This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/1MewjKs7oZbPQCWXkDdeqf-hRUI.roa File: 1MewjKs7oZbPQCWXkDdeqf-hRUI.roa (raw, json) Hash identifier: ZIOY5qx7Rihwq5CYw6fFGk6ypYaqCmJubtJXiapIpl8= Subject key identifier: D4:C7:B0:8C:AB:3B:A1:96:CF:40:25:97:90:37:5E:A9:FF:A1:45:42 Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7 Certificate serial: 019B77588CAB4989D1353DCAEFB6EA15A6F8 Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/1MewjKs7oZbPQCWXkDdeqf-hRUI.roa Signing time: Thu 01 Jan 2026 02:17:30 +0000 ROA not before: Thu 01 Jan 2026 02:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200470 IP address blocks: 185.104.100.0/23 maxlen: 23 185.104.102.0/24 maxlen: 24 185.104.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8c:ab:49:89:d1:35:3d:ca:ef:b6:ea:15:a6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7 Validity Not Before: Jan 1 02:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4c7b08cab3ba196cf40259790375ea9ffa14542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:e4:19:2e:9f:3f:12:cf:e5:50:7c:07:20: 70:d8:a1:6e:f8:a2:a3:95:bc:40:b5:fa:69:4a:90: 8c:e4:8f:e0:d5:c1:66:5b:c9:03:2b:ad:6d:a4:d4: ce:d4:c1:0a:07:07:8d:6c:a1:3a:4a:3f:cc:93:91: 03:0f:e3:7c:8f:5d:9b:c9:d5:5d:8b:80:f7:39:5c: 7c:9c:60:80:6b:6e:d2:e2:ad:49:57:53:84:83:61: a0:14:48:ed:37:f2:28:dd:51:ac:a3:2e:33:f3:dd: d8:08:b8:7c:53:f5:31:52:59:dd:ff:30:23:e6:ba: 7d:63:39:aa:10:eb:e8:ba:77:bc:c5:49:bf:63:6d: 2c:7d:e0:94:60:ac:28:9e:18:31:dc:f2:fd:af:f5: 6f:1d:4b:e5:fa:83:a0:04:84:b8:df:14:7d:9f:8e: 5f:01:e5:f1:53:c1:b2:76:a7:5e:eb:68:7e:3d:81: b2:8a:f4:9c:09:34:47:3c:2f:1f:73:09:73:4f:9d: 1d:d2:d0:2e:4a:28:1c:40:df:97:62:42:cf:d7:06: c2:ba:f5:99:47:2f:80:4a:55:c2:09:26:bb:aa:24: 58:aa:4e:7c:9d:90:d7:3b:29:c2:37:d7:42:41:87: c2:04:b0:85:a3:83:98:ac:73:78:05:9c:dc:16:7e: 0d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C7:B0:8C:AB:3B:A1:96:CF:40:25:97:90:37:5E:A9:FF:A1:45:42 X509v3 Authority Key Identifier: keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/1MewjKs7oZbPQCWXkDdeqf-hRUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.100.0/22 Signature Algorithm: sha256WithRSAEncryption 17:02:73:a8:7b:d1:11:41:db:7c:99:ab:21:37:c0:53:11:bd: 7e:db:9d:e1:6f:a3:63:73:27:bf:aa:98:c9:2a:4a:f7:f6:84: af:db:eb:e9:97:94:a0:99:a7:4e:ff:30:d4:98:ba:f5:3e:92: a6:9b:12:50:6a:e1:82:50:1b:4a:ce:25:81:84:5a:00:61:83: 22:3c:6b:21:0a:ae:3d:9e:f1:4c:db:4a:b3:89:46:e2:b7:77: fe:27:b0:8a:4c:f5:fc:b2:2d:b8:37:6d:51:55:c4:13:d7:cd: 05:fd:60:af:ad:be:57:fb:8f:12:c8:5e:3a:90:4c:c2:41:08: c3:b1:cd:fc:83:8e:38:05:ab:ae:4e:c0:68:e0:09:07:eb:14: ff:32:e3:71:20:72:ca:c4:ac:dc:26:70:12:c3:ea:9c:12:e7: 51:e5:15:bd:5a:2a:3d:93:db:0c:a1:ea:06:18:3b:93:3b:dc: 9f:3a:da:d0:bb:18:65:ba:2f:2c:a6:2b:c8:59:85:c0:e9:1d: 10:49:39:67:29:93:98:d2:49:60:1a:b9:d9:b5:54:c6:f5:4a: 96:bb:db:b5:2b:da:99:f5:4d:8a:67:a3:93:15:e4:1d:8a:ef: 43:c1:e8:a7:ac:44:f5:86:db:cc:52:97:c1:3d:67:7d:08:34: 9b:b7:08:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WIyrSYnRNT3K77bqFab4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YjcwOGI2NTI3YWJiZDJkZTJiOWIzNzM0OTZhYmMxZDc0 OGI2ZTcwHhcNMjYwMTAxMDIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGM3YjA4Y2FiM2JhMTk2Y2Y0MDI1OTc5MDM3NWVhOWZmYTE0NTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzDkGS6fPxLP5VB8ByBw2KFu+KKj lbxAtfppSpCM5I/g1cFmW8kDK61tpNTO1MEKBweNbKE6Sj/Mk5EDD+N8j12bydVd i4D3OVx8nGCAa27S4q1JV1OEg2GgFEjtN/Io3VGsoy4z893YCLh8U/UxUlnd/zAj 5rp9YzmqEOvoune8xUm/Y20sfeCUYKwonhgx3PL9r/VvHUvl+oOgBIS43xR9n45f AeXxU8Gydqde62h+PYGyivScCTRHPC8fcwlzT50d0tAuSigcQN+XYkLP1wbCuvWZ Ry+ASlXCCSa7qiRYqk58nZDXOynCN9dCQYfCBLCFo4OYrHN4BZzcFn4NDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNTHsIyrO6GWz0All5A3Xqn/oUVCMB8GA1UdIwQY MBaAFCS3CLZServS3iubNzSWq8HXSLbnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZTQzYTAtZWRmNS00NDdkLWI0NzMt YjJhMTNhM2E5YjhhLzEvMU1ld2pLczdvWmJQUUNXWGtEZGVxZi1oUlVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lZTQzYTAtZWRmNS00NDdkLWI0NzMtYjJhMTNhM2E5Yjhh LzEvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWhkMA0G CSqGSIb3DQEBCwUAA4IBAQAXAnOoe9ERQdt8mashN8BTEb1+253hb6Njcye/qpjJ Kkr39oSv2+vpl5SgmadO/zDUmLr1PpKmmxJQauGCUBtKziWBhFoAYYMiPGshCq49 nvFM20qziUbit3f+J7CKTPX8si24N21RVcQT180F/WCvrb5X+48SyF46kEzCQQjD sc38g444BauuTsBo4AkH6xT/MuNxIHLKxKzcJnASw+qcEudR5RW9Wio9k9sMoeoG GDuTO9yfOtrQuxhlui8spivIWYXA6R0QSTlnKZOY0klgGrnZtVTG9UqWu9u1K9qZ 9U2KZ6OTFeQdiu9DweinrET1htvMUpfBPWd9CDSbtwjw -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:32 2026 by rpki-client