This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/ME0H6FJMomj5qNZa55hYa_mg8BI.roa
File: ME0H6FJMomj5qNZa55hYa_mg8BI.roa (raw, json)
Hash identifier: 9JjtlUlu4wsnh6OKmL8KpV7lEe7W07be+5Wu0KAr73g=
Subject key identifier: 30:4D:07:E8:52:4C:A2:68:F9:A8:D6:5A:E7:98:58:6B:F9:A0:F0:12
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 019BB34EA568B1C7BB3002832143D5539FAA
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/ME0H6FJMomj5qNZa55hYa_mg8BI.roa
Signing time: Mon 12 Jan 2026 17:43:54 +0000
ROA not before: Mon 12 Jan 2026 17:43:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12849
IP address blocks: 193.110.180.0/23 maxlen: 24
2a14:dc00::/48 maxlen: 48
2a14:dc00:1::/48 maxlen: 48
2a14:dc00:2::/48 maxlen: 48
2a14:dc00:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:b3:4e:a5:68:b1:c7:bb:30:02:83:21:43:d5:53:9f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Jan 12 17:43:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=304d07e8524ca268f9a8d65ae798586bf9a0f012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:04:a7:1e:38:3e:be:3f:a0:91:eb:5d:fa:33:
65:2f:1a:e0:74:9a:bb:e4:8c:a5:dc:ec:9c:c8:90:
50:cd:90:b2:0b:2f:a3:b4:98:8b:60:ad:24:3a:10:
9d:dc:ff:d8:cc:c5:32:c4:5f:9e:0a:59:7b:70:66:
28:d6:d1:91:f7:24:94:ce:41:5c:f8:5d:79:a2:61:
99:f0:b6:3f:e6:c5:c6:d1:40:0a:02:bc:fd:8a:47:
64:a6:89:d7:43:2b:1a:1f:06:cb:6d:86:c1:ab:09:
82:dc:52:10:b8:47:60:f5:72:49:77:48:ce:97:ea:
a2:fb:04:8f:d1:15:d4:14:dc:18:b5:25:49:77:24:
04:0e:10:2b:a5:75:75:12:df:60:41:2d:65:c9:7d:
ee:4b:91:02:0f:c5:72:a0:fa:30:8b:fd:bb:53:74:
2a:c2:2f:c6:40:0b:6a:5f:72:10:0e:b5:48:6f:6e:
2b:a0:ef:5c:ba:90:eb:a8:7b:fa:c3:a2:db:ec:09:
35:08:74:a5:b8:cd:ec:de:c2:55:39:e3:b2:63:25:
d3:64:12:75:31:2b:44:8a:d1:b2:4d:46:e1:b3:a3:
f0:2c:8b:eb:07:cb:8f:bb:ad:a0:9c:f1:b5:16:bc:
c4:d8:53:a5:5a:0a:87:5c:37:f2:8a:c1:65:58:45:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4D:07:E8:52:4C:A2:68:F9:A8:D6:5A:E7:98:58:6B:F9:A0:F0:12
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/ME0H6FJMomj5qNZa55hYa_mg8BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.180.0/23
IPv6:
2a14:dc00::/46
Signature Algorithm: sha256WithRSAEncryption
8c:45:5f:20:38:ce:7c:07:ff:a2:ae:57:18:45:84:58:1c:43:
99:2c:19:54:e5:a5:fe:65:76:4d:2c:3e:39:1f:35:1d:62:c2:
f4:3f:df:c5:f8:65:7e:cd:64:3e:08:4c:ed:59:40:ea:6f:49:
d4:22:f1:c1:47:31:df:6f:0c:6d:c6:5c:f5:39:35:f8:2d:fd:
6b:5e:2c:4a:40:47:41:4a:93:69:63:d0:0b:36:12:9f:5a:62:
20:fe:1e:ac:57:19:d7:7b:a0:04:9c:16:15:49:69:d5:c5:53:
28:55:6d:55:10:7f:a0:55:cc:3a:58:45:2e:68:7a:e8:f0:7c:
fd:ec:35:59:ad:2b:00:48:ae:ba:2c:a1:e4:28:cf:3f:78:9e:
1a:15:11:aa:b5:cd:48:42:e3:03:98:cf:72:cb:2b:73:78:ec:
d1:d5:3b:b5:ed:d7:40:22:3e:33:a4:a7:62:c2:74:39:64:3f:
3e:01:a1:26:24:8e:dc:24:96:29:be:49:e7:58:ad:57:ee:64:
99:f4:b6:aa:47:f4:d7:18:92:f1:43:e6:15:d3:f4:e6:7d:d8:
c3:33:90:e3:6d:f3:89:45:c0:c5:6e:1e:4d:c3:4b:6d:c7:18:
de:70:bd:b6:af:4b:eb:18:66:42:2c:0c:fc:3e:3e:b7:de:c0:
6e:81:8b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:34:26 2026 by rpki-client