This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/ME3_RRsJTE0yygMx8pWx1CRfu4g.roa File: ME3_RRsJTE0yygMx8pWx1CRfu4g.roa (raw, json) Hash identifier: NXcFWTl4I5CN86WhLodDSbukJ6PN73DMqFCemMucwz8= Subject key identifier: 30:4D:FF:45:1B:09:4C:4D:32:CA:03:31:F2:95:B1:D4:24:5F:BB:88 Certificate issuer: /CN=5813e26d71ac5b6a601156d90ce0dccec5986243 Certificate serial: 019B7EA57F3E89AC6BCDE8D374DD569D61BF Authority key identifier: 58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/ME3_RRsJTE0yygMx8pWx1CRfu4g.roa Signing time: Fri 02 Jan 2026 12:18:53 +0000 ROA not before: Fri 02 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 185.224.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:7f:3e:89:ac:6b:cd:e8:d3:74:dd:56:9d:61:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5813e26d71ac5b6a601156d90ce0dccec5986243 Validity Not Before: Jan 2 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=304dff451b094c4d32ca0331f295b1d4245fbb88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:41:6d:df:59:f7:91:bb:6d:de:17:bb:69:96: 1a:d6:34:68:33:85:3d:f5:a2:87:ff:42:63:01:ee: 46:a1:70:37:6c:04:09:85:c9:91:9d:fe:84:58:c5: 78:da:6c:78:f0:55:46:15:7d:47:a7:c4:10:33:a8: 64:22:21:d2:f0:4b:e0:49:d7:88:cf:8a:76:68:d5: 4a:19:fb:15:90:67:d6:6b:a8:fd:ab:b3:6a:21:4c: f3:1c:a2:99:fc:c7:f3:cd:0a:6a:fd:d3:d6:60:b0: 08:66:85:41:2b:c9:0d:48:76:df:2c:17:d3:eb:0e: 44:45:d1:79:ff:2f:ec:e5:19:93:fe:ee:02:fd:8f: b6:5b:36:c1:11:ee:ae:61:49:60:29:c0:be:86:da: ef:c4:bf:1b:c0:dc:14:b5:c1:02:84:27:6c:64:71: 77:77:40:99:cd:53:34:37:6d:6a:b4:c1:60:34:0c: d2:29:51:bf:06:a0:6a:3e:fe:ff:87:ae:43:fd:8b: b7:a4:5a:46:b2:2f:10:45:a9:e7:aa:e1:60:c4:60: 69:ef:ce:41:02:ea:78:8f:f4:da:7c:f9:18:bc:74: 26:c3:8b:ab:65:ff:3e:82:b2:c2:73:47:3d:ad:22: dc:0e:7a:5a:17:b9:cc:62:d7:50:8a:5f:9b:c9:da: 17:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4D:FF:45:1B:09:4C:4D:32:CA:03:31:F2:95:B1:D4:24:5F:BB:88 X509v3 Authority Key Identifier: keyid:58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/ME3_RRsJTE0yygMx8pWx1CRfu4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.224.2.0/24 Signature Algorithm: sha256WithRSAEncryption a4:d8:0c:be:73:2c:06:b8:b4:7d:fa:6a:18:df:c2:26:a1:c1: c8:c9:43:49:45:3b:59:f5:65:f6:eb:40:4b:a4:57:55:f0:f0: cf:22:cc:75:4a:f0:61:73:1d:4c:85:4e:0f:c0:7f:91:46:11: 32:3d:5e:c8:f3:83:9a:63:da:6e:16:73:06:c4:a0:35:49:d1: c7:c1:81:8b:7e:ef:f4:87:f2:d4:c9:fb:85:cc:cf:d5:8e:c3: d4:a9:f0:5a:33:41:83:60:d3:a2:e2:50:50:b7:d5:20:57:da: 9d:22:a8:98:10:4f:a6:62:b9:ba:ee:ae:af:03:50:fc:f0:d3: cb:5f:6b:ab:a2:03:c2:03:3d:74:d9:75:36:cb:68:96:10:02: bb:13:f0:17:59:9a:14:90:cf:d6:98:4b:c4:84:9c:dd:16:08: 43:9d:f2:4e:dd:d9:f5:5f:ce:a1:de:d7:64:25:00:fb:61:0a: 9f:2a:61:4f:99:d1:af:36:57:81:d9:8f:09:84:a2:d0:a1:e0: d6:65:5d:b7:93:db:42:4b:73:70:a9:be:26:35:45:8c:3c:43: c6:98:dd:46:e2:a1:58:6c:22:54:74:ea:33:f9:61:04:71:28: d9:92:0d:eb:17:ea:a8:52:10:0a:d6:2a:9f:8e:07:e1:ad:d0: 74:71:b2:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pX8+iaxrzejTdN1WnWG/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MTNlMjZkNzFhYzViNmE2MDExNTZkOTBjZTBkY2NlYzU5 ODYyNDMwHhcNMjYwMTAyMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDRkZmY0NTFiMDk0YzRkMzJjYTAzMzFmMjk1YjFkNDI0NWZiYjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EFt31n3kbtt3he7aZYa1jRoM4U9 9aKH/0JjAe5GoXA3bAQJhcmRnf6EWMV42mx48FVGFX1Hp8QQM6hkIiHS8EvgSdeI z4p2aNVKGfsVkGfWa6j9q7NqIUzzHKKZ/MfzzQpq/dPWYLAIZoVBK8kNSHbfLBfT 6w5ERdF5/y/s5RmT/u4C/Y+2WzbBEe6uYUlgKcC+htrvxL8bwNwUtcEChCdsZHF3 d0CZzVM0N21qtMFgNAzSKVG/BqBqPv7/h65D/Yu3pFpGsi8QRannquFgxGBp785B Aup4j/TafPkYvHQmw4urZf8+grLCc0c9rSLcDnpaF7nMYtdQil+bydoXmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDBN/0UbCUxNMsoDMfKVsdQkX7uIMB8GA1UdIwQY MBaAFFgT4m1xrFtqYBFW2Qzg3M7FmGJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3Nzgt MDZkZjFkYzAzMzY3LzEvTUUzX1JSc0pURTB5eWdNeDhwV3gxQ1JmdTRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3NzgtMDZkZjFkYzAzMzY3 LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueACMA0G CSqGSIb3DQEBCwUAA4IBAQCk2Ay+cywGuLR9+moY38ImocHIyUNJRTtZ9WX260BL pFdV8PDPIsx1SvBhcx1MhU4PwH+RRhEyPV7I84OaY9puFnMGxKA1SdHHwYGLfu/0 h/LUyfuFzM/VjsPUqfBaM0GDYNOi4lBQt9UgV9qdIqiYEE+mYrm67q6vA1D88NPL X2urogPCAz102XU2y2iWEAK7E/AXWZoUkM/WmEvEhJzdFghDnfJO3dn1X86h3tdk JQD7YQqfKmFPmdGvNleB2Y8JhKLQoeDWZV23k9tCS3Nwqb4mNUWMPEPGmN1G4qFY bCJUdOoz+WEEcSjZkg3rF+qoUhAK1iqfjgfhrdB0cbKW -----END CERTIFICATE-----Generated at Mon Jan 12 00:51:33 2026 by rpki-client