This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/MLTMNf6RdXQHgobliz7oe72JkjQ.roa File: MLTMNf6RdXQHgobliz7oe72JkjQ.roa (raw, json) Hash identifier: vynBVcDFPo0FhDEU/VJwzCvxOSeIG5MJSs1ntfusClo= Subject key identifier: 30:B4:CC:35:FE:91:75:74:07:82:86:E5:8B:3E:E8:7B:BD:89:92:34 Certificate issuer: /CN=7d4d1c8790a913e832c733dff778dee79129700a Certificate serial: 019B775920920FC0B6A0FD56B2E89788C975 Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/MLTMNf6RdXQHgobliz7oe72JkjQ.roa Signing time: Thu 01 Jan 2026 02:18:08 +0000 ROA not before: Thu 01 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.54.240.0/22 maxlen: 22 2001:780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:20:92:0f:c0:b6:a0:fd:56:b2:e8:97:88:c9:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30b4cc35fe917574078286e58b3ee87bbd899234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:45:97:fe:14:45:c0:70:b7:32:01:c6:ac: 31:7b:a7:d9:ba:c3:14:5a:98:e6:a8:81:d1:7c:8b: 9c:68:6c:3c:f0:4c:ec:d9:67:0b:62:d8:22:8c:c0: aa:2b:34:24:eb:50:fc:b0:ba:b0:a8:8c:db:d3:49: b4:9b:a9:59:65:b9:9b:e4:5a:7c:cf:b2:22:d6:30: 6d:09:9b:52:0c:ba:c4:8c:aa:32:7b:35:5c:14:75: 71:d7:3e:5b:6e:ba:c9:f8:4a:5f:ed:2b:54:dd:34: 87:e8:6a:7d:10:ee:89:99:b8:e4:84:38:f2:9b:f6: 55:0e:2d:6e:55:66:d9:4c:67:76:d3:de:75:de:24: f4:77:40:f2:e2:bd:96:d7:42:99:d5:2e:6a:a7:51: 95:15:45:d9:2c:90:ec:92:12:67:01:34:d2:f9:f5: 9d:eb:c6:38:d0:a8:3a:ba:ba:7a:20:ea:a0:9c:be: 61:71:7f:ab:38:b1:9c:f7:a9:b6:43:2f:7a:e1:2c: 21:43:a6:58:a6:09:26:ec:18:fe:6d:25:aa:79:d6: c0:3d:9b:49:0f:0a:70:49:2c:97:d0:4e:63:31:5c: d1:59:2f:cc:2e:d8:12:d4:27:40:b4:e0:70:7b:a6: b8:12:e2:5a:4f:72:a1:94:ed:b0:07:73:13:62:be: 9a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B4:CC:35:FE:91:75:74:07:82:86:E5:8B:3E:E8:7B:BD:89:92:34 X509v3 Authority Key Identifier: keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/MLTMNf6RdXQHgobliz7oe72JkjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.240.0/22 IPv6: 2001:780::/29 Signature Algorithm: sha256WithRSAEncryption 28:ac:d3:88:25:16:66:0d:7b:be:c5:30:0e:68:38:bf:d1:8c: bb:4c:77:1f:e3:4e:d3:40:a7:47:e5:dc:c6:9c:9c:82:72:18: b4:d1:07:9d:99:2a:ba:b1:32:96:a8:c9:43:d0:cf:4b:74:3c: 47:f8:ca:a3:fe:75:52:cf:9a:66:bc:54:99:f6:f4:fb:60:34: 34:41:45:92:81:51:8e:d2:5b:4e:3e:1e:2c:d6:86:83:fa:62: 82:bd:13:37:4f:93:6a:e0:db:3f:d4:e4:d9:3d:a7:e7:84:07: a9:bd:02:b2:1c:ca:bd:23:fa:bb:2d:a6:74:1d:f1:0d:08:5d: a3:84:87:7a:c4:3d:49:df:e3:6d:4b:39:f7:26:1d:05:65:21: 24:c0:ff:90:63:e5:9f:02:7d:c7:f3:7b:ce:38:c8:d7:fc:12: 83:1e:b1:5a:b9:a8:0e:5a:b1:86:8c:a0:44:de:52:ec:51:2e: 62:f3:16:0a:b7:2c:9b:f0:29:03:8f:9c:4f:c7:80:25:cd:af: 22:b4:b5:00:3f:a5:85:7c:c3:47:09:4b:0c:5e:a5:da:f5:91: 71:61:df:97:65:a9:6f:67:ba:4c:71:4b:46:c4:b9:68:ee:92: dc:ef:e9:34:fc:29:fc:f6:94:84:6c:6a:ad:44:d0:d7:12:55: f9:84:28:07 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WSCSD8C2oP1WsuiXiMl1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNGQxYzg3OTBhOTEzZTgzMmM3MzNkZmY3NzhkZWU3OTEy OTcwMGEwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGI0Y2MzNWZlOTE3NTc0MDc4Mjg2ZTU4YjNlZTg3YmJkODk5MjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1pFl/4URcBwtzIBxqwxe6fZusMU WpjmqIHRfIucaGw88Ezs2WcLYtgijMCqKzQk61D8sLqwqIzb00m0m6lZZbmb5Fp8 z7Ii1jBtCZtSDLrEjKoyezVcFHVx1z5bbrrJ+Epf7StU3TSH6Gp9EO6JmbjkhDjy m/ZVDi1uVWbZTGd209513iT0d0Dy4r2W10KZ1S5qp1GVFUXZLJDskhJnATTS+fWd 68Y40Kg6urp6IOqgnL5hcX+rOLGc96m2Qy964SwhQ6ZYpgkm7Bj+bSWqedbAPZtJ DwpwSSyX0E5jMVzRWS/MLtgS1CdAtOBwe6a4EuJaT3KhlO2wB3MTYr6a8QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDC0zDX+kXV0B4KG5Ys+6Hu9iZI0MB8GA1UdIwQY MBaAFH1NHIeQqRPoMscz3/d43ueRKXAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xYzYxODAtOTk1MC00Y2U4LTgxMWUt ZjhkNjYyYjk2ZGFiLzEvTUxUTU5mNlJkWFFIZ29ibGl6N29lNzJKa2pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8xYzYxODAtOTk1MC00Y2U4LTgxMWUtZjhkNjYyYjk2ZGFi LzEvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTbwMA0E AgACMAcDBQMgAQeAMA0GCSqGSIb3DQEBCwUAA4IBAQAorNOIJRZmDXu+xTAOaDi/ 0Yy7THcf407TQKdH5dzGnJyCchi00QedmSq6sTKWqMlD0M9LdDxH+Mqj/nVSz5pm vFSZ9vT7YDQ0QUWSgVGO0ltOPh4s1oaD+mKCvRM3T5Nq4Ns/1OTZPafnhAepvQKy HMq9I/q7LaZ0HfENCF2jhId6xD1J3+NtSzn3Jh0FZSEkwP+QY+WfAn3H83vOOMjX /BKDHrFauagOWrGGjKBE3lLsUS5i8xYKtyyb8CkDj5xPx4Alza8itLUAP6WFfMNH CUsMXqXa9ZFxYd+XZalvZ7pMcUtGxLlo7pLc7+k0/Cn89pSEbGqtRNDXElX5hCgH -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:59 2026 by rpki-client