This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/MLVo7cBDBtenPaIUTzU79UJNNUo.roa File: MLVo7cBDBtenPaIUTzU79UJNNUo.roa (raw, json) Hash identifier: dVzwv/9GmT2p2asrhkqBWxh548HEIc/6ricrnN10ohU= Subject key identifier: 30:B5:68:ED:C0:43:06:D7:A7:3D:A2:14:4F:35:3B:F5:42:4D:35:4A Certificate issuer: /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486 Certificate serial: 019B7C80A2C55DD57424747BBF5B62517226 Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/MLVo7cBDBtenPaIUTzU79UJNNUo.roa Signing time: Fri 02 Jan 2026 02:19:23 +0000 ROA not before: Fri 02 Jan 2026 02:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201622 IP address blocks: 188.126.96.0/19 maxlen: 19 188.126.96.0/20 maxlen: 20 188.126.112.0/21 maxlen: 21 188.126.120.0/21 maxlen: 21 188.126.120.0/22 maxlen: 22 188.126.124.0/22 maxlen: 22 2a09:f400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a2:c5:5d:d5:74:24:74:7b:bf:5b:62:51:72:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486 Validity Not Before: Jan 2 02:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30b568edc04306d7a73da2144f353bf5424d354a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0b:24:82:cb:3a:64:26:5f:84:3d:3a:99:ab: 70:5b:cd:d0:98:a9:04:57:f6:2d:80:b0:91:67:b6: 14:14:bc:c4:3b:31:28:2d:d5:38:e3:ce:e5:b1:d8: d3:a3:c4:5d:de:87:8a:ca:a9:9b:a5:b9:46:b6:f1: b4:d2:74:d1:1e:6b:9d:5b:10:a2:8c:7e:57:c0:06: 3c:b3:3f:9c:88:8e:fc:8e:08:62:0c:8f:53:7f:ea: a2:0b:b0:aa:ad:1e:3c:85:35:41:30:f1:7f:00:05: 89:bc:7a:8a:00:84:aa:35:91:e2:70:88:3c:00:c6: 94:ca:b2:bd:73:b0:5d:d5:54:a2:e5:1c:3a:26:c1: 78:6d:92:7b:7f:ea:01:de:c1:8a:93:b2:4d:84:18: d0:22:1a:b6:49:0d:9f:ca:a6:cd:8d:cf:14:27:b9: ef:11:44:25:80:df:73:48:12:41:66:cb:f0:c5:45: 74:09:5b:33:ee:6d:b5:6b:25:4f:56:e0:96:11:17: 54:ee:f4:8f:f1:97:28:9c:1a:9d:22:ea:59:1a:2b: 06:f3:d2:38:8a:58:a9:1a:74:d9:c1:2e:73:c9:c8: b9:4c:58:86:b4:c0:90:dc:e8:8a:53:5f:ed:65:45: c2:5f:2c:87:57:03:2c:d2:5f:16:32:80:25:b0:3b: 49:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B5:68:ED:C0:43:06:D7:A7:3D:A2:14:4F:35:3B:F5:42:4D:35:4A X509v3 Authority Key Identifier: keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/MLVo7cBDBtenPaIUTzU79UJNNUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.126.96.0/19 IPv6: 2a09:f400::/29 Signature Algorithm: sha256WithRSAEncryption 67:a3:3e:d4:19:96:89:a8:c0:77:bd:33:0d:71:ae:fd:4d:28: aa:df:6b:4b:0e:3f:17:92:ba:aa:f8:21:10:0a:c8:c6:dc:b8: