This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/mlQkzN5mVrpzNPq1fDRcpZltO94.roa File: mlQkzN5mVrpzNPq1fDRcpZltO94.roa (raw, json) Hash identifier: sppLd1eE66/9Jqq1u7ggNFYS896tLhGMN9DGJReUi2s= Subject key identifier: 9A:54:24:CC:DE:66:56:BA:73:34:FA:B5:7C:34:5C:A5:99:6D:3B:DE Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F15A40A9C7AF5EDDF0E474FE2BE72A3 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/mlQkzN5mVrpzNPq1fDRcpZltO94.roa Signing time: Fri 02 Jan 2026 14:21:23 +0000 ROA not before: Fri 02 Jan 2026 14:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49846 IP address blocks: 93.191.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a4:0a:9c:7a:f5:ed:df:0e:47:4f:e2:be:72:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a5424ccde6656ba7334fab57c345ca5996d3bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4d:4d:e4:15:97:2f:25:83:52:3c:e4:03:76: 8a:51:88:61:86:3d:ac:7b:5b:43:4f:22:52:49:f9: cc:7b:cf:ad:ad:c4:e9:25:1b:0c:09:1f:e1:5a:a9: 7c:3d:ac:b1:69:93:cf:40:51:7d:2f:5f:fc:20:63: 08:37:04:a1:93:ad:71:70:89:1f:e4:08:62:b1:bd: 56:86:fd:ab:96:aa:64:3f:e4:c9:0e:43:c5:f6:27: bc:a1:08:2d:eb:a8:9d:dc:54:d2:9a:09:ea:c2:62: 63:88:ce:9a:7e:66:a9:f4:c9:db:60:06:ba:85:af: 25:ab:6d:60:51:fc:cb:9d:b7:7a:1d:3b:6e:fc:7b: 5e:fd:46:d8:3a:f3:29:65:b3:d3:42:c1:53:a7:89: 9e:2b:5a:d7:97:e5:c0:cf:7d:36:65:b8:af:a2:53: 36:ab:8f:07:40:f2:bb:31:63:69:e6:46:e3:01:d6: 22:41:78:e5:ab:d7:21:2f:0f:dd:79:bd:8f:9e:ff: 72:bd:0e:4b:34:1f:e6:38:ce:5c:06:e1:11:1d:59: a9:b3:21:8c:22:e0:8a:42:8c:51:ec:dc:54:47:f1: e1:6e:71:78:c4:ef:5d:af:c1:3d:7d:e9:1e:92:53: 81:bb:2e:01:47:cf:06:bc:c7:d0:7b:24:bc:23:91: f9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:54:24:CC:DE:66:56:BA:73:34:FA:B5:7C:34:5C:A5:99:6D:3B:DE X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/mlQkzN5mVrpzNPq1fDRcpZltO94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.191.175.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:8c:17:52:11:aa:8d:b0:2d:da:fe:7c:91:89:44:03:ea:56: e3:0b:24:3d:cf:06:48:fa:86:b9:46:cf:63:0f:23:07:70:e5: 9c:15:44:7b:1e:4f:ad:8e:c9:63:e1:13:03:62:11:76:b0:83: 4b:66:67:f4:5a:28:4d:19:a6:0a:da:90:89:0d:0b:e3:72:87: aa:54:d2:1e:51:39:3f:12:a3:4b:f8:06:53:66:0a:3e:f1:42: 73:af:6d:f0:87:c8:e9:b5:d2:8b:ba:9d:f4:51:73:5f:51:31: 9b:76:34:95:72:1a:d3:6d:79:78:f6:89:6d:e1:10:fa:69:37: 42:9f:e0:da:56:2b:23:16:e8:53:00:66:f4:0c:e9:52:e4:a7: 58:e3:6b:1b:7b:3e:2a:4e:80:00:a1:30:64:ce:0e:6b:9f:4e: 0c:e1:c1:07:ef:99:d6:67:87:6e:6c:c1:18:f7:43:65:3e:5f: c6:e6:5b:5f:90:bb:61:44:a3:68:a2:97:14:66:73:06:25:13: 8d:7e:e8:b3:ee:c6:36:90:93:bf:f0:91:fb:89:9b:91:4e:e9: fe:83:9d:67:e0:32:03:52:e1:d7:da:b6:5a:f5:4c:da:2a:b9: a5:fe:cf:d2:37:3f:59:30:2f:ac:d0:42:3d:ef:b5:3b:b9:0b: 17:a8:5b:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FaQKnHr17d8OR0/ivnKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTU0MjRjY2RlNjY1NmJhNzMzNGZhYjU3YzM0NWNhNTk5NmQzYmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7k1N5BWXLyWDUjzkA3aKUYhhhj2s e1tDTyJSSfnMe8+trcTpJRsMCR/hWql8PayxaZPPQFF9L1/8IGMINwShk61xcIkf 5Ahisb1Whv2rlqpkP+TJDkPF9ie8oQgt66id3FTSmgnqwmJjiM6afmap9MnbYAa6 ha8lq21gUfzLnbd6HTtu/Hte/UbYOvMpZbPTQsFTp4meK1rXl+XAz302ZbivolM2 q48HQPK7MWNp5kbjAdYiQXjlq9chLw/deb2Pnv9yvQ5LNB/mOM5cBuERHVmpsyGM IuCKQoxR7NxUR/HhbnF4xO9dr8E9fekeklOBuy4BR88GvMfQeyS8I5H5nwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJpUJMzeZla6czT6tXw0XKWZbTveMB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvbWxRa3pONW1WcnB6TlBxMWZEUmNwWmx0Tzk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXb+vMA0G CSqGSIb3DQEBCwUAA4IBAQAtjBdSEaqNsC3a/nyRiUQD6lbjCyQ9zwZI+oa5Rs9j DyMHcOWcFUR7Hk+tjslj4RMDYhF2sINLZmf0WihNGaYK2pCJDQvjcoeqVNIeUTk/ EqNL+AZTZgo+8UJzr23wh8jptdKLup30UXNfUTGbdjSVchrTbXl49olt4RD6aTdC n+DaVisjFuhTAGb0DOlS5KdY42sbez4qToAAoTBkzg5rn04M4cEH75nWZ4dubMEY 90NlPl/G5ltfkLthRKNoopcUZnMGJRONfuiz7sY2kJO/8JH7iZuRTun+g51n4DID UuHX2rZa9UzaKrml/s/SNz9ZMC+s0EI977U7uQsXqFut -----END CERTIFICATE-----Generated at Wed Jan 21 10:29:18 2026 by rpki-client