This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/meH9o9i7-j2R-Vcd-oY44f90eGc.roa File: meH9o9i7-j2R-Vcd-oY44f90eGc.roa (raw, json) Hash identifier: jMkC1VRwXkD+Vzq7AX9qpzMXsW5ynXfkYRel0vHaW90= Subject key identifier: 99:E1:FD:A3:D8:BB:FA:3D:91:F9:57:1D:FA:86:38:E1:FF:74:78:67 Certificate issuer: /CN=425bf4375f17a0357019690301f9419324ff7d44 Certificate serial: 019B78355CA3931453DDA8243EFFF11F1657 Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/meH9o9i7-j2R-Vcd-oY44f90eGc.roa Signing time: Thu 01 Jan 2026 06:18:41 +0000 ROA not before: Thu 01 Jan 2026 06:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35435 IP address blocks: 185.6.64.0/24 maxlen: 24 185.6.66.0/24 maxlen: 24 185.6.67.0/24 maxlen: 24 185.164.192.0/24 maxlen: 24 185.164.193.0/24 maxlen: 24 185.164.194.0/24 maxlen: 24 185.164.195.0/24 maxlen: 24 185.169.200.0/24 maxlen: 24 185.169.201.0/24 maxlen: 24 185.169.202.0/24 maxlen: 24 185.169.203.0/24 maxlen: 24 185.183.132.0/24 maxlen: 24 185.183.133.0/24 maxlen: 24 185.183.134.0/24 maxlen: 24 185.183.135.0/24 maxlen: 24 2a02:cf80:3::/48 maxlen: 48 2a02:cf80:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5c:a3:93:14:53:dd:a8:24:3e:ff:f1:1f:16:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44 Validity Not Before: Jan 1 06:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99e1fda3d8bbfa3d91f9571dfa8638e1ff747867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:2a:17:d2:10:18:2a:cf:58:ef:0d:33:07: 2c:5e:c6:17:4f:cf:4f:9b:9e:71:df:4f:60:8f:a6: 77:49:18:24:a2:ac:a4:cd:95:8d:25:02:6e:61:eb: 42:71:6c:a4:0a:cf:8e:00:b1:c7:4f:3d:51:70:64: f4:5d:f8:03:fe:32:6e:86:a9:8a:6a:5a:96:9f:3d: 34:90:4f:26:4d:0d:af:02:8e:77:ce:bf:2d:1b:a5: 60:10:35:93:18:8a:b9:32:e6:76:79:d4:f3:88:4a: 71:e0:e4:9f:c8:93:26:bb:ec:f9:f8:16:9b:0d:56: 83:1e:01:fb:08:c7:82:e3:fa:ff:af:bf:8d:cf:74: b7:79:ae:87:e0:49:b8:8d:0f:5d:6c:32:57:9a:35: dc:37:40:bc:43:68:ad:2b:ca:19:1d:3c:f5:ff:99: d9:dd:7b:63:1a:b1:04:20:4f:7c:32:69:4c:cd:0b: 1c:a7:4a:9e:cb:63:c0:d0:19:00:52:c3:19:d3:fc: b5:d2:81:bd:ab:88:0c:3f:14:a0:7b:dc:32:de:5c: 56:06:7a:18:2d:24:cb:50:1d:db:8b:dd:2a:2c:7f: 97:af:c3:57:a7:1a:c0:cf:01:82:d7:54:60:70:06: 61:36:9d:db:a6:28:e9:b5:20:76:fd:17:29:f7:49: 33:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E1:FD:A3:D8:BB:FA:3D:91:F9:57:1D:FA:86:38:E1:FF:74:78:67 X509v3 Authority Key Identifier: keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/meH9o9i7-j2R-Vcd-oY44f90eGc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.6.64.0/24 185.6.66.0/23 185.164.192.0/22 185.169.200.0/22 