This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/MKEGaibdVBKo4Y86kBLFEKWntWc.roa File: MKEGaibdVBKo4Y86kBLFEKWntWc.roa (raw, json) Hash identifier: wEDcZmG8dZd0uCd7pZvA4Qd89Tl1qRGRFYmO0DbhcdI= Subject key identifier: 30:A1:06:6A:26:DD:54:12:A8:E1:8F:3A:90:12:C5:10:A5:A7:B5:67 Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8 Certificate serial: 019B7DCA3DB3D6C61CCE3DF4BFA3ED55391D Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/MKEGaibdVBKo4Y86kBLFEKWntWc.roa Signing time: Fri 02 Jan 2026 08:19:24 +0000 ROA not before: Fri 02 Jan 2026 08:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51328 IP address blocks: 195.226.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:3d:b3:d6:c6:1c:ce:3d:f4:bf:a3:ed:55:39:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8 Validity Not Before: Jan 2 08:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30a1066a26dd5412a8e18f3a9012c510a5a7b567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5f:39:8b:f9:e6:1d:c9:68:e9:84:8b:11:c7: 70:e8:ed:50:4f:27:4e:49:57:ef:4c:3c:2b:04:78: 15:4d:03:05:f0:77:1a:c4:22:dc:01:c9:72:04:8b: ab:82:9d:f8:ac:bf:e3:79:7a:85:5e:52:d7:3b:91: 91:3f:7e:39:4f:c2:5a:91:00:ed:fc:33:28:e6:18: b8:20:36:9d:bb:5b:b3:19:12:44:44:bd:d4:e4:2d: e4:54:8d:9a:38:b5:02:53:7b:5e:10:11:0e:c5:2e: 4e:ff:82:d8:ff:28:d6:d8:db:82:7e:85:2a:2b:cf: 6d:90:11:e5:fc:05:e2:2b:97:d6:a4:eb:da:d4:fa: 28:bd:98:ad:06:34:9f:64:5c:80:92:9b:aa:77:8e: 8b:64:01:bd:7a:0f:2b:5c:0d:e9:ce:a7:50:f2:0b: 26:41:41:dc:a4:91:3a:63:7c:63:2b:54:06:a7:1b: 52:03:ce:5b:02:1e:13:e4:bb:72:f4:c1:18:be:09: e2:e6:a0:50:e3:7e:1d:a4:7b:bb:f8:08:c8:88:80: c6:5c:ee:50:66:0a:aa:a9:88:6e:be:9c:20:01:88: 42:c0:b2:e8:17:23:7a:3a:c8:e1:3d:19:5f:9f:27: e2:f3:b2:07:db:fe:c7:02:44:53:58:97:45:5f:7c: fb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A1:06:6A:26:DD:54:12:A8:E1:8F:3A:90:12:C5:10:A5:A7:B5:67 X509v3 Authority Key Identifier: keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/MKEGaibdVBKo4Y86kBLFEKWntWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.226.206.0/24 Signature Algorithm: sha256WithRSAEncryption 57:01:1f:e5:cc:38:2f:d2:ad:eb:c7:cc:65:55:f1:e7:4f:fd: 29:f5:4e:fd:52:76:dd:1f:aa:ad:62:55:3e:b1:fa:28:f9:b3: 5e:3a:01:bf:eb:b9:65:4a:cf:d0:fc:6d:e7:12:cd:8e:b0:54: ef:88:3f:64:a0:aa:9e:4b:fd:fa:e7:d2:3d:c1:d6:11:35:e2: 96:bf:b3:e6:cf:68:9a:8b:e8:ab:77:0c:ac:7c:9a:43:c1:bb: 88:24:0f:a9:51:e7:91:e4:81:57:e3:5a:d8:ad:94:22:a1:e9: d3:1c:f6:3d:40:4b:91:28:2a:bf:59:9c:da:43:d5:6a:da:0c: cd:4f:df:f4:8c:37:0d:90:05:bb:12:af:ee:db:1f:ae:62:34: 2e:c6:53:a7:8a:a3:f1:f1:8f:18:9a:a1:56:9f:35:15:4e:3e: b4:fc:62:79:d8:63:a8:7b:d4:27:b3:39:45:09:f0:66:66:6a: bd:3c:7d:bf:4a:db:21:e4:1c:c1:66:fa:02:ba:2b:5f:68:55: 74:d5:98:72:56:8d:7c:d8:a4:b5:58:d1:41:20:cc:66:1c:9a: c9:64:98:b3:0c:48:48:16:d6:f8:45:d1:f9:9e:fc:71:7d:0a: 0f:f4:e3:ee:3d:37:cd:5e:8e:d1:31:95:de:36:c3:8f:42:13: 67:13:02:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yj2z1sYczj30v6PtVTkdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMmFmYTVjNzA2ZDNlYjBhOTJkYTg5YjVkNDFiOTM2ZWI0 OWNjYjgwHhcNMjYwMTAyMDgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGExMDY2YTI2ZGQ1NDEyYThlMThmM2E5MDEyYzUxMGE1YTdiNTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV85i/nmHclo6YSLEcdw6O1QTydO SVfvTDwrBHgVTQMF8HcaxCLcAclyBIurgp34rL/jeXqFXlLXO5GRP345T8JakQDt /DMo5hi4IDadu1uzGRJERL3U5C3kVI2aOLUCU3teEBEOxS5O/4LY/yjW2NuCfoUq K89tkBHl/AXiK5fWpOva1PoovZitBjSfZFyAkpuqd46LZAG9eg8rXA3pzqdQ8gsm QUHcpJE6Y3xjK1QGpxtSA85bAh4T5Lty9MEYvgni5qBQ434dpHu7+AjIiIDGXO5Q ZgqqqYhuvpwgAYhCwLLoFyN6OsjhPRlfnyfi87IH2/7HAkRTWJdFX3z7IQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDChBmom3VQSqOGPOpASxRClp7VnMB8GA1UdIwQY MBaAFDwq+lxwbT6wqS2om11BuTbrScy4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lYjFjNGYtZmQ4MC00OTE5LWIxODUt Zjc4MzNhM2YyNDg1LzEvTUtFR2FpYmRWQktvNFk4NmtCTEZFS1dudFdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9lYjFjNGYtZmQ4MC00OTE5LWIxODUtZjc4MzNhM2YyNDg1 LzEvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+LOMA0G CSqGSIb3DQEBCwUAA4IBAQBXAR/lzDgv0q3rx8xlVfHnT/0p9U79UnbdH6qtYlU+ sfoo+bNeOgG/67llSs/Q/G3nEs2OsFTviD9koKqeS/3659I9wdYRNeKWv7Pmz2ia i+irdwysfJpDwbuIJA+pUeeR5IFX41rYrZQioenTHPY9QEuRKCq/WZzaQ9Vq2gzN T9/0jDcNkAW7Eq/u2x+uYjQuxlOniqPx8Y8YmqFWnzUVTj60/GJ52GOoe9QnszlF CfBmZmq9PH2/Stsh5BzBZvoCuitfaFV01ZhyVo182KS1WNFBIMxmHJrJZJizDEhI Ftb4RdH5nvxxfQoP9OPuPTfNXo7RMZXeNsOPQhNnEwKg -----END CERTIFICATE-----Generated at Mon Jan 12 14:05:11 2026 by rpki-client