This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/meVK3y7lFzgNKYvBKJMrtXnUCag.roa File: meVK3y7lFzgNKYvBKJMrtXnUCag.roa (raw, json) Hash identifier: wlaFGHXAs8OLjHl+E3rVG4a+R73RV0Rjj+oazKL2fZE= Subject key identifier: 99:E5:4A:DF:2E:E5:17:38:0D:29:8B:C1:28:93:2B:B5:79:D4:09:A8 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D3B7472B09BE4139A456651B388CE Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/meVK3y7lFzgNKYvBKJMrtXnUCag.roa Signing time: Fri 02 Jan 2026 06:20:20 +0000 ROA not before: Fri 02 Jan 2026 06:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39351 IP address blocks: 45.85.106.0/24 maxlen: 24 46.229.255.0/24 maxlen: 24 185.217.116.0/24 maxlen: 24 193.19.108.0/24 maxlen: 24 194.242.2.0/24 maxlen: 24 203.159.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:3b:74:72:b0:9b:e4:13:9a:45:66:51:b3:88:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99e54adf2ee517380d298bc128932bb579d409a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:c6:7a:5a:10:9f:88:d2:01:b7:4f:d0:7f: b5:32:1f:29:6b:52:6b:23:3b:a6:c7:f1:f0:e0:aa: 9d:a7:13:0e:3c:b1:a4:e8:00:3e:42:0c:6f:49:d1: 15:f3:43:31:62:68:0a:c0:5a:81:d2:71:c7:fe:ba: b4:68:67:a1:07:27:1d:ee:50:d2:19:50:5d:8e:bc: 7e:65:7b:c5:a8:e3:09:38:85:20:9e:1b:30:b3:43: 54:e1:40:5d:29:0b:c0:50:01:7c:e7:c0:04:62:20: 41:79:31:a9:73:eb:60:d3:18:c2:36:55:48:f1:7f: c4:d2:5a:6c:d3:15:4b:d1:45:ed:22:63:79:31:b0: 4a:04:52:27:14:4d:0e:f3:2b:0c:9e:89:f3:8e:63: 5c:db:26:92:01:e8:62:e1:b0:86:9e:44:2c:d1:2c: f5:a8:d8:78:33:fc:a2:4e:70:09:c4:72:c6:d8:b2: bd:7d:91:43:24:d7:44:70:e3:29:90:f4:57:36:ee: 81:aa:96:0e:30:99:f9:be:3d:b9:bc:0f:1b:e2:c0: 69:82:a1:fb:82:9e:8b:65:0e:e3:e3:81:92:24:ac: d1:2f:6c:47:41:27:19:3b:9e:ed:13:2c:60:ae:b4: c7:e6:5d:2c:6b:6f:90:be:8f:48:9d:c6:f2:89:42: ec:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E5:4A:DF:2E:E5:17:38:0D:29:8B:C1:28:93:2B:B5:79:D4:09:A8 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/meVK3y7lFzgNKYvBKJMrtXnUCag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.106.0/24 46.229.255.0/24 185.217.116.0/24 193.19.108.0/24 194.242.2.0/24 203.159.82.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:e3:8e:e5:a4:90:d1:15:18:eb:f0:f4:62:6a:ed:00:a5:02: c6:58:38:ed:61:dd:fa:9e:3b:9b:4f:e0:b7:a3:29:b5:c4:2b: 6a:65:e0:22:34:b4:95:30:23:ab:65:06:a9:bb:a5:09:6d:c0: 55:01:7d:2d:98:6e:87:67:c9:bc:f5:12:cb:71:f8:ab:e1:8a: 86:8e:1a:fa:3c:42:d0:32:1a:14:ca:78:e3:e8:d1:f0:1d:92: 2e:14:4a:dc:42:ad:d7:29:53:d8:a0:db:5c:04:0a:0f:21:2d: fe:d3:26:ab:16:09:ff:de:9f:b6:7c:f0:a2:8f:53:9e:4f:33: 99:34:cf:37:7e:bd:76:75:e8:57:43:45:6b:59:59:cc:2f:f6: 67:03:c8:40:c4:8f:9f:94:69:9c:b2:f0:68:72:8e:a4:95:a1: d4:f8:a7:2e:64:83:c3:6d:b2:33:5e:6c:c3:22:6c:04:cb:79: d9:a4:f0:db:ea:91:e6:c9:04:a0:15:27:bf:8d:83:9b:73:b6: 8f:9b:3a:2d:1c:b8:96:74:cd:34:14:29:6a:ce:85:e6:61:4a: 2e:16:a3:9e:c3:cd:7d:fe:9e:fd:ac:d6:f0:a3:56:5b:69:d8: 68:75:86:a9:99:fb:3e:56:3a:b5:6d:83:23:4b:9b:74:9a:b4: 0c:f4:b9:8c -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9XTt0crCb5BOaRWZRs4jOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWU1NGFkZjJlZTUxNzM4MGQyOThiYzEyODkzMmJiNTc5ZDQwOWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrbGeloQn4jSAbdP0H+1Mh8pa1Jr Izumx/Hw4KqdpxMOPLGk6AA+QgxvSdEV80MxYmgKwFqB0nHH/rq0aGehBycd7lDS GVBdjrx+ZXvFqOMJOIUgnhsws0NU4UBdKQvAUAF858AEYiBBeTGpc+tg0xjCNlVI 8X/E0lps0xVL0UXtImN5MbBKBFInFE0O8ysMnonzjmNc2yaSAehi4bCGnkQs0Sz1 qNh4M/yiTnAJxHLG2LK9fZFDJNdEcOMpkPRXNu6BqpYOMJn5vj25vA8b4sBpgqH7 gp6LZQ7j44GSJKzRL2xHQScZO57tEyxgrrTH5l0sa2+Qvo9IncbyiULsuQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJnlSt8u5Rc4DSmLwSiTK7V51AmoMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvbWVWSzN5N2xGemdOS1l2QktKTXJ0WG5VQ2FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALVVqAwQA LuX/AwQAudl0AwQAwRNsAwQAwvICAwQAy59SMA0GCSqGSIb3DQEBCwUAA4IBAQA9 447lpJDRFRjr8PRiau0ApQLGWDjtYd36njubT+C3oym1xCtqZeAiNLSVMCOrZQap u6UJbcBVAX0tmG6HZ8m89RLLcfir4YqGjhr6PELQMhoUynjj6NHwHZIuFErcQq3X KVPYoNtcBAoPIS3+0yarFgn/3p+2fPCij1OeTzOZNM83fr12dehXQ0VrWVnML/Zn A8hAxI+flGmcsvBoco6klaHU+KcuZIPDbbIzXmzDImwEy3nZpPDb6pHmyQSgFSe/ jYObc7aPmzotHLiWdM00FClqzoXmYUouFqOew819/p79rNbwo1ZbadhodYapmfs+ Vjq1bYMjS5t0mrQM9LmM -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:05 2026 by rpki-client