This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/McLA97C_21k4ahSGCbg8PjbDdyY.roa File: McLA97C_21k4ahSGCbg8PjbDdyY.roa (raw, json) Hash identifier: Ez7xNYdMdGeMlpIziGC6nriwqLlZG9I6UooO6v5N49c= Subject key identifier: 31:C2:C0:F7:B0:BF:DB:59:38:6A:14:86:09:B8:3C:3E:36:C3:77:26 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13648CF6A3B4F353015E65148150F0 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/McLA97C_21k4ahSGCbg8PjbDdyY.roa Signing time: Fri 02 Jan 2026 00:20:04 +0000 ROA not before: Fri 02 Jan 2026 00:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.90.17.0/24 maxlen: 24 185.222.30.0/24 maxlen: 24 185.223.82.0/24 maxlen: 24 185.230.65.0/24 maxlen: 24 185.230.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:64:8c:f6:a3:b4:f3:53:01:5e:65:14:81:50:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31c2c0f7b0bfdb59386a148609b83c3e36c37726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:89:be:3a:d4:22:30:61:ac:2b:5b:87:be:0e: 53:39:5c:ca:07:6a:aa:bf:57:9a:70:89:d7:1e:0d: 2c:b7:b9:f0:67:47:8f:a2:68:5c:83:0d:44:94:57: 76:bd:ea:32:bd:fa:9c:48:16:47:87:54:9c:ba:e1: 2d:a9:9d:5a:85:17:8d:89:b3:21:fc:83:40:f0:42: fb:f8:49:da:73:a8:1a:98:e1:55:6c:bd:77:e3:37: 2a:97:32:ab:bf:e9:10:f1:09:de:7c:3c:ac:59:84: b6:dd:71:9f:84:9f:54:16:64:ad:61:c8:6a:39:3b: 83:39:23:ca:4d:63:a5:af:b0:69:e3:8b:3b:bd:d7: d0:ce:7c:e8:36:c1:e8:53:36:c6:77:41:f5:9b:d4: 54:a8:87:d4:a3:d5:67:89:18:ca:b7:77:d6:be:42: 11:22:f1:fa:9c:97:02:ea:70:9b:40:26:93:b0:1a: 39:ee:c8:45:7a:62:fc:c4:6c:12:43:41:3e:ea:dc: 6e:93:bd:10:0d:bf:f8:b2:aa:28:67:ee:d4:57:d0: f5:4e:09:84:52:27:25:86:5b:3f:ce:83:43:04:ed: 4b:5b:c6:94:60:8b:9a:ee:8a:2f:ed:98:be:40:7f: 5d:d4:f4:9d:45:06:b3:16:e9:6e:00:3c:ed:6e:68: 81:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C2:C0:F7:B0:BF:DB:59:38:6A:14:86:09:B8:3C:3E:36:C3:77:26 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/McLA97C_21k4ahSGCbg8PjbDdyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.17.0/24 185.222.30.0/24 185.223.82.0/24 185.230.65.0-185.230.66.255 Signature Algorithm: sha256WithRSAEncryption 9b:2c:f2:60:33:60:41:5c:ee:05:a0:0a:14:0d:3a:c4:bf:41: 84:78:36:db:95:89:30:7a:48:04:ee:d8:85:ff:4e:48:9d:d3: 11:3b:da:05:dd:92:96:bc:73:2d:bf:73:01:0a:fd:01:41:df: 19:b4:2e:c8:77:28:33:4d:58:12:f5:3d:87:dc:8c:3f:36:6a: a3:15:f4:db:36:8b:58:10:0e:5f:cb:d0:2a:c1:31:54:33:33: 52:43:84:7d:d5:c0:e1:7f:2a:40:43:ce:9f:12:88:6b:f1:0e: 27:fa:d0:55:fa:d1:78:2c:82:00:a1:75:3d:b4:0c:73:f2:5b: 18:94:ae:01:45:d0:84:42:80:94:74:be:1e:37:dc:6b:3c:55: 3c:ad:58:d4:60:7b:0e:de:79:b7:be:79:2a:b2:a2:3c:9d:ec: 50:14:dd:69:ff:9f:8f:d8:9d:d9:99:57:df:90:b1:9d:75:c7: 96:1b:36:68:45:1a:e3:39:54:12:0e:4b:72:5a:9a:2b:97:c7: 98:19:f9:96:34:98:6e:38:18:56:64:d0:27:f8:35:28:05:81: 6c:b4:34:08:d8:f7:cb:de:e3:f6:dc:13:2a:ca:48:83:63:0d: 0b:6f:bb:e5:4e:d9:3c:7b:04:20:24:88:f6:34:3f:ac:69:ed: bb:c0:b0:93 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt8E2SM9qO081MBXmUUgVDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWMyYzBmN2IwYmZkYjU5Mzg2YTE0ODYwOWI4M2MzZTM2YzM3NzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYm+OtQiMGGsK1uHvg5TOVzKB2qq v1eacInXHg0st7nwZ0ePomhcgw1ElFd2veoyvfqcSBZHh1ScuuEtqZ1ahReNibMh /INA8EL7+Enac6gamOFVbL134zcqlzKrv+kQ8QnefDysWYS23XGfhJ9UFmStYchq OTuDOSPKTWOlr7Bp44s7vdfQznzoNsHoUzbGd0H1m9RUqIfUo9VniRjKt3fWvkIR IvH6nJcC6nCbQCaTsBo57shFemL8xGwSQ0E+6txuk70QDb/4sqooZ+7UV9D1TgmE Uiclhls/zoNDBO1LW8aUYIua7oov7Zi+QH9d1PSdRQazFuluADztbmiBIQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFDHCwPewv9tZOGoUhgm4PD42w3cmMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvTWNMQTk3Q18yMWs0YWhTR0NiZzhQamJEZHlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQALVoRAwQA ud4eAwQAud9SMAwDBAC55kEDBAC55kIwDQYJKoZIhvcNAQELBQADggEBAJss8mAz YEFc7gWgChQNOsS/QYR4NtuViTB6SATu2IX/Tkid0xE72gXdkpa8cy2/cwEK/QFB 3xm0Lsh3KDNNWBL1PYfcjD82aqMV9Ns2i1gQDl/L0CrBMVQzM1JDhH3VwOF/KkBD zp8SiGvxDif60FX60XgsggChdT20DHPyWxiUrgFF0IRCgJR0vh433Gs8VTytWNRg ew7eebe+eSqyojyd7FAU3Wn/n4/YndmZV9+QsZ11x5YbNmhFGuM5VBIOS3JamiuX x5gZ+ZY0mG44GFZk0Cf4NSgFgWy0NAjY98ve4/bcEyrKSINjDQtvu+VO2Tx7BCAk iPY0P6xp7bvAsJM= -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:00 2026 by rpki-client