This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa File: ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa (raw, json) Hash identifier: hnjHFSEUgTDrMvjlYwRL85H6sKIUA3yDjfvutZSmzgw= Subject key identifier: 30:BF:FB:35:2D:2E:62:49:A9:E8:65:D7:6A:66:77:35:23:EC:58:EA Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019B7BA3C36088F352941DF0A8AE4F31CC66 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa Signing time: Thu 01 Jan 2026 22:18:08 +0000 ROA not before: Thu 01 Jan 2026 22:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 109.107.181.0/24 maxlen: 24 109.107.189.0/24 maxlen: 24 109.107.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c3:60:88:f3:52:94:1d:f0:a8:ae:4f:31:cc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Jan 1 22:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30bffb352d2e6249a9e865d76a66773523ec58ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:23:26:93:9d:be:e9:3b:e6:bd:84:8f:89: 78:09:8b:33:35:15:59:c5:a8:3f:14:c2:4f:67:a8: 2b:d1:de:e0:5f:0c:7b:10:41:5b:c7:51:a9:29:9e: c3:ac:a3:83:ae:b5:eb:ff:90:8e:b2:03:37:8e:ec: 7d:c0:df:fd:7e:11:0b:74:d3:be:36:6c:c2:35:ad: 1a:29:86:03:72:ca:66:98:76:92:b8:a6:50:c6:71: 56:df:03:2d:e2:30:17:90:1d:7d:ec:2e:9e:30:e1: 45:8a:41:46:08:3d:1b:89:75:04:a5:fe:a1:ea:36: 21:d7:57:0b:dd:d6:38:09:fe:04:4f:8d:6d:6e:67: 5a:b1:ee:be:78:a0:3d:f0:ce:c3:f3:40:43:0e:6d: 91:fe:98:64:aa:29:78:33:32:c3:3e:44:ee:1f:d0: 60:eb:fd:e8:9a:08:1a:d9:6c:02:ca:07:d2:65:ef: ad:82:cd:26:34:d8:e4:9f:06:2e:66:6f:11:d9:e9: ff:11:ca:ad:da:8c:6d:e4:01:9a:da:41:1c:b5:37: d0:0a:53:f5:2d:08:9a:ff:b2:dd:fb:65:7c:f1:37: a9:8c:bc:dd:81:93:a2:aa:6e:c0:b7:6d:09:9b:c0: bf:e2:52:d8:52:0d:51:e4:ba:01:f2:3c:6e:5c:4c: cb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BF:FB:35:2D:2E:62:49:A9:E8:65:D7:6A:66:77:35:23:EC:58:EA X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.181.0/24 109.107.189.0-109.107.190.255 Signature Algorithm: sha256WithRSAEncryption b2:2d:d7:41:e9:9f:15:ac:70:c5:98:8c:3c:b2:22:82:ad:e8: 6c:61:f5:74:48:6b:f9:90:38:34:59:34:98:a4:d2:49:63:ee: 33:00:42:fb:ba:f1:56:5f:62:37:b5:6b:8b:b4:ab:9f:e6:b2: 13:90:51:82:76:db:ee:33:92:7e:62:b0:ed:03:a0:e6:ca:d6: 2d:4f:88:21:ea:6e:d6:e6:86:68:77:59:db:62:b4:e3:03:8f: e6:e2:44:c3:17:62:8f:13:d5:10:97:0a:7d:b8:c5:96:1f:7a: 10:b3:ed:10:d6:e3:6b:72:c5:30:5e:e2:12:06:08:29:fe:3b: 4b:ca:5a:4f:d3:2d:ba:a3:2c:cb:c2:32:38:78:b7:bb:16:b5: 08:c2:2c:22:37:30:0c:f1:6a:9d:b8:38:ea:90:e3:9d:10:d9: 00:c4:ff:7d:c5:4b:28:1d:2b:a1:78:2d:84:7e:8c:e4:05:68: 1c:1d:d9:07:e7:5b:0a:95:46:2e:6a:7d:4d:64:87:13:2e:76: 96:0a:8c:dc:51:aa:55:9b:16:29:bf:fe:25:c8:13:5c:12:e0: b7:b3:e6:d4:44:81:06:92:c2:12:b9:12:8b:51:08:8d:07:4e: cc:26:9a:f9:40:c6:ae:98:d4:5a:f4:6a:ff:80:35:bb:dd:5d: 26:92:3a:c1 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7o8NgiPNSlB3wqK5PMcxmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwMTAxMjIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGJmZmIzNTJkMmU2MjQ5YTllODY1ZDc2YTY2NzczNTIzZWM1OGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfkjJpOdvuk75r2Ej4l4CYszNRVZ xag/FMJPZ6gr0d7gXwx7EEFbx1GpKZ7DrKODrrXr/5COsgM3jux9wN/9fhELdNO+ NmzCNa0aKYYDcspmmHaSuKZQxnFW3wMt4jAXkB197C6eMOFFikFGCD0biXUEpf6h 6jYh11cL3dY4Cf4ET41tbmdase6+eKA98M7D80BDDm2R/phkqil4MzLDPkTuH9Bg 6/3omgga2WwCygfSZe+tgs0mNNjknwYuZm8R2en/Ecqt2oxt5AGa2kEctTfQClP1 LQia/7Ld+2V88TepjLzdgZOiqm7At20Jm8C/4lLYUg1R5LoB8jxuXEzLOwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFDC/+zUtLmJJqehl12pmdzUj7FjqMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvTUxfN05TMHVZa21wNkdYWGFtWjNOU1BzV09vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAbWu1MAwD BABta70DBABta74wDQYJKoZIhvcNAQELBQADggEBALIt10HpnxWscMWYjDyyIoKt 6Gxh9XRIa/mQODRZNJik0klj7jMAQvu68VZfYje1a4u0q5/mshOQUYJ22+4zkn5i sO0DoObK1i1PiCHqbtbmhmh3WdtitOMDj+biRMMXYo8T1RCXCn24xZYfehCz7RDW 42tyxTBe4hIGCCn+O0vKWk/TLbqjLMvCMjh4t7sWtQjCLCI3MAzxap24OOqQ450Q 2QDE/33FSygdK6F4LYR+jOQFaBwd2QfnWwqVRi5qfU1khxMudpYKjNxRqlWbFim/ /iXIE1wS4Lez5tREgQaSwhK5EotRCI0HTswmmvlAxq6Y1Fr0av+ANbvdXSaSOsE= -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:43 2026 by rpki-client