185.183.132.0/22 IPv6: 2a02:cf80:3::-2a02:cf80:4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 0f:66:ac:d7:28:15:3c:d4:8d:fa:ab:f7:9f:f4:38:7d:cb:45: 41:96:86:5b:af:d9:ee:ee:f8:89:59:a9:5a:c7:3e:77:85:03: c5:ed:3d:01:e6:85:a5:63:9e:31:7a:3f:c2:16:69:34:e9:fc: 4e:f5:11:f9:ce:02:40:99:05:a7:d6:28:a6:f8:6d:34:64:60: 68:1c:ff:f8:45:e7:c7:0c:05:a2:3a:57:d8:1a:50:5a:09:93: ec:68:70:ac:b1:ab:58:7b:f0:b1:fb:24:0f:76:6a:5a:50:ea: b0:68:04:7a:66:19:04:88:3b:de:b3:ec:dc:8e:85:09:0f:68: c5:61:6e:f3:65:dd:82:9f:3a:f0:55:6d:0d:e5:e4:b7:75:bd: 94:8e:28:93:6c:33:cb:a2:a6:cc:0a:35:e0:3e:09:0a:f2:b8: 41:a8:b5:e2:64:14:9a:fb:60:53:bb:e8:fe:fe:f7:87:00:9d: d6:01:72:2b:57:2e:b9:80:d5:8d:68:7e:98:16:26:d9:06:65: 57:94:fa:64:f5:f6:dc:aa:be:f7:fd:e4:c1:c5:30:81:f4:af: 31:bb:ad:a8:8b:af:2e:ca:88:b2:38:30:1b:1a:a2:73:ae:0e: 78:11:48:ba:eb:f9:92:af:83:5f:79:dc:27:c5:50:32:00:61: 7c:c3:4f:1f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt4NVyjkxRT3agkPv/xHxZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNWJmNDM3NWYxN2EwMzU3MDE5NjkwMzAxZjk0MTkzMjRm ZjdkNDQwHhcNMjYwMTAxMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWUxZmRhM2Q4YmJmYTNkOTFmOTU3MWRmYTg2MzhlMWZmNzQ3ODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnsqF9IQGCrPWO8NMwcsXsYXT89P m55x309gj6Z3SRgkoqykzZWNJQJuYetCcWykCs+OALHHTz1RcGT0XfgD/jJuhqmK alqWnz00kE8mTQ2vAo53zr8tG6VgEDWTGIq5MuZ2edTziEpx4OSfyJMmu+z5+Bab DVaDHgH7CMeC4/r/r7+Nz3S3ea6H4Em4jQ9dbDJXmjXcN0C8Q2itK8oZHTz1/5nZ 3XtjGrEEIE98MmlMzQscp0qey2PA0BkAUsMZ0/y10oG9q4gMPxSge9wy3lxWBnoY LSTLUB3bi90qLH+Xr8NXpxrAzwGC11RgcAZhNp3bpijptSB2/Rcp90kzcQIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFJnh/aPYu/o9kflXHfqGOOH/dHhnMB8GA1UdIwQY MBaAFEJb9DdfF6A1cBlpAwH5QZMk/31EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMjhhNzUtZDUzZi00ZTlmLTgyZGQt ZjBlZDhmZTgyYjk3LzEvbWVIOW85aTctajJSLVZjZC1vWTQ0ZjkwZUdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMjhhNzUtZDUzZi00ZTlmLTgyZGQtZjBlZDhmZTgyYjk3 LzEvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAkBAIAATAeAwQAuQZAAwQB uQZCAwQCuaTAAwQCuanIAwQCubeEMBoEAgACMBQwEgMHACoCz4AAAwMHACoCz4AA BDANBgkqhkiG9w0BAQsFAAOCAQEAD2as1ygVPNSN+qv3n/Q4fctFQZaGW6/Z7u74 iVmpWsc+d4UDxe09AeaFpWOeMXo/whZpNOn8TvUR+c4CQJkFp9YopvhtNGRgaBz/ +EXnxwwFojpX2BpQWgmT7GhwrLGrWHvwsfskD3ZqWlDqsGgEemYZBIg73rPs3I6F CQ9oxWFu82Xdgp868FVtDeXkt3W9lI4ok2wzy6KmzAo14D4JCvK4Qai14mQUmvtg U7vo/v73hwCd1gFyK1cuuYDVjWh+mBYm2QZlV5T6ZPX23Kq+9/3kwcUwgfSvMbut qIuvLsqIsjgwGxqic64OeBFIuuv5kq+DX3ncJ8VQMgBhfMNPHw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:28 2026 by rpki-client