This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/2E-MME-lm4K0uyBTuIg5ZM5-8I8.roa File: 2E-MME-lm4K0uyBTuIg5ZM5-8I8.roa (raw, json) Hash identifier: JzkT3L/H7HMV5VqAPBU8OB3GqfswpWq+Tu8hcXApBv8= Subject key identifier: D8:4F:8C:30:4F:A5:9B:82:B4:BB:20:53:B8:88:39:64:CE:7E:F0:8F Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Certificate serial: 019B7F84FC6A49C0F39DBCAAE82B73DEC70B Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/2E-MME-lm4K0uyBTuIg5ZM5-8I8.roa Signing time: Fri 02 Jan 2026 16:23:00 +0000 ROA not before: Fri 02 Jan 2026 16:23:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42571 IP address blocks: 94.250.64.0/24 maxlen: 24 94.250.65.0/24 maxlen: 24 94.250.66.0/24 maxlen: 24 94.250.67.0/24 maxlen: 24 94.250.68.0/22 maxlen: 22 94.250.72.0/21 maxlen: 21 94.250.80.0/23 maxlen: 24 94.250.82.0/23 maxlen: 24 94.250.96.0/20 maxlen: 24 94.250.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:fc:6a:49:c0:f3:9d:bc:aa:e8:2b:73:de:c7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Validity Not Before: Jan 2 16:23:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d84f8c304fa59b82b4bb2053b8883964ce7ef08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b0:05:bd:22:70:12:a6:db:b5:e8:2e:c1:f0: 2b:e0:0a:9c:eb:e6:0e:b9:fc:6b:f7:2e:bd:d8:c2: e7:15:81:b6:8f:5d:4b:6a:2c:96:f8:21:ea:67:12: 2a:bb:43:b1:5f:68:4f:7d:00:af:b1:c5:a7:f8:66: 2a:1b:49:8b:01:de:af:fa:3b:6d:ff:4b:84:0a:ad: 2a:ce:89:2c:c3:78:8d:03:81:ad:1c:0c:dd:38:be: 58:61:3b:a0:c9:54:3f:0f:cb:8f:db:2b:47:a8:b0: 8f:9b:e2:6a:80:7b:f9:62:2b:9d:be:de:c2:16:25: fb:51:04:64:40:03:34:40:be:cc:21:4a:e4:1f:e0: 78:d4:a5:30:54:5b:2c:c6:00:6c:36:1c:cc:92:83: 79:3b:0f:c1:f1:4a:1d:a3:6a:a4:3b:40:09:00:5a: ca:dc:1b:78:b7:ac:ed:d5:2f:3a:de:19:a1:0e:45: d2:72:50:99:10:1b:0a:c0:18:d5:a1:76:ab:41:48: 0e:97:19:08:a5:dd:89:4d:99:67:05:6e:76:f1:f9: 9d:13:eb:b8:18:da:5a:34:35:59:09:69:f8:41:da: f2:e4:7b:50:d9:af:1a:23:ca:9b:a5:7e:07:d0:60: 31:60:9e:ec:d1:0c:bd:95:90:67:15:4c:d9:e6:62: fe:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4F:8C:30:4F:A5:9B:82:B4:BB:20:53:B8:88:39:64:CE:7E:F0:8F X509v3 Authority Key Identifier: keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/2E-MME-lm4K0uyBTuIg5ZM5-8I8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.250.64.0-94.250.83.255 94.250.96.0-94.250.115.255 Signature Algorithm: