This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/Me7XtuRdIVZUbFTlkKpYNs199RM.roa File: Me7XtuRdIVZUbFTlkKpYNs199RM.roa (raw, json) Hash identifier: 2FYoEiQSEHRljfdP8hVbR34ZxR+Jq9T0ORhGnMfjG70= Subject key identifier: 31:EE:D7:B6:E4:5D:21:56:54:6C:54:E5:90:AA:58:36:CD:7D:F5:13 Certificate issuer: /CN=86497682e9307c4687935008173147d132a28c64 Certificate serial: 019B7834DD4384F721F88065A9914A343A92 Authority key identifier: 86:49:76:82:E9:30:7C:46:87:93:50:08:17:31:47:D1:32:A2:8C:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/Me7XtuRdIVZUbFTlkKpYNs199RM.roa Signing time: Thu 01 Jan 2026 06:18:09 +0000 ROA not before: Thu 01 Jan 2026 06:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60782 IP address blocks: 79.139.66.0/24 maxlen: 32 79.139.68.0/22 maxlen: 32 79.139.116.0/22 maxlen: 32 185.74.84.0/22 maxlen: 32 185.97.16.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:dd:43:84:f7:21:f8:80:65:a9:91:4a:34:3a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86497682e9307c4687935008173147d132a28c64 Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31eed7b6e45d2156546c54e590aa5836cd7df513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:b6:d2:ac:88:78:b9:8c:15:f5:b6:5b:df: b1:53:d0:14:b4:6b:9b:c7:04:7f:44:51:08:32:69: 25:35:96:a7:de:3c:7f:9e:0b:46:5b:fd:3d:ff:a1: 84:03:db:2d:5c:6e:e9:21:e9:43:ad:5f:40:84:92: e1:27:c9:55:d8:a9:4b:54:06:81:36:96:41:03:95: df:97:0d:3c:0d:cc:b4:71:0b:4a:df:72:fc:17:d2: c5:51:f0:8c:be:e8:14:eb:ec:a2:b0:3e:eb:a9:f0: d8:6b:e1:55:03:75:66:b2:f4:70:82:ad:db:98:7f: 8d:1e:ca:22:02:15:d4:8c:c9:47:0d:20:b1:a2:ea: b8:c7:6f:0b:c1:5c:32:b1:af:ab:8a:1c:c9:5b:9e: 17:61:4f:15:9e:ec:cf:e0:d5:7d:7a:fd:7f:ff:08: f4:c8:0f:26:a0:fb:4f:78:93:1e:0a:3d:db:e6:1a: 3a:84:a4:22:ee:fb:fb:fe:2e:c8:67:78:86:d8:e3: 62:44:8d:d2:cf:d9:f2:ea:a1:43:29:94:af:89:37: 1f:b9:85:ce:a6:c8:5f:90:ad:b6:fb:16:fc:88:21: a2:40:5a:f1:70:c1:33:76:34:a0:e9:8a:5c:83:3a: 18:6a:37:08:08:4f:1a:4c:8f:71:5a:97:21:a9:12: 4b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EE:D7:B6:E4:5D:21:56:54:6C:54:E5:90:AA:58:36:CD:7D:F5:13 X509v3 Authority Key Identifier: keyid:86:49:76:82:E9:30:7C:46:87:93:50:08:17:31:47:D1:32:A2:8C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/Me7XtuRdIVZUbFTlkKpYNs199RM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.139.66.0/24 79.139.68.0/22 79.139.116.0/22 185.74.84.0/22 185.97.16.0/22 Signature Algorithm: sha256WithRSAEncryption af:ff:09:99:33:ee:a2:09:40:34:df:38:ed:de:8e:35:8d:12: 