This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/rMeo1CnMSY0jS_KUt2TfSMpGfYo.roa File: rMeo1CnMSY0jS_KUt2TfSMpGfYo.roa (raw, json) Hash identifier: +krb9v5npr1xkhs/zS13K51aB5NOVQlX7w+lr/LzBhk= Subject key identifier: AC:C7:A8:D4:29:CC:49:8D:23:4B:F2:94:B7:64:DF:48:CA:46:7D:8A Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F85379C44AF061737CD1E8265342EBF Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/rMeo1CnMSY0jS_KUt2TfSMpGfYo.roa Signing time: Fri 02 Jan 2026 16:23:15 +0000 ROA not before: Fri 02 Jan 2026 16:23:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43094 IP address blocks: 91.242.78.0/23 maxlen: 24 91.242.84.0/23 maxlen: 23 91.242.84.0/24 maxlen: 24 194.114.144.0/24 maxlen: 25 194.114.144.128/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:37:9c:44:af:06:17:37:cd:1e:82:65:34:2e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acc7a8d429cc498d234bf294b764df48ca467d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:31:a4:cf:c1:b6:74:2e:24:88:ee:0d:44: 7f:dc:b6:c2:3f:aa:6b:6f:3f:36:e0:35:31:69:90: 54:a0:0e:59:b1:80:45:d0:9a:a7:14:69:b4:f1:2d: 48:ae:c1:61:e6:b6:bf:11:75:0c:c7:2c:cb:ca:6f: 48:76:fe:df:8d:ec:74:c7:5f:8c:e4:a1:82:1e:24: 54:49:c2:8c:5a:5c:37:80:46:12:ea:6d:54:00:8b: 48:42:e9:8f:67:c9:c3:c3:0c:f4:e4:65:19:bf:e4: 31:a1:b9:0c:8a:f3:94:c1:f0:d7:a3:c9:0f:af:a0: 9f:04:4c:80:cd:5b:eb:4d:30:d4:f0:95:7d:51:1b: 06:4b:64:fd:d7:04:2f:3d:83:3d:b3:17:99:85:6c: fa:0c:cf:19:7d:c8:89:30:69:16:69:46:0b:87:f4: 6b:9c:7b:ad:3b:e9:37:3f:10:74:54:75:97:4f:78: 48:52:84:42:25:8b:95:2a:d6:bb:ff:dc:bf:29:1e: 19:48:6b:c0:0e:f2:55:5a:96:b1:fb:b5:10:91:20: 31:d4:bf:b8:41:ad:b9:45:80:22:48:27:a2:70:b8: 2e:a9:60:79:26:ca:03:54:41:a4:66:84:06:4d:e8: 45:08:3a:0d:7c:b4:1c:f5:86:88:e2:9c:23:de:fa: 17:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C7:A8:D4:29:CC:49:8D:23:4B:F2:94:B7:64:DF:48:CA:46:7D:8A X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/rMeo1CnMSY0jS_KUt2TfSMpGfYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.78.0/23 91.242.84.0/23 194.114.144.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:29:b3:2b:01:90:eb:e5:ff:5d:6d:c5:9d:13:93:46:b9:2c: e9:9c:58:9c:18:00:05:39:4b:3e:2c:5e:58:23:d4:a0:3c:fa: d0:39:cd:a0:9a:d3:79:dd:20:17:47:e1:88:1d:1e:3a:36:bb: 20:37:01:09:b4:ca:0e:ff:93:37:b5:cc:d9:d9:8d:e9:67:c8: db:ec:8b:48:bc:c8:0f:b4:b8:9c:7c:01:c4:99:2f:47:3d:f3: ab:a8:41:2a:94:e8:62:70:f6:37:ba:0a:e6:34:44:79:6a:d9: aa:6e:aa:e5:0e:12:ed:da:1f:40:24:36:86:d3:e1:a3:bc:61: b6:cc:0d:7d:2a:2c:f4:cb:5a:89:a0:1b:c9:14:8f:11:4b:71: ba:4e:d4:64:62:bc:dd:c4:c9:cd:7a:bc:ce:9e:91:78:0c:36: 4e:cb:8c:ce:48:e9:e8:9b:26:39:50:2f:c5:86:b2:8f:61:02: b7:ec:47:09:ec:59:51:f1:eb:a0:2c:ef:41:39:e7:ab:b8:3f: 7d:22:60:6e:7f:98:b4:23:c3:40:dd:27:22:c9:d7:9c:25:da: 42:ac:a5:b3:85:3f:bf:6d:95:5e:66:d6:84:b7:2d:6a:8e:d9: 5a:ec:ab:8b:45:4f:cd:71:64:49:25:a4:22:f6:35:8b:78:36: a7:ef:df:e8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hTecRK8GFzfNHoJlNC6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2M3YThkNDI5Y2M0OThkMjM0YmYyOTRiNzY0ZGY0OGNhNDY3ZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5IxpM/BtnQuJIjuDUR/3LbCP6pr bz824DUxaZBUoA5ZsYBF0JqnFGm08S1IrsFh5ra/EXUMxyzLym9Idv7fjex0x1+M 5KGCHiRUScKMWlw3gEYS6m1UAItIQumPZ8nDwwz05GUZv+QxobkMivOUwfDXo8kP r6CfBEyAzVvrTTDU8JV9URsGS2T91wQvPYM9sxeZhWz6DM8ZfciJMGkWaUYLh/Rr nHutO+k3PxB0VHWXT3hIUoRCJYuVKta7/9y/KR4ZSGvADvJVWpax+7UQkSAx1L+4 Qa25RYAiSCeicLguqWB5JsoDVEGkZoQGTehFCDoNfLQc9YaI4pwj3voXRwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKzHqNQpzEmNI0vylLdk30jKRn2KMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvck1lbzFDbk1TWTBqU19LVXQyVGZTTXBHZllvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW/JOAwQB W/JUAwQAwnKQMA0GCSqGSIb3DQEBCwUAA4IBAQCbKbMrAZDr5f9dbcWdE5NGuSzp nFicGAAFOUs+LF5YI9SgPPrQOc2gmtN53SAXR+GIHR46NrsgNwEJtMoO/5M3tczZ 2Y3pZ8jb7ItIvMgPtLicfAHEmS9HPfOrqEEqlOhicPY3ugrmNER5atmqbqrlDhLt 2h9AJDaG0+GjvGG2zA19Kiz0y1qJoBvJFI8RS3G6TtRkYrzdxMnNerzOnpF4DDZO y4zOSOnomyY5UC/FhrKPYQK37EcJ7FlR8eugLO9BOeeruD99ImBuf5i0I8NA3Sci ydecJdpCrKWzhT+/bZVeZtaEty1qjtla7KuLRU/NcWRJJaQi9jWLeDan79/o -----END CERTIFICATE-----Generated at Sun Jan 25 19:58:56 2026 by rpki-client