This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/meAessKCpmwe8fOAgZe9YU9MTiw.roa File: meAessKCpmwe8fOAgZe9YU9MTiw.roa (raw, json) Hash identifier: 50h4K5YSYsz32EpIZ2NW1nDqeDeoSpSQ6hoQmydaO20= Subject key identifier: 99:E0:1E:B2:C2:82:A6:6C:1E:F1:F3:80:81:97:BD:61:4F:4C:4E:2C Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3 Certificate serial: 019B7F136D1873B95E77AF63C81429D61825 Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/meAessKCpmwe8fOAgZe9YU9MTiw.roa Signing time: Fri 02 Jan 2026 14:18:57 +0000 ROA not before: Fri 02 Jan 2026 14:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12437 IP address blocks: 212.101.192.0/19 maxlen: 24 2a06:7880::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:6d:18:73:b9:5e:77:af:63:c8:14:29:d6:18:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3 Validity Not Before: Jan 2 14:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99e01eb2c282a66c1ef1f3808197bd614f4c4e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1c:8d:95:9b:9d:5e:4e:b5:7f:b3:68:8e:38: 1c:07:9c:37:f3:3c:4a:e6:5d:35:19:d3:d4:78:ce: d2:8f:0b:14:ce:ae:32:76:fb:a8:65:b9:a4:37:57: 6b:21:9c:51:99:75:13:e8:1e:63:f9:5d:11:56:be: e1:96:72:78:42:cd:22:fc:6d:50:38:ee:3c:99:ad: 41:0c:6c:be:82:97:f7:37:12:e7:31:c2:54:c1:a4: 87:d6:c8:fc:4e:cd:fb:1f:8f:69:74:04:e2:d1:ab: 9c:12:be:2d:36:14:ad:00:18:b6:e8:8a:a5:2e:2c: 67:4b:e8:ac:11:ff:0f:41:d8:08:83:af:73:d2:4b: 97:76:98:c9:0f:eb:1a:1d:a7:f3:2c:c4:8f:77:2d: 7a:6f:c9:f6:7b:c8:09:53:41:11:aa:63:91:37:28: e4:04:14:fa:14:51:ca:59:1c:2e:26:99:dc:97:48: e7:09:12:6f:07:e5:d4:e1:58:11:cd:51:b3:74:85: 9d:a5:77:57:df:dc:df:9d:e1:16:8b:2f:b4:25:25: 68:eb:6f:2f:5e:c2:6a:a3:f8:d8:c9:d4:45:26:5b: 5c:17:b5:72:82:44:72:55:20:87:4a:ed:eb:fd:1f: f0:50:25:c9:96:08:33:a5:f0:07:68:2d:18:95:6c: 47:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E0:1E:B2:C2:82:A6:6C:1E:F1:F3:80:81:97:BD:61:4F:4C:4E:2C X509v3 Authority Key Identifier: keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/meAessKCpmwe8fOAgZe9YU9MTiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.101.192.0/19 IPv6: 2a06:7880::/29 Signature Algorithm: sha256WithRSAEncryption 4c:83:5c:a4:79:f0:93:2b:65:67:f7:6e:4c:46:4b:20:87:04: 52:b6:2f:f1:af:14:38:72:8c:8b:77:96:58:62:e2:b6:35:fd: de:47:55:25:1d:3b:23:3b:01:f7:e3:75:35:7d:65:54:b2:38: a4:f4:27:dc:08:f2:e1:cb:c6:32:d0:46:ff:41:0a:93:c8:6a: ca:f2:bc:43:88:54:28:1b:b1:ae:b2:ca:fb:d5:91:89:4a:87: a3:dd:bb:2d:55:28:44:b5:c4:0c:11:7f:b8:d5:a7:28:0c:29: ef:17:ff:07:7e:b2:cf:2e:f8:6a:0b:d4:21:8a:d4:a0:01:88: b8:6a:f5:dd:ca:22:94:b9:05:1c:29:d2:44:66:57:2e:c1:33: 46:38:62:07:0f:43:73:3d:a6:f5:4a:27:43:c8:ae:32:b9:9e: 6e:27:84:84:8c:32:8c:7e:25:c0:3e:5e:00:7a:5f:fb:90:6a: 51:c1:58:23:89:37:c7:24:4e:ae:91:e1:be:c9:60:7b:71:45: f6:f3:bc:e6:81:54:70:e7:17:a2:e3:1a:49:97:d7:ac:33:47: 6f:6f:a4:cd:f0:58:81:16:80:23:30:05:9d:52:4c:53:ba:9e: b2:32:88:80:87:46:7e:9c:35:b8:76:88:71:d1:c0:c0:87:b7: 70:66:6f:a9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/E20Yc7led69jyBQp1hglMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YWVlNjc2MjBkOWMwYWU2M2QyOTU3ODVjOWQ5NTZmMDYz YzIxYzMwHhcNMjYwMTAyMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWUwMWViMmMyODJhNjZjMWVmMWYzODA4MTk3YmQ2MTRmNGM0ZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuByNlZudXk61f7NojjgcB5w38zxK 5l01GdPUeM7SjwsUzq4ydvuoZbmkN1drIZxRmXUT6B5j+V0RVr7hlnJ4Qs0i/G1Q OO48ma1BDGy+gpf3NxLnMcJUwaSH1sj8Ts37H49pdATi0aucEr4tNhStABi26Iql LixnS+isEf8PQdgIg69z0kuXdpjJD+saHafzLMSPdy16b8n2e8gJU0ERqmORNyjk BBT6FFHKWRwuJpncl0jnCRJvB+XU4VgRzVGzdIWdpXdX39zfneEWiy+0JSVo628v XsJqo/jYydRFJltcF7VygkRyVSCHSu3r/R/wUCXJlggzpfAHaC0YlWxHUwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJngHrLCgqZsHvHzgIGXvWFPTE4sMB8GA1UdIwQY MBaAFKeu5nYg2cCuY9KVeFydlW8GPCHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQt MGI3ZjE1YjUwOWNiLzEvbWVBZXNzS0NwbXdlOGZPQWdaZTlZVTlNVGl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQtMGI3ZjE1YjUwOWNi LzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1GXAMA0E AgACMAcDBQMqBniAMA0GCSqGSIb3DQEBCwUAA4IBAQBMg1ykefCTK2Vn925MRksg hwRSti/xrxQ4coyLd5ZYYuK2Nf3eR1UlHTsjOwH343U1fWVUsjik9CfcCPLhy8Yy 0Eb/QQqTyGrK8rxDiFQoG7Gussr71ZGJSoej3bstVShEtcQMEX+41acoDCnvF/8H frLPLvhqC9QhitSgAYi4avXdyiKUuQUcKdJEZlcuwTNGOGIHD0NzPab1SidDyK4y uZ5uJ4SEjDKMfiXAPl4Ael/7kGpRwVgjiTfHJE6ukeG+yWB7cUX287zmgVRw5xei 4xpJl9esM0dvb6TN8FiBFoAjMAWdUkxTup6yMoiAh0Z+nDW4dohx0cDAh7dwZm+p -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:07 2026 by rpki-client