This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/TL-Meh5RdJ5l-MnmJkkhyn9w2W0.roa File: TL-Meh5RdJ5l-MnmJkkhyn9w2W0.roa (raw, json) Hash identifier: EzgEDoIb1JMS2mx6GVUnK7xYt0JpP8wDuzJo3jdvw+I= Subject key identifier: 4C:BF:8C:7A:1E:51:74:9E:65:F8:C9:E6:26:49:21:CA:7F:70:D9:6D Certificate issuer: /CN=993900f66e70b2fffd9c0ce92602f2f45c659961 Certificate serial: 019B7AC890D63362C942EBDB4E0FEF0BF72A Authority key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/TL-Meh5RdJ5l-MnmJkkhyn9w2W0.roa Signing time: Thu 01 Jan 2026 18:18:43 +0000 ROA not before: Thu 01 Jan 2026 18:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39032 IP address blocks: 87.237.232.0/21 maxlen: 21 89.236.216.0/22 maxlen: 22 94.141.68.0/23 maxlen: 23 94.141.76.0/24 maxlen: 24 94.141.77.0/24 maxlen: 24 94.141.81.0/24 maxlen: 24 94.141.92.0/24 maxlen: 24 217.30.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:90:d6:33:62:c9:42:eb:db:4e:0f:ef:0b:f7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993900f66e70b2fffd9c0ce92602f2f45c659961 Validity Not Before: Jan 1 18:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cbf8c7a1e51749e65f8c9e6264921ca7f70d96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:29:47:4e:0e:69:bc:59:51:6d:71:27:af: 0f:dd:52:ad:21:9a:6b:f1:00:3e:bb:13:d0:e3:ac: f3:6f:f2:3c:22:aa:80:8e:a3:8d:d5:7f:78:25:af: b0:68:92:fa:1d:9e:76:f0:0f:90:52:98:d3:a0:90: f4:fc:99:71:72:63:ef:f8:54:a6:e0:96:7e:e2:6e: 95:7f:a4:01:e0:cf:c9:68:56:1f:01:d4:8a:ce:77: 8b:8c:21:16:2b:83:4e:3f:4e:a9:1c:7b:49:9f:35: 24:4f:95:ab:67:6d:65:34:62:30:be:bb:58:5f:be: af:99:15:4f:a1:cf:b1:65:dd:03:f0:c4:86:85:c5: 6b:24:6b:71:db:eb:89:17:07:45:a0:eb:ac:31:d8: 77:42:5d:70:65:cd:cb:a7:60:44:df:c5:60:4a:9c: 9a:5b:7a:19:04:1e:f5:5f:4d:c9:e4:ab:d0:1d:2f: 89:fd:02:03:e0:e6:38:69:84:46:e2:f2:68:3d:4a: bc:ba:90:86:c8:10:25:05:cb:9f:f0:f2:48:cb:06: aa:75:e0:54:98:08:67:87:68:14:fe:7c:33:ab:a4: b0:8e:c0:32:98:00:b4:fb:fb:90:94:cb:97:ca:9a: 36:a2:7a:e3:78:1c:a5:22:66:78:73:d9:4a:56:77: 58:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BF:8C:7A:1E:51:74:9E:65:F8:C9:E6:26:49:21:CA:7F:70:D9:6D X509v3 Authority Key Identifier: keyid:99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/TL-Meh5RdJ5l-MnmJkkhyn9w2W0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.237.232.0/21 89.236.216.0/22 94.141.68.0/23 94.141.76.0/23 94.141.81.0/24 94.141.92.0/24 217.30.160.0/20 Signature Algorithm: sha256WithRSAEncryption 57:f0:ad:79:f3:44:75:54:4f:b8:f4:71:e7:b3:95:07:55:a7: 