This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/MEgsMpO50GpXpxsxxetrNja3lOU.roa File: MEgsMpO50GpXpxsxxetrNja3lOU.roa (raw, json) Hash identifier: RmDImTV2djL7wH/XxiypIuMB5zMMFTWTZOyOIxzHADI= Subject key identifier: 30:48:2C:32:93:B9:D0:6A:57:A7:1B:31:C5:EB:6B:36:36:B7:94:E5 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA74CC33631384C7B96D5C0EC9E254D Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/MEgsMpO50GpXpxsxxetrNja3lOU.roa Signing time: Fri 02 Jan 2026 12:20:51 +0000 ROA not before: Fri 02 Jan 2026 12:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48550 IP address blocks: 185.133.210.0/24 maxlen: 24 2a06:e880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4c:c3:36:31:38:4c:7b:96:d5:c0:ec:9e:25:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30482c3293b9d06a57a71b31c5eb6b3636b794e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:87:29:d2:dc:8b:ce:77:a7:f3:aa:85:5f: a2:77:e1:c1:55:d6:83:39:e3:bf:b2:4f:1d:1f:8d: 56:8c:c5:3e:fc:36:85:e7:2f:00:89:03:c1:e3:de: 1f:a9:b5:d2:2b:27:d4:95:a1:58:10:db:aa:94:9a: dc:7b:f9:ed:f2:d8:63:55:1a:f1:78:a2:83:70:9f: f8:cf:b3:9c:e9:7d:ae:59:9f:ea:bc:9f:b4:a1:b5: be:ea:2e:31:6e:fb:5d:b9:1d:52:a8:84:59:35:74: 63:76:d6:e1:4d:66:b8:cf:52:49:0d:4d:a8:16:6e: 47:a3:e6:2c:2c:e3:bb:e6:10:4e:10:ae:b2:a7:f1: 53:0d:99:9d:06:11:6b:07:53:05:ab:37:37:c1:09: ee:2f:56:ec:64:32:24:1d:c4:53:e2:bb:cd:6a:a2: 99:7b:24:85:e1:2c:fa:53:7c:47:c7:9f:45:66:8e: c8:a0:d6:e3:b4:61:12:af:4a:49:0e:c1:df:4d:ea: 59:b5:7a:78:76:f4:4c:20:ab:93:77:26:b6:d3:8d: dd:70:bc:c3:12:e3:39:e7:8d:37:77:06:f8:ed:2d: a6:a5:39:f1:dc:c7:8f:8c:3b:2e:db:99:89:a7:80: df:b6:c7:a5:68:4c:bf:54:c2:b1:6d:99:c7:bf:c6: 8e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:48:2C:32:93:B9:D0:6A:57:A7:1B:31:C5:EB:6B:36:36:B7:94:E5 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/MEgsMpO50GpXpxsxxetrNja3lOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.210.0/24 IPv6: 2a06:e880::/32 Signature Algorithm: sha256WithRSAEncryption 98:e1:5b:2e:cb:94:8a:1a:b2:66:3b:9a:b2:db:22:39:e2:50: fb:e2:f8:3b:61:d2:fa:91:e2:36:3b:ca:6b:0c:0a:59:96:73: b8:b2:59:1e:de:50:1b:c0:31:e6:8d:70:7e:c8:c8:c6:08:6c: 1c:88:c2:65:86:ab:49:8b:9c:34:d3:a9:c1:52:9c:43:64:14: ec:80:7c:11:84:41:d8:51:af:83:01:64:f2:6a:42:b7:f9:41: f6:e1:81:03:95:96:3d:ee:d6:89:d8:5d:f6:64:7f:7a:12:4f: 4d:32:40:9a:65:63:ca:35:a5:e2:27:5e:58:7e:2c:23:6f:f1: f8:f7:b8:ac:b9:d0:13:1d:66:9f:96:71:ef:76:dc:e0:12:4d: 52:6c:2e:3e:94:0e:aa:ad:63:f7:97:53:5c:34:0f:23:91:37: 10:90:ce:88:9a:20:73:92:b0:f4:12:ae:02:71:bf:5d:91:f7: c4:1c:65:a4:12:52:5f:4a:8c:ff:2a:5d:69:63:66:34:a8:98: 7b:5a:32:48:5a:88:07:d8:ae:5e:d3:ea:72:3f:07:01:20:ae: 12:63:76:1f:f2:fe:b4:a6:37:e4:8d:ad:d2:60:7a:7c:c5:b1: 9a:e1:70:38:86:2f:f9:4a:44:ae:de:20:ed:eb:90:25:1c:1b: 7f:d3:ec:2e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+p0zDNjE4THuW1cDsniVNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDQ4MmMzMjkzYjlkMDZhNTdhNzFiMzFjNWViNmIzNjM2Yjc5NGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslKHKdLci853p/OqhV+id+HBVdaD OeO/sk8dH41WjMU+/DaF5y8AiQPB494fqbXSKyfUlaFYENuqlJrce/nt8thjVRrx eKKDcJ/4z7Oc6X2uWZ/qvJ+0obW+6i4xbvtduR1SqIRZNXRjdtbhTWa4z1JJDU2o Fm5Ho+YsLOO75hBOEK6yp/FTDZmdBhFrB1MFqzc3wQnuL1bsZDIkHcRT4rvNaqKZ eySF4Sz6U3xHx59FZo7IoNbjtGESr0pJDsHfTepZtXp4dvRMIKuTdya2043dcLzD EuM55403dwb47S2mpTnx3MePjDsu25mJp4DftselaEy/VMKxbZnHv8aO9QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDBILDKTudBqV6cbMcXrazY2t5TlMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvTUVnc01wTzUwR3BYcHhzeHhldHJOamEzbE9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuYXSMA0E AgACMAcDBQAqBuiAMA0GCSqGSIb3DQEBCwUAA4IBAQCY4Vsuy5SKGrJmO5qy2yI5 4lD74vg7YdL6keI2O8prDApZlnO4slke3lAbwDHmjXB+yMjGCGwciMJlhqtJi5w0 06nBUpxDZBTsgHwRhEHYUa+DAWTyakK3+UH24YEDlZY97taJ2F32ZH96Ek9NMkCa ZWPKNaXiJ15Yfiwjb/H497isudATHWaflnHvdtzgEk1SbC4+lA6qrWP3l1NcNA8j kTcQkM6ImiBzkrD0Eq4Ccb9dkffEHGWkElJfSoz/Kl1pY2Y0qJh7WjJIWogH2K5e 0+pyPwcBIK4SY3Yf8v60pjfkja3SYHp8xbGa4XA4hi/5SkSu3iDt65AlHBt/0+wu -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:35 2026 by rpki-client