This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/391350-a970-4ba1-8a94-3979b800cda8/1/rMe1K3Pnk5DXwFmZ5iqZqI-4AuI.roa File: rMe1K3Pnk5DXwFmZ5iqZqI-4AuI.roa (raw, json) Hash identifier: YS2JSus6g27DEMsfgkNECiXWqWyQcBqe1+Gnt78gLl0= Subject key identifier: AC:C7:B5:2B:73:E7:93:90:D7:C0:59:99:E6:2A:99:A8:8F:B8:02:E2 Certificate issuer: /CN=1c422dd7ed73d1c004850033bf9579b4fef5e9d1 Certificate serial: 019B79ED478008DD21719E3C658A6EB18853 Authority key identifier: 1C:42:2D:D7:ED:73:D1:C0:04:85:00:33:BF:95:79:B4:FE:F5:E9:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEIt1-1z0cAEhQAzv5V5tP716dE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/391350-a970-4ba1-8a94-3979b800cda8/1/rMe1K3Pnk5DXwFmZ5iqZqI-4AuI.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48559 IP address blocks: 91.224.214.0/23 maxlen: 23 185.27.52.0/22 maxlen: 22 195.26.12.0/23 maxlen: 23 195.248.226.0/23 maxlen: 23 2a00:9320:fffd::/48 maxlen: 48 2a00:9320:fffe::/48 maxlen: 48 2a00:9320:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/391350-a970-4ba1-8a94-3979b800cda8/1/HEIt1-1z0cAEhQAzv5V5tP716dE.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/391350-a970-4ba1-8a94-3979b800cda8/1/HEIt1-1z0cAEhQAzv5V5tP716dE.mft rsync://rpki.ripe.net/repository/DEFAULT/HEIt1-1z0cAEhQAzv5V5tP716dE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:47:80:08:dd:21:71:9e:3c:65:8a:6e:b1:88:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c422dd7ed73d1c004850033bf9579b4fef5e9d1 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acc7b52b73e79390d7c05999e62a99a88fb802e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:12:b6:1c:d8:91:bd:db:fd:be:71:6c:02:48: e3:c9:de:0b:ee:84:03:9f:c4:b0:7f:7b:cc:08:37: 3d:54:9e:29:10:ab:46:8a:df:d6:10:56:34:f2:4e: a6:18:8c:ff:c5:2a:71:f5:9f:f8:bc:e6:35:5b:81: cf:56:e6:6b:40:32:3d:01:a9:f9:90:43:62:9a:76: 2a:5f:7a:10:cb:94:bf:cc:14:32:4f:57:1c:e9:d5: 66:1c:f9:91:eb:df:3f:15:01:c8:5a:a8:b0:07:dc: 66:d7:1e:51:73:cd:f3:1d:6d:ba:3b:00:4b:e4:f4: 7a:76:b3:7d:12:16:cf:8b:17:86:16:ff:5b:62:e5: 99:00:3a:9c:05:36:ef:7c:24:6f:16:f7:11:bd:3f: 41:d9:e3:60:95:71:36:1d:2f:a5:81:3d:9c:ce:bd: 08:fd:a0:17:82:b8:e3:94:ea:75:53:85:b1:09:b9: 01:6e:1d:78:4f:6c:02:4d:22:e9:31:5e:fb:1f:cf: 11:c6:62:07:e1:c6:a5:89:66:63:4c:d9:80:41:89: 91:46:ec:60:79:c9:f5:2d:4a:79:38:83:b2:63:78: 87:07:3d:41:36:03:8b:cc:bd:63:7f:c2:18:44:1e: 67:5b:62:ea:a6:63:71:21:32:40:5e:47:79:d5:72: 2b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C7:B5:2B:73:E7:93:90:D7:C0:59:99:E6:2A:99:A8:8F:B8:02:E2 X509v3 Authority Key Identifier: keyid:1C:42:2D:D7:ED:73:D1:C0:04:85:00:33:BF:95:79:B4:FE:F5:E9:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEIt1-1z0cAEhQAzv5V5tP716dE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/391350-a970-4ba1-8a94-3979b800cda8/1/rMe1K3Pnk5DXwFmZ5iqZqI-4AuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/391350-a970-4ba1-8a94-3979b800cda8/1/HEIt1-1z0cAEhQAzv5V5tP716dE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.214.0/23 