8b:8f:76:c7:54:4a:26:f7:81:5f:cb:cc:0d:73:49:d7:a1:e2: 79:8b:3d:b0:7e:c0:3f:9b:54:2a:ba:ff:c5:08:0d:80:e3:d9: 83:af:5b:7e:8a:6b:50:5f:20:2b:aa:11:7d:52:29:d0:63:2e: 32:c2:e2:1b:e3:49:1c:83:74:0a:9e:5e:f1:73:a1:68:1a:23: f7:bd:c3:d9:56:af:08:39:57:b7:94:85:1f:0e:e6:72:3b:ab: 47:68:4b:a1:34:2e:22:62:1e:0f:9d:0e:13:08:74:e4:65:4b: 34:b0:42:36:80:bf:21:f8:37:bb:9d:6b:fd:ae:8e:09:b3:19: 2a:c2:ce:39:b3:eb:21:43:b1:cc:a9:d0:2c:d2:bc:35:8d:ac: 7d:87:da:4e:ac:88:be:cc:2e:95:8a:54:77:3d:92:bc:db:18: 27:76:1e:c9:97:90:f6:86:7f:18:ff:b3:88:9a:c6:9c:32:4b: 25:50:fe:9f:88:e9:21:8b:db:40:bf:2e:e4:6f:49:8e:f4:cd: 29:27:5d:76:5e:f5:91:5f:a5:7c:30:ae:b0:7e:e4:0c:e5:ce: 3e:4a:a0:01:7e:24:de:85:d0:5e:4a:ee:2a:c8:54:05:cd:e9: e2:eb:51:4b -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt6yJDWM2LJQuvbTg/vC/cqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MzkwMGY2NmU3MGIyZmZmZDljMGNlOTI2MDJmMmY0NWM2 NTk5NjEwHhcNMjYwMTAxMTgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2JmOGM3YTFlNTE3NDllNjVmOGM5ZTYyNjQ5MjFjYTdmNzBkOTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsUpR04OabxZUW1xJ68P3VKtIZpr 8QA+uxPQ46zzb/I8IqqAjqON1X94Ja+waJL6HZ528A+QUpjToJD0/JlxcmPv+FSm 4JZ+4m6Vf6QB4M/JaFYfAdSKzneLjCEWK4NOP06pHHtJnzUkT5WrZ21lNGIwvrtY X76vmRVPoc+xZd0D8MSGhcVrJGtx2+uJFwdFoOusMdh3Ql1wZc3Lp2BE38VgSpya W3oZBB71X03J5KvQHS+J/QID4OY4aYRG4vJoPUq8upCGyBAlBcuf8PJIywaqdeBU mAhnh2gU/nwzq6SwjsAymAC0+/uQlMuXypo2onrjeBylImZ4c9lKVndYnwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFEy/jHoeUXSeZfjJ5iZJIcp/cNltMB8GA1UdIwQY MBaAFJk5APZucLL//ZwM6SYC8vRcZZlhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVRrQTltNXdzdl85bkF6cEpnTHk5RnhsbVdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jMWNmNmYtNTRjZC00MzRhLTgzN2Qt ZGVmNmVmYjQ0MzE5LzEvVEwtTWVoNVJkSjVsLU1ubUpra2h5bjl3MlcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9jMWNmNmYtNTRjZC00MzRhLTgzN2QtZGVmNmVmYjQ0MzE5 LzEvbVRrQTltNXdzdl85bkF6cEpnTHk5RnhsbVdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDV+3oAwQC WezYAwQBXo1EAwQBXo1MAwQAXo1RAwQAXo1cAwQE2R6gMA0GCSqGSIb3DQEBCwUA A4IBAQBX8K1580R1VE+49HHns5UHVaeLj3bHVEom94Ffy8wNc0nXoeJ5iz2wfsA/ m1Qquv/FCA2A49mDr1t+imtQXyArqhF9UinQYy4ywuIb40kcg3QKnl7xc6FoGiP3 vcPZVq8IOVe3lIUfDuZyO6tHaEuhNC4iYh4PnQ4TCHTkZUs0sEI2gL8h+De7nWv9 ro4Jsxkqws45s+shQ7HMqdAs0rw1jax9h9pOrIi+zC6VilR3PZK82xgndh7Jl5D2 hn8Y/7OImsacMkslUP6fiOkhi9tAvy7kb0mO9M0pJ112XvWRX6V8MK6wfuQM5c4+ SqABfiTehdBeSu4qyFQFzeni61FL -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:22 2026 by rpki-client