This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/cMLXGA_6lhirTspoM9xrh1-1Z2c.roa File: cMLXGA_6lhirTspoM9xrh1-1Z2c.roa (raw, json) Hash identifier: tb3jenRFfrVxLNPvDmSsDeJNfF95+Hv8OEEMT0bRA9M= Subject key identifier: 70:C2:D7:18:0F:FA:96:18:AB:4E:CA:68:33:DC:6B:87:5F:B5:67:67 Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086 Certificate serial: 019B79ED42E8F1410703F6BF4AD258142357 Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/cMLXGA_6lhirTspoM9xrh1-1Z2c.roa Signing time: Thu 01 Jan 2026 14:19:10 +0000 ROA not before: Thu 01 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34062 IP address blocks: 185.99.16.0/24 maxlen: 24 185.99.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:42:e8:f1:41:07:03:f6:bf:4a:d2:58:14:23:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086 Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70c2d7180ffa9618ab4eca6833dc6b875fb56767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:76:e2:93:86:2b:72:a5:cd:26:2e:4f:51:3b: 55:63:7a:1f:8c:45:72:82:27:8c:50:f1:02:ad:49: 4b:fd:5d:e6:1e:9c:73:2d:04:3b:04:21:ab:93:75: d4:f4:40:4d:b7:63:85:04:f8:fe:fb:36:ab:90:4d: 72:e6:91:71:b0:2d:24:28:49:ff:24:f5:62:e9:35: 83:48:98:8c:4d:fc:d6:58:b5:23:ad:7c:d6:ec:3e: a3:91:9c:04:8b:ac:c8:f8:9e:2e:d9:11:b1:55:55: 4b:8f:94:9f:71:2b:67:b6:ed:1b:55:12:45:22:0d: cc:e5:94:ca:71:06:56:37:b3:a5:20:93:d3:ab:8e: 30:ac:a2:67:52:1d:56:e3:41:4e:21:f6:c7:07:15: 73:4f:d4:8d:e7:46:37:01:08:f8:fd:93:23:e6:d3: c9:b1:f3:bb:ff:60:36:04:71:78:1e:45:29:77:eb: 0d:f3:25:ad:3c:ec:f1:d1:4b:ed:94:b6:03:d5:25: b8:02:1d:8c:00:80:97:57:cf:87:45:30:11:36:24: 77:dd:54:af:19:d5:77:00:b3:93:9a:37:e6:af:cc: 33:79:0b:0e:ae:10:c0:ae:2c:b9:a6:93:dd:49:9f: b7:ad:8f:a8:76:ac:66:41:4f:4c:04:ca:3b:79:09: 21:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C2:D7:18:0F:FA:96:18:AB:4E:CA:68:33:DC:6B:87:5F:B5:67:67 X509v3 Authority Key Identifier: keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/cMLXGA_6lhirTspoM9xrh1-1Z2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.16.0/23 Signature Algorithm: sha256WithRSAEncryption 46:8f:76:0b:b1:10:62:72:50:fb:a5:62:15:b8:80:f3:c1:c8: 6d:b7:70:10:dd:9f:12:f5:6b:1f:18:13:7a:5b:ba:6f:4e:09: 7b:39:98:f8:1d:40:a8:93:35:cc:02:86:7a:c1:26:bd:ca:fd: 58:de:a9:e5:80:3e:06:4c:e0:4b:08:fb:b1:0c:94:3f:2f:70: c3:af:50:a8:91:f7:e6:01:78:54:f1:9d:9c:ff:14:65:f9:72: b7:42:f0:16:08:5d:49:91:24:89:28:89:c7:31:1a:93:d8:6a: 44:a7:83:f6:92:99:18:5f:67:0c:6d:14:47:85:07:ea:93:f5: 87:0f:8a:ab:a9:e7:04:85:bc:a7:bc:6d:de:99:94:a8:e9:85: 3c:49:fb:95:9f:cd:0c:88:00:b7:8b:e9:43:a0:e5:60:2d:8b: 79:c8:14:c6:78:95:b4:bc:47:60:95:d6:c0:be:bb:a9:c2:f3: 0f:d7:e9:8e:dd:15:17:5f:14:23:3e:f3:e4:52:c0:cb:91:62: ee:df:c7:d1:0b:40:24:78:c9:43:77:eb:6c:1f:5b:6d:3f:4c: a0:9a:eb:33:90:ae:7a:df:59:60:b0:e3:f2:d5:2a:31:ac:19: 6e:af:4a:bb:5e:7d:a0:6d:c4:35:f4:3f:e1:d0:58:15:46:4e: e6:9f:95:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57ULo8UEHA/a/StJYFCNXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YTcxNTZiOGFhODlmNzZlNGQzOGFmMmMxMDlmYmMxNDkx N2IwODYwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGMyZDcxODBmZmE5NjE4YWI0ZWNhNjgzM2RjNmI4NzVmYjU2NzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXbik4YrcqXNJi5PUTtVY3ofjEVy gieMUPECrUlL/V3mHpxzLQQ7BCGrk3XU9EBNt2OFBPj++zarkE1y5pFxsC0kKEn/ JPVi6TWDSJiMTfzWWLUjrXzW7D6jkZwEi6zI+J4u2RGxVVVLj5SfcStntu0bVRJF Ig3M5ZTKcQZWN7OlIJPTq44wrKJnUh1W40FOIfbHBxVzT9SN50Y3AQj4/ZMj5tPJ sfO7/2A2BHF4HkUpd+sN8yWtPOzx0UvtlLYD1SW4Ah2MAICXV8+HRTARNiR33VSv GdV3ALOTmjfmr8wzeQsOrhDAriy5ppPdSZ+3rY+odqxmQU9MBMo7eQkhPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHDC1xgP+pYYq07KaDPca4dftWdnMB8GA1UdIwQY MBaAFGSnFWuKqJ925NOK8sEJ+8FJF7CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zZGY2MmQtNWQ1Ny00ZDdlLTk0NDQt NTM1MWYxYmRlNzJmLzEvY01MWEdBXzZsaGlyVHNwb005eHJoMS0xWjJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zZGY2MmQtNWQ1Ny00ZDdlLTk0NDQtNTM1MWYxYmRlNzJm LzEvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuWMQMA0G CSqGSIb3DQEBCwUAA4IBAQBGj3YLsRBiclD7pWIVuIDzwchtt3AQ3Z8S9WsfGBN6 W7pvTgl7OZj4HUCokzXMAoZ6wSa9yv1Y3qnlgD4GTOBLCPuxDJQ/L3DDr1Cokffm AXhU8Z2c/xRl+XK3QvAWCF1JkSSJKInHMRqT2GpEp4P2kpkYX2cMbRRHhQfqk/WH D4qrqecEhbynvG3emZSo6YU8SfuVn80MiAC3i+lDoOVgLYt5yBTGeJW0vEdgldbA vrupwvMP1+mO3RUXXxQjPvPkUsDLkWLu38fRC0AkeMlDd+tsH1ttP0ygmuszkK56 31lgsOPy1SoxrBlur0q7Xn2gbcQ19D/h0FgVRk7mn5Wh -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:35 2026 by rpki-client