This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/meKxmSPWJkmnmg1z5dLKFL5i-Mc.roa File: meKxmSPWJkmnmg1z5dLKFL5i-Mc.roa (raw, json) Hash identifier: Q8KapP0PEq8gKVruzhqRWI535qerZlKc/L3zbz6PK8c= Subject key identifier: 99:E2:B1:99:23:D6:26:49:A7:9A:0D:73:E5:D2:CA:14:BE:62:F8:C7 Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a Certificate serial: 019B7758C37A21E77B629742E255038F45BB Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/meKxmSPWJkmnmg1z5dLKFL5i-Mc.roa Signing time: Thu 01 Jan 2026 02:17:44 +0000 ROA not before: Thu 01 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206002 IP address blocks: 91.199.103.0/24 maxlen: 24 185.187.28.0/22 maxlen: 22 2a0b:9380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c3:7a:21:e7:7b:62:97:42:e2:55:03:8f:45:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99e2b19923d62649a79a0d73e5d2ca14be62f8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a1:f5:25:43:34:51:c4:81:21:73:96:87:e1: 34:e3:7f:58:88:f5:ba:56:77:61:b9:8f:bd:e5:6c: 4b:54:8d:87:49:cc:58:a0:25:35:e1:b1:de:b7:dd: 71:54:84:92:f4:ae:5c:91:2a:a4:be:83:3e:5c:80: 6b:10:20:d1:cb:0e:91:2e:7c:b0:2f:2b:8b:bf:90: ff:eb:d7:e6:41:4d:33:83:60:c5:24:64:c8:fc:8b: 92:59:26:11:ac:90:a4:39:e3:bb:84:8b:23:69:b7: 93:b2:a0:0c:18:86:81:df:f4:ae:d1:46:fa:d4:90: 70:27:5d:bc:ec:02:1d:01:5f:9b:a7:da:85:40:fc: 0a:e8:c1:1f:cf:82:aa:42:c5:41:32:29:a4:3e:6b: ea:e9:e8:93:8d:f2:77:bd:e0:83:ca:a7:79:1d:4e: b1:5c:28:75:f3:7f:d5:4d:a5:a8:92:2d:58:fd:19: 9d:37:92:7f:b6:46:fb:13:8d:51:a9:05:34:3f:fd: 7c:32:11:fe:e1:4f:87:26:f9:5b:d0:8b:30:84:c8: e7:5d:95:bf:b2:89:57:56:2d:d0:20:2c:24:45:27: 5e:45:c7:47:dc:16:5a:6c:09:bc:e6:ee:89:5b:ca: a9:c0:42:ac:89:dd:01:dd:9f:f5:6a:cf:cc:98:88: b9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E2:B1:99:23:D6:26:49:A7:9A:0D:73:E5:D2:CA:14:BE:62:F8:C7 X509v3 Authority Key Identifier: keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/meKxmSPWJkmnmg1z5dLKFL5i-Mc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.103.0/24 185.187.28.0/22 IPv6: 2a0b:9380::/32 Signature Algorithm: sha256WithRSAEncryption 5e:1e:80:e4:af:5c:ef:15:fe:67:9e:b0:c4:8c:21:e0:ce:58: b9:ae:7b:11:6b:7a:37:53:6c:f8:17:de:38:1b:6f:f4:88:57: 09:90:40:b8:2f:9f:0d:19:10:fb:de:8f:23:17:80:5d:dd:f1: 50:e5:a2:e5:d2:ec:c7:41:16:11:53:36:d6:cb:15:7f:56:20: 08:e0:75:6f:d2:93:ee:4f:7e:15:45:ab:39:03:0c:ea:4e:46: ec:5b:a6:92:26:41:25:f5:12:37:16:b4:f2:1c:d6:ef:e8:18: 8f:41:b9:f3:47:70:21:f1:66:31:be:c1:16:7e:e7:a4:79:72: 70:ad:37:a0:49:ec:41:92:3e:c5:7a:36:bb:0f:bb:ac:e4:3b: df:45:38:40:3f:17:89:0d:97:7e:5a:93:fe:36:74:03:d3:db: 1b:e1:c4:5d:ee:75:f8:79:69:14:b1:f4:97:b1:67:56:9a:ae: 9f:7b:66:28:5b:88:f7:c2:a1:2d:f2:92:4a:20:41:8c:64:2e: b8:00:85:54:8a:eb:71:21:3b:8f:ea:7a:36:76:d2:e5:2b:7b: e5:93:21:d4:27:35:de:d0:e0:48:a7:80:08:50:5b:ea:61:f0: 5d:32:68:a5:b9:33:f5:96:bd:c0:fd:24:22:b2:3e:2a:31:0c: 1b:ce:fc:31 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WMN6Ied7YpdC4lUDj0W7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDU2ZmIxZDY3OTQ3M2IxYWUxYzU3YjBmYzJhMzIzY2Fm MTcwOWEwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWUyYjE5OTIzZDYyNjQ5YTc5YTBkNzNlNWQyY2ExNGJlNjJmOGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6H1JUM0UcSBIXOWh+E0439YiPW6 VndhuY+95WxLVI2HScxYoCU14bHet91xVISS9K5ckSqkvoM+XIBrECDRyw6RLnyw LyuLv5D/69fmQU0zg2DFJGTI/IuSWSYRrJCkOeO7hIsjabeTsqAMGIaB3/Su0Ub6 1JBwJ1287AIdAV+bp9qFQPwK6MEfz4KqQsVBMimkPmvq6eiTjfJ3veCDyqd5HU6x XCh183/VTaWoki1Y/RmdN5J/tkb7E41RqQU0P/18MhH+4U+HJvlb0IswhMjnXZW/ solXVi3QICwkRSdeRcdH3BZabAm85u6JW8qpwEKsid0B3Z/1as/MmIi5eQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJnisZkj1iZJp5oNc+XSyhS+YvjHMB8GA1UdIwQY MBaAFIzVb7HWeUc7GuHFew/CoyPK8XCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTct YTc5MmE4OGJhZjEwLzEvbWVLeG1TUFdKa21ubWcxejVkTEtGTDVpLU1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTctYTc5MmE4OGJhZjEw LzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW8dnAwQC ubscMA0EAgACMAcDBQAqC5OAMA0GCSqGSIb3DQEBCwUAA4IBAQBeHoDkr1zvFf5n nrDEjCHgzli5rnsRa3o3U2z4F944G2/0iFcJkEC4L58NGRD73o8jF4Bd3fFQ5aLl 0uzHQRYRUzbWyxV/ViAI4HVv0pPuT34VRas5AwzqTkbsW6aSJkEl9RI3FrTyHNbv 6BiPQbnzR3Ah8WYxvsEWfuekeXJwrTegSexBkj7Feja7D7us5DvfRThAPxeJDZd+ WpP+NnQD09sb4cRd7nX4eWkUsfSXsWdWmq6fe2YoW4j3wqEt8pJKIEGMZC64AIVU iutxITuP6no2dtLlK3vlkyHUJzXe0OBIp4AIUFvqYfBdMmiluTP1lr3A/SQisj4q MQwbzvwx -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:22 2026 by rpki-client