da:f7:c7:93:f5:9d:31:22:fe:9d:79:38:08:69:81:ec:55:45: 5d:70:cb:8f:b0:ab:8b:23:b5:3a:f2:21:05:86:54:99:4c:6d: 95:be:c5:c0:35:15:13:cd:b7:75:09:1b:5e:0f:7e:a0:87:f5: 27:41:a4:1d:19:3d:20:20:68:b7:8a:15:07:df:8a:39:72:73: 0d:bc:6e:95:97:ec:20:2c:3e:b6:7c:16:6e:15:ac:24:e4:13: a0:56:9c:9c:0b:d1:b2:ce:66:5b:3e:d2:ac:db:cb:9c:d9:65: 2f:3d:0a:3b:67:62:a2:cc:57:ee:fa:93:b2:35:65:5b:dd:3a: b9:d2:2c:ff:91:87:54:39:d0:3e:69:74:9b:6d:ce:5b:6e:f1: 97:bc:21:dd:e6:41:4b:2a:1d:ac:16:67:cd:79:41:2f:bc:3d: 9e:d4:ec:60:6e:ba:f9:70:45:05:46:cb:cb:b1:50:3f:ea:0d: 9f:d7:6d:f1:df:83:c9:49:08:57:40:82:4a:ee:59:1d:53:de: 7e:cb:41:1c:51:d3:4d:77:31:32:a3:cf:be:97:22:da:8f:0a: c5:4a:a9:9d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gKLFXdV0JHR7v1tiUXImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyM2FiNWJhOThiZWY1ZDBkOWJkMGNlYTAzMWExZmUxMzc3 N2E0ODYwHhcNMjYwMTAyMDIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGI1NjhlZGMwNDMwNmQ3YTczZGEyMTQ0ZjM1M2JmNTQyNGQzNTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQskgss6ZCZfhD06matwW83QmKkE V/YtgLCRZ7YUFLzEOzEoLdU4487lsdjTo8Rd3oeKyqmbpblGtvG00nTRHmudWxCi jH5XwAY8sz+ciI78jghiDI9Tf+qiC7CqrR48hTVBMPF/AAWJvHqKAISqNZHicIg8 AMaUyrK9c7Bd1VSi5Rw6JsF4bZJ7f+oB3sGKk7JNhBjQIhq2SQ2fyqbNjc8UJ7nv EUQlgN9zSBJBZsvwxUV0CVsz7m21ayVPVuCWERdU7vSP8ZconBqdIupZGisG89I4 ilipGnTZwS5zyci5TFiGtMCQ3OiKU1/tZUXCXyyHVwMs0l8WMoAlsDtJBwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDC1aO3AQwbXpz2iFE81O/VCTTVKMB8GA1UdIwQY MBaAFDI6tbqYvvXQ2b0M6gMaH+E3d6SGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWpxMXVwaS05ZERadlF6cUF4b2Y0VGQzcElZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iMDEyOTAtZDc2ZC00MmQ4LWEyMzQt Zjk1MTI0OTllMDVjLzEvTUxWbzdjQkRCdGVuUGFJVVR6VTc5VUpOTlVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9iMDEyOTAtZDc2ZC00MmQ4LWEyMzQtZjk1MTI0OTllMDVj LzEvTWpxMXVwaS05ZERadlF6cUF4b2Y0VGQzcElZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFvH5gMA0E AgACMAcDBQMqCfQAMA0GCSqGSIb3DQEBCwUAA4IBAQBnoz7UGZaJqMB3vTMNca79 TSiq32tLDj8Xkrqq+CEQCsjG3Lja98eT9Z0xIv6deTgIaYHsVUVdcMuPsKuLI7U6 8iEFhlSZTG2VvsXANRUTzbd1CRteD36gh/UnQaQdGT0gIGi3ihUH34o5cnMNvG6V l+wgLD62fBZuFawk5BOgVpycC9GyzmZbPtKs28uc2WUvPQo7Z2KizFfu+pOyNWVb 3Tq50iz/kYdUOdA+aXSbbc5bbvGXvCHd5kFLKh2sFmfNeUEvvD2e1Oxgbrr5cEUF RsvLsVA/6g2f123x34PJSQhXQIJK7lkdU95+y0EcUdNNdzEyo8++lyLajwrFSqmd -----END CERTIFICATE-----Generated at Tue Feb 10 06:07:38 2026 by rpki-client