This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/mLbMcmnO4JRmubQP1AmCwO0ZZgA.roa File: mLbMcmnO4JRmubQP1AmCwO0ZZgA.roa (raw, json) Hash identifier: vJDJ7XvSOkplRv6UMGVogwJjO5lohuWAIXAROmc7RJg= Subject key identifier: 98:B6:CC:72:69:CE:E0:94:66:B9:B4:0F:D4:09:82:C0:ED:19:66:00 Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882 Certificate serial: 019B79101BCF0956A2AE608EF74531A5A8EC Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/mLbMcmnO4JRmubQP1AmCwO0ZZgA.roa Signing time: Thu 01 Jan 2026 10:17:37 +0000 ROA not before: Thu 01 Jan 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197617 IP address blocks: 31.24.64.0/22 maxlen: 22 31.24.65.0/24 maxlen: 24 31.24.70.0/24 maxlen: 24 31.24.71.0/24 maxlen: 24 185.61.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1b:cf:09:56:a2:ae:60:8e:f7:45:31:a5:a8:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882 Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98b6cc7269cee09466b9b40fd40982c0ed196600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d6:b2:9b:bd:6d:9f:82:9c:8e:d8:ae:29:c7: b7:a5:10:57:75:e5:94:e7:82:be:27:21:20:10:7b: 52:a9:6c:ff:9d:ad:90:f4:4c:74:8a:ea:0e:df:80: 1f:81:3a:f5:75:13:aa:9e:dc:70:53:18:45:6a:bd: cc:49:be:08:46:b2:fb:73:a3:34:24:f4:be:a5:4e: 1b:78:cf:6d:1d:6f:59:fc:44:b2:d2:33:a1:46:ea: d9:f6:83:74:41:c8:e7:24:e0:18:16:b9:e5:f7:1e: 84:3e:6b:44:b7:de:d2:13:0b:a5:ad:bf:d4:7e:fa: 3b:9f:7e:5f:03:b7:66:ef:4d:8c:38:09:db:a8:d1: 48:cd:b4:da:12:b3:35:2c:f9:50:8b:24:fa:33:99: 73:e7:91:6c:e9:47:33:c8:22:c9:9a:62:20:c3:da: 05:ff:aa:5f:da:5f:f7:6d:e6:48:12:62:38:4b:be: 55:02:e9:39:91:e9:a8:74:71:eb:a5:12:10:9e:09: 09:53:75:16:0c:d7:ae:ea:ef:e7:0d:d6:a5:22:4f: 72:11:9c:8f:e2:b5:9d:f6:68:ea:c9:bc:d2:49:ed: db:0b:5c:73:b9:be:23:cd:aa:ad:97:9c:75:8a:e5: cf:49:27:dd:8a:f6:84:b5:33:27:d6:ae:65:4e:c1: ee:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B6:CC:72:69:CE:E0:94:66:B9:B4:0F:D4:09:82:C0:ED:19:66:00 X509v3 Authority Key Identifier: keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/mLbMcmnO4JRmubQP1AmCwO0ZZgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.64.0/22 31.24.70.0/23 185.61.108.0/22 Signature Algorithm: sha256WithRSAEncryption 26:eb:39:a3:61:d0:a5:a3:38:a0:c8:ba:f1:9a:3b:4d:9c:c4: e7:8b:e1:40:a2:1c:10:75:c4:6a:2a:e1:d7:18:84:6a:08:bf: 59:dd:84:b6:4d:ab:20:6d:8f:b0:bd:e0:b3:16:21:c7:d9:97: f0:58:8a:25:3d:f8:36:3d:7a:8c:68:41:f1:e1:38:bf:90:7c: a6:9c:92:0d:e9:22:cc:01:07:7f:76:7c:02:a9:25:47:a4:7c: 10:77:81:8c:bd:0a:66:b8:e1:bc:cd:9b:82:54:02:53:fe:33: c9:8c:ce:de:d1:4c:03:ac:21:b4:ad:94:ee:dc:02:4b:b4:1b: 5b:8e:be:2a:2e:a9:6f:70:9a:e7:6c:74:c0:31:8a:b2:7a:2f: 66:c9:66:b5:88:4c:6e:a2:87:ea:8f:c3:78:98:7d:c8:1c:a3: 6c:7a:31:35:5f:be:6c:be:3a:22:e6:8f:0b:9a:2a:5e:6e:ce: 6a:6b:28:22:4b:c6:80:9c:22:df:93:e7:3d:71:c6:a5:11:e9: f8:aa:9e:65:cc:52:ff:2b:12:6a:08:26:c9:df:f6:b1:37:8c: fd:c0:34:55:01:dd:08:c6:63:f0:d8:b8:04:32:37:36:3d:2e: d4:58:c6:ea:81:2b:f0:75:3f:9e:ff:81:d5:e8:ce:c2:d7:7c: ab:ca:c8:61 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EBvPCVairmCO90UxpajsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MjJhZDQzNDcxYjYwNmJjYzg1M2JiYTExYjhlZDY2M2Mx NTE4ODIwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGI2Y2M3MjY5Y2VlMDk0NjZiOWI0MGZkNDA5ODJjMGVkMTk2NjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidaym71tn4KcjtiuKce3pRBXdeWU 54K+JyEgEHtSqWz/na2Q9Ex0iuoO34AfgTr1dROqntxwUxhFar3MSb4IRrL7c6M0 JPS+pU4beM9tHW9Z/ESy0jOhRurZ9oN0QcjnJOAYFrnl9x6EPmtEt97SEwulrb/U fvo7n35fA7dm702MOAnbqNFIzbTaErM1LPlQiyT6M5lz55Fs6UczyCLJmmIgw9oF /6pf2l/3beZIEmI4S75VAuk5kemodHHrpRIQngkJU3UWDNeu6u/nDdalIk9yEZyP 4rWd9mjqybzSSe3bC1xzub4jzaqtl5x1iuXPSSfdivaEtTMn1q5lTsHurQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJi2zHJpzuCUZrm0D9QJgsDtGWYAMB8GA1UdIwQY MBaAFMcirUNHG2BrzIU7uhG47WY8FRiCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHlLdFEwY2JZR3ZNaFR1NkVianRaandWR0lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kM2EwYjEtMDhhMC00NGRkLTg3NzQt MDY2ZmZlZmQwY2FiLzEvbUxiTWNtbk80SlJtdWJRUDFBbUN3TzBaWmdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9kM2EwYjEtMDhhMC00NGRkLTg3NzQtMDY2ZmZlZmQwY2Fi LzEveHlLdFEwY2JZR3ZNaFR1NkVianRaandWR0lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCHxhAAwQB HxhGAwQCuT1sMA0GCSqGSIb3DQEBCwUAA4IBAQAm6zmjYdClozigyLrxmjtNnMTn i+FAohwQdcRqKuHXGIRqCL9Z3YS2TasgbY+wveCzFiHH2ZfwWIolPfg2PXqMaEHx 4Ti/kHymnJIN6SLMAQd/dnwCqSVHpHwQd4GMvQpmuOG8zZuCVAJT/jPJjM7e0UwD rCG0rZTu3AJLtBtbjr4qLqlvcJrnbHTAMYqyei9myWa1iExuoofqj8N4mH3IHKNs ejE1X75svjoi5o8Lmipebs5qaygiS8aAnCLfk+c9ccalEen4qp5lzFL/KxJqCCbJ 3/axN4z9wDRVAd0IxmPw2LgEMjc2PS7UWMbqgSvwdT+e/4HV6M7C13yryshh -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:45 2026 by rpki-client