This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/1meLaYKO2Tl3bhYSsOjqpf-iDLo.roa File: 1meLaYKO2Tl3bhYSsOjqpf-iDLo.roa (raw, json) Hash identifier: aO+cgckrFpHbMOnuICmuB1xPZYgfmGDfrFdfNUo8hwg= Subject key identifier: D6:67:8B:69:82:8E:D9:39:77:6E:16:12:B0:E8:EA:A5:FF:A2:0C:BA Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019B7E388A6E7DEC4441AA3F664C0319D9D5 Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/1meLaYKO2Tl3bhYSsOjqpf-iDLo.roa Signing time: Fri 02 Jan 2026 10:19:53 +0000 ROA not before: Fri 02 Jan 2026 10:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210405 IP address blocks: 92.114.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8a:6e:7d:ec:44:41:aa:3f:66:4c:03:19:d9:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Jan 2 10:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6678b69828ed939776e1612b0e8eaa5ffa20cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a0:30:4f:03:1b:69:0f:2e:fc:ac:c1:bc:90: 54:db:93:53:6e:37:d1:75:79:37:68:99:55:65:56: 8f:94:ab:0d:06:14:ce:e1:34:5d:14:c7:9b:2a:55: af:2f:ef:7d:80:d7:4f:cf:de:b9:71:76:8b:fb:d7: d4:27:9f:fc:17:0b:ee:b2:48:0e:7d:6d:f1:90:73: 27:79:e8:1e:05:22:c4:39:37:95:fc:4a:14:8e:c8: 5a:4f:62:f7:92:16:0f:01:80:b0:fc:0f:0a:31:26: 46:e5:7b:0b:3e:e1:fb:99:90:89:be:db:b7:57:c1: 95:13:1d:0c:1c:b9:6f:3a:d0:53:c8:54:56:29:94: 1e:87:11:15:b4:72:da:bd:b3:29:e2:46:04:f4:0c: 76:e6:3a:c7:fd:da:f7:53:48:33:53:b5:38:ae:68: db:40:f1:cb:4e:50:c6:39:e0:0a:78:3c:46:90:89: 2d:7f:a5:e9:ff:bd:a2:e3:4a:4d:82:10:1f:4e:b7: 60:6a:b5:9a:32:31:5c:04:1b:aa:26:82:f5:56:85: a9:8c:25:cc:b8:d1:6f:a3:87:b7:b6:93:b0:16:cf: b0:47:00:fd:4b:74:0b:58:b3:b2:9b:7a:c9:c5:d8: a2:ba:98:2e:2e:7e:41:17:47:6d:ed:bc:67:74:c9: f5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:67:8B:69:82:8E:D9:39:77:6E:16:12:B0:E8:EA:A5:FF:A2:0C:BA X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/1meLaYKO2Tl3bhYSsOjqpf-iDLo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.114.24.0/24 Signature Algorithm: sha256WithRSAEncryption 19:43:d4:8b:27:fe:3f:ae:82:fb:39:ec:41:37:3a:b8:0c:a8: 3d:e0:63:49:c5:2b:ad:db:3b:83:9e:c6:19:6e:4d:48:04:21: 23:fa:54:15:76:f8:cd:06:2a:ce:2f:33:69:54:0c:9a:0d:25: 3b:90:11:d4:63:1a:d6:d9:25:4d:52:52:d0:63:a6:18:78:84: dd:28:59:30:e9:3d:0c:1b:90:a4:a7:b5:ff:62:31:df:90:ed: 59:e0:15:f6:ab:0c:9c:96:53:b7:a3:27:e8:b7:1b:ea:58:41: ce:27:aa:19:11:4a:f0:b2:97:e0:04:22:38:e6:4e:e6:81:83: 12:f3:b3:25:2a:8d:9e:36:8b:21:c6:41:e2:4f:3c:ef:68:0e: 30:f8:e1:09:ce:af:c1:79:e9:3c:e0:d7:3d:7f:fa:00:ff:fe: 53:a8:05:97:b5:9b:c0:8e:e4:8f:30:cf:a5:83:8a:79:1c:84: 40:1e:4e:70:c1:ae:1f:be:65:17:72:3f:d6:5a:b2:7d:d4:f9: 34:61:95:1e:8b:58:c2:30:42:21:cd:8f:bb:27:f4:f9:95:24: 43:52:a7:af:c4:cb:7c:bf:4e:5d:42:cc:61:36:06:0c:c5:e9: 1f:e3:00:47:88:b4:6c:19:3e:66:71:3f:7c:5b:d0:94:b0:83: 80:71:52:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIpufexEQao/ZkwDGdnVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjYwMTAyMTAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjY3OGI2OTgyOGVkOTM5Nzc2ZTE2MTJiMGU4ZWFhNWZmYTIwY2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKAwTwMbaQ8u/KzBvJBU25NTbjfR dXk3aJlVZVaPlKsNBhTO4TRdFMebKlWvL+99gNdPz965cXaL+9fUJ5/8FwvuskgO fW3xkHMneegeBSLEOTeV/EoUjshaT2L3khYPAYCw/A8KMSZG5XsLPuH7mZCJvtu3 V8GVEx0MHLlvOtBTyFRWKZQehxEVtHLavbMp4kYE9Ax25jrH/dr3U0gzU7U4rmjb QPHLTlDGOeAKeDxGkIktf6Xp/72i40pNghAfTrdgarWaMjFcBBuqJoL1VoWpjCXM uNFvo4e3tpOwFs+wRwD9S3QLWLOym3rJxdiiupguLn5BF0dt7bxndMn1MwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNZni2mCjtk5d24WErDo6qX/ogy6MB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvMW1lTGFZS08yVGwzYmhZU3NPanFwZi1pRExvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHIYMA0G CSqGSIb3DQEBCwUAA4IBAQAZQ9SLJ/4/roL7OexBNzq4DKg94GNJxSut2zuDnsYZ bk1IBCEj+lQVdvjNBirOLzNpVAyaDSU7kBHUYxrW2SVNUlLQY6YYeITdKFkw6T0M G5Ckp7X/YjHfkO1Z4BX2qwycllO3oyfotxvqWEHOJ6oZEUrwspfgBCI45k7mgYMS 87MlKo2eNoshxkHiTzzvaA4w+OEJzq/Beek84Nc9f/oA//5TqAWXtZvAjuSPMM+l g4p5HIRAHk5wwa4fvmUXcj/WWrJ91Pk0YZUei1jCMEIhzY+7J/T5lSRDUqevxMt8 v05dQsxhNgYMxekf4wBHiLRsGT5mcT98W9CUsIOAcVLv -----END CERTIFICATE-----Generated at Mon Jan 26 08:43:05 2026 by rpki-client