This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/MEHmFptn5E-RdwJG_wffXYargBk.roa File: MEHmFptn5E-RdwJG_wffXYargBk.roa (raw, json) Hash identifier: EYaLLvY0+7JSFR4hEnLZ8CONhJHZQinYPZPODJrVkwk= Subject key identifier: 30:41:E6:16:9B:67:E4:4F:91:77:02:46:FF:07:DF:5D:86:AB:80:19 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B0D4C699265F66A316F957EE28A696DCB Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/MEHmFptn5E-RdwJG_wffXYargBk.roa Signing time: Thu 11 Dec 2025 12:04:30 +0000 ROA not before: Thu 11 Dec 2025 12:04:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 272330 IP address blocks: 2.59.194.0/24 maxlen: 24 45.142.40.0/24 maxlen: 24 178.19.33.0/24 maxlen: 24 185.231.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:4c:69:92:65:f6:6a:31:6f:95:7e:e2:8a:69:6d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Dec 11 12:04:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3041e6169b67e44f91770246ff07df5d86ab8019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:e3:14:76:4c:99:f6:e3:f4:00:bd:b3:e2: 0b:1d:e2:c8:5b:b5:6c:4a:8c:11:45:86:58:97:ef: b2:a7:f4:88:99:48:fe:b6:76:3f:a6:49:14:cd:20: 40:05:cd:67:92:95:e1:40:6f:5f:c9:af:2d:f9:a1: c7:54:c5:bf:ec:f5:dc:83:f5:1d:2e:06:bc:e8:f6: 80:f8:52:c6:be:bc:15:e9:1e:9b:dd:89:a6:0c:22: 21:11:93:3a:7d:aa:4e:85:10:43:96:fa:ed:39:78: 7b:4b:53:16:b8:08:75:5f:33:8c:8e:da:2f:4f:11: d7:bb:1d:fe:c1:14:be:3a:ad:aa:7c:ea:e3:bd:a7: 79:d7:42:7a:01:a1:61:e8:1f:a4:d1:e7:f5:e4:e8: 55:93:69:a3:2e:06:5d:04:b3:ea:ec:cf:83:36:ff: 28:b5:de:9b:d9:05:70:16:0e:9e:b5:de:07:72:7c: 5a:85:1c:b1:4a:da:67:31:80:db:2f:1f:c7:be:de: b9:76:e7:fc:76:0c:96:2f:c5:63:3e:bd:a2:f8:08: 6d:5e:95:ea:ee:87:2c:3e:6d:4f:47:04:df:90:53: 68:c9:2b:1d:56:91:eb:c4:17:c4:27:2c:af:1e:cc: 17:f7:b3:b8:6c:ba:c8:91:9e:f4:34:4f:66:0f:ed: 39:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:41:E6:16:9B:67:E4:4F:91:77:02:46:FF:07:DF:5D:86:AB:80:19 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/MEHmFptn5E-RdwJG_wffXYargBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.194.0/24 45.142.40.0/24 178.19.33.0/24 185.231.186.0/24 Signature Algorithm: sha256WithRSAEncryption b5:51:00:bf:e2:0e:aa:c5:71:09:da:fa:9d:d8:53:53:0a:e2: b6:4d:ee:19:8d:06:30:e8:0e:1f:ce:56:a3:37:1c:00:89:eb: eb:4e:21:3f:cc:2c:bf:2f:e9:ad:39:2b:4f:45:76:1d:7c:13: 35:30:a8:5e:e8:63:22:bb:d2:2f:61:b9:ed:55:61:38:a5:c5: 2b:c8:09:1f:bc:0a:16:6e:72:1d:f1:f6:4b:a6:d3:cb:03:32: 8c:95:14:b7:3b:e1:a0:bb:86:b6:af:3b:ce:ae:88:fa:7b:6b: ae:dd:55:05:46:fa:e2:5e:a8:61:c7:9f:2c:ec:89:e0:a0:71: 87:6b:0e:d1:a5:3e:eb:95:e2:22:3a:6d:28:d3:c7:76:d7:58: be:5b:8c:bf:1c:1e:a8:f7:4c:e8:51:1c:b0:4a:62:77:78:1d: 84:d4:82:64:44:d3:92:80:0e:10:77:ac:f4:40:1a:66:7c:80: 91:7c:bc:b0:97:e7:4b:01:1e:8f:66:09:7a:94:90:7f:0a:92: 28:c8:1f:37:3a:1d:f4:f7:4c:5c:77:25:04:6f:e5:20:5a:2b: 23:9d:c3:c6:4c:f1:f2:6d:8c:66:a4:03:52:ab:47:20:b9:8b: 9f:28:e0:db:b9:3a:c6:d2:94:e6:fb:80:3c:1c:e8:43:f5:a7: d4:2f:6f:ce -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsNTGmSZfZqMW+VfuKKaW3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjUxMjExMTIwNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDQxZTYxNjliNjdlNDRmOTE3NzAyNDZmZjA3ZGY1ZDg2YWI4MDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dLjFHZMmfbj9AC9s+ILHeLIW7Vs SowRRYZYl++yp/SImUj+tnY/pkkUzSBABc1nkpXhQG9fya8t+aHHVMW/7PXcg/Ud Lga86PaA+FLGvrwV6R6b3YmmDCIhEZM6fapOhRBDlvrtOXh7S1MWuAh1XzOMjtov TxHXux3+wRS+Oq2qfOrjvad510J6AaFh6B+k0ef15OhVk2mjLgZdBLPq7M+DNv8o td6b2QVwFg6etd4HcnxahRyxStpnMYDbLx/Hvt65duf8dgyWL8VjPr2i+AhtXpXq 7ocsPm1PRwTfkFNoySsdVpHrxBfEJyyvHswX97O4bLrIkZ70NE9mD+05twIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDBB5habZ+RPkXcCRv8H312Gq4AZMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvTUVIbUZwdG41RS1SZHdKR193ZmZYWWFyZ0JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAAjvCAwQA LY4oAwQAshMhAwQAuee6MA0GCSqGSIb3DQEBCwUAA4IBAQC1UQC/4g6qxXEJ2vqd 2FNTCuK2Te4ZjQYw6A4fzlajNxwAievrTiE/zCy/L+mtOStPRXYdfBM1MKhe6GMi u9IvYbntVWE4pcUryAkfvAoWbnId8fZLptPLAzKMlRS3O+Ggu4a2rzvOroj6e2uu 3VUFRvriXqhhx58s7IngoHGHaw7RpT7rleIiOm0o08d211i+W4y/HB6o90zoURyw SmJ3eB2E1IJkRNOSgA4Qd6z0QBpmfICRfLywl+dLAR6PZgl6lJB/CpIoyB83Oh30 90xcdyUEb+UgWisjncPGTPHybYxmpANSq0cguYufKODbuTrG0pTm+4A8HOhD9afU L2/O -----END CERTIFICATE-----Generated at Sat Dec 20 14:06:26 2025 by rpki-client