This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/mLc4nrUmR72L5a_hibMuCOUOjes.roa File: mLc4nrUmR72L5a_hibMuCOUOjes.roa (raw, json) Hash identifier: Oiq1+1if7qn5D54vTTs160dOXJEuE6xP7iBsVrbNwmM= Subject key identifier: 98:B7:38:9E:B5:26:47:BD:8B:E5:AF:E1:89:B3:2E:08:E5:0E:8D:EB Certificate issuer: /CN=44e9101a29c938f84f86045d6be5df4b3f517bd1 Certificate serial: 019B7E382244550EF7714D1316A343D54EDB Authority key identifier: 44:E9:10:1A:29:C9:38:F8:4F:86:04:5D:6B:E5:DF:4B:3F:51:7B:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/mLc4nrUmR72L5a_hibMuCOUOjes.roa Signing time: Fri 02 Jan 2026 10:19:26 +0000 ROA not before: Fri 02 Jan 2026 10:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206318 IP address blocks: 103.77.228.0/22 maxlen: 22 185.185.196.0/22 maxlen: 22 193.32.212.0/22 maxlen: 22 2a0b:6380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:22:44:55:0e:f7:71:4d:13:16:a3:43:d5:4e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e9101a29c938f84f86045d6be5df4b3f517bd1 Validity Not Before: Jan 2 10:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98b7389eb52647bd8be5afe189b32e08e50e8deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:75:6c:ca:aa:fb:aa:75:23:89:c8:9d:11: ec:e5:fd:8d:c8:c7:04:9f:04:b8:eb:c8:3f:83:60: e4:26:e9:02:51:0d:c8:17:2c:2c:9a:52:f7:0f:e9: d0:c7:2a:64:bc:c9:5d:59:64:e6:3f:90:4a:41:4a: 51:de:6b:12:53:0e:02:d6:af:90:1d:da:93:15:16: 0f:a6:59:13:54:ac:e6:bc:93:fd:98:b5:43:37:b0: 37:ef:41:a4:f3:41:6b:84:b7:76:d4:41:83:c2:46: 30:c5:0b:33:ba:de:bc:ac:ba:53:f0:59:0e:35:74: 4c:cd:a0:4a:b7:86:5b:b3:c7:87:de:27:7b:c0:16: c5:31:e4:e0:77:d5:cf:ba:4f:59:33:a1:f5:23:df: 0e:d2:29:b1:3a:f4:12:3e:33:7e:e1:8d:ce:ff:18: 3e:41:54:d0:61:a4:de:cf:3e:fb:83:7b:67:76:57: f1:da:76:c5:31:0d:98:b5:30:07:cd:2f:98:81:83: 62:af:40:46:32:30:84:2f:bb:46:67:a9:37:99:70: 4f:19:04:be:f0:bf:59:3e:45:0a:85:db:9d:1e:03: 8a:12:f8:d9:6e:64:48:a8:6f:70:5e:04:c9:f7:e4: 03:29:ad:39:61:8f:4e:0b:e3:76:57:10:bd:c0:6c: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B7:38:9E:B5:26:47:BD:8B:E5:AF:E1:89:B3:2E:08:E5:0E:8D:EB X509v3 Authority Key Identifier: keyid:44:E9:10:1A:29:C9:38:F8:4F:86:04:5D:6B:E5:DF:4B:3F:51:7B:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/mLc4nrUmR72L5a_hibMuCOUOjes.