This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/lNE8D9GJWfcd-D9egVK1TMPitC0.roa
File: lNE8D9GJWfcd-D9egVK1TMPitC0.roa (raw, json)
Hash identifier: 2CmJCZprp/LCt6ibHBoiFVrP1YcZuqexjzFdiTh77oM=
Subject key identifier: 94:D1:3C:0F:D1:89:59:F7:1D:F8:3F:5E:81:52:B5:4C:C3:E2:B4:2D
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 019B797E730DD2D54E0B9EC2B03DCE9F8153
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/lNE8D9GJWfcd-D9egVK1TMPitC0.roa
Signing time: Thu 01 Jan 2026 12:18:08 +0000
ROA not before: Thu 01 Jan 2026 12:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205893
IP address blocks: 45.11.40.0/24 maxlen: 24
185.202.240.0/24 maxlen: 24
185.202.241.0/24 maxlen: 24
185.202.242.0/24 maxlen: 24
185.202.243.0/24 maxlen: 24
2a0a:e240::/32 maxlen: 32
2a0a:e241::/32 maxlen: 32
2a0a:e242::/32 maxlen: 32
2a0a:e243::/32 maxlen: 32
2a0a:e244::/32 maxlen: 32
2a0a:e245::/32 maxlen: 32
2a0a:e246::/32 maxlen: 32
2a0a:e247::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:73:0d:d2:d5:4e:0b:9e:c2:b0:3d:ce:9f:81:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Jan 1 12:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94d13c0fd18959f71df83f5e8152b54cc3e2b42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:95:55:df:43:83:67:44:bf:db:f9:ac:16:
d1:44:a7:8a:4c:1c:2c:9f:f4:71:9f:25:56:ef:6e:
44:49:11:16:8e:2f:f5:7b:38:d9:7b:34:90:e3:2b:
30:00:d2:af:6c:ea:13:95:82:d7:6e:7c:71:70:a2:
77:0d:3b:b3:6e:05:e1:9d:fe:bc:b0:a4:14:1e:c6:
d2:be:97:f4:54:31:90:3e:48:76:9d:f4:38:52:e7:
94:55:1c:16:74:4a:e9:15:e4:78:87:f9:33:e6:ac:
db:e4:c6:f2:e7:19:4d:1b:03:15:c2:dc:9b:bf:c9:
0a:53:e2:e4:55:c9:8d:0e:b0:91:11:06:4d:5f:42:
43:f1:51:83:8e:cc:2a:5f:d5:e3:71:5e:af:29:6a:
f9:ae:be:23:b2:b5:94:1b:ee:26:1b:c8:97:f1:7f:
40:73:8c:8a:9c:77:a7:a8:a4:eb:be:27:96:65:12:
34:7d:10:a4:21:01:ad:2f:bf:82:30:24:16:51:2d:
fb:b0:59:b5:b4:98:1b:b9:67:45:cf:e5:25:fc:26:
cd:5f:e0:b3:6f:4b:9a:f1:24:f6:9f:19:1c:7a:48:
13:82:f8:42:7a:30:ac:c8:5c:02:4d:06:58:8d:00:
36:d9:34:e0:eb:86:92:e1:20:00:60:88:1e:9d:43:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D1:3C:0F:D1:89:59:F7:1D:F8:3F:5E:81:52:B5:4C:C3:E2:B4:2D
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/lNE8D9GJWfcd-D9egVK1TMPitC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.40.0/24
185.202.240.0/22
IPv6:
2a0a:e240::/29
Signature Algorithm: sha256WithRSAEncryption
86:25:be:48:e3:9f:84:ef:07:39:f6:cd:8d:9d:73:e0:36:58:
ee:7e:ee:45:f0:53:34:5b:a3:5e:be:00:fe:9b:76:8c:a1:af:
23:46:36:79:4b:81:eb:ef:c6:be:0e:fe:9e:38:c0:a8:cb:e6:
b0:d5:cb:a2:25:b3:ea:ae:b7:05:8c:6c:a2:64:8c:6f:3b:f5:
13:c4:f3:62:c0:00:4e:7d:9a:0f:bf:d9:66:9f:0d:54:bb:05:
2b:df:bd:f4:90:9d:c4:64:54:9b:c2:2b:2b:de:eb:43:04:00:
14:4a:c4:39:89:97:ed:fd:f7:80:13:97:4d:57:4c:13:30:17:
cc:53:49:c7:5c:4e:4b:60:60:24:44:14:c9:3d:de:5b:b4:c6:
81:ee:7f:65:1a:ed:99:97:73:a0:27:f7:c5:b3:b4:13:4e:1e:
b5:15:2b:88:02:ba:44:e1:41:d9:f1:af:fd:34:c3:ef:0c:8e:
32:61:de:6d:3d:ff:8f:41:fb:f9:14:9f:60:c5:8d:54:71:70:
1b:a0:6d:d0:f9:ad:9d:39:cb:45:e1:4f:da:82:ed:fc:c6:a3:
d6:2c:35:21:66:7e:40:e3:e4:a5:31:fb:ed:c7:f5:de:bd:00:
d1:af:b2:9f:f9:eb:77:9b:a1:94:af:3d:2c:85:6a:9b:6f:7b:
b0:11:03:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:24:23 2026 by rpki-client