This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/ME-WSg_qDtNY1enNt8ZxubiSk_k.roa File: ME-WSg_qDtNY1enNt8ZxubiSk_k.roa (raw, json) Hash identifier: FTTWPKUGtwY38rjYU+89HgDF4DYinIX0Sq5ZBNPIMPU= Subject key identifier: 30:4F:96:4A:0F:EA:0E:D3:58:D5:E9:CD:B7:C6:71:B9:B8:92:93:F9 Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41 Certificate serial: 019BE0B051A4E104D973D49974354E64EB79 Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/ME-WSg_qDtNY1enNt8ZxubiSk_k.roa Signing time: Wed 21 Jan 2026 13:13:30 +0000 ROA not before: Wed 21 Jan 2026 13:13:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25717 IP address blocks: 171.25.128.0/21 maxlen: 21 171.25.138.0/24 maxlen: 24 171.25.139.0/24 maxlen: 24 171.25.140.0/24 maxlen: 24 171.25.141.0/24 maxlen: 24 171.25.142.0/24 maxlen: 24 171.25.143.0/24 maxlen: 24 193.221.16.0/24 maxlen: 24 193.221.17.0/24 maxlen: 24 193.221.18.0/24 maxlen: 24 193.221.19.0/24 maxlen: 24 193.221.20.0/24 maxlen: 24 193.221.21.0/24 maxlen: 24 193.221.22.0/24 maxlen: 24 193.221.23.0/24 maxlen: 24 193.221.28.0/24 maxlen: 24 193.221.32.0/24 maxlen: 24 193.221.33.0/24 maxlen: 24 193.221.34.0/24 maxlen: 24 193.221.35.0/24 maxlen: 24 193.221.36.0/24 maxlen: 24 193.221.37.0/24 maxlen: 24 193.221.38.0/24 maxlen: 24 193.221.47.0/24 maxlen: 24 193.221.52.0/24 maxlen: 24 193.221.53.0/24 maxlen: 24 193.221.54.0/23 maxlen: 23 193.221.56.0/24 maxlen: 24 193.221.57.0/24 maxlen: 24 193.221.59.0/24 maxlen: 24 193.221.66.0/24 maxlen: 24 193.221.68.0/24 maxlen: 24 193.221.69.0/24 maxlen: 24 193.221.70.0/23 maxlen: 23 193.221.72.0/24 maxlen: 24 193.221.74.0/24 maxlen: 24 193.221.75.0/24 maxlen: 24 193.221.76.0/24 maxlen: 24 193.221.77.0/24 maxlen: 24 193.221.78.0/24 maxlen: 24 193.221.79.0/24 maxlen: 24 193.221.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:b0:51:a4:e1:04:d9:73:d4:99:74:35:4e:64:eb:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41 Validity Not Before: Jan 21 13:13:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=304f964a0fea0ed358d5e9cdb7c671b9b89293f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:82:7b:57:26:83:90:fc:f4:9c:ad:d7:72:ca: 71:89:98:57:9a:fa:eb:90:8c:95:c6:65:25:e3:1c: 67:4c:cf:c1:e5:59:33:35:8c:5f:5f:60:c9:f9:17: 5d:ea:2e:20:27:cf:64:78:27:c6:67:f1:57:dc:b1: e2:6c:0b:4e:fc:66:bc:aa:b9:ee:cc:3c:82:9d:3d: 9e:00:9f:41:83:c1:ab:1a:85:ee:3c:b8:65:98:19: 0a:02:52:93:90:65:3d:f9:d0:f3:ba:bf:81:20:09: ef:d2:46:11:50:26:e0:ee:fb:93:5c:18:54:bf:00: e9:3a:dc:51:84:3b:dd:71:ec:94:72:aa:e9:dd:dc: 2f:fc:e0:b7:07:fb:29:f7:91:78:6c:e0:d9:bd:04: 3f:2e:ab:f3:f1:c9:3f:fb:16:44:0b:b8:04:4d:83: 93:fa:82:ea:9f:de:0d:bb:79:98:14:10:39:19:59: 2b:70:9a:b6:78:62:3f:73:35:97:08:e7:ca:56:92: 81:1f:6d:d4:30:fe:ae:72:a5:43:07:76:62:ea:ad: b2:f4:ad:a5:f0:d6:64:97:db:e8:77:6d:1d:f2:12: 94:a1:a3:22:77:29:f7:15:75:74:a1:89:39:f8:90: 11:55:eb:12:27:90:71:be:4c:29:53:b5:07:9b:09: 38:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4F:96:4A:0F:EA:0E:D3:58:D5:E9:CD:B7:C6:71:B9:B8:92:93:F9 X509v3 Authority Key Identifier: keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/ME-WSg_qDtNY1enNt8ZxubiSk_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.25.128.0/21 171.25.138.0-171.25.143.255 193.221.16.0/21 193.221.28.0/24 193.221.32.0-193.221.38.255 193.221.47.0/24 193.221.52.0-193.221.57.255 193.221.59.0/24 193.221.66.0/24 193.221.68.0-193.221.72.255 193.221.74.0-193.221.80.255 Signature Algorithm: sha256WithRSAEncryption 22:78:ad:f8:8a:68:2e:4b:3d:10:58:75:0d:f8:a0:75:76:b4: 9b:97:0c:34:ec:c7:49:74:38:d3:16:61:13:e6:68:52:71:fb: f6:82:80:a7:a4:0e:4d:17:49:d9:ea:16:25:31:e1:d9:d9:bd: 6c:77:ea:a8:0c:9e:b9:c4:75:88:12:c4:24:39:8e:0e:46:48: 59:cd:df:3c:4e:39:8d:dc:86:27:b9:c1:b2:86:7e:98:f5:eb: ae:f0:81:75:a3:4b:39:d8:b4:5f:a2:bf:d0:30:be:06:ff:db: 80:d8:6d:6e:39:30:62:6b:f5:e2:20:e1:7d:17:c1:16:e0:6e: e6:8a:04:1a:23:62:95:18:a7:4c:e3:f9:ce:c9:d3:d6:a2:5e: 4a:df:9c:4e:e1:40:29:c1:3b:ba:4f:af:5a:ec:26:fd:7d:d8: 83:48:1c:ba:54:e9:c1:85:e0:4e:be:4f:b0:c5:c6:86:e1:ed: 59:22:00:a7:ca:16:e9:68:2d:6c:69:ea:2d:0b:5c:e0:84:f5: 89:c9:75:10:3d:08:c7:2c:c2:a0:3e:fb:b0:91:25:de:46:5e: fb:2f:5c:51:95:de:c4:b9:b9:61:b3:0d:51:33:fa:aa:b2:ac: 30:d2:e4:37:ac:a5:6f:34:5b:e9:51:96:0d:5a:b3:5f:3a:49: 24:bc:71:6e -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISAZvgsFGk4QTZc9SZdDVOZOt5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTRhYjJkNDgxY2YxNjIyYTJjNTIxODNhYjRmNWE5MzBh NGFlNDEwHhcNMjYwMTIxMTMxMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDRmOTY0YTBmZWEwZWQzNThkNWU5Y2RiN2M2NzFiOWI4OTI5M2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoJ7VyaDkPz0nK3XcspxiZhXmvrr kIyVxmUl4xxnTM/B5VkzNYxfX2DJ+Rdd6i4gJ89keCfGZ/FX3LHibAtO/Ga8qrnu zDyCnT2eAJ9Bg8GrGoXuPLhlmBkKAlKTkGU9+dDzur+BIAnv0kYRUCbg7vuTXBhU vwDpOtxRhDvdceyUcqrp3dwv/OC3B/sp95F4bODZvQQ/Lqvz8ck/+xZEC7gETYOT +oLqn94Nu3mYFBA5GVkrcJq2eGI/czWXCOfKVpKBH23UMP6ucqVDB3Zi6q2y9K2l 8NZkl9vod20d8hKUoaMidyn3FXV0oYk5+JARVesSJ5BxvkwpU7UHmwk43wIDAQAB o4ICbjCCAmowHQYDVR0OBBYEFDBPlkoP6g7TWNXpzbfGcbm4kpP5MB8GA1UdIwQY MBaAFP5Uqy1IHPFiKixSGDq09akwpK5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYt MWIxMzYyYjliNmEyLzEvTUUtV1NnX3FEdE5ZMWVuTnQ4Wnh1YmlTa19rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYtMWIxMzYyYjliNmEy LzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEA6sZgDAM AwQBqxmKAwQEqxmAAwQDwd0QAwQAwd0cMAwDBAXB3SADBADB3SYDBADB3S8wDAME AsHdNAMEAcHdOAMEAMHdOwMEAMHdQjAMAwQCwd1EAwQAwd1IMAwDBAHB3UoDBADB 3VAwDQYJKoZIhvcNAQELBQADggEBACJ4rfiKaC5LPRBYdQ34oHV2tJuXDDTsx0l0 ONMWYRPmaFJx+/aCgKekDk0XSdnqFiUx4dnZvWx36qgMnrnEdYgSxCQ5jg5GSFnN 3zxOOY3chie5wbKGfpj1667wgXWjSznYtF+iv9Awvgb/24DYbW45MGJr9eIg4X0X wRbgbuaKBBojYpUYp0zj+c7J09aiXkrfnE7hQCnBO7pPr1rsJv192INIHLpU6cGF 4E6+T7DFxobh7VkiAKfKFuloLWxp6i0LXOCE9YnJdRA9CMcswqA++7CRJd5GXvsv XFGV3sS5uWGzDVEz+qqyrDDS5DespW80W+lRlg1as186SSS8cW4= -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:22 2026 by rpki-client