This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/mlDwEPyFKIVAkbAb7NWKRtLzJrA.roa File: mlDwEPyFKIVAkbAb7NWKRtLzJrA.roa (raw, json) Hash identifier: kAMY1A1Garh3aSqYwq/mDKnuYkTTYygzhIcHylPq2Ik= Subject key identifier: 9A:50:F0:10:FC:85:28:85:40:91:B0:1B:EC:D5:8A:46:D2:F3:26:B0 Certificate issuer: /CN=15d691c95d14b8bcde6692a0320cc0e28756b059 Certificate serial: 019B7CECF981AE608C19B716F43D1D6C06E1 Authority key identifier: 15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/mlDwEPyFKIVAkbAb7NWKRtLzJrA.roa Signing time: Fri 02 Jan 2026 04:17:43 +0000 ROA not before: Fri 02 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214507 IP address blocks: 185.227.77.0/24 maxlen: 24 2a13:a1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f9:81:ae:60:8c:19:b7:16:f4:3d:1d:6c:06:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15d691c95d14b8bcde6692a0320cc0e28756b059 Validity Not Before: Jan 2 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a50f010fc8528854091b01becd58a46d2f326b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:d3:c8:e5:d2:20:f2:ee:bd:cb:8a:7e:9c: ed:2a:89:88:50:36:6d:04:3a:f2:d7:de:55:fe:5f: 99:ae:d4:ca:eb:04:bb:5b:0d:09:77:a9:4f:8d:c6: fc:0c:f7:08:c1:b2:8b:4f:bc:78:29:29:5b:2f:71: 64:ba:8e:74:ad:ce:f4:5f:cd:a1:1a:fa:96:55:c1: ea:5b:49:a4:19:dc:bc:2c:bb:65:da:21:ec:b9:ce: 7b:7c:f3:03:54:c7:89:48:92:11:be:50:a1:4c:6d: 33:f0:f2:fb:cd:c4:0f:36:57:ac:19:5d:99:e3:2a: 6a:33:5b:87:64:bd:1c:16:8c:73:b2:fb:55:ff:9c: 0b:64:69:86:5b:7a:fb:2d:26:6a:c3:69:ca:de:b2: 2f:f3:fe:4c:88:3a:f6:63:aa:25:74:46:c5:23:f7: 51:ed:82:13:e6:40:32:2d:e6:ad:55:fb:27:cc:96: 03:ba:2b:8c:50:fe:fd:bf:cd:57:b9:cf:a5:11:d5: 0f:59:7b:e9:45:08:1d:dc:b1:4a:b8:ff:43:9e:0d: 5d:ea:a9:7d:de:7f:c7:61:57:8c:7d:32:5f:39:c4: 0a:75:52:66:98:02:7b:9a:15:b5:72:da:44:4b:15: a0:d0:49:9e:45:19:27:5c:9a:b3:c2:3b:f2:83:a8: cd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:50:F0:10:FC:85:28:85:40:91:B0:1B:EC:D5:8A:46:D2:F3:26:B0 X509v3 Authority Key Identifier: keyid:15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/mlDwEPyFKIVAkbAb7NWKRtLzJrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.227.77.0/24 IPv6: 2a13:a1c0::/32 Signature Algorithm: sha256WithRSAEncryption b8:bc:aa:38:50:8f:61:32:b3:2d:99:1d:6f:96:05:3d:bd:70: b4:bb:10:b9:e2:be:75:89:7c:58:e1:25:ac:2f:d3:10:7c:e2: 65:bb:28:05:03:db:de:5a:d5:70:2e:cc:2e:dd:97:f5:97:e5: 