This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/mEsmgRBnEAKsLjbsbGbasW4ifmc.roa File: mEsmgRBnEAKsLjbsbGbasW4ifmc.roa (raw, json) Hash identifier: fHfHZKhEOntqAJkVOSaBpABbPFKRSk/D0x4+wwKsw0c= Subject key identifier: 98:4B:26:81:10:67:10:02:AC:2E:36:EC:6C:66:DA:B1:6E:22:7E:67 Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3 Certificate serial: 019B79ED1DA1FD471C185CC9714EDA5CDD52 Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/mEsmgRBnEAKsLjbsbGbasW4ifmc.roa Signing time: Thu 01 Jan 2026 14:19:01 +0000 ROA not before: Thu 01 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15083 IP address blocks: 91.200.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Feb 2026 23:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1d:a1:fd:47:1c:18:5c:c9:71:4e:da:5c:dd:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3 Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=984b268110671002ac2e36ec6c66dab16e227e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a1:4d:b5:ad:e9:e6:07:d9:82:bc:b6:c6:12: 4b:de:90:e7:fb:60:4b:c9:26:0f:be:1d:0c:9a:4a: 65:e9:ae:e3:70:b5:f8:b4:aa:92:9e:17:5a:98:fb: 46:9b:94:4b:82:c4:ad:a3:e5:b2:62:23:21:29:07: 4c:2b:74:10:70:98:9a:1f:f3:90:b9:0e:d5:86:81: 56:49:13:65:2a:40:b9:87:e3:0a:c7:a4:de:32:e5: 2b:c5:37:3e:36:57:c1:eb:03:b4:fb:9f:79:f3:18: 0d:23:96:30:81:64:bd:c9:a5:87:4d:d6:89:0f:86: ac:a6:07:4d:8d:ef:eb:b6:0a:b3:a6:c4:0b:35:15: c3:3e:07:99:3d:4b:3d:c5:33:3f:99:3b:aa:e9:98: 58:f6:73:51:fa:9d:ba:6a:a3:16:6c:33:2f:7e:36: 19:82:11:65:a5:4f:1c:57:ed:d7:2a:a7:c7:c0:ac: de:e7:4e:1f:0f:41:47:a3:0d:2f:de:aa:10:c3:a7: a4:d0:0c:fa:9f:64:cf:1d:eb:04:02:87:b9:dd:1a: 17:c2:41:16:45:a3:04:90:06:db:05:2b:94:24:d2: 7c:28:e4:18:21:64:03:b3:3a:37:2f:52:31:a2:cb: 1e:07:7d:dc:83:f8:90:a5:c1:9e:a1:f0:3a:d2:6b: 90:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4B:26:81:10:67:10:02:AC:2E:36:EC:6C:66:DA:B1:6E:22:7E:67 X509v3 Authority Key Identifier: keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/mEsmgRBnEAKsLjbsbGbasW4ifmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.145.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:61:b2:2e:e8:21:f6:35:b3:4a:80:6a:d4:cf:74:81:68:f3: 82:37:f9:b7:30:06:58:18:c6:2a:7a:08:11:d4:19:c0:43:4d: da:63:8f:14:d2:b1:ff:35:61:15:42:71:ff:9b:1e:37:f3:11: 90:20:12:a5:91:8e:f1:eb:de:f8:c3:5f:12:4c:48:14:a7:7e: 43:a2:bc:5d:5f:e4:8b:46:b9:63:85:53:25:42:26:e2:d1:53: c8:c5:0a:0a:79:71:8d:96:21:68:a2:5a:4b:7f:75:06:2e:fc: 3f:eb:fa:57:b4:06:f0:3c:b5:37:b3:5a:33:6a:eb:ef:3a:a4: d9:04:1a:57:cc:0b:f2:5b:5e:51:4a:73:99:35:5a:7a:cd:06: af:95:86:d1:69:47:f5:6e:8d:f9:41:84:88:95:14:91:f6:7e: 93:03:65:a3:3b:3a:21:da:33:5b:a8:a7:87:6c:15:ab:17:d4: 39:2e:b1:66:ca:b4:d3:05:be:06:7d:1d:32:ec:25:64:01:26: 17:89:68:6d:66:9f:64:5a:11:03:81:f5:c6:0b:0b:ad:94:81: d9:99:e2:7e:c0:4a:ca:bd:a9:26:99:30:94:04:9d:20:e7:55: f8:87:f1:e1:69:a1:e1:23:88:5a:60:b8:05:ed:06:48:30:e7: 00:89:70:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57R2h/UccGFzJcU7aXN1SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmM2VjMjFlMTBmMzY0NmU0ZGMwZTIzZjVmN2VjNDQ1MDE1 NjBkZTMwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODRiMjY4MTEwNjcxMDAyYWMyZTM2ZWM2YzY2ZGFiMTZlMjI3ZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKFNta3p5gfZgry2xhJL3pDn+2BL ySYPvh0Mmkpl6a7jcLX4tKqSnhdamPtGm5RLgsSto+WyYiMhKQdMK3QQcJiaH/OQ uQ7VhoFWSRNlKkC5h+MKx6TeMuUrxTc+NlfB6wO0+5958xgNI5YwgWS9yaWHTdaJ D4aspgdNje/rtgqzpsQLNRXDPgeZPUs9xTM/mTuq6ZhY9nNR+p26aqMWbDMvfjYZ ghFlpU8cV+3XKqfHwKze504fD0FHow0v3qoQw6ek0Az6n2TPHesEAoe53RoXwkEW RaMEkAbbBSuUJNJ8KOQYIWQDszo3L1IxosseB33cg/iQpcGeofA60muQoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJhLJoEQZxACrC427Gxm2rFuIn5nMB8GA1UdIwQY MBaAFJ8+wh4Q82RuTcDiP19+xEUBVg3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82YmFmZTktODc4Yi00NmZkLWEzMDUt N2JhMjVkNTU5NWZhLzEvbUVzbWdSQm5FQUtzTGpic2JHYmFzVzRpZm1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS82YmFmZTktODc4Yi00NmZkLWEzMDUtN2JhMjVkNTU5NWZh LzEvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8iRMA0G CSqGSIb3DQEBCwUAA4IBAQBKYbIu6CH2NbNKgGrUz3SBaPOCN/m3MAZYGMYqeggR 1BnAQ03aY48U0rH/NWEVQnH/mx438xGQIBKlkY7x6974w18STEgUp35DorxdX+SL RrljhVMlQibi0VPIxQoKeXGNliFoolpLf3UGLvw/6/pXtAbwPLU3s1ozauvvOqTZ BBpXzAvyW15RSnOZNVp6zQavlYbRaUf1bo35QYSIlRSR9n6TA2WjOzoh2jNbqKeH bBWrF9Q5LrFmyrTTBb4GfR0y7CVkASYXiWhtZp9kWhEDgfXGCwutlIHZmeJ+wErK vakmmTCUBJ0g51X4h/HhaaHhI4haYLgF7QZIMOcAiXBH -----END CERTIFICATE-----Generated at Fri Feb 13 08:26:57 2026 by rpki-client