This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/ME0H6FJMomj5qNZa55hYa_mg8BI.roa File: ME0H6FJMomj5qNZa55hYa_mg8BI.roa (raw, json) Hash identifier: 9JjtlUlu4wsnh6OKmL8KpV7lEe7W07be+5Wu0KAr73g= Subject key identifier: 30:4D:07:E8:52:4C:A2:68:F9:A8:D6:5A:E7:98:58:6B:F9:A0:F0:12 Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2 Certificate serial: 019BB34EA568B1C7BB3002832143D5539FAA Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/ME0H6FJMomj5qNZa55hYa_mg8BI.roa Signing time: Mon 12 Jan 2026 17:43:54 +0000 ROA not before: Mon 12 Jan 2026 17:43:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12849 IP address blocks: 193.110.180.0/23 maxlen: 24 2a14:dc00::/48 maxlen: 48 2a14:dc00:1::/48 maxlen: 48 2a14:dc00:2::/48 maxlen: 48 2a14:dc00:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:4e:a5:68:b1:c7:bb:30:02:83:21:43:d5:53:9f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2 Validity Not Before: Jan 12 17:43:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=304d07e8524ca268f9a8d65ae798586bf9a0f012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:04:a7:1e:38:3e:be:3f:a0:91:eb:5d:fa:33: 65:2f:1a:e0:74:9a:bb:e4:8c:a5:dc:ec:9c:c8:90: 50:cd:90:b2:0b:2f:a3:b4:98:8b:60:ad:24:3a:10: 9d:dc:ff:d8:cc:c5:32:c4:5f:9e:0a:59:7b:70:66: 28:d6:d1:91:f7:24:94:ce:41:5c:f8:5d:79:a2:61: 99:f0:b6:3f:e6:c5:c6:d1:40:0a:02:bc:fd:8a:47: 64:a6:89:d7:43:2b:1a:1f:06:cb:6d:86:c1:ab:09: 82:dc:52:10:b8:47:60:f5:72:49:77:48:ce:97:ea: a2:fb:04:8f:d1:15:d4:14:dc:18:b5:25:49:77:24: 04:0e:10:2b:a5:75:75:12:df:60:41:2d:65:c9:7d: ee:4b:91:02:0f:c5:72:a0:fa:30:8b:fd:bb:53:74: 2a:c2:2f:c6:40:0b:6a:5f:72:10:0e:b5:48:6f:6e: 2b:a0:ef:5c:ba:90:eb:a8:7b:fa:c3:a2:db:ec:09: 35:08:74:a5:b8:cd:ec:de:c2:55:39:e3:b2:63:25: d3:64:12:75:31:2b:44:8a:d1:b2:4d:46:e1:b3:a3: f0:2c:8b:eb:07:cb:8f:bb:ad:a0:9c:f1:b5:16:bc: c4:d8:53:a5:5a:0a:87:5c:37:f2:8a:c1:65:58:45: 47:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4D:07:E8:52:4C:A2:68:F9:A8:D6:5A:E7:98:58:6B:F9:A0:F0:12 X509v3 Authority Key Identifier: keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/ME0H6FJMomj5qNZa55hYa_mg8BI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.180.0/23 IPv6: 2a14:dc00::/46 Signature Algorithm: sha256WithRSAEncryption 8c:45:5f:20:38:ce:7c:07:ff:a2:ae:57:18:45:84:58:1c:43: 99:2c:19:54:e5:a5:fe:65:76:4d:2c:3e:39:1f:35:1d:62:c2: f4:3f:df:c5:f8:65:7e:cd:64:3e:08:4c:ed:59:40:ea:6f:49: d4:22:f1:c1:47:31:df:6f:0c:6d:c6:5c:f5:39:35:f8:2d:fd: 6b:5e:2c:4a:40:47:41:4a:93:69:63:d0:0b:36:12:9f:5a:62: 20:fe:1e:ac:57:19:d7:7b:a0:04:9c:16:15:49:69:d5:c5:53: 28:55:6d:55:10:7f:a0:55:cc:3a:58:45:2e:68:7a:e8:f0:7c: fd:ec:35:59:ad:2b:00:48:ae:ba:2c:a1:e4:28:cf:3f:78:9e: 1a:15:11:aa:b5:cd:48:42:e3:03:98:cf:72:cb:2b:73:78:ec: d1:d5:3b:b5:ed:d7:40:22:3e:33:a4:a7:62:c2:74:39:64:3f: 3e:01:a1:26:24:8e:dc:24:96:29:be:49:e7:58:ad:57:ee:64: 99:f4:b6:aa:47:f4:d7:18:92:f1:43:e6:15:d3:f4:e6:7d:d8: c3:33:90:e3:6d:f3:89:45:c0:c5:6e:1e:4d:c3:4b:6d:c7:18: de:70:bd:b6:af:4b:eb:18:66:42:2c:0c:fc:3e:3e:b7:de:c0: 6e:81:8b:7a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZuzTqVosce7MAKDIUPVU5+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTM0ZjlkMWRiZDIwYWE4N2ZiMGY2MmJkMmI2YzVlMzBj NjE0YTIwHhcNMjYwMTEyMTc0MzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDRkMDdlODUyNGNhMjY4ZjlhOGQ2NWFlNzk4NTg2YmY5YTBmMDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wSnHjg+vj+gketd+jNlLxrgdJq7 5Iyl3OycyJBQzZCyCy+jtJiLYK0kOhCd3P/YzMUyxF+eCll7cGYo1tGR9ySUzkFc +F15omGZ8LY/5sXG0UAKArz9ikdkponXQysaHwbLbYbBqwmC3FIQuEdg9XJJd0jO l+qi+wSP0RXUFNwYtSVJdyQEDhArpXV1Et9gQS1lyX3uS5ECD8VyoPowi/27U3Qq wi/GQAtqX3IQDrVIb24roO9cupDrqHv6w6Lb7Ak1CHSluM3s3sJVOeOyYyXTZBJ1 MStEitGyTUbhs6PwLIvrB8uPu62gnPG1FrzE2FOlWgqHXDfyisFlWEVHcwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDBNB+hSTKJo+ajWWueYWGv5oPASMB8GA1UdIwQY MBaAFDCjT50dvSCqh/sPYr0rbF4wxhSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTQ3MzItYzNiYS00MDg4LWE1ZmEt ZWI2NTNkMzYyMmJiLzEvTUUwSDZGSk1vbWo1cU5aYTU1aFlhX21nOEJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lZTQ3MzItYzNiYS00MDg4LWE1ZmEtZWI2NTNkMzYyMmJi LzEvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwW60MA8E AgACMAkDBwIqFNwAAAAwDQYJKoZIhvcNAQELBQADggEBAIxFXyA4znwH/6KuVxhF hFgcQ5ksGVTlpf5ldk0sPjkfNR1iwvQ/38X4ZX7NZD4ITO1ZQOpvSdQi8cFHMd9v DG3GXPU5Nfgt/WteLEpAR0FKk2lj0As2Ep9aYiD+HqxXGdd7oAScFhVJadXFUyhV bVUQf6BVzDpYRS5oeujwfP3sNVmtKwBIrrosoeQozz94nhoVEaq1zUhC4wOYz3LL K3N47NHVO7Xt10AiPjOkp2LCdDlkPz4BoSYkjtwklim+SedYrVfuZJn0tqpH9NcY kvFD5hXT9OZ92MMzkONt84lFwMVuHk3DS23HGN5wvbavS+sYZkIsDPw+PrfewG6B i3o= -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:44 2026 by rpki-client