This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/MebPMP4MKMDRPcWsqA1RWlWN-u0.roa File: MebPMP4MKMDRPcWsqA1RWlWN-u0.roa (raw, json) Hash identifier: EdSN3u2MFCBqnyk+W6CQKHBVKlUmG8nORx98tAwp5Qs= Subject key identifier: 31:E6:CF:30:FE:0C:28:C0:D1:3D:C5:AC:A8:0D:51:5A:55:8D:FA:ED Certificate issuer: /CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8 Certificate serial: 019B79ED677964FE30BE3EA55BD260C6050F Authority key identifier: 2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/MebPMP4MKMDRPcWsqA1RWlWN-u0.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49336 IP address blocks: 193.26.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:67:79:64:fe:30:be:3e:a5:5b:d2:60:c6:05:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31e6cf30fe0c28c0d13dc5aca80d515a558dfaed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:93:24:05:fb:0a:13:e5:8a:0c:e0:7d:f2: a6:6e:ac:7a:4e:8f:49:54:f6:94:86:a2:50:0c:a7: 00:5f:34:2e:48:57:da:30:eb:a7:18:82:c1:40:6b: 26:4f:8f:53:cb:29:66:e4:3e:38:e9:9f:f0:e1:79: 1d:e4:50:08:6c:e5:2e:28:52:3b:cb:91:90:c8:f5: 88:d6:90:95:0a:38:c7:41:17:cd:60:46:06:c5:b7: e4:3d:d2:7a:55:80:9f:5f:d2:84:94:a0:c3:33:a3: e9:09:d6:e5:8d:a7:32:9f:cb:24:da:72:49:89:bc: a7:ab:01:83:3f:04:17:24:9f:78:cd:36:26:be:9d: bf:84:01:08:f8:0d:e3:b9:65:bb:7a:8a:6a:74:d1: 19:91:2c:b0:9a:e4:9f:b4:65:5e:90:51:ce:86:cf: fd:50:8f:92:b4:e6:54:f6:79:6c:97:3f:46:8b:29: a1:13:55:76:32:f4:b6:b5:a7:fb:31:00:13:bd:7a: 20:bc:85:fa:72:a9:0d:e7:46:9c:0e:f8:27:74:7e: 10:b6:1e:e4:8d:54:25:78:86:6a:7c:00:65:96:e2: 48:95:1b:ab:41:87:e5:50:4c:aa:90:47:92:25:47: 08:cb:96:42:45:da:6c:9b:12:d1:cd:41:df:5e:52: a9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E6:CF:30:FE:0C:28:C0:D1:3D:C5:AC:A8:0D:51:5A:55:8D:FA:ED X509v3 Authority Key Identifier: keyid:2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/MebPMP4MKMDRPcWsqA1RWlWN-u0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.16.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:a3:64:48:63:0e:8f:ba:42:50:02:02:58:f3:f7:74:df:b9: d1:ee:fb:cb:2e:9e:d4:62:4d:24:17:cc:18:22:92:18:5b:12: 2a:ff:d9:ab:53:f8:9b:1c:cc:2c:47:5b:96:68:11:9a:26:02: c6:ce:15:49:2d:e9:27:89:8a:0d:13:ec:24:d4:4f:e8:21:4a: 69:fe:b8:ad:cb:87:45:05:04:6d:a6:bf:e3:b7:d7:30:24:ef: 33:f8:79:9b:66:90:6e:fc:8e:06:e4:76:7c:15:0b:55:47:52: 75:ff:7d:84:11:7e:cd:6d:af:f4:51:dd:29:66:3a:d0:90:b5: 0d:6e:ab:18:60:7f:5e:ce:84:98:42:d6:51:e7:85:52:01:9c: fc:f6:85:e7:e9:0a:26:a8:59:6a:9f:3c:72:8d:a7:42:9e:e0: 18:a3:62:5f:a2:8a:66:32:53:79:e4:01:07:65:e7:3c:9e:79: 30:eb:40:21:f9:cf:44:77:62:71:6b:5e:aa:90:51:a3:2d:d4: 70:60:55:54:cb:49:66:10:cc:9c:c0:99:ec:43:61:9e:85:a8: 90:ad:70:d7:cd:f5:73:ef:28:2e:ac:95:5e:9a:97:14:13:db: 11:51:e2:77:b0:a3:f1:93:50:66:6c:fb:6c:8b:6a:15:35:1f: 58:43:51:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Wd5ZP4wvj6lW9JgxgUPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOGU1MTIyNTY5ZGU1MmNkNTBhZWM3OTM0OTRiZjFjZTdj MjVmYzgwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWU2Y2YzMGZlMGMyOGMwZDEzZGM1YWNhODBkNTE1YTU1OGRmYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbuTJAX7ChPligzgffKmbqx6To9J VPaUhqJQDKcAXzQuSFfaMOunGILBQGsmT49Tyylm5D446Z/w4Xkd5FAIbOUuKFI7 y5GQyPWI1pCVCjjHQRfNYEYGxbfkPdJ6VYCfX9KElKDDM6PpCdbljacyn8sk2nJJ ibynqwGDPwQXJJ94zTYmvp2/hAEI+A3juWW7eopqdNEZkSywmuSftGVekFHOhs/9 UI+StOZU9nlslz9GiymhE1V2MvS2taf7MQATvXogvIX6cqkN50acDvgndH4Qth7k jVQleIZqfABlluJIlRurQYflUEyqkEeSJUcIy5ZCRdpsmxLRzUHfXlKpwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDHmzzD+DCjA0T3FrKgNUVpVjfrtMB8GA1UdIwQY MBaAFC+OUSJWneUs1QrseTSUvxznwl/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDQ1UklsYWQ1U3pWQ3V4NU5KU19IT2ZDWDhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNTZlNzgtZGNmOC00NjI1LTg3Y2Et ODY4OGIxZTUzNTcxLzEvTWViUE1QNE1LTURSUGNXc3FBMVJXbFdOLXUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zNTZlNzgtZGNmOC00NjI1LTg3Y2EtODY4OGIxZTUzNTcx LzEvTDQ1UklsYWQ1U3pWQ3V4NU5KU19IT2ZDWDhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRoQMA0G CSqGSIb3DQEBCwUAA4IBAQCeo2RIYw6PukJQAgJY8/d037nR7vvLLp7UYk0kF8wY IpIYWxIq/9mrU/ibHMwsR1uWaBGaJgLGzhVJLekniYoNE+wk1E/oIUpp/rity4dF BQRtpr/jt9cwJO8z+HmbZpBu/I4G5HZ8FQtVR1J1/32EEX7Nba/0Ud0pZjrQkLUN bqsYYH9ezoSYQtZR54VSAZz89oXn6QomqFlqnzxyjadCnuAYo2JfoopmMlN55AEH Zec8nnkw60Ah+c9Ed2Jxa16qkFGjLdRwYFVUy0lmEMycwJnsQ2GehaiQrXDXzfVz 7ygurJVempcUE9sRUeJ3sKPxk1BmbPtsi2oVNR9YQ1EM -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:52 2026 by rpki-client