUwY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9iTV7EUFmcQKpQK9ovNAlce45pP l1sZNfiGdPPOdcKJlnkRnEicv7latJ0wd1tEUxdJCI0ENOxtqtQLxxWZLnEJY7ez vlDqnrCv5vK5Z2pziUwx1kuaWVKYFdXOAJQYpyRyVRU8fKx+71eQJpYiS5J1je/n SulRZH6HCSFZRYrloVBMWfQQE4sufGnF49xZqubTzF+P7vE/Tg/XADtoD9EC+rjA sGjBX820IzF9pYGAfx551uZrF7JoyQPh2ZRxhEx3g3t2rTp+chwPnmtxsPmndnfI 7ALj3RkOBCGeO2Qv7pbz8Iqkp9bJhGUDVaaQMjPwvo10hbGOd0mVa8NCCwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFDC5FL5AOrg0zFPAU270wm9i5Qy0MB8GA1UdIwQY MBaAFFe3cRi9VrKztEmcVmp8ZIqtem6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iNjQ4MzctNWU4Ni00OTA5LWEwN2It MDY1YWE0MTU1ZWQ0LzEvTUxrVXZrQTZ1RFRNVThCVGJ2VENiMkxsRExRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9iNjQ4MzctNWU4Ni00OTA5LWEwN2ItMDY1YWE0MTU1ZWQ0 LzEvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQEUNJAAwQC uQ9IAwQCuTLAAwQCuXb4AwQCubXcAwQCw8DoAwQE1O2AAwQD1SDwAwQD2T3YMA0E AgACMAcDBQMqBfbAMA0GCSqGSIb3DQEBCwUAA4IBAQAnw+uPdmzjUEcfJio50ljI 8uNvjK7xwC6zv9wSKgVenxQkF2CVfiR6qNign/nZ76mWApARMBlZtn1W31ftAjIQ AnzbUFuiSY6vn1mo8ZLjOWjDuFa8GeIEc0eHtBa5zf6CU0bK2f/nHkZTeMyEc1+0 fmM74SCYHRar3xECcAj+zbjV2iRl+i+zlmkR8hi+h3ugZ7Uf9L0E7w9w4Vxo8PLq Hxj7V0zlDv1OX9nKEQme6On+ZrNoX5/nYUubCA5OttNZd9mYxe+M1wRAyKykr1kX lPRSk9J3LaQG4U0tAMiQeGM/lwyRopx1nPBgMsnuqH2kuXtxgIRi1fWEmCayMqby -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:12 2026 by rpki-client