5b:0c:94:09:22:65:2c:5a:12:37:15:f9:79:3e:6c:d4:4b:0e: a5:52:f6:ed:96:7f:ff:be:55:72:c3:2a:2e:5f:f5:1f:92:e6: 8a:02:72:1a:3c:7a:61:87:ea:f6:07:72:8c:f3:37:12:5f:de: 26:b1:c2:a0:20:65:1e:e9:5b:92:d1:a6:39:be:46:09:1f:73: f9:ad:96:3c:44:51:fc:e1:83:9c:51:31:3d:c0:7c:c4:1e:2e: f0:d1:35:c0:c2:1a:33:ae:e5:b7:b0:b7:35:c3:0d:a5:ef:18: ef:a9:42:07:7d:78:bb:e4:c7:70:cf:58:85:f6:28:14:66:92: b7:6a:d2:08:6e:4f:14:62:b1:6c:ec:3b:77:9f:e8:3c:b8:a7: b3:52:b8:ed:e0:91:1f:d6:dc:54:01:5a:46:07:5f:8a:35:c1: 4f:fd:74:9a:b2:a9:0a:99:1f:5d:25:b8:9d:0e:13:87:11:e3: b9:b6:a6:66:df:02:15:ca:ea:11:96:be:2a:14:dc:59:ad:98: 15:05:d0:0a:2c:1a:3b:4a:75:22:c1:c4:16:29:ac:82:3e:57: 6b:d4:41:a9:ca:6d:39:2f:8c:d2:a9:9c:ad:28:20:ce:0f:fa: b3:22:6c:d2 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4NN1DhPch+IBlqZFKNDqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NDk3NjgyZTkzMDdjNDY4NzkzNTAwODE3MzE0N2QxMzJh MjhjNjQwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWVlZDdiNmU0NWQyMTU2NTQ2YzU0ZTU5MGFhNTgzNmNkN2RmNTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKi20qyIeLmMFfW2W9+xU9AUtGub xwR/RFEIMmklNZan3jx/ngtGW/09/6GEA9stXG7pIelDrV9AhJLhJ8lV2KlLVAaB NpZBA5Xflw08Dcy0cQtK33L8F9LFUfCMvugU6+yisD7rqfDYa+FVA3VmsvRwgq3b mH+NHsoiAhXUjMlHDSCxouq4x28LwVwysa+rihzJW54XYU8VnuzP4NV9ev1//wj0 yA8moPtPeJMeCj3b5ho6hKQi7vv7/i7IZ3iG2ONiRI3Sz9ny6qFDKZSviTcfuYXO pshfkK22+xb8iCGiQFrxcMEzdjSg6YpcgzoYajcICE8aTI9xWpchqRJL+QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDHu17bkXSFWVGxU5ZCqWDbNffUTMB8GA1UdIwQY MBaAFIZJdoLpMHxGh5NQCBcxR9EyooxkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGtsMmd1a3dmRWFIazFBSUZ6RkgwVEtpakdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jMWE3NTQtMWY5Ni00NTAwLTgxMDIt OTExNDBmMzI5ZWFhLzEvTWU3WHR1UmRJVlpVYkZUbGtLcFlOczE5OVJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9jMWE3NTQtMWY5Ni00NTAwLTgxMDItOTExNDBmMzI5ZWFh LzEvaGtsMmd1a3dmRWFIazFBSUZ6RkgwVEtpakdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAT4tCAwQC T4tEAwQCT4t0AwQCuUpUAwQCuWEQMA0GCSqGSIb3DQEBCwUAA4IBAQCv/wmZM+6i CUA03zjt3o41jRJbDJQJImUsWhI3Ffl5PmzUSw6lUvbtln//vlVywyouX/UfkuaK AnIaPHphh+r2B3KM8zcSX94mscKgIGUe6VuS0aY5vkYJH3P5rZY8RFH84YOcUTE9 wHzEHi7w0TXAwhozruW3sLc1ww2l7xjvqUIHfXi75Mdwz1iF9igUZpK3atIIbk8U YrFs7Dt3n+g8uKezUrjt4JEf1txUAVpGB1+KNcFP/XSasqkKmR9dJbidDhOHEeO5 tqZm3wIVyuoRlr4qFNxZrZgVBdAKLBo7SnUiwcQWKayCPldr1EGpym05L4zSqZyt KCDOD/qzImzS -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:02 2026 by rpki-client