This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/zME1WFoRh6GqaPzADmS07nwFUXE.roa
File: zME1WFoRh6GqaPzADmS07nwFUXE.roa (raw, json)
Hash identifier: MBO6edszyU/3LqNcGj8Wt6ppE17UZEnfTFiAe2dy7Go=
Subject key identifier: CC:C1:35:58:5A:11:87:A1:AA:68:FC:C0:0E:64:B4:EE:7C:05:51:71
Certificate issuer: /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial: 019B7C80553E2B86D7DB9EA06910A9694C53
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/zME1WFoRh6GqaPzADmS07nwFUXE.roa
Signing time: Fri 02 Jan 2026 02:19:03 +0000
ROA not before: Fri 02 Jan 2026 02:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215000
IP address blocks: 185.19.151.0/24 maxlen: 24
185.61.112.0/24 maxlen: 24
185.61.113.0/24 maxlen: 24
185.61.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:55:3e:2b:86:d7:db:9e:a0:69:10:a9:69:4c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
Validity
Not Before: Jan 2 02:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccc135585a1187a1aa68fcc00e64b4ee7c055171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:18:63:db:c6:e2:e1:41:06:cd:3a:3a:d1:
4e:77:5b:52:08:ba:c2:e0:9e:cc:66:32:41:30:71:
36:c9:fe:4f:37:f6:cb:01:ab:58:ea:06:ee:00:50:
7d:09:e2:e9:7b:a7:2b:31:2c:29:92:1e:18:b1:95:
b3:c3:6a:29:88:7c:b2:03:50:b1:02:73:13:ff:82:
12:32:3a:f0:88:31:7a:2d:5f:1e:24:dd:83:72:b5:
07:11:8c:1c:fa:8e:1b:e3:fe:f3:e5:0d:3b:10:80:
96:d8:76:95:e1:aa:10:50:10:c3:78:e8:05:ac:3c:
ba:e9:42:98:78:72:a3:66:34:55:c4:c7:3b:14:19:
f2:b4:56:f3:ee:ff:e2:62:1e:14:55:70:fd:bb:64:
cb:f5:cf:12:c9:38:4d:cb:a3:96:b2:b3:19:72:0e:
ab:04:60:e1:d1:52:94:d9:79:8f:71:88:1c:8a:df:
6d:e2:27:12:79:5e:9e:7e:d5:3b:b7:67:fe:1c:a9:
80:b9:9c:f2:09:ae:be:7e:cd:6f:cf:87:53:58:82:
30:17:4c:a7:56:ea:cc:22:83:57:8f:a0:ee:0a:12:
13:ff:09:5a:42:e6:9a:b8:d4:e3:40:04:cb:a2:75:
17:42:4b:d0:35:ce:e1:94:f7:29:0e:5c:40:e9:dc:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C1:35:58:5A:11:87:A1:AA:68:FC:C0:0E:64:B4:EE:7C:05:51:71
X509v3 Authority Key Identifier:
keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/zME1WFoRh6GqaPzADmS07nwFUXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.151.0/24
185.61.112.0-185.61.114.255
Signature Algorithm: sha256WithRSAEncryption
27:ca:f8:3d:9a:df:b7:ee:de:ac:f0:d1:be:15:9a:24:0c:8a:
56:43:d7:5b:38:90:25:d4:7e:b8:1e:38:43:1d:be:cb:85:bf:
c8:58:df:b7:00:74:49:dd:2a:05:9d:3e:bd:80:62:84:f9:4e:
d3:bb:aa:8d:0d:ed:4e:37:e2:aa:fc:96:1c:d8:73:12:85:46:
64:07:45:3d:c5:42:9a:9a:82:e2:4e:76:fa:43:df:61:17:02:
b8:8a:4b:9b:fd:b7:cc:e7:3a:b5:9f:6b:41:e3:3b:b7:f1:e3:
15:6e:42:df:7c:ab:5d:fd:77:33:fb:a0:ff:3f:39:89:13:bf:
d8:c2:91:91:32:c6:02:30:b6:81:5e:fe:65:73:12:ae:46:01:
29:13:04:4b:11:40:79:23:fc:8f:3e:bc:0b:a9:0c:4b:91:79:
aa:a9:69:b3:41:d4:7b:d8:c8:70:f6:98:28:25:b5:83:d5:c4:
55:c0:f5:0b:e4:be:3d:1d:1a:ac:e4:6d:c4:24:8a:db:df:d5:
3b:f6:b7:20:1c:2f:1d:29:10:e4:b5:6d:aa:60:3c:8c:eb:d1:
b7:31:14:0e:6d:b2:e9:49:8f:ac:ec:52:5e:28:19:5d:65:f7:
42:e2:bb:7a:91:3a:4c:f4:5b:99:a7:d0:94:55:e2:ac:7b:dd:
a8:a5:1c:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 24 23:59:12 2026 by rpki-client