93:91:6d:b2:37:81:28:91:17:75:5a:3a:90:5d:5f:23:5c:fb: 5b:5b:9e:0b:0c:df:56:87:51:3a:f2:e2:d0:2a:0d:35:fb:2c: 9b:bc:01:cd:3c:f0:a7:12:9a:53:f4:99:85:b7:70:14:c1:15: 2a:39:89:b0:1c:b1:65:06:0b:cd:86:bb:03:fa:a4:cd:d8:b1: a3:9c:4a:d1:37:b0:d0:69:6d:99:31:97:df:5b:3d:ff:f3:80: f3:3b:40:c1:96:0f:a2:0c:56:9d:80:6b:29:95:c9:f9:d1:eb: 7d:d0:4c:44:5d:ac:ed:41:72:f4:e6:fd:dd:df:b0:4e:4c:07: 2f:cc:92:a9:9a:3a:38:d0:85:60:23:e7:ea:78:41:69:67:0f: af:8a:31:3c:e5:15:7f:4c:11:d5:78:d6:6f:68:18:89:1e:83: a8:88:4a:cb:0c:0d:9a:ab:b9:81:1b:6b:78:79:76:fa:85:85: eb:ee:e3:b1:73:79:e3:11:90:63:5d:68:a2:7d:9d:a3:77:d5: a8:61:30:09 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87PmBrmCMGbcW9D0dbAbhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZDY5MWM5NWQxNGI4YmNkZTY2OTJhMDMyMGNjMGUyODc1 NmIwNTkwHhcNMjYwMTAyMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTUwZjAxMGZjODUyODg1NDA5MWIwMWJlY2Q1OGE0NmQyZjMyNmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOXTyOXSIPLuvcuKfpztKomIUDZt BDry195V/l+ZrtTK6wS7Ww0Jd6lPjcb8DPcIwbKLT7x4KSlbL3Fkuo50rc70X82h GvqWVcHqW0mkGdy8LLtl2iHsuc57fPMDVMeJSJIRvlChTG0z8PL7zcQPNlesGV2Z 4ypqM1uHZL0cFoxzsvtV/5wLZGmGW3r7LSZqw2nK3rIv8/5MiDr2Y6oldEbFI/dR 7YIT5kAyLeatVfsnzJYDuiuMUP79v81Xuc+lEdUPWXvpRQgd3LFKuP9Dng1d6ql9 3n/HYVeMfTJfOcQKdVJmmAJ7mhW1ctpESxWg0EmeRRknXJqzwjvyg6jNbQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJpQ8BD8hSiFQJGwG+zVikbS8yawMB8GA1UdIwQY MBaAFBXWkcldFLi83maSoDIMwOKHVrBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmRhUnlWMFV1THplWnBLZ01nekE0b2RXc0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81ZDZlMjktOTQyZi00Y2FmLTk4YTgt ZmQ1ZDU1YjYxZWM0LzEvbWxEd0VQeUZLSVZBa2JBYjdOV0tSdEx6SnJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81ZDZlMjktOTQyZi00Y2FmLTk4YTgtZmQ1ZDU1YjYxZWM0 LzEvRmRhUnlWMFV1THplWnBLZ01nekE0b2RXc0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAueNNMA0E AgACMAcDBQAqE6HAMA0GCSqGSIb3DQEBCwUAA4IBAQC4vKo4UI9hMrMtmR1vlgU9 vXC0uxC54r51iXxY4SWsL9MQfOJluygFA9veWtVwLswu3Zf1l+WTkW2yN4EokRd1 WjqQXV8jXPtbW54LDN9Wh1E68uLQKg01+yybvAHNPPCnEppT9JmFt3AUwRUqOYmw HLFlBgvNhrsD+qTN2LGjnErRN7DQaW2ZMZffWz3/84DzO0DBlg+iDFadgGsplcn5 0et90ExEXaztQXL05v3d37BOTAcvzJKpmjo40IVgI+fqeEFpZw+vijE85RV/TBHV eNZvaBiJHoOoiErLDA2aq7mBG2t4eXb6hYXr7uOxc3njEZBjXWiifZ2jd9WoYTAJ -----END CERTIFICATE-----Generated at Mon Feb 2 08:04:06 2026 by rpki-client