This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/MEHkcgqEJz7YFYdGUGWIvg3-cls.roa File: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (raw, json) Hash identifier: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw= Subject key identifier: 30:41:E4:72:0A:84:27:3E:D8:15:87:46:50:65:88:BE:0D:FE:72:5B Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 019B783527961CD6BC66FCBE4C5D69A34370 Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/MEHkcgqEJz7YFYdGUGWIvg3-cls.roa Signing time: Thu 01 Jan 2026 06:18:28 +0000 ROA not before: Thu 01 Jan 2026 06:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52000 IP address blocks: 103.76.86.0/24 maxlen: 24 195.78.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:27:96:1c:d6:bc:66:fc:be:4c:5d:69:a3:43:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Jan 1 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3041e4720a84273ed8158746506588be0dfe725b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:d1:69:c6:51:52:45:7c:51:dc:b6:50:e7: 74:11:eb:d0:6d:86:d5:4c:1f:9d:41:f4:25:6b:86: ae:d3:4b:8f:28:87:10:71:5f:7c:9e:f9:2d:12:c5: f8:c9:e6:48:33:39:d1:58:af:17:53:7a:5a:32:ed: ec:f6:1c:42:54:33:55:d7:9e:3e:9a:b2:c5:53:b0: 16:a8:a0:07:b7:7b:d0:6e:aa:f4:dd:4c:92:c9:5c: c6:7c:1e:07:ad:fe:41:2b:26:ed:df:f6:7f:ce:ec: 2b:e7:3b:01:54:3f:37:ec:e7:7e:fa:07:59:ab:7a: 0b:bb:60:7b:5f:09:98:94:f8:e0:11:2c:ef:c3:7d: 05:76:11:ff:1c:6a:36:23:c8:f4:d7:ca:16:d7:3e: 79:b8:9c:bc:b1:6b:63:e7:e2:7c:10:a8:73:11:8f: e7:20:5f:03:de:18:7f:98:b1:85:03:86:ff:04:40: a4:0e:e2:be:cd:f5:a0:67:d5:ac:3c:5d:02:e6:eb: 1e:9c:90:b2:a0:5b:66:71:94:49:93:4b:59:da:10: 01:2a:2a:62:84:29:61:11:5a:f0:7a:fd:7c:69:e8: a7:9a:7a:0a:f1:d5:2a:03:f4:36:1c:03:3e:7f:a9: 73:d3:75:03:c5:2f:73:fa:db:10:93:63:8d:d4:cb: 1d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:41:E4:72:0A:84:27:3E:D8:15:87:46:50:65:88:BE:0D:FE:72:5B X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/MEHkcgqEJz7YFYdGUGWIvg3-cls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.86.0/24 195.78.49.0/24 Signature Algorithm: sha256WithRSAEncryption 25:e3:78:9e:66:5f:48:22:56:96:ef:22:f6:f1:23:90:04:ca: 27:9f:ab:a6:65:75:86:2e:e8:4d:50:91:92:d4:13:75:89:f8: 2f:7c:57:99:65:48:4f:c8:a6:92:82:17:52:19:48:7d:b4:5d: e7:f6:96:90:63:cf:42:dc:5c:b0:81:7f:dc:ff:f0:23:9c:41: 57:31:1a:9a:57:82:56:ac:09:95:3c:18:35:f9:09:08:fe:5f: 86:a1:ef:3f:fc:ba:97:1c:a5:94:08:b0:61:49:34:8d:7d:64: 1f:cb:00:13:9a:c6:cc:48:1d:a1:77:45:6a:53:f7:f6:9e:05: 8d:69:04:76:30:b4:07:3e:9f:86:86:6e:a1:35:e6:74:d9:c1: bf:3f:15:b2:e1:89:95:49:79:6b:e8:b4:7d:f2:20:c3:c8:3d: 6c:17:d4:1f:88:21:f1:38:41:31:aa:a3:d9:01:be:c3:5b:98: 15:d7:68:0d:87:00:01:06:60:91:b6:ee:96:be:84:e6:be:ed: a8:3b:79:a8:c6:92:8e:0e:e0:01:34:59:09:e3:02:ac:11:be: a6:a5:3f:82:49:2b:1a:cd:b2:09:ce:3d:cf:97:f7:87:d3:1b: 9d:4f:67:dc:2e:cd:52:db:e9:d4:cc:f8:f6:cc:c1:7b:42:01: e0:32:50:1d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NSeWHNa8Zvy+TF1po0NwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjYwMTAxMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDQxZTQ3MjBhODQyNzNlZDgxNTg3NDY1MDY1ODhiZTBkZmU3MjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEPRacZRUkV8Udy2UOd0EevQbYbV TB+dQfQla4au00uPKIcQcV98nvktEsX4yeZIMznRWK8XU3paMu3s9hxCVDNV154+ mrLFU7AWqKAHt3vQbqr03UySyVzGfB4Hrf5BKybt3/Z/zuwr5zsBVD837Od++gdZ q3oLu2B7XwmYlPjgESzvw30FdhH/HGo2I8j018oW1z55uJy8sWtj5+J8EKhzEY/n IF8D3hh/mLGFA4b/BECkDuK+zfWgZ9WsPF0C5usenJCyoFtmcZRJk0tZ2hABKipi hClhEVrwev18aeinmnoK8dUqA/Q2HAM+f6lz03UDxS9z+tsQk2ON1MsdYQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDBB5HIKhCc+2BWHRlBliL4N/nJbMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvTUVIa2NncUVKejdZRllkR1VHV0l2ZzMtY2xzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ0xWAwQA w04xMA0GCSqGSIb3DQEBCwUAA4IBAQAl43ieZl9IIlaW7yL28SOQBMonn6umZXWG LuhNUJGS1BN1ifgvfFeZZUhPyKaSghdSGUh9tF3n9paQY89C3FywgX/c//AjnEFX MRqaV4JWrAmVPBg1+QkI/l+Goe8//LqXHKWUCLBhSTSNfWQfywATmsbMSB2hd0Vq U/f2ngWNaQR2MLQHPp+Ghm6hNeZ02cG/PxWy4YmVSXlr6LR98iDDyD1sF9QfiCHx OEExqqPZAb7DW5gV12gNhwABBmCRtu6WvoTmvu2oO3moxpKODuABNFkJ4wKsEb6m pT+CSSsazbIJzj3Pl/eH0xudT2fcLs1S2+nUzPj2zMF7QgHgMlAd -----END CERTIFICATE-----Generated at Thu Jan 8 23:54:41 2026 by rpki-client