This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/l-mEBe_ndt2MP3x9Q3PzN8F5sJc.roa File: l-mEBe_ndt2MP3x9Q3PzN8F5sJc.roa (raw, json) Hash identifier: +r+N7ZXZP6PlyPHQHesZHJOlUljW2IZMr0NtJAbWOPA= Subject key identifier: 97:E9:84:05:EF:E7:76:DD:8C:3F:7C:7D:43:73:F3:37:C1:79:B0:97 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797ECF7268CFF943E74E06BF6660FB43 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/l-mEBe_ndt2MP3x9Q3PzN8F5sJc.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200422 IP address blocks: 213.169.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cf:72:68:cf:f9:43:e7:4e:06:bf:66:60:fb:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97e98405efe776dd8c3f7c7d4373f337c179b097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:b0:96:67:f6:31:89:44:ad:41:10:d3:ed: 52:b6:a2:04:15:b3:fb:92:e1:ca:7c:63:f6:ce:c0: ec:a2:d8:19:78:33:1a:b9:0f:cf:ca:42:f7:50:0a: a0:a7:6f:0d:91:ba:85:10:6a:58:87:d4:ad:1c:f9: 7f:11:62:f9:f2:f9:59:ea:02:60:a8:91:c2:e7:fd: 57:3b:36:65:41:f9:85:2f:ca:39:33:3f:a0:d7:74: 5a:f9:03:1f:26:05:14:14:05:29:00:98:94:8c:24: b9:87:ac:60:1c:ca:c0:e5:3a:b5:ad:9e:17:54:07: c3:15:4b:55:e5:87:fc:25:ad:d4:ee:eb:fe:43:e8: 3d:48:8e:d6:c1:bd:ef:71:b7:68:63:03:20:d6:54: a8:26:ef:cf:98:c9:99:3a:f7:63:4b:5a:92:68:ba: ea:25:47:5b:9a:33:c1:61:41:69:9a:20:f5:89:3c: dd:f5:8b:0e:11:2f:56:fd:f5:1c:73:38:a6:67:14: 75:40:c9:45:ce:fc:e8:00:2b:1c:31:be:fb:02:53: 82:57:3f:aa:31:f9:42:01:49:d2:94:23:a9:fb:33: eb:1f:6f:2f:3e:06:71:3b:69:63:fe:9a:e6:88:42: b2:c8:e9:88:22:be:1a:9e:a9:4a:f9:80:70:bf:40: 18:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E9:84:05:EF:E7:76:DD:8C:3F:7C:7D:43:73:F3:37:C1:79:B0:97 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/l-mEBe_ndt2MP3x9Q3PzN8F5sJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.169.58.0/24 Signature Algorithm: sha256WithRSAEncryption 70:38:40:47:b4:6a:89:78:d5:b9:73:5d:03:c0:3b:67:e7:8b: 3c:29:ad:96:ab:0a:bc:b9:c9:79:63:25:e5:74:a7:fb:35:dc: 1a:d2:5d:73:b6:63:00:2a:1a:d8:41:87:e4:e4:ab:fc:17:38: bf:9c:a4:55:43:22:dd:b9:7e:15:7a:90:bb:73:fd:c6:08:11: ff:76:7f:35:70:7a:b0:83:43:ec:96:0f:c3:3f:3f:16:eb:3b: 54:29:45:de:38:19:bf:89:3e:ca:99:ca:aa:96:8e:09:72:4b: 59:cf:e8:95:91:e3:43:ab:6a:42:d0:ab:aa:02:d0:6c:0f:02: 32:66:dc:3c:fb:6f:4a:11:74:53:2f:5b:74:f3:fd:ad:1c:e3: 30:fe:9e:1a:33:1b:d5:31:de:57:1b:bf:be:75:38:bc:0b:49: 3f:4b:ad:e3:34:86:b5:b0:c3:2b:df:b2:6f:f5:e7:16:7b:c4: 9e:fa:bd:75:6c:68:6e:d3:1c:a8:1a:f3:67:47:70:20:92:16: ec:e4:ec:70:1a:bb:63:be:4c:a2:71:55:fe:8b:62:73:2a:0f: 2b:b0:de:94:b9:a4:17:2d:80:53:e3:46:f1:98:ad:a4:72:b8: 90:c4:fe:7f:d6:3a:31:76:ed:25:1b:0c:8b:b6:ad:c6:f7:12: e1:f1:07:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fs9yaM/5Q+dOBr9mYPtDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2U5ODQwNWVmZTc3NmRkOGMzZjdjN2Q0MzczZjMzN2MxNzliMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEOwlmf2MYlErUEQ0+1StqIEFbP7 kuHKfGP2zsDsotgZeDMauQ/PykL3UAqgp28NkbqFEGpYh9StHPl/EWL58vlZ6gJg qJHC5/1XOzZlQfmFL8o5Mz+g13Ra+QMfJgUUFAUpAJiUjCS5h6xgHMrA5Tq1rZ4X VAfDFUtV5Yf8Ja3U7uv+Q+g9SI7Wwb3vcbdoYwMg1lSoJu/PmMmZOvdjS1qSaLrq JUdbmjPBYUFpmiD1iTzd9YsOES9W/fUcczimZxR1QMlFzvzoACscMb77AlOCVz+q MflCAUnSlCOp+zPrH28vPgZxO2lj/prmiEKyyOmIIr4anqlK+YBwv0AYEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJfphAXv53bdjD98fUNz8zfBebCXMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvbC1tRUJlX25kdDJNUDN4OVEzUHpOOEY1c0pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ak6MA0G CSqGSIb3DQEBCwUAA4IBAQBwOEBHtGqJeNW5c10DwDtn54s8Ka2Wqwq8ucl5YyXl dKf7Ndwa0l1ztmMAKhrYQYfk5Kv8Fzi/nKRVQyLduX4VepC7c/3GCBH/dn81cHqw g0Pslg/DPz8W6ztUKUXeOBm/iT7Kmcqqlo4JcktZz+iVkeNDq2pC0KuqAtBsDwIy Ztw8+29KEXRTL1t08/2tHOMw/p4aMxvVMd5XG7++dTi8C0k/S63jNIa1sMMr37Jv 9ecWe8Se+r11bGhu0xyoGvNnR3Agkhbs5OxwGrtjvkyicVX+i2JzKg8rsN6UuaQX LYBT40bxmK2kcriQxP5/1joxdu0lGwyLtq3G9xLh8Qdm -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:27 2026 by rpki-client