This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/meWMB7mMCO2YGDQEgDBAeOkKxbU.roa File: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (raw, json) Hash identifier: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig= Subject key identifier: 99:E5:8C:07:B9:8C:08:ED:98:18:34:04:80:30:40:78:E9:0A:C5:B5 Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9 Certificate serial: 019B76EB0BC77C21F8E4EC4EA7F5539F80CA Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/meWMB7mMCO2YGDQEgDBAeOkKxbU.roa Signing time: Thu 01 Jan 2026 00:17:53 +0000 ROA not before: Thu 01 Jan 2026 00:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51305 IP address blocks: 128.127.93.0/24 maxlen: 24 2a00:10a0:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0b:c7:7c:21:f8:e4:ec:4e:a7:f5:53:9f:80:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9 Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99e58c07b98c08ed9818340480304078e90ac5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:77:29:6e:34:2d:14:7b:f9:86:7c:40:5e: cc:6a:ab:b1:78:31:e9:3c:35:4b:5f:2e:30:c5:2b: ce:24:ad:85:8f:19:14:a1:97:61:be:d7:42:80:02: 49:d6:56:14:a8:1e:b0:26:0a:16:77:1b:81:3f:a5: de:05:c5:c4:58:45:19:a0:94:73:53:c1:87:80:ce: d9:83:06:ae:08:fc:9a:41:a9:5d:77:f6:d1:91:34: f1:68:fa:a2:6b:63:b2:31:66:f8:ed:30:1d:2b:81: 9c:b1:96:ad:16:9b:46:19:72:c9:ef:00:fa:4f:10: 2e:03:ef:6f:d0:e7:05:d7:a2:74:a3:b9:e3:ef:db: a5:33:fc:a2:65:5b:4a:a1:8c:3a:34:ce:3c:89:ac: 8b:94:e8:f6:84:ff:39:f8:fb:82:fa:bb:28:32:72: 01:9d:72:10:f2:32:f0:d4:1f:70:e6:76:06:43:6a: 3d:7a:08:85:cc:a6:60:46:93:37:99:81:eb:2e:cd: 52:ad:7e:be:d6:e3:c4:b2:ce:fe:bb:e2:2b:dc:5d: da:88:f7:88:56:a9:96:b2:c3:01:2a:4c:7c:06:40: c4:de:fd:c2:af:b8:9c:c5:70:6b:cc:f6:f0:e6:1f: 49:58:50:e7:e4:45:94:d3:09:27:03:c6:8a:31:af: df:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E5:8C:07:B9:8C:08:ED:98:18:34:04:80:30:40:78:E9:0A:C5:B5 X509v3 Authority Key Identifier: keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/meWMB7mMCO2YGDQEgDBAeOkKxbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.127.93.0/24 IPv6: 2a00:10a0:b::/48 Signature Algorithm: sha256WithRSAEncryption 99:34:fc:11:3f:c8:e6:3a:3a:1d:b6:82:b3:94:23:7f:2c:bf: 49:f4:d7:ea:35:38:9b:b9:ca:5d:b9:a6:9b:7d:7e:09:e8:4d: bc:40:87:91:b0:24:e0:53:26:44:5d:6d:00:b1:1a:0a:60:cf: 72:f8:66:21:18:2e:82:ee:6b:74:54:7e:84:dd:97:35:70:a2: dc:48:6a:32:c7:f0:a9:fa:ea:7b:dd:67:89:e3:11:db:7b:46: 65:65:92:93:d3:82:fd:a4:cd:97:c2:b3:5b:f8:4c:6c:f0:aa: 00:f0:a7:0c:41:dd:66:33:92:9e:9d:40:c4:57:5c:7c:6c:98: 2b:a4:8b:ac:e5:5d:3b:6d:80:ce:85:9e:42:81:aa:6b:75:a7: 55:13:46:17:a5:83:8e:58:67:56:d1:d7:3f:dd:41:58:30:da: a6:ad:8f:80:c6:7f:4f:c8:93:35:d0:5c:97:5a:5d:05:3f:b3: 76:22:59:25:1b:16:50:e2:bf:ae:cb:25:2d:32:91:84:df:c9: 2b:8f:4f:f4:90:0e:eb:23:bd:92:92:ea:5f:14:27:d9:df:ed: ff:89:d4:1b:e1:18:bb:42:38:b9:6b:b4:e4:7c:0d:78:5f:e5: 82:55:27:7e:ad:8f:0e:1c:6e:53:1f:e8:6b:cc:91:f5:b3:20: dd:de:c8:f1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt26wvHfCH45OxOp/VTn4DKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MWM3MjIxZWRlM2FmNWVlOTJlMzIwNmFmMmYxOGJkMDEw ZDVkZDkwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWU1OGMwN2I5OGMwOGVkOTgxODM0MDQ4MDMwNDA3OGU5MGFjNWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu693KW40LRR7+YZ8QF7MaquxeDHp PDVLXy4wxSvOJK2FjxkUoZdhvtdCgAJJ1lYUqB6wJgoWdxuBP6XeBcXEWEUZoJRz U8GHgM7ZgwauCPyaQaldd/bRkTTxaPqia2OyMWb47TAdK4GcsZatFptGGXLJ7wD6 TxAuA+9v0OcF16J0o7nj79ulM/yiZVtKoYw6NM48iayLlOj2hP85+PuC+rsoMnIB nXIQ8jLw1B9w5nYGQ2o9egiFzKZgRpM3mYHrLs1SrX6+1uPEss7+u+Ir3F3aiPeI VqmWssMBKkx8BkDE3v3Cr7icxXBrzPbw5h9JWFDn5EWU0wknA8aKMa/fUQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJnljAe5jAjtmBg0BIAwQHjpCsW1MB8GA1UdIwQY MBaAFMQcciHt469e6S4yBq8vGL0BDV3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEt OTkzMGYyMTk0YTBlLzEvbWVXTUI3bU1DTzJZR0RRRWdEQkFlT2tLeGJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEtOTkzMGYyMTk0YTBl LzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAgH9dMA8E AgACMAkDBwAqABCgAAswDQYJKoZIhvcNAQELBQADggEBAJk0/BE/yOY6Oh22grOU I38sv0n01+o1OJu5yl25ppt9fgnoTbxAh5GwJOBTJkRdbQCxGgpgz3L4ZiEYLoLu a3RUfoTdlzVwotxIajLH8Kn66nvdZ4njEdt7RmVlkpPTgv2kzZfCs1v4TGzwqgDw pwxB3WYzkp6dQMRXXHxsmCuki6zlXTttgM6FnkKBqmt1p1UTRhelg45YZ1bR1z/d QVgw2qatj4DGf0/IkzXQXJdaXQU/s3YiWSUbFlDiv67LJS0ykYTfySuPT/SQDusj vZKS6l8UJ9nf7f+J1BvhGLtCOLlrtOR8DXhf5YJVJ36tjw4cblMf6GvMkfWzIN3e yPE= -----END CERTIFICATE-----Generated at Mon Jan 26 17:45:35 2026 by rpki-client