This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/MLJuInjQg3zDgPHSYlxPnBCsr8w.roa File: MLJuInjQg3zDgPHSYlxPnBCsr8w.roa (raw, json) Hash identifier: z204xX29eUWjwP65eKvX0LnffzPLMfSulEeLcZJVV/s= Subject key identifier: 30:B2:6E:22:78:D0:83:7C:C3:80:F1:D2:62:5C:4F:9C:10:AC:AF:CC Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6F563100640186846AB05C06B5112 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/MLJuInjQg3zDgPHSYlxPnBCsr8w.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53856 IP address blocks: 95.164.24.0/22 maxlen: 22 95.164.28.0/22 maxlen: 22 95.164.78.0/23 maxlen: 23 95.164.96.0/21 maxlen: 21 95.164.104.0/21 maxlen: 21 95.164.168.0/23 maxlen: 23 95.164.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f5:63:10:06:40:18:68:46:ab:05:c0:6b:51:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30b26e2278d0837cc380f1d2625c4f9c10acafcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a3:99:ba:c0:d2:22:b0:85:0f:75:e6:6c:46: b9:c4:95:24:99:77:41:9b:bb:f6:2d:c1:b4:75:bc: 8f:58:d0:ae:75:8d:49:19:a5:42:f5:e2:2e:e3:cd: 64:52:dc:5d:b2:9d:b5:9a:27:2d:c3:3d:7a:98:0d: 2c:61:09:4a:c4:4c:a9:52:31:a2:2e:b2:2f:ea:f9: c3:ca:20:f8:d8:27:22:23:57:49:21:f0:ae:3c:df: 39:56:ad:a8:58:95:7a:0e:48:27:05:f5:ee:52:27: 2a:2b:3f:20:7f:d5:b4:b2:4b:3b:12:9d:bc:fb:17: 16:91:c7:d6:33:f0:0d:17:5a:6e:c5:64:80:7d:62: 08:95:70:64:5c:9f:d0:74:49:e7:9e:fa:b2:5a:cd: 22:d3:b5:a2:d9:e1:fc:98:76:58:68:e1:94:96:e4: de:db:61:5a:6f:bb:e3:52:1a:c3:00:f2:e9:cf:1d: b6:99:68:1f:9f:55:ba:e9:1f:0b:f8:91:42:ee:61: d1:42:83:46:a3:67:b4:a2:5a:26:a4:7f:f3:56:73: d8:11:6c:97:17:0d:59:9a:18:9e:ac:db:22:79:da: 4c:12:8a:4d:b7:81:ba:e9:b2:b0:ee:aa:ae:44:38: c1:85:8b:0a:8a:5a:28:96:9a:3c:48:1e:c7:71:61: 1d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B2:6E:22:78:D0:83:7C:C3:80:F1:D2:62:5C:4F:9C:10:AC:AF:CC X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/MLJuInjQg3zDgPHSYlxPnBCsr8w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.24.0/21 95.164.78.0/23 95.164.96.0/20 95.164.168.0/23 95.164.252.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:ca:e4:30:0d:ba:44:07:6e:5c:23:4c:a6:3f:cc:ee:e7:63: 59:03:03:39:21:3a:be:43:de:f0:2e:cc:e8:1e:b2:eb:b8:1c: 0e:e0:d3:cb:d5:f3:3b:9f:c0:f3:34:b0:b2:c6:d6:08:a6:23: 70:93:c9:86:11:53:30:5a:fa:d0:a8:67:cc:a1:cb:32:81:f8: fb:6d:c6:a9:20:05:ca:3f:30:07:d3:2a:13:a4:78:a7:d3:59: a6:81:5f:47:f5:31:5b:c7:09:22:9c:12:ad:fb:2b:d2:3c:c7: e4:f0:00:ad:0f:12:eb:a1:2d:bd:80:ee:9a:0e:b4:c7:5b:d9: 7b:84:76:7c:9f:83:b9:8a:fb:c0:13:76:23:8a:95:ac:29:31: 98:13:19:9d:2b:bf:ac:47:2d:9e:7f:59:52:94:32:52:7e:3a: 42:13:bc:e2:c1:08:e4:c6:01:d7:74:df:fe:72:a0:d7:f9:26: 47:f5:8c:fd:53:c8:12:b7:04:f4:5a:a4:5b:2d:5d:2e:bd:3d: a0:9e:d1:76:be:76:97:3d:fd:d9:f7:29:44:d4:ab:a9:8f:b3: 20:4b:5d:ca:66:a5:dc:94:dd:04:24:a5:56:12:87:0d:4c:5a: aa:56:3d:a1:96:ae:69:ef:f0:0d:0c:4a:d4:f5:da:8f:e6:7b: 1b:4f:8a:08 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3xvVjEAZAGGhGqwXAa1ESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGIyNmUyMjc4ZDA4MzdjYzM4MGYxZDI2MjVjNGY5YzEwYWNhZmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqOZusDSIrCFD3XmbEa5xJUkmXdB m7v2LcG0dbyPWNCudY1JGaVC9eIu481kUtxdsp21mictwz16mA0sYQlKxEypUjGi LrIv6vnDyiD42CciI1dJIfCuPN85Vq2oWJV6DkgnBfXuUicqKz8gf9W0sks7Ep28 +xcWkcfWM/ANF1puxWSAfWIIlXBkXJ/QdEnnnvqyWs0i07Wi2eH8mHZYaOGUluTe 22Fab7vjUhrDAPLpzx22mWgfn1W66R8L+JFC7mHRQoNGo2e0olompH/zVnPYEWyX Fw1ZmhierNsiedpMEopNt4G66bKw7qquRDjBhYsKiloolpo8SB7HcWEdsQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDCybiJ40IN8w4Dx0mJcT5wQrK/MMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvTUxKdUlualFnM3pEZ1BIU1lseFBuQkNzcjh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDX6QYAwQB X6ROAwQEX6RgAwQBX6SoAwQCX6T8MA0GCSqGSIb3DQEBCwUAA4IBAQBbyuQwDbpE B25cI0ymP8zu52NZAwM5ITq+Q97wLszoHrLruBwO4NPL1fM7n8DzNLCyxtYIpiNw k8mGEVMwWvrQqGfMocsygfj7bcapIAXKPzAH0yoTpHin01mmgV9H9TFbxwkinBKt +yvSPMfk8ACtDxLroS29gO6aDrTHW9l7hHZ8n4O5ivvAE3YjipWsKTGYExmdK7+s Ry2ef1lSlDJSfjpCE7ziwQjkxgHXdN/+cqDX+SZH9Yz9U8gStwT0WqRbLV0uvT2g ntF2vnaXPf3Z9ylE1Kupj7MgS13KZqXclN0EJKVWEocNTFqqVj2hlq5p7/ANDErU 9dqP5nsbT4oI -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:28 2026 by rpki-client