This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/MENCP9vV-DN8rTiaMKzCj_ZJHTQ.roa File: MENCP9vV-DN8rTiaMKzCj_ZJHTQ.roa (raw, json) Hash identifier: rbtpAaAkeOS9IFdDYYmlnqwTq2cxGgERFnXxmCVRJEA= Subject key identifier: 30:43:42:3F:DB:D5:F8:33:7C:AD:38:9A:30:AC:C2:8F:F6:49:1D:34 Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Certificate serial: 019B7F81292011479FACC838AF04339ECD93 Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/MENCP9vV-DN8rTiaMKzCj_ZJHTQ.roa Signing time: Fri 02 Jan 2026 16:18:49 +0000 ROA not before: Fri 02 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14163 IP address blocks: 213.152.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:29:20:11:47:9f:ac:c8:38:af:04:33:9e:cd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Validity Not Before: Jan 2 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3043423fdbd5f8337cad389a30acc28ff6491d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:bb:09:b8:c3:96:76:47:a5:93:d6:9b:6f: ad:88:19:6e:91:df:42:81:cd:25:16:55:a4:8a:09: ef:88:c0:eb:08:5e:ab:74:7b:3a:27:03:23:77:36: c5:f5:de:1c:1a:d6:0f:5a:32:89:6c:76:a9:c2:be: b4:5e:23:bc:00:fc:c1:62:62:f1:d7:19:cb:47:7f: cf:38:a7:43:b9:96:fc:d0:3c:6e:3d:58:18:00:ce: ad:24:0f:c4:ab:6e:94:9e:6d:aa:51:c3:fa:07:52: a1:41:ad:89:92:18:0c:b2:08:68:18:29:f8:20:f6: d3:ed:e3:19:10:c5:ca:9f:1b:04:7d:81:e0:cb:99: d6:60:68:43:d0:aa:03:b4:d7:ef:8f:f1:44:8a:19: ab:69:96:51:24:4c:b2:b2:c2:2b:18:75:df:10:f6: 24:96:0f:a7:86:7a:fb:dc:eb:0d:82:44:a7:96:bf: 64:90:c6:67:1b:46:1e:b8:36:d7:5a:a1:79:f6:f8: f5:85:98:fc:f3:23:b3:08:12:4e:08:12:83:22:3d: 46:2a:d9:eb:eb:79:9d:75:9d:88:98:d3:4f:7c:9d: a3:e4:cf:85:51:ff:c8:a9:ef:f0:64:d9:54:72:76: 7b:ae:1e:16:db:a5:eb:7b:91:95:eb:ac:9a:89:59: 76:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:43:42:3F:DB:D5:F8:33:7C:AD:38:9A:30:AC:C2:8F:F6:49:1D:34 X509v3 Authority Key Identifier: keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/MENCP9vV-DN8rTiaMKzCj_ZJHTQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.152.229.0/24 Signature Algorithm: sha256WithRSAEncryption 42:24:f1:ca:8d:4a:79:6c:43:7d:b2:94:13:e0:77:e6:6f:50: ec:b9:c5:17:cc:81:28:4c:ba:f6:25:44:fc:b3:3e:ed:fd:28: fe:d3:4c:68:70:98:51:43:05:0d:d8:d7:60:a0:1e:8c:9b:2d: 1e:86:31:51:e3:78:fa:e1:58:f5:76:88:9f:2b:72:14:58:45: c5:96:f6:86:79:f7:ea:eb:04:55:b0:23:dc:37:df:af:2f:94: 67:2e:68:93:f0:25:42:ad:ec:06:e2:3b:95:49:00:4f:51:64: d1:73:12:fc:7d:44:10:b5:59:0f:46:3e:e2:be:9a:ab:23:c1: 61:3b:73:0e:33:8b:77:22:8b:f4:e0:23:83:36:83:06:32:ab: 74:6c:b3:99:0f:cb:99:13:ea:91:93:77:84:78:93:21:a5:df: 0c:14:7c:63:fb:ff:10:e0:6e:7a:08:49:61:56:98:0e:3c:86: 3c:65:83:2a:f6:ad:82:ab:9d:17:fc:dd:2c:4d:22:13:95:4a: ab:42:82:be:85:bf:e5:52:d8:bc:9a:53:2c:b5:d7:d5:38:20: 61:f0:00:d1:be:05:68:cb:4c:e6:a4:eb:f7:e9:4f:8d:0d:27: 05:c8:ff:07:7b:01:3f:6c:2c:c9:79:78:d9:50:ca:b9:c6:6e: f7:b9:fe:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gSkgEUefrMg4rwQzns2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl YmUyNTcwHhcNMjYwMTAyMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDQzNDIzZmRiZDVmODMzN2NhZDM4OWEzMGFjYzI4ZmY2NDkxZDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKC7CbjDlnZHpZPWm2+tiBlukd9C gc0lFlWkignviMDrCF6rdHs6JwMjdzbF9d4cGtYPWjKJbHapwr60XiO8APzBYmLx 1xnLR3/POKdDuZb80DxuPVgYAM6tJA/Eq26Unm2qUcP6B1KhQa2JkhgMsghoGCn4 IPbT7eMZEMXKnxsEfYHgy5nWYGhD0KoDtNfvj/FEihmraZZRJEyyssIrGHXfEPYk lg+nhnr73OsNgkSnlr9kkMZnG0YeuDbXWqF59vj1hZj88yOzCBJOCBKDIj1GKtnr 63mddZ2ImNNPfJ2j5M+FUf/Iqe/wZNlUcnZ7rh4W26Xre5GV66yaiVl2ZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDBDQj/b1fgzfK04mjCswo/2SR00MB8GA1UdIwQY MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt ZGI0ZjM1MmU5YWQzLzEvTUVOQ1A5dlYtRE44clRpYU1LekNqX1pKSFRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZjlMA0G CSqGSIb3DQEBCwUAA4IBAQBCJPHKjUp5bEN9spQT4Hfmb1DsucUXzIEoTLr2JUT8 sz7t/Sj+00xocJhRQwUN2NdgoB6Mmy0ehjFR43j64Vj1doifK3IUWEXFlvaGeffq 6wRVsCPcN9+vL5RnLmiT8CVCrewG4juVSQBPUWTRcxL8fUQQtVkPRj7ivpqrI8Fh O3MOM4t3Iov04CODNoMGMqt0bLOZD8uZE+qRk3eEeJMhpd8MFHxj+/8Q4G56CElh VpgOPIY8ZYMq9q2Cq50X/N0sTSITlUqrQoK+hb/lUti8mlMstdfVOCBh8ADRvgVo y0zmpOv36U+NDScFyP8HewE/bCzJeXjZUMq5xm73uf6x -----END CERTIFICATE-----Generated at Wed Jan 21 03:49:03 2026 by rpki-client