This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/wMe5BRxHj63l88AX7uqgxLFEk3g.roa File: wMe5BRxHj63l88AX7uqgxLFEk3g.roa (raw, json) Hash identifier: FNreVADMygUCDT7FyB7Y998XcQmAqj39+EJa5oP6CCk= Subject key identifier: C0:C7:B9:05:1C:47:8F:AD:E5:F3:C0:17:EE:EA:A0:C4:B1:44:93:78 Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54 Certificate serial: 019B7EA6D727BE2DC665A32784BC01D5CBB3 Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/wMe5BRxHj63l88AX7uqgxLFEk3g.roa Signing time: Fri 02 Jan 2026 12:20:21 +0000 ROA not before: Fri 02 Jan 2026 12:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210288 IP address blocks: 185.137.24.0/24 maxlen: 24 185.137.25.0/24 maxlen: 24 185.137.26.0/24 maxlen: 24 185.137.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d7:27:be:2d:c6:65:a3:27:84:bc:01:d5:cb:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54 Validity Not Before: Jan 2 12:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0c7b9051c478fade5f3c017eeeaa0c4b1449378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:37:db:3f:de:78:f9:7b:13:b9:88:77:76:45: cc:4a:ce:a4:e2:a7:34:80:7d:8c:56:ba:31:95:0e: f7:96:4e:2c:d3:2d:5b:8d:71:37:cc:8a:28:1c:52: ec:39:a3:a4:27:05:ff:82:04:fe:96:dc:de:db:23: a1:1e:0a:2f:bf:d5:4e:1b:b2:9f:33:7b:fc:f2:4f: 46:e8:2e:28:0c:53:55:1d:e9:45:99:12:10:40:5e: eb:b6:74:27:9e:81:ff:b0:5e:32:a7:7f:c4:5b:9f: 05:42:d4:ce:56:e5:5f:82:42:2f:fc:c8:bc:79:e0: 55:6b:1a:74:e4:6c:9a:4e:60:55:b2:fc:08:75:e5: 34:1a:9e:be:4e:4f:d3:54:7d:e6:a3:ff:32:2b:c3: 8b:a3:3a:77:13:39:b5:a9:bb:84:f4:90:fc:93:75: e3:c3:d6:b5:2b:6a:cf:26:44:4c:0e:cc:b6:05:c1: 22:a9:f5:6b:fa:1e:0c:ef:d2:29:b3:6d:39:23:e0: 98:ef:12:c8:7f:82:f6:b6:81:ab:c1:14:2c:af:c6: 9d:c0:ce:17:e8:27:bd:49:0d:cf:34:3f:6d:fe:f2: 44:73:a3:aa:81:e5:16:c0:37:4d:c5:33:21:bc:e8: d7:15:b6:dd:15:54:bf:74:15:db:29:05:c6:d8:2d: 30:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C7:B9:05:1C:47:8F:AD:E5:F3:C0:17:EE:EA:A0:C4:B1:44:93:78 X509v3 Authority Key Identifier: keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/wMe5BRxHj63l88AX7uqgxLFEk3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.24.0/22 Signature Algorithm: sha256WithRSAEncryption ab:4a:ef:18:6b:f8:ef:20:46:cc:b5:c8:e5:26:a0:0a:08:25: f3:32:d3:34:b5:7d:aa:dc:70:77:7f:ca:70:a9:bc:6b:9b:06: 0f:59:63:12:5b:44:de:cf:bd:c0:80:81:9b:14:0b:63:57:e1: 6d:58:29:a4:f6:3e:0a:16:41:b9:a0:9e:72:17:11:ea:47:50: e1:9c:4c:6a:13:00:55:f7:1b:a5:65:58:8c:a4:ea:bb:dc:df: ac:8c:c7:e8:b4:f9:4c:a8:2e:f9:cc:ee:3e:67:53:7d:e3:68: 1a:d8:d4:89:ff:07:40:df:cd:18:76:0d:90:b2:7a:5e:84:b1: b2:70:9c:9a:5f:27:49:df:46:ba:66:7b:f2:8c:ad:d9:43:af: 90:08:30:b4:21:dd:d9:49:77:e3:ef:e2:dc:5c:4f:e2:9c:a3: 0d:63:e8:49:13:e4:b2:95:3e:e3:77:61:a7:83:cd:26:9f:7e: 40:a2:02:5d:75:b3:7d:3c:1e:ed:6e:ea:95:1a:90:3f:f4:ed: ba:92:36:ac:af:c8:37:09:fc:dc:05:8d:cd:3d:95:75:66:00: 45:d1:ef:b3:15:e3:07:d8:eb:83:95:90:e5:39:9e:f7:06:d2: 2d:95:02:01:08:8d:c0:a0:38:13:9f:a2:15:ca:93:19:7e:fb: 63:73:5a:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ptcnvi3GZaMnhLwB1cuzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYmEwYmU3Y2NlMzgwZTZiYjc0ZTNjNWZjZWEwODFlOTc5 OWFlNTQwHhcNMjYwMTAyMTIyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGM3YjkwNTFjNDc4ZmFkZTVmM2MwMTdlZWVhYTBjNGIxNDQ5Mzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TfbP954+XsTuYh3dkXMSs6k4qc0 gH2MVroxlQ73lk4s0y1bjXE3zIooHFLsOaOkJwX/ggT+ltze2yOhHgovv9VOG7Kf M3v88k9G6C4oDFNVHelFmRIQQF7rtnQnnoH/sF4yp3/EW58FQtTOVuVfgkIv/Mi8 eeBVaxp05GyaTmBVsvwIdeU0Gp6+Tk/TVH3mo/8yK8OLozp3Ezm1qbuE9JD8k3Xj w9a1K2rPJkRMDsy2BcEiqfVr+h4M79Ips205I+CY7xLIf4L2toGrwRQsr8adwM4X 6Ce9SQ3PND9t/vJEc6OqgeUWwDdNxTMhvOjXFbbdFVS/dBXbKQXG2C0wpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMDHuQUcR4+t5fPAF+7qoMSxRJN4MB8GA1UdIwQY MBaAFGG6C+fM44Dmu3TjxfzqCB6Xma5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hMmUzN2QtNGJhNS00MTY1LTlmZDIt MjEwZDQ4MmE0YjkzLzEvd01lNUJSeEhqNjNsODhBWDd1cWd4TEZFazNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hMmUzN2QtNGJhNS00MTY1LTlmZDItMjEwZDQ4MmE0Yjkz LzEvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYkYMA0G CSqGSIb3DQEBCwUAA4IBAQCrSu8Ya/jvIEbMtcjlJqAKCCXzMtM0tX2q3HB3f8pw qbxrmwYPWWMSW0Tez73AgIGbFAtjV+FtWCmk9j4KFkG5oJ5yFxHqR1DhnExqEwBV 9xulZViMpOq73N+sjMfotPlMqC75zO4+Z1N942ga2NSJ/wdA380Ydg2QsnpehLGy cJyaXydJ30a6ZnvyjK3ZQ6+QCDC0Id3ZSXfj7+LcXE/inKMNY+hJE+SylT7jd2Gn g80mn35AogJddbN9PB7tbuqVGpA/9O26kjasr8g3CfzcBY3NPZV1ZgBF0e+zFeMH 2OuDlZDlOZ73BtItlQIBCI3AoDgTn6IVypMZfvtjc1rj -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:36 2026 by rpki-client