This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/mErxX7o9KOjw8GdLWTS3K7g0Gvw.roa File: mErxX7o9KOjw8GdLWTS3K7g0Gvw.roa (raw, json) Hash identifier: 57yv7/TrVuuZh6M3vcjM71XDa4tykmDTs42OjrfBYGI= Subject key identifier: 98:4A:F1:5F:BA:3D:28:E8:F0:F0:67:4B:59:34:B7:2B:B8:34:1A:FC Certificate issuer: /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c Certificate serial: 019B783482BC845B26265B0B06B5FC154A0E Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/mErxX7o9KOjw8GdLWTS3K7g0Gvw.roa Signing time: Thu 01 Jan 2026 06:17:45 +0000 ROA not before: Thu 01 Jan 2026 06:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51263 IP address blocks: 185.164.180.0/22 maxlen: 22 2a0b:4c00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:82:bc:84:5b:26:26:5b:0b:06:b5:fc:15:4a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c Validity Not Before: Jan 1 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=984af15fba3d28e8f0f0674b5934b72bb8341afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:43:a1:c3:da:f9:de:1a:96:89:49:28:91:64: 60:e0:0b:1b:a5:00:ba:73:81:5c:7c:3b:db:b8:94: a7:f7:99:9c:20:40:6f:2a:94:eb:f3:fa:d0:ba:ea: 46:28:0f:30:8d:50:ff:26:36:61:5a:17:84:dd:ca: 0a:42:30:f9:2b:18:79:73:d6:29:5f:4a:15:2d:ca: ec:d8:96:7b:fc:b2:75:01:c5:31:6c:b4:8a:1d:40: 8b:54:e1:1d:9f:15:8d:0d:b7:6c:12:bf:9b:86:6a: 30:de:5a:bb:78:93:55:84:8f:6e:74:31:7a:0d:89: 81:3e:ae:b3:1f:46:57:13:0a:c7:35:31:9b:9a:82: aa:a5:92:ef:36:78:b8:26:f8:1b:67:65:74:67:a1: ae:b4:b9:bf:83:b4:e6:88:47:d4:6d:bb:a5:3e:22: 9e:9a:d4:10:d2:26:33:07:0b:bd:c7:3b:9e:32:86: 50:1d:ea:1d:53:bc:7d:5c:d1:cd:e9:08:a6:73:a4: c5:a5:8c:c5:0b:65:e3:fb:34:be:7b:90:aa:a5:c9: 22:6d:fe:ab:d8:b5:78:f2:d4:94:81:36:9e:85:fa: 5c:7a:09:ac:90:a2:e5:49:61:2a:23:00:9f:f8:f2: ec:6b:be:3f:cb:ae:f8:0b:c0:44:3a:e3:bc:9c:b9: b4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4A:F1:5F:BA:3D:28:E8:F0:F0:67:4B:59:34:B7:2B:B8:34:1A:FC X509v3 Authority Key Identifier: keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/mErxX7o9KOjw8GdLWTS3K7g0Gvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.180.0/22 IPv6: 2a0b:4c00::/29 Signature Algorithm: sha256WithRSAEncryption 6c:c7:0e:c3:eb:b2:93:f2:74:29:c0:fc:0d:4e:40:22:b1:b8: ca:ef:e4:ba:b9:57:ea:e3:8a:49:56:2b:f8:b9:d2:03:be:d3: 36:58:e8:7d:e7:02:5a:ac:5e:e1:ea:a1:e1:25:53:05:be:a8: a3:74:d4:84:33:6b:d5:53:e4:d1:30:8a:8a:39:0f:82:05:27: 9d:02:0b:e9:a8:e6:63:d1:04:f6:da:d6:68:5c:c0:7f:1b:8f: 48:c6:cc:a6:09:bb:f9:af:a3:91:3b:3c:f0:83:71:f1:a7:33: 34:60:54:2b:89:4a:a5:dc:ee:89:a8:b6:00:5e:6f:5c:b9:ca: b0:cc:c1:2f:e0:4a:61:98:27:9d:be:27:e0:e0:d8:95:e0:27: 99:46:e2:dc:c2:3c:64:ae:e4:9b:4a:13:71:a7:eb:bd:5f:f4: cc:fb:22:8a:78:9a:ee:c7:14:11:fd:07:2d:a1:7f:fa:09:da: ce:97:b0:5f:d1:46:7f:6e:bf:88:b8:89:44:9e:c1:90:8f:69: 01:c1:b9:44:d6:a2:8b:a0:2f:e6:13:70:70:8a:8f:32:6a:33: e7:30:d1:df:20:0a:a7:02:a5:bc:3b:b5:89:77:bf:95:12:7d: 5c:ff:b4:c9:1c:d7:49:f1:e6:48:7c:77:dc:37:13:00:38:19: 24:e3:ec:4c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NIK8hFsmJlsLBrX8FUoOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NDJjZWQxMmQ3YmIwNDljZDFjZGY4ZGY3YmE1YTk1NzY1 NTM4NmMwHhcNMjYwMTAxMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODRhZjE1ZmJhM2QyOGU4ZjBmMDY3NGI1OTM0YjcyYmI4MzQxYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UOhw9r53hqWiUkokWRg4AsbpQC6 c4FcfDvbuJSn95mcIEBvKpTr8/rQuupGKA8wjVD/JjZhWheE3coKQjD5Kxh5c9Yp X0oVLcrs2JZ7/LJ1AcUxbLSKHUCLVOEdnxWNDbdsEr+bhmow3lq7eJNVhI9udDF6 DYmBPq6zH0ZXEwrHNTGbmoKqpZLvNni4JvgbZ2V0Z6GutLm/g7TmiEfUbbulPiKe mtQQ0iYzBwu9xzueMoZQHeodU7x9XNHN6Qimc6TFpYzFC2Xj+zS+e5Cqpckibf6r 2LV48tSUgTaehfpcegmskKLlSWEqIwCf+PLsa74/y674C8BEOuO8nLm0MQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJhK8V+6PSjo8PBnS1k0tyu4NBr8MB8GA1UdIwQY MBaAFJRCztEte7BJzRzfjfe6WpV2VThsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85ZjJmZmEtMjM3Yi00NzRiLTg4ODAt NDZmZDQ2ZDZiNTQ3LzEvbUVyeFg3bzlLT2p3OEdkTFdUUzNLN2cwR3Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85ZjJmZmEtMjM3Yi00NzRiLTg4ODAtNDZmZDQ2ZDZiNTQ3 LzEvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaS0MA0E AgACMAcDBQMqC0wAMA0GCSqGSIb3DQEBCwUAA4IBAQBsxw7D67KT8nQpwPwNTkAi sbjK7+S6uVfq44pJViv4udIDvtM2WOh95wJarF7h6qHhJVMFvqijdNSEM2vVU+TR MIqKOQ+CBSedAgvpqOZj0QT22tZoXMB/G49IxsymCbv5r6OROzzwg3HxpzM0YFQr iUql3O6JqLYAXm9cucqwzMEv4EphmCedvifg4NiV4CeZRuLcwjxkruSbShNxp+u9 X/TM+yKKeJruxxQR/QctoX/6CdrOl7Bf0UZ/br+IuIlEnsGQj2kBwblE1qKLoC/m E3Bwio8yajPnMNHfIAqnAqW8O7WJd7+VEn1c/7TJHNdJ8eZIfHfcNxMAOBkk4+xM -----END CERTIFICATE-----Generated at Tue Feb 3 06:35:08 2026 by rpki-client