sha256WithRSAEncryption 26:6c:62:25:e1:56:c2:15:76:1d:ad:a0:b3:16:cb:53:e4:b4: 4e:e2:ce:a4:28:8c:7b:96:f6:48:8b:62:39:d7:78:25:dc:45: 79:26:37:f6:9c:30:a0:d7:0c:77:68:26:88:c1:44:01:06:60: df:b6:70:37:62:b4:69:33:27:cb:5f:bb:08:1c:2b:5d:94:c6: 0f:e8:3a:91:ae:e6:74:0c:7f:2a:d4:ca:c6:b6:8c:f4:38:7a: 39:0b:65:0c:ac:7a:e1:c5:64:05:87:c4:8f:b6:79:05:a0:52: fc:46:44:07:0d:0e:2f:9e:cd:16:5a:72:25:8c:bd:17:7d:cd: 62:41:ec:d3:83:f7:5c:0c:09:ba:29:aa:7f:82:47:96:f7:ef: ec:5e:30:70:42:fc:95:a3:a2:44:5e:70:aa:dd:7b:b8:6d:c6: 2b:7a:6b:61:09:2b:5a:3e:b2:1c:f6:77:61:77:b0:96:bd:1a: 17:e9:78:f7:bb:e1:bf:fc:7e:97:2d:17:f9:c1:9f:6e:74:69: 39:9a:52:ba:0e:48:0e:74:06:09:ce:13:4d:22:95:98:a5:23: 62:e3:98:3a:23:e2:fd:20:e6:ac:9b:c7:fb:59:4b:13:19:5f: 8f:6d:5f:49:2c:74:3d:9a:ec:15:ac:43:d6:bc:84:f6:83:1d: ce:75:74:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt/hPxqScDznbyq6Ctz3scLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YTk5NjRlMGNkMzVmYjM2NzU3ZTU2NTNmZmE3NjI2YWM1 ZGVlZTgwHhcNMjYwMTAyMTYyMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODRmOGMzMDRmYTU5YjgyYjRiYjIwNTNiODg4Mzk2NGNlN2VmMDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67AFvSJwEqbbteguwfAr4Aqc6+YO ufxr9y692MLnFYG2j11LaiyW+CHqZxIqu0OxX2hPfQCvscWn+GYqG0mLAd6v+jtt /0uECq0qzoksw3iNA4GtHAzdOL5YYTugyVQ/D8uP2ytHqLCPm+JqgHv5Yiudvt7C FiX7UQRkQAM0QL7MIUrkH+B41KUwVFssxgBsNhzMkoN5Ow/B8Uodo2qkO0AJAFrK 3Bt4t6zt1S863hmhDkXSclCZEBsKwBjVoXarQUgOlxkIpd2JTZlnBW528fmdE+u4 GNpaNDVZCWn4Qdry5HtQ2a8aI8qbpX4H0GAxYJ7s0Qy9lZBnFUzZ5mL+SwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFNhPjDBPpZuCtLsgU7iIOWTOfvCPMB8GA1UdIwQY MBaAFCmplk4M01+zZ1flZT/6diasXe7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTIt ZDliNTMzZjdmYmMzLzEvMkUtTU1FLWxtNEswdXlCVHVJZzVaTTUtOEk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTItZDliNTMzZjdmYmMz LzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAZe+kAD BAJe+lAwDAMEBV76YAMEAl76cDANBgkqhkiG9w0BAQsFAAOCAQEAJmxiJeFWwhV2 Ha2gsxbLU+S0TuLOpCiMe5b2SItiOdd4JdxFeSY39pwwoNcMd2gmiMFEAQZg37Zw N2K0aTMny1+7CBwrXZTGD+g6ka7mdAx/KtTKxraM9Dh6OQtlDKx64cVkBYfEj7Z5 BaBS/EZEBw0OL57NFlpyJYy9F33NYkHs04P3XAwJuimqf4JHlvfv7F4wcEL8laOi RF5wqt17uG3GK3prYQkrWj6yHPZ3YXewlr0aF+l497vhv/x+ly0X+cGfbnRpOZpS ug5IDnQGCc4TTSKVmKUjYuOYOiPi/SDmrJvH+1lLExlfj21fSSx0PZrsFaxD1ryE 9oMdznV0Mg== -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:46 2026 by rpki-client