This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/mLaW00UJoliFlQBanGYAZx9oqck.roa File: mLaW00UJoliFlQBanGYAZx9oqck.roa (raw, json) Hash identifier: Vzpq2mt7gfo81m95C8eFGQmCsDsfCtgB1hMDxkMn2vc= Subject key identifier: 98:B6:96:D3:45:09:A2:58:85:95:00:5A:9C:66:00:67:1F:68:A9:C9 Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9 Certificate serial: 019B7E378F348B7E88500B7E2B69A5FCB6E8 Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/mLaW00UJoliFlQBanGYAZx9oqck.roa Signing time: Fri 02 Jan 2026 10:18:48 +0000 ROA not before: Fri 02 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50941 IP address blocks: 185.195.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:8f:34:8b:7e:88:50:0b:7e:2b:69:a5:fc:b6:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9 Validity Not Before: Jan 2 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98b696d34509a2588595005a9c6600671f68a9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:de:72:a7:1e:04:bc:6b:38:3c:71:d1:f2:8c: 86:d8:6b:ab:6c:2e:31:26:6e:15:c8:be:f2:0b:08: 97:8e:c7:38:20:c3:9c:ff:f7:d0:8c:6c:f7:a1:cc: ce:f7:40:95:de:07:a2:89:0b:46:9a:36:2c:ab:a3: 66:1b:97:26:46:ee:60:a7:5a:66:69:cd:84:2e:2f: bf:d9:36:22:8b:06:e6:45:cc:4e:66:05:3f:b4:e8: f7:f4:96:d4:4e:18:a1:f2:8f:5b:50:f4:c8:bd:1e: 63:89:c6:ef:fb:e1:de:2d:2b:9b:86:19:fe:74:c6: 52:74:0e:77:6c:d2:51:64:88:88:30:39:fa:6d:56: 28:cf:df:49:f4:32:e9:65:4d:64:d3:6b:32:c0:c6: 91:6a:17:26:50:53:88:df:42:80:72:92:bb:84:c5: 4b:38:6d:f8:58:40:f6:77:c5:4c:ec:12:14:43:a4: d9:b2:67:9d:9c:cd:53:7e:f1:ed:12:16:72:65:92: d7:1d:40:31:79:1c:83:0d:6b:88:f8:05:e7:38:65: 16:b1:28:17:21:a9:86:76:f1:a6:14:56:57:ea:72: 6f:ab:b6:19:d7:1a:73:20:50:5c:83:b8:ef:29:a0: ee:f2:f3:df:ec:2b:66:15:0b:9c:67:a3:c6:9e:9f: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B6:96:D3:45:09:A2:58:85:95:00:5A:9C:66:00:67:1F:68:A9:C9 X509v3 Authority Key Identifier: keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/mLaW00UJoliFlQBanGYAZx9oqck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.195.231.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:4e:0f:f0:23:13:18:bb:e6:de:01:48:a1:e6:c8:e8:58:56: 0d:9a:11:0d:cc:59:1a:55:9a:3a:ec:85:f7:3e:80:ad:ac:3c: 95:44:4d:0e:3b:7d:ba:91:0f:ac:88:00:f9:3b:45:e5:1f:31: 65:de:61:67:ef:4e:73:97:c6:e2:b7:71:d8:28:0a:06:47:a4: 22:81:15:7c:11:4c:5a:d1:22:96:90:a2:d4:5b:80:e5:c5:49: 3d:c5:89:fb:25:ab:cf:73:7f:f0:59:1d:ac:00:80:03:c7:3e: c2:c5:3c:a1:32:65:d4:3e:33:bf:dd:2d:fd:63:a6:a6:35:fa: 13:81:ab:c3:9b:b0:e3:46:7d:f4:46:37:89:84:d0:51:70:2f: 85:ab:94:b5:29:11:5e:26:0b:1e:d4:59:e6:c9:4e:4d:cb:6a: 23:62:2d:b6:77:29:d2:28:ad:f4:7d:12:8f:dc:33:84:af:32: 90:a2:32:f4:16:94:12:68:f3:a1:1b:8b:8b:34:53:81:23:e6: f8:93:29:27:7e:5c:79:e6:28:32:36:f2:48:56:8b:33:17:2d: b7:fe:83:bb:2b:a6:8a:36:e9:16:85:3f:7e:bd:b9:9b:3e:d9: bb:62:2a:30:2a:05:7c:d5:d4:27:b5:c6:8f:0f:8a:61:ab:38: 0b:3e:87:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N480i36IUAt+K2ml/LboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhODM0ZGYxZGFmYTdmZTZlYWQzNjBiM2VlNzVhMjkzMWFm MWZmZTkwHhcNMjYwMTAyMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGI2OTZkMzQ1MDlhMjU4ODU5NTAwNWE5YzY2MDA2NzFmNjhhOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4d5ypx4EvGs4PHHR8oyG2GurbC4x Jm4VyL7yCwiXjsc4IMOc//fQjGz3oczO90CV3geiiQtGmjYsq6NmG5cmRu5gp1pm ac2ELi+/2TYiiwbmRcxOZgU/tOj39JbUThih8o9bUPTIvR5jicbv++HeLSubhhn+ dMZSdA53bNJRZIiIMDn6bVYoz99J9DLpZU1k02sywMaRahcmUFOI30KAcpK7hMVL OG34WED2d8VM7BIUQ6TZsmednM1TfvHtEhZyZZLXHUAxeRyDDWuI+AXnOGUWsSgX IamGdvGmFFZX6nJvq7YZ1xpzIFBcg7jvKaDu8vPf7CtmFQucZ6PGnp8wuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJi2ltNFCaJYhZUAWpxmAGcfaKnJMB8GA1UdIwQY MBaAFNqDTfHa+n/m6tNgs+51opMa8f/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUt MDc1ZGM0NjA0YWVmLzEvbUxhVzAwVUpvbGlGbFFCYW5HWUFaeDlvcWNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUtMDc1ZGM0NjA0YWVm LzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucPnMA0G CSqGSIb3DQEBCwUAA4IBAQAdTg/wIxMYu+beAUih5sjoWFYNmhENzFkaVZo67IX3 PoCtrDyVRE0OO326kQ+siAD5O0XlHzFl3mFn705zl8bit3HYKAoGR6QigRV8EUxa 0SKWkKLUW4DlxUk9xYn7JavPc3/wWR2sAIADxz7CxTyhMmXUPjO/3S39Y6amNfoT gavDm7DjRn30RjeJhNBRcC+Fq5S1KRFeJgse1FnmyU5Ny2ojYi22dynSKK30fRKP 3DOErzKQojL0FpQSaPOhG4uLNFOBI+b4kyknflx55igyNvJIVoszFy23/oO7K6aK NukWhT9+vbmbPtm7YiowKgV81dQntcaPD4phqzgLPocR -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:07 2026 by rpki-client