This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/RML1TmbAZYHpyU26wWj03FjR3yY.roa File: RML1TmbAZYHpyU26wWj03FjR3yY.roa (raw, json) Hash identifier: PPBAB3g4x0UYNx5LUtlXQ+fhrj8l5E6PaVsjyetSSNY= Subject key identifier: 44:C2:F5:4E:66:C0:65:81:E9:C9:4D:BA:C1:68:F4:DC:58:D1:DF:26 Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f Certificate serial: 019B7DCAD79B310A63DFD15E05D0AFF2016B Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/RML1TmbAZYHpyU26wWj03FjR3yY.roa Signing time: Fri 02 Jan 2026 08:20:04 +0000 ROA not before: Fri 02 Jan 2026 08:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 109.175.218.0/24 maxlen: 24 109.175.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d7:9b:31:0a:63:df:d1:5e:05:d0:af:f2:01:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f Validity Not Before: Jan 2 08:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44c2f54e66c06581e9c94dbac168f4dc58d1df26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:01:6b:61:a3:27:f4:e0:87:52:c9:48:ff:ad: 63:6a:c7:6f:1c:12:49:2d:a4:70:c5:fa:1a:cf:20: 41:50:41:37:a2:b5:3f:6f:ec:d7:88:b7:7a:bc:2f: d7:e5:db:7f:9d:7d:95:28:95:23:d2:7f:7b:d8:95: 0d:f9:a3:d2:04:46:a3:35:3b:15:12:b2:05:fc:84: aa:41:8c:66:59:3d:70:99:a4:8c:f6:51:3c:61:d0: 7e:6d:8d:ff:43:65:24:74:61:5a:4b:82:1e:32:d0: a6:a4:bf:55:a4:fb:ca:94:aa:f1:60:9a:b5:fd:18: ef:04:ed:90:04:a2:e7:dc:43:74:d6:18:f8:27:d3: e2:13:4c:22:4c:66:5d:58:7d:06:bf:4c:ac:39:67: ae:5e:40:bc:be:df:ac:71:90:d4:31:2d:3e:fc:d1: b5:33:8f:ee:59:61:f4:da:3a:18:cb:c3:e1:ea:5f: 4a:04:93:14:1d:6d:70:3e:ef:5a:c7:b2:8b:0d:de: 21:d4:0b:d6:e7:e1:68:9a:5b:05:41:1d:0e:67:2e: 9b:01:2b:d9:08:74:25:32:47:75:6d:e9:14:60:b4: aa:a4:80:41:bc:d6:8e:64:f4:e4:94:a4:d1:e7:f0: 04:d4:0c:e1:6d:d7:8d:3f:e7:37:be:51:38:65:b6: 9e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C2:F5:4E:66:C0:65:81:E9:C9:4D:BA:C1:68:F4:DC:58:D1:DF:26 X509v3 Authority Key Identifier: keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/RML1TmbAZYHpyU26wWj03FjR3yY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.175.218.0/24 109.175.222.0/24 Signature Algorithm: sha256WithRSAEncryption ad:00:96:d0:20:9a:00:9b:af:a5:16:ed:e4:e0:81:7a:bb:dc: 56:e5:81:94:de:35:b2:fb:12:37:be:ec:91:80:de:06:b0:f6: ce:1e:60:b7:30:cb:c9:1a:80:0e:44:ca:b6:a6:53:d0:84:97: c7:6f:fa:f0:35:3c:23:22:dc:05:eb:8c:36:6b:d6:7e:c7:58: a7:91:dc:29:4d:8e:14:9e:e7:b5:bb:99:84:76:16:2c:44:e1: 45:de:2f:00:bb:1c:90:4d:17:2b:34:d0:1f:5c:47:b1:31:d0: 39:a0:dd:8d:f5:75:10:45:9e:9a:8e:69:1a:90:ba:74:ea:24: 45:02:55:2b:2f:ba:c0:95:a9:9f:49:14:4b:ea:f3:60:8d:00: 4a:32:73:28:38:bc:eb:11:43:aa:83:67:d8:7d:96:54:a1:e5: 93:17:e2:6e:d1:b8:50:41:2c:26:d8:fb:2a:4a:5e:ae:1c:e1: a5:6c:72:cf:9d:92:db:52:92:94:57:0d:6f:10:e7:0c:8e:ac: 79:e6:9c:44:9d:db:c3:62:f9:ad:da:4c:0a:31:36:69:23:a7: 10:d6:99:01:35:d7:6e:83:ec:0a:32:13:dc:d9:4f:23:1e:9f: 8c:b9:31:be:64:9f:d6:8e:c0:8e:4c:d1:6e:38:7c:65:89:2d: 47:af:93:bc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ytebMQpj39FeBdCv8gFrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkODE0MjFhY2I1Nzg0MTU0NjVlY2RlYzQ1ODFlODk1ZWJi ZmJjN2YwHhcNMjYwMTAyMDgyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGMyZjU0ZTY2YzA2NTgxZTljOTRkYmFjMTY4ZjRkYzU4ZDFkZjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwFrYaMn9OCHUslI/61jasdvHBJJ LaRwxfoazyBBUEE3orU/b+zXiLd6vC/X5dt/nX2VKJUj0n972JUN+aPSBEajNTsV ErIF/ISqQYxmWT1wmaSM9lE8YdB+bY3/Q2UkdGFaS4IeMtCmpL9VpPvKlKrxYJq1 /RjvBO2QBKLn3EN01hj4J9PiE0wiTGZdWH0Gv0ysOWeuXkC8vt+scZDUMS0+/NG1 M4/uWWH02joYy8Ph6l9KBJMUHW1wPu9ax7KLDd4h1AvW5+FomlsFQR0OZy6bASvZ CHQlMkd1bekUYLSqpIBBvNaOZPTklKTR5/AE1AzhbdeNP+c3vlE4ZbaecQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFETC9U5mwGWB6clNusFo9NxY0d8mMB8GA1UdIwQY MBaAFC2BQhrLV4QVRl7N7EWB6JXrv7x/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zYjFkNWEtZmNjNi00YWUzLWEyYzgt OTg0ZWVjM2Y3YTNlLzEvUk1MMVRtYkFaWUhweVUyNndXajAzRmpSM3lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zYjFkNWEtZmNjNi00YWUzLWEyYzgtOTg0ZWVjM2Y3YTNl LzEvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAba/aAwQA ba/eMA0GCSqGSIb3DQEBCwUAA4IBAQCtAJbQIJoAm6+lFu3k4IF6u9xW5YGU3jWy +xI3vuyRgN4GsPbOHmC3MMvJGoAORMq2plPQhJfHb/rwNTwjItwF64w2a9Z+x1in kdwpTY4Unue1u5mEdhYsROFF3i8AuxyQTRcrNNAfXEexMdA5oN2N9XUQRZ6ajmka kLp06iRFAlUrL7rAlamfSRRL6vNgjQBKMnMoOLzrEUOqg2fYfZZUoeWTF+Ju0bhQ QSwm2PsqSl6uHOGlbHLPnZLbUpKUVw1vEOcMjqx55pxEndvDYvmt2kwKMTZpI6cQ 1pkBNddug+wKMhPc2U8jHp+MuTG+ZJ/WjsCOTNFuOHxliS1Hr5O8 -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:40 2026 by rpki-client