This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mL-Hi_e2WHu0ZxRdnGe-wrOjWXY.roa File: mL-Hi_e2WHu0ZxRdnGe-wrOjWXY.roa (raw, json) Hash identifier: FCuXXAeav5Hulq+ZykP+cyC2w/Z2d4qrZ1nwnrqISgo= Subject key identifier: 98:BF:87:8B:F7:B6:58:7B:B4:67:14:5D:9C:67:BE:C2:B3:A3:59:76 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BF9771D3D94C7AFCE569CA645511727D8 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mL-Hi_e2WHu0ZxRdnGe-wrOjWXY.roa Signing time: Mon 26 Jan 2026 08:41:31 +0000 ROA not before: Mon 26 Jan 2026 08:41:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 31.56.16.0/22 maxlen: 24 31.57.16.0/21 maxlen: 24 31.57.135.0/24 maxlen: 24 31.58.176.0/22 maxlen: 24 31.58.200.0/22 maxlen: 24 31.58.216.0/22 maxlen: 24 31.58.240.0/22 maxlen: 24 31.58.244.0/24 maxlen: 24 31.58.245.0/24 maxlen: 24 31.58.249.0/24 maxlen: 24 31.58.250.0/24 maxlen: 24 31.58.251.0/24 maxlen: 24 31.58.252.0/22 maxlen: 24 31.59.64.0/22 maxlen: 24 31.59.80.0/22 maxlen: 24 31.59.124.0/22 maxlen: 24 31.59.176.0/21 maxlen: 24 31.59.188.0/22 maxlen: 24 31.59.192.0/22 maxlen: 24 31.59.216.0/22 maxlen: 24 217.60.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:77:1d:3d:94:c7:af:ce:56:9c:a6:45:51:17:27:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 26 08:41:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98bf878bf7b6587bb467145d9c67bec2b3a35976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a5:30:46:55:24:89:bc:52:a2:84:6c:e5:95: ff:fe:5f:23:d2:54:cc:f4:ec:04:cc:91:db:3f:75: 6c:df:3c:fb:12:b9:ac:19:ea:20:5d:14:09:15:a0: d1:21:ac:8a:15:9a:32:56:ec:eb:56:a7:2d:49:e1: 69:49:f2:0d:20:b4:84:b2:2d:9b:55:e3:c3:77:84: 3f:3b:bf:4d:b0:9a:4d:d8:7b:76:49:61:d0:3c:57: 50:54:9e:79:32:e2:41:7c:6f:7e:e8:88:73:0d:f0: b7:c8:c8:71:e5:35:5b:02:40:91:cc:84:e6:62:29: 52:57:ef:6b:b1:b8:da:fc:7c:d4:ef:16:03:98:d6: 2a:16:81:df:59:f2:d2:2a:97:5c:f5:2e:04:db:fa: 13:ca:0c:66:94:65:73:65:97:22:2b:e7:b2:b5:87: a2:3a:cb:a1:f1:1e:5a:4d:bc:2f:63:6e:67:2e:00: df:b8:86:bd:ac:9b:46:f2:28:36:da:7a:cc:91:e0: 57:e8:7b:0f:8d:bf:3c:34:19:75:63:54:5e:2c:c4: 39:8a:37:f4:15:9a:20:19:f3:cc:00:fb:0c:f2:da: 65:af:18:d5:a8:47:d8:eb:63:a3:b2:0e:5f:83:f0: 05:7a:20:80:3c:87:7b:f6:3d:ab:4e:7e:a6:3b:8e: d4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BF:87:8B:F7:B6:58:7B:B4:67:14:5D:9C:67:BE:C2:B3:A3:59:76 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mL-Hi_e2WHu0ZxRdnGe-wrOjWXY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.16.0/22 31.57.16.0/21 31.57.135.0/24 31.58.176.0/22 