This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mLmbwhL6ga6ZCIcv0MLKGix6Faw.roa File: mLmbwhL6ga6ZCIcv0MLKGix6Faw.roa (raw, json) Hash identifier: GeEZjDzFcPqcDyTVJiLZxL3+u3huPrIcYJkrTNIPYtw= Subject key identifier: 98:B9:9B:C2:12:FA:81:AE:99:08:87:2F:D0:C2:CA:1A:2C:7A:15:AC Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B99BE79541FA97A94D9C1640453C84AC4 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mLmbwhL6ga6ZCIcv0MLKGix6Faw.roa Signing time: Wed 07 Jan 2026 18:35:55 +0000 ROA not before: Wed 07 Jan 2026 18:35:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6698 IP address blocks: 31.59.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:be:79:54:1f:a9:7a:94:d9:c1:64:04:53:c8:4a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 7 18:35:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98b99bc212fa81ae9908872fd0c2ca1a2c7a15ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b4:5e:1c:56:8a:78:52:09:4e:37:ac:e5:52: 0a:a5:0a:cf:5e:39:83:c1:25:77:3d:1d:22:4f:6b: d1:7f:c8:ea:d9:4e:8c:1f:0e:8c:ef:d6:f6:66:d9: c3:6a:ca:80:b6:cf:6f:f1:e4:59:8d:e2:d8:f2:a4: f9:bf:f6:74:4e:34:6d:25:15:c4:d2:5c:16:7b:72: b0:8a:bf:0f:cc:19:c6:d1:60:e6:b1:05:27:11:a8: 56:de:03:de:b6:1e:2a:00:f5:39:81:0a:f8:6e:63: 12:e3:5c:48:de:98:9e:c7:96:fd:fe:64:be:2f:9d: ee:85:c1:d2:2f:9e:64:26:91:35:e3:48:27:45:2b: 7e:b4:58:a4:b4:4d:1d:bd:6d:31:81:c6:70:f2:54: 15:61:07:40:e9:5c:c9:73:7b:56:ed:fc:f2:60:42: 0d:38:19:f7:98:f3:74:da:52:ff:b7:4d:e5:e9:51: d0:07:5a:a0:59:3e:27:17:0e:4b:17:18:6c:8a:cb: 6b:59:01:c8:bf:71:d9:c4:79:c2:a1:88:e5:4f:21: 20:6d:ee:b1:a8:4a:d3:51:52:ab:e7:7b:ee:ef:90: d5:dc:f4:10:ed:84:65:c7:30:05:9c:b2:c6:6d:d0: 89:40:92:5d:f4:02:45:ae:e7:2b:1f:e3:15:bb:64: 4e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B9:9B:C2:12:FA:81:AE:99:08:87:2F:D0:C2:CA:1A:2C:7A:15:AC X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mLmbwhL6ga6ZCIcv0MLKGix6Faw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.128.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:e3:d5:3e:4d:31:34:b3:0a:1e:25:c8:ad:23:ef:b1:37:71: 76:82:c9:2e:f9:37:9e:48:f8:2d:d3:5f:e3:5c:80:6b:69:8e: 03:72:a6:d4:e2:09:13:70:c2:38:8f:ac:f2:83:a2:db:c4:77: 62:67:3e:c0:b7:5c:df:8a:6d:f6:5b:a4:9c:6a:c5:ec:6d:cd: 5b:cf:05:89:81:37:40:08:f4:37:2c:80:be:e0:9b:2d:86:be: 26:19:e7:b2:ea:02:fd:f3:d5:5b:9b:0b:dd:90:82:0e:0d:f1: 00:39:82:28:26:25:a2:74:14:85:f2:1c:06:7b:c5:21:e7:5b: 11:51:91:69:82:89:30:12:44:5a:7f:24:75:b4:f9:8d:cf:2c: 53:35:94:77:62:d6:8c:64:98:e5:d8:c7:d5:96:d4:d4:ce:a7: c8:64:c8:57:50:86:97:2d:41:6f:2c:85:83:22:e9:7d:3a:5c: 27:9f:f9:d4:e8:9a:88:ff:15:f3:b2:84:89:46:77:30:7e:9c: 5f:05:09:d9:d9:b0:13:be:81:08:c8:47:4a:5e:af:17:fd:be: 56:8e:45:06:ae:63:3f:ef:2e:ba:44:93:e9:44:65:4c:19:9d: d4:f9:47:78:11:fb:1e:15:05:15:8c:1e:94:73:78:43:d4:60: 90:52:3a:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuZvnlUH6l6lNnBZARTyErEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTA3MTgzNTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGI5OWJjMjEyZmE4MWFlOTkwODg3MmZkMGMyY2ExYTJjN2ExNWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLReHFaKeFIJTjes5VIKpQrPXjmD wSV3PR0iT2vRf8jq2U6MHw6M79b2ZtnDasqAts9v8eRZjeLY8qT5v/Z0TjRtJRXE 0lwWe3Kwir8PzBnG0WDmsQUnEahW3gPeth4qAPU5gQr4bmMS41xI3piex5b9/mS+ L53uhcHSL55kJpE140gnRSt+tFiktE0dvW0xgcZw8lQVYQdA6VzJc3tW7fzyYEIN OBn3mPN02lL/t03l6VHQB1qgWT4nFw5LFxhsistrWQHIv3HZxHnCoYjlTyEgbe6x qErTUVKr53vu75DV3PQQ7YRlxzAFnLLGbdCJQJJd9AJFrucrH+MVu2ROkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJi5m8IS+oGumQiHL9DCyhosehWsMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbUxtYndoTDZnYTZaQ0ljdjBNTEtHaXg2RmF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzuAMA0G CSqGSIb3DQEBCwUAA4IBAQBL49U+TTE0swoeJcitI++xN3F2gsku+TeeSPgt01/j XIBraY4DcqbU4gkTcMI4j6zyg6LbxHdiZz7At1zfim32W6ScasXsbc1bzwWJgTdA CPQ3LIC+4Jsthr4mGeey6gL989VbmwvdkIIODfEAOYIoJiWidBSF8hwGe8Uh51sR UZFpgokwEkRafyR1tPmNzyxTNZR3YtaMZJjl2MfVltTUzqfIZMhXUIaXLUFvLIWD Iul9Olwnn/nU6JqI/xXzsoSJRncwfpxfBQnZ2bATvoEIyEdKXq8X/b5WjkUGrmM/ 7y66RJPpRGVMGZ3U+Ud4EfseFQUVjB6Uc3hD1GCQUjpE -----END CERTIFICATE-----Generated at Sat Jan 10 09:44:22 2026 by rpki-client