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.77.228.0/22 185.185.196.0/22 193.32.212.0/22 IPv6: 2a0b:6380::/29 Signature Algorithm: sha256WithRSAEncryption 4e:64:4e:99:99:eb:dc:cf:9d:25:97:16:66:f5:fb:0b:ce:95: 06:bf:c4:30:bf:82:d5:5f:98:19:9b:61:01:02:fc:8c:80:d5: e9:a8:23:76:b7:af:33:aa:fd:e9:71:d2:1f:73:32:ce:a7:b6: 5e:7a:4b:23:1a:80:40:11:b4:4e:54:72:1a:36:5e:d4:74:fe: 57:8a:bf:b3:ab:93:7a:3e:61:2d:94:ff:86:64:33:33:ba:8b: b6:90:05:b3:a6:b3:f0:24:f7:eb:12:c6:ca:67:18:7b:d6:6f: 58:ae:6d:28:c8:fd:02:01:37:8e:7c:24:20:86:53:66:f8:9b: 48:86:f7:07:5d:39:bb:95:5f:ec:6e:e5:18:f7:7f:ce:dd:80: 80:dc:8d:8b:54:5d:57:b7:c2:7e:9c:b2:a7:0c:a9:2b:f9:09: 19:51:42:4c:bc:1d:b5:b7:66:69:27:54:a9:1f:42:90:fb:ef: af:f7:a7:17:32:74:2e:9f:00:43:1a:cc:c6:4c:68:d2:3a:85: 9d:99:9a:3c:df:11:7d:52:49:16:41:c1:60:60:50:a3:90:16: 0c:cd:6f:4b:27:24:56:82:8a:f1:24:54:10:d1:0d:f5:f8:d5: 6d:58:ea:c4:36:19:6c:8e:61:b8:09:6a:eb:d3:f9:63:73:b9: ea:e6:a3:1f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+OCJEVQ73cU0TFqND1U7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZTkxMDFhMjljOTM4Zjg0Zjg2MDQ1ZDZiZTVkZjRiM2Y1 MTdiZDEwHhcNMjYwMTAyMTAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGI3Mzg5ZWI1MjY0N2JkOGJlNWFmZTE4OWIzMmUwOGU1MGU4ZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/F1bMqq+6p1I4nInRHs5f2NyMcE nwS468g/g2DkJukCUQ3IFywsmlL3D+nQxypkvMldWWTmP5BKQUpR3msSUw4C1q+Q HdqTFRYPplkTVKzmvJP9mLVDN7A370Gk80FrhLd21EGDwkYwxQszut68rLpT8FkO NXRMzaBKt4Zbs8eH3id7wBbFMeTgd9XPuk9ZM6H1I98O0imxOvQSPjN+4Y3O/xg+ QVTQYaTezz77g3tndlfx2nbFMQ2YtTAHzS+YgYNir0BGMjCEL7tGZ6k3mXBPGQS+ 8L9ZPkUKhdudHgOKEvjZbmRIqG9wXgTJ9+QDKa05YY9OC+N2VxC9wGx5RwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJi3OJ61Jke9i+Wv4YmzLgjlDo3rMB8GA1UdIwQY MBaAFETpEBopyTj4T4YEXWvl30s/UXvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk9rUUdpbkpPUGhQaGdSZGEtWGZTejlSZTlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iY2UxOGMtNzIwMy00NGM5LWJlYzgt ZGYwMWI0ZWIyNWU5LzEvbUxjNG5yVW1SNzJMNWFfaGliTXVDT1VPamVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iY2UxOGMtNzIwMy00NGM5LWJlYzgtZGYwMWI0ZWIyNWU5 LzEvUk9rUUdpbkpPUGhQaGdSZGEtWGZTejlSZTlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCZ03kAwQC ubnEAwQCwSDUMA0EAgACMAcDBQMqC2OAMA0GCSqGSIb3DQEBCwUAA4IBAQBOZE6Z mevcz50llxZm9fsLzpUGv8Qwv4LVX5gZm2EBAvyMgNXpqCN2t68zqv3pcdIfczLO p7ZeeksjGoBAEbROVHIaNl7UdP5Xir+zq5N6PmEtlP+GZDMzuou2kAWzprPwJPfr EsbKZxh71m9Yrm0oyP0CATeOfCQghlNm+JtIhvcHXTm7lV/sbuUY93/O3YCA3I2L VF1Xt8J+nLKnDKkr+QkZUUJMvB21t2ZpJ1SpH0KQ+++v96cXMnQunwBDGszGTGjS OoWdmZo83xF9UkkWQcFgYFCjkBYMzW9LJyRWgorxJFQQ0Q31+NVtWOrENhlsjmG4 CWrr0/ljc7nq5qMf -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:29 2026 by rpki-client