31.58.200.0/22 31.58.216.0/22 31.58.240.0-31.58.245.255 31.58.249.0-31.58.255.255 31.59.64.0/22 31.59.80.0/22 31.59.124.0/22 31.59.176.0/21 31.59.188.0-31.59.195.255 31.59.216.0/22 217.60.187.0/24 Signature Algorithm: sha256WithRSAEncryption b9:78:8b:87:50:70:04:01:87:a2:0b:d4:ee:66:5d:6d:fa:e1: 80:18:e1:dd:dc:e5:0f:75:39:6b:2a:53:93:b8:60:23:d7:52: 7d:ff:bf:26:8f:f5:e4:51:bf:ec:33:6f:6f:65:62:22:35:5d: 83:ff:db:25:6f:04:49:37:93:ef:d6:23:cb:f1:6e:9c:b0:a4: 6d:ff:7f:49:1b:44:f6:3c:0d:75:17:c9:74:8e:a2:38:b6:63: 5a:74:6b:fd:c6:80:c3:88:15:2e:15:12:d2:1a:a7:a1:37:3b: c3:d9:49:75:6d:84:ee:7a:24:9c:23:03:2d:c7:90:90:cc:8d: 9e:84:9a:10:b7:61:6f:17:b1:46:4a:82:a4:4b:19:1f:39:44: 97:27:bc:fa:e3:26:3a:00:ba:29:bd:4d:a3:9a:c5:61:78:d9: 9f:6f:0e:20:07:fd:c0:0a:cf:ce:02:d7:e5:68:96:b6:83:39: 31:82:30:cb:34:01:a2:9c:4d:45:61:71:77:9a:de:90:e5:9a: 6e:c9:61:2a:3c:23:e9:eb:88:ea:e6:53:2d:cd:ea:f2:1a:93: ac:cc:f5:f0:e1:fb:9b:0a:5d:a6:b0:b6:a3:73:78:42:dd:b1: b4:11:ab:64:e5:45:b0:35:c2:33:51:95:3c:d9:ea:6d:89:77: d2:3e:ed:a0 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgISAZv5dx09lMevzlacpkVRFyfYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTI2MDg0MTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGJmODc4YmY3YjY1ODdiYjQ2NzE0NWQ5YzY3YmVjMmIzYTM1OTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6UwRlUkibxSooRs5ZX//l8j0lTM 9OwEzJHbP3Vs3zz7ErmsGeogXRQJFaDRIayKFZoyVuzrVqctSeFpSfINILSEsi2b VePDd4Q/O79NsJpN2Ht2SWHQPFdQVJ55MuJBfG9+6IhzDfC3yMhx5TVbAkCRzITm YilSV+9rsbja/HzU7xYDmNYqFoHfWfLSKpdc9S4E2/oTygxmlGVzZZciK+eytYei Osuh8R5aTbwvY25nLgDfuIa9rJtG8ig22nrMkeBX6HsPjb88NBl1Y1ReLMQ5ijf0 FZogGfPMAPsM8tplrxjVqEfY62Ojsg5fg/AFeiCAPId79j2rTn6mO47UkQIDAQAB o4ICdTCCAnEwHQYDVR0OBBYEFJi/h4v3tlh7tGcUXZxnvsKzo1l2MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbUwtSGlfZTJXSHUwWnhSZG5HZS13ck9qV1hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGKBggrBgEFBQcBBwEB/wR7MHkwdwQCAAEwcQMEAh84EAME Ax85EAMEAB85hwMEAh86sAMEAh86yAMEAh862DAMAwQEHzrwAwQBHzr0MAsDBAAf OvkDAwAfOgMEAh87QAMEAh87UAMEAh87fAMEAx87sDAMAwQCHzu8AwQCHzvAAwQC HzvYAwQA2Ty7MA0GCSqGSIb3DQEBCwUAA4IBAQC5eIuHUHAEAYeiC9TuZl1t+uGA GOHd3OUPdTlrKlOTuGAj11J9/78mj/XkUb/sM29vZWIiNV2D/9slbwRJN5Pv1iPL 8W6csKRt/39JG0T2PA11F8l0jqI4tmNadGv9xoDDiBUuFRLSGqehNzvD2Ul1bYTu eiScIwMtx5CQzI2ehJoQt2FvF7FGSoKkSxkfOUSXJ7z64yY6ALopvU2jmsVheNmf bw4gB/3ACs/OAtflaJa2gzkxgjDLNAGinE1FYXF3mt6Q5ZpuyWEqPCPp64jq5lMt zeryGpOszPXw4fubCl2msLajc3hC3bG0Eatk5UWwNcIzUZU82eptiXfSPu2g -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:50 2026 by rpki-client