This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/mlNWM6dCU5UIxS4aP3BuiFtRgxY.roa File: mlNWM6dCU5UIxS4aP3BuiFtRgxY.roa (raw, json) Hash identifier: TLA7VcAnegDakU8vEm/ShMfxKp3pK7fJGLX8w4pyHi8= Subject key identifier: 9A:53:56:33:A7:42:53:95:08:C5:2E:1A:3F:70:6E:88:5B:51:83:16 Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d Certificate serial: 019B797F005479ABCB26C3CD9510C578621E Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/mlNWM6dCU5UIxS4aP3BuiFtRgxY.roa Signing time: Thu 01 Jan 2026 12:18:44 +0000 ROA not before: Thu 01 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 141.93.12.0/23 maxlen: 24 141.93.16.0/21 maxlen: 24 141.93.24.0/24 maxlen: 24 141.93.28.0/23 maxlen: 24 141.93.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 12:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:00:54:79:ab:cb:26:c3:cd:95:10:c5:78:62:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a535633a742539508c52e1a3f706e885b518316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:60:4f:33:7e:23:ed:6c:ad:f2:80:f3:72:a7: 18:d4:d6:e9:6b:1e:7e:21:0c:db:88:46:16:7a:c9: 8c:c7:44:01:28:8d:55:c7:96:d9:d2:bc:c7:22:cb: 89:de:03:e0:7f:5e:48:b4:4f:c4:3d:fb:47:e6:39: 58:3d:79:cd:69:d2:15:59:2c:55:ca:65:9e:b9:c3: 6d:c1:35:11:df:b2:f0:9f:71:01:5b:b3:09:1a:f2: 8f:ca:be:39:df:f2:43:db:41:3d:3f:50:35:f4:45: 1e:20:22:2b:82:64:0d:ee:51:a1:ff:57:1f:53:d4: 93:31:1f:1e:42:67:fa:94:63:35:6c:8f:46:50:80: f3:62:ee:27:50:4b:ab:00:ed:b3:9c:07:0a:a7:75: 2d:3b:eb:80:c4:0c:92:e1:9e:43:57:9e:a9:94:ea: a0:bb:ed:5a:60:2a:ce:e8:e6:7b:ed:e5:d6:ac:a3: 29:57:65:4f:ea:ca:19:6e:56:d8:bf:f3:fa:29:07: 18:1f:ec:1e:9c:af:e3:98:74:32:ac:ec:b9:ae:f9: f0:23:e3:25:86:66:76:2c:59:5e:45:6a:88:da:ab: e6:c4:f0:c9:b5:fa:6b:da:15:df:00:c6:49:86:6d: db:2d:81:b6:73:fa:51:d3:91:e8:5e:a2:c3:4b:27: e6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:53:56:33:A7:42:53:95:08:C5:2E:1A:3F:70:6E:88:5B:51:83:16 X509v3 Authority Key Identifier: keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/mlNWM6dCU5UIxS4aP3BuiFtRgxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.93.12.0/23 141.93.16.0-141.93.24.255 141.93.28.0/23 141.93.32.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:10:ff:c7:04:85:30:3b:ba:e5:f7:0a:66:57:27:76:a7:6e: 9f:9b:12:ea:d6:bf:4c:41:38:c3:83:43:7f:cd:ef:f1:3e:e3: 62:9e:3f:5a:f8:78:e0:74:37:c8:8f:ea:68:7e:6b:54:92:97: 7a:be:dc:f9:e1:39:12:56:c5:e8:a7:7f:aa:7c:ff:a8:57:1d: 25:32:e4:65:b3:52:6c:68:d1:4f:38:ac:b2:99:e2:11:ec:30: 54:56:4b:1c:e7:34:44:44:32:e9:2e:0d:02:f4:16:1f:9b:d5: 06:57:74:af:32:5d:60:a3:f4:09:24:e3:c6:df:cf:5b:79:5d: ab:80:bd:1d:e5:ae:a8:27:6f:72:a4:53:d0:3a:83:1c:43:4b: cc:99:4f:44:0d:99:56:d6:c5:23:55:d6:72:be:99:4b:87:c6: 6f:2e:6f:40:e2:52:d2:7c:ae:02:e6:7b:7b:c5:17:66:84:95: c8:ec:58:bc:18:55:50:45:50:70:67:c4:3f:e4:e3:9f:be:ea: cd:ab:c1:4e:65:97:92:3c:c2:6e:23:77:21:56:88:ac:47:81: 8d:51:6e:71:53:cd:45:f7:4d:d5:ed:6e:d4:54:e9:b8:a4:13: 45:91:2f:b1:1f:ca:67:30:52:dd:af:53:54:2f:ca:e3:ff:41: d0:5d:12:7d -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt5fwBUeavLJsPNlRDFeGIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMTE3YWRhM2NiOTUxNWE2ZDhhNmRjYzE1ZjJiMGIxYTdk OWJlMWQwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTUzNTYzM2E3NDI1Mzk1MDhjNTJlMWEzZjcwNmU4ODViNTE4MzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mBPM34j7Wyt8oDzcqcY1Nbpax5+ IQzbiEYWesmMx0QBKI1Vx5bZ0rzHIsuJ3gPgf15ItE/EPftH5jlYPXnNadIVWSxV ymWeucNtwTUR37Lwn3EBW7MJGvKPyr453/JD20E9P1A19EUeICIrgmQN7lGh/1cf U9STMR8eQmf6lGM1bI9GUIDzYu4nUEurAO2znAcKp3UtO+uAxAyS4Z5DV56plOqg u+1aYCrO6OZ77eXWrKMpV2VP6soZblbYv/P6KQcYH+wenK/jmHQyrOy5rvnwI+Ml hmZ2LFleRWqI2qvmxPDJtfpr2hXfAMZJhm3bLYG2c/pR05HoXqLDSyfmhQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFJpTVjOnQlOVCMUuGj9wbohbUYMWMB8GA1UdIwQY MBaAFC8Reto8uVFabYptzBXysLGn2b4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDct N2EwMzRkMTcwYjg1LzEvbWxOV002ZENVNVVJeFM0YVAzQnVpRnRSZ3hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDctN2EwMzRkMTcwYjg1 LzEvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBjV0MMAwD BASNXRADBACNXRgDBAGNXRwDBAKNXSAwDQYJKoZIhvcNAQELBQADggEBACoQ/8cE hTA7uuX3CmZXJ3anbp+bEurWv0xBOMODQ3/N7/E+42KeP1r4eOB0N8iP6mh+a1SS l3q+3PnhORJWxeinf6p8/6hXHSUy5GWzUmxo0U84rLKZ4hHsMFRWSxznNEREMuku DQL0Fh+b1QZXdK8yXWCj9Akk48bfz1t5XauAvR3lrqgnb3KkU9A6gxxDS8yZT0QN mVbWxSNV1nK+mUuHxm8ub0DiUtJ8rgLme3vFF2aElcjsWLwYVVBFUHBnxD/k45++ 6s2rwU5ll5I8wm4jdyFWiKxHgY1RbnFTzUX3TdXtbtRU6bikE0WRL7EfymcwUt2v U1QvyuP/QdBdEn0= -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:54 2026 by rpki-client