This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/MeYH9jPYQCjkM-pZWEhSqRTwBzE.roa File: MeYH9jPYQCjkM-pZWEhSqRTwBzE.roa (raw, json) Hash identifier: Rj4r3XNouy8R//+iD/rgnT6/Xrouich+8e9QmhXRDMg= Subject key identifier: 31:E6:07:F6:33:D8:40:28:E4:33:EA:59:58:48:52:A9:14:F0:07:31 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA544F9EAA66B6DF0FD86AFEC10894D Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/MeYH9jPYQCjkM-pZWEhSqRTwBzE.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199301 IP address blocks: 213.91.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:44:f9:ea:a6:6b:6d:f0:fd:86:af:ec:10:89:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31e607f633d84028e433ea59584852a914f00731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cb:43:73:c4:8b:36:c0:6d:aa:bd:7c:58:0f: 9f:f1:46:9c:88:09:a2:43:49:54:85:ab:de:35:8b: ec:a1:b9:50:09:bb:c3:5f:04:43:69:4a:6c:c9:e2: a4:73:93:b2:01:b1:eb:99:03:d6:f8:b5:d4:69:b2: c1:e9:26:a0:80:f0:6d:67:0c:39:18:10:c4:ef:30: 68:f7:68:79:2a:d8:cb:0c:06:77:ae:aa:2b:14:25: a9:e3:c6:1b:2e:9e:3d:cf:ec:86:81:04:27:be:09: eb:09:6b:12:2e:c5:78:89:34:eb:61:30:a0:7e:a4: 11:85:f5:5a:97:a8:ef:32:9c:62:f3:19:92:5f:d7: c4:fc:52:9a:1c:04:09:7a:9b:06:5a:9e:c6:ee:7e: 41:3d:f7:31:5f:7f:47:ba:50:62:de:69:44:fc:fb: b1:7f:a8:94:6a:38:04:90:70:28:78:f4:07:7f:43: 74:ec:8d:32:f5:65:ba:1c:f8:28:08:3c:c2:93:6d: a1:42:6f:ec:75:7b:25:4a:f9:f8:d5:0a:c3:8f:18: 03:fc:21:5c:3a:82:b1:95:9e:27:da:c3:87:f6:01: a1:f4:85:c1:d7:27:b3:df:b5:40:47:81:d8:82:9e: de:f8:cf:ab:b6:b7:40:76:e8:c5:bf:e8:61:5a:83: 86:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E6:07:F6:33:D8:40:28:E4:33:EA:59:58:48:52:A9:14:F0:07:31 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/MeYH9jPYQCjkM-pZWEhSqRTwBzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.91.188.0/24 Signature Algorithm: sha256WithRSAEncryption 03:13:da:7e:bb:ab:e7:0d:57:d8:68:41:f1:e9:0f:28:8f:1b: 76:17:c0:5c:a3:bb:59:31:8c:26:90:72:be:df:b1:00:71:b5: dd:5e:28:d7:7b:32:cd:65:f1:9e:3b:9d:77:4d:95:e1:a5:46: 4c:67:41:85:e1:4f:59:30:99:53:ee:db:10:2d:26:1d:10:36: da:d5:9f:38:64:d7:31:d0:11:52:54:56:37:5b:5f:3a:61:6a: f0:77:70:fd:ee:7c:1e:fc:89:33:bd:94:76:30:6d:d2:a8:17: 36:0e:9c:de:7c:aa:f2:bc:56:74:c7:34:13:75:a1:0b:86:4a: 95:a0:02:03:0c:5d:55:61:37:27:a9:fd:ef:be:17:24:63:ed: 90:a2:e5:2a:dc:ca:a4:12:2c:fc:95:d3:bd:42:5e:6f:4d:71: 62:e1:e8:a7:58:c0:17:a0:44:fa:a2:1b:aa:53:6e:e6:06:46: 63:53:3a:32:ac:b2:8b:b4:0b:ec:9e:d1:c8:55:07:5b:bc:49: 1e:5c:a9:c2:f3:96:5f:ec:b8:7f:df:03:83:f8:21:54:62:13: 26:3d:bc:4f:75:ad:12:c0:43:26:7d:e4:70:24:d0:70:3b:e8: 6a:0d:51:76:35:f5:84:94:d3:7f:40:30:39:72:14:5e:39:17: f8:1d:c0:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUT56qZrbfD9hq/sEIlNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWU2MDdmNjMzZDg0MDI4ZTQzM2VhNTk1ODQ4NTJhOTE0ZjAwNzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48tDc8SLNsBtqr18WA+f8UaciAmi Q0lUhaveNYvsoblQCbvDXwRDaUpsyeKkc5OyAbHrmQPW+LXUabLB6SaggPBtZww5 GBDE7zBo92h5KtjLDAZ3rqorFCWp48YbLp49z+yGgQQnvgnrCWsSLsV4iTTrYTCg fqQRhfVal6jvMpxi8xmSX9fE/FKaHAQJepsGWp7G7n5BPfcxX39HulBi3mlE/Pux f6iUajgEkHAoePQHf0N07I0y9WW6HPgoCDzCk22hQm/sdXslSvn41QrDjxgD/CFc OoKxlZ4n2sOH9gGh9IXB1yez37VAR4HYgp7e+M+rtrdAdujFv+hhWoOGiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDHmB/Yz2EAo5DPqWVhIUqkU8AcxMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvTWVZSDlqUFlRQ2prTS1wWldFaFNxUlR3QnpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Vu8MA0G CSqGSIb3DQEBCwUAA4IBAQADE9p+u6vnDVfYaEHx6Q8ojxt2F8Bco7tZMYwmkHK+ 37EAcbXdXijXezLNZfGeO513TZXhpUZMZ0GF4U9ZMJlT7tsQLSYdEDba1Z84ZNcx 0BFSVFY3W186YWrwd3D97nwe/IkzvZR2MG3SqBc2DpzefKryvFZ0xzQTdaELhkqV oAIDDF1VYTcnqf3vvhckY+2QouUq3MqkEiz8ldO9Ql5vTXFi4einWMAXoET6ohuq U27mBkZjUzoyrLKLtAvsntHIVQdbvEkeXKnC85Zf7Lh/3wOD+CFUYhMmPbxPda0S wEMmfeRwJNBwO+hqDVF2NfWElNN/QDA5chReORf4HcCG -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:52 2026 by rpki-client