This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MeAvhVIllUxaA5Wk0o8l2k88A-w.roa File: MeAvhVIllUxaA5Wk0o8l2k88A-w.roa (raw, json) Hash identifier: KgGkU9Yqmo6pBKLclOaSjh4Rjw04k55+UppTOUCXp2s= Subject key identifier: 31:E0:2F:85:52:25:95:4C:5A:03:95:A4:D2:8F:25:DA:4F:3C:03:EC Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B54F6AA69F39E936E002C40D6FBC4DABC Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MeAvhVIllUxaA5Wk0o8l2k88A-w.roa Signing time: Thu 25 Dec 2025 10:03:30 +0000 ROA not before: Thu 25 Dec 2025 10:03:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213028 IP address blocks: 194.135.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 11:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:f6:aa:69:f3:9e:93:6e:00:2c:40:d6:fb:c4:da:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Dec 25 10:03:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=31e02f855225954c5a0395a4d28f25da4f3c03ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:b5:d4:ee:8f:47:79:27:28:30:e3:69:e9: c5:ac:46:9e:b8:03:f0:b5:22:42:56:d6:92:5f:71: d1:22:ca:94:f7:ff:5b:90:10:8c:f5:eb:23:7c:a6: d3:0c:11:f5:82:5a:c7:8e:0a:22:07:b9:50:e8:34: 6b:79:04:2f:6f:24:32:35:73:75:1d:db:84:ed:3e: da:49:ab:bf:e3:89:f0:fd:0d:80:8c:3a:42:ba:53: 22:3c:17:82:f8:e0:2f:a6:cb:0f:24:78:85:1b:c7: 75:b7:eb:a9:e9:cf:fd:6c:5a:da:fc:12:d9:c1:0f: 70:ef:d8:be:ff:2d:3e:ed:c9:a8:98:c5:e4:45:37: 0e:73:f0:d6:96:1a:d5:84:37:d5:27:92:44:82:70: 8e:40:be:0a:93:dd:1d:55:f3:d9:07:9a:e1:03:97: 28:95:47:2c:df:a4:67:6d:89:21:fa:d9:8e:68:1f: 49:2f:c1:7b:79:76:7a:db:a3:79:29:21:33:34:7b: e7:a8:7e:89:47:2c:a6:9d:d5:8b:f0:fe:8d:03:5a: 54:a3:37:bf:f9:f0:f3:20:1c:ea:92:4c:2d:51:d2: 6f:f2:3d:ee:65:71:1f:19:cb:1e:56:12:b9:0e:e1: df:16:76:2c:5a:0c:a6:aa:1f:0c:70:e3:0e:ce:95: ef:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E0:2F:85:52:25:95:4C:5A:03:95:A4:D2:8F:25:DA:4F:3C:03:EC X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MeAvhVIllUxaA5Wk0o8l2k88A-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.135.124.0/24 Signature Algorithm: sha256WithRSAEncryption 75:b3:06:05:34:24:f6:3a:91:f9:a7:c5:01:fc:13:78:a1:fa: 09:eb:2d:06:0b:b9:c6:43:cc:13:1f:79:fc:cd:05:e5:81:ee: 88:cc:be:ed:7b:fb:b3:af:ab:77:57:5a:b1:09:37:ba:8e:c3: b3:6f:f4:a6:95:11:68:34:1b:77:45:fd:13:1f:f7:db:fe:6e: 86:0f:45:96:0a:a8:61:02:47:51:35:90:70:f3:e7:cf:de:01: 61:ac:d9:03:95:19:25:fe:e6:fa:d7:c9:ab:78:fb:38:a0:7c: d6:9c:11:f4:d5:bf:83:82:17:c0:ec:ef:d2:aa:cd:b2:3b:c6: d6:94:ba:39:7b:f6:7e:f3:bf:90:51:47:bf:8b:76:2c:ab:4e: 0c:0b:f9:71:8e:45:22:81:c8:a1:f9:44:b3:5c:bb:38:e5:ce: 03:ae:ec:6c:3a:78:62:72:f1:77:0e:bf:b5:f7:d7:84:ba:f1: f6:22:3b:c1:7a:79:d2:d2:77:4e:4e:6f:36:35:d1:f3:cf:d3: 51:86:8a:fe:ba:b1:ca:c8:8d:b9:4e:65:06:de:99:d5:b8:80: 6a:b5:43:c4:ed:66:3f:d9:da:ce:1a:d1:5e:43:a6:2a:f5:89: 1c:20:db:44:7a:e3:f9:3e:48:81:71:4c:8b:2d:22:97:e1:40: f2:d3:32:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtU9qpp856TbgAsQNb7xNq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMjI1MTAwMzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWUwMmY4NTUyMjU5NTRjNWEwMzk1YTRkMjhmMjVkYTRmM2MwM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKi11O6PR3knKDDjaenFrEaeuAPw tSJCVtaSX3HRIsqU9/9bkBCM9esjfKbTDBH1glrHjgoiB7lQ6DRreQQvbyQyNXN1 HduE7T7aSau/44nw/Q2AjDpCulMiPBeC+OAvpssPJHiFG8d1t+up6c/9bFra/BLZ wQ9w79i+/y0+7cmomMXkRTcOc/DWlhrVhDfVJ5JEgnCOQL4Kk90dVfPZB5rhA5co lUcs36RnbYkh+tmOaB9JL8F7eXZ626N5KSEzNHvnqH6JRyymndWL8P6NA1pUoze/ +fDzIBzqkkwtUdJv8j3uZXEfGcseVhK5DuHfFnYsWgymqh8McOMOzpXvvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDHgL4VSJZVMWgOVpNKPJdpPPAPsMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvTWVBdmhWSWxsVXhhQTVXazBvOGwyazg4QS13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwod8MA0G CSqGSIb3DQEBCwUAA4IBAQB1swYFNCT2OpH5p8UB/BN4ofoJ6y0GC7nGQ8wTH3n8 zQXlge6IzL7te/uzr6t3V1qxCTe6jsOzb/SmlRFoNBt3Rf0TH/fb/m6GD0WWCqhh AkdRNZBw8+fP3gFhrNkDlRkl/ub618mrePs4oHzWnBH01b+DghfA7O/Sqs2yO8bW lLo5e/Z+87+QUUe/i3Ysq04MC/lxjkUigcih+USzXLs45c4DruxsOnhicvF3Dr+1 99eEuvH2IjvBennS0ndOTm82NdHzz9NRhor+urHKyI25TmUG3pnVuIBqtUPE7WY/ 2drOGtFeQ6Yq9YkcINtEeuP5PkiBcUyLLSKX4UDy0zKw -----END CERTIFICATE-----Generated at Sat Dec 27 20:58:54 2025 by rpki-client