185.27.52.0/22 195.26.12.0/23 195.248.226.0/23 IPv6: 2a00:9320:fffd::-2a00:9320:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2d:0a:ae:9a:8e:26:b8:9b:c5:26:0d:78:b5:fc:27:26:d9:5a: 0e:86:df:75:98:50:74:37:86:f7:b2:8b:9b:1c:c3:22:1a:33: 27:82:ba:a4:61:91:2b:11:1c:8e:72:70:87:fc:7c:ac:1e:f1: 71:47:d2:98:33:b6:fb:11:eb:da:d0:ac:1b:5f:42:ed:38:1f: d4:0b:20:f0:60:5e:30:43:e2:54:51:77:23:f9:0b:58:f2:72: 98:7c:f6:68:f6:df:22:1e:9a:52:10:85:21:ae:d9:1d:22:c6: 00:a3:89:9e:4f:f1:a8:c6:ec:34:8e:de:41:03:9f:92:7d:56: 16:78:61:f5:94:9b:ca:e7:71:93:0f:c8:39:6c:a9:48:67:35: 51:ba:f7:fb:ce:43:ab:a0:86:3e:11:7c:9f:41:fa:42:a9:12: fd:0a:bb:32:36:e1:e4:0a:a3:fd:cc:b1:70:06:aa:83:73:4a: ef:a3:cc:d9:3f:54:1c:35:4e:18:69:36:0e:17:a1:3d:61:97: c2:ec:6d:e7:b9:66:1b:f8:44:20:2e:9d:20:ad:a0:cc:3b:df: 3f:1d:0d:98:87:ae:ae:9a:95:6e:39:3a:ed:df:04:ec:eb:b5: 81:3a:8f:76:2a:62:c2:4d:a9:3a:33:ce:2e:aa:1e:2a:a8:ac: ef:62:5b:f4 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt57UeACN0hcZ48ZYpusYhTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNDIyZGQ3ZWQ3M2QxYzAwNDg1MDAzM2JmOTU3OWI0ZmVm NWU5ZDEwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2M3YjUyYjczZTc5MzkwZDdjMDU5OTllNjJhOTlhODhmYjgwMmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BK2HNiRvdv9vnFsAkjjyd4L7oQD n8Swf3vMCDc9VJ4pEKtGit/WEFY08k6mGIz/xSpx9Z/4vOY1W4HPVuZrQDI9Aan5 kENimnYqX3oQy5S/zBQyT1cc6dVmHPmR698/FQHIWqiwB9xm1x5Rc83zHW26OwBL 5PR6drN9EhbPixeGFv9bYuWZADqcBTbvfCRvFvcRvT9B2eNglXE2HS+lgT2czr0I /aAXgrjjlOp1U4WxCbkBbh14T2wCTSLpMV77H88RxmIH4caliWZjTNmAQYmRRuxg ecn1LUp5OIOyY3iHBz1BNgOLzL1jf8IYRB5nW2LqpmNxITJAXkd51XIr4wIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFKzHtStz55OQ18BZmeYqmaiPuALiMB8GA1UdIwQY MBaAFBxCLdftc9HABIUAM7+VebT+9enRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEVJdDEtMXowY0FFaFFBenY1VjV0UDcxNmRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zOTEzNTAtYTk3MC00YmExLThhOTQt Mzk3OWI4MDBjZGE4LzEvck1lMUszUG5rNURYd0ZtWjVpcVpxSS00QXVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zOTEzNTAtYTk3MC00YmExLThhOTQtMzk3OWI4MDBjZGE4 LzEvSEVJdDEtMXowY0FFaFFBenY1VjV0UDcxNmRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQBW+DWAwQC uRs0AwQBwxoMAwQBw/jiMBgEAgACMBIwEAMHACoAkyD//QMFACoAkyAwDQYJKoZI hvcNAQELBQADggEBAC0KrpqOJribxSYNeLX8JybZWg6G33WYUHQ3hveyi5scwyIa MyeCuqRhkSsRHI5ycIf8fKwe8XFH0pgztvsR69rQrBtfQu04H9QLIPBgXjBD4lRR dyP5C1jycph89mj23yIemlIQhSGu2R0ixgCjiZ5P8ajG7DSO3kEDn5J9VhZ4YfWU m8rncZMPyDlsqUhnNVG69/vOQ6ughj4RfJ9B+kKpEv0KuzI24eQKo/3MsXAGqoNz Su+jzNk/VBw1ThhpNg4XoT1hl8Lsbee5Zhv4RCAunSCtoMw73z8dDZiHrq6alW45 Ou3fBOzrtYE6j3YqYsJNqTozzi6qHiqorO9iW/Q= -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:38 2026 by rpki-client