This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/CeOlmnQUmFTqMNLzc8QT2UaMphQ.roa File: CeOlmnQUmFTqMNLzc8QT2UaMphQ.roa (raw, json) Hash identifier: lmIdi6ejQ303Is9573xXufOOiYC9e2MusukK0PsuoiI= Subject key identifier: 09:E3:A5:9A:74:14:98:54:EA:30:D2:F3:73:C4:13:D9:46:8C:A6:14 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F4DBEBE16DD72A8225BDD3C1B9406 Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/CeOlmnQUmFTqMNLzc8QT2UaMphQ.roa Signing time: Thu 01 Jan 2026 12:19:04 +0000 ROA not before: Thu 01 Jan 2026 12:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209604 IP address blocks: 213.238.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4d:be:be:16:dd:72:a8:22:5b:dd:3c:1b:94:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09e3a59a74149854ea30d2f373c413d9468ca614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1e:b5:ae:2a:79:68:03:c8:08:87:e8:fd:74: 61:01:02:8c:76:60:6a:d4:c7:65:a7:56:f9:22:34: 58:17:41:6f:ea:2f:4b:ee:a1:d9:d7:76:a5:a6:a5: e6:19:5b:3c:3b:8c:03:f0:08:71:a7:bc:c5:07:ff: a4:46:6f:c9:c3:6c:6b:fd:29:cd:bd:f4:84:26:7f: c5:e6:5b:6b:3d:3e:3c:49:a4:99:53:a2:29:9f:6c: 35:25:f5:25:cc:f8:26:31:96:a9:40:be:15:87:be: 2c:b0:d9:08:8e:3a:36:fd:d9:d4:b1:a2:77:33:a2: 79:dd:d4:91:7c:38:79:38:f0:2d:30:5a:18:76:47: 10:8c:7c:7e:56:bb:99:ff:24:c7:73:24:5f:db:f6: 58:11:7f:df:34:60:29:11:cc:13:7a:ba:9e:4c:d3: 65:96:9d:f2:e5:09:1b:04:71:76:3e:ed:05:2b:d5: ef:56:98:81:b2:81:7c:ea:91:93:8f:9d:59:2e:d2: 5e:3a:ee:97:ec:84:8e:9b:db:c6:3d:e4:1f:06:86: d0:29:24:c7:29:5e:2f:c1:f8:51:a9:5c:a2:f3:ef: 2e:2b:20:29:67:a0:aa:50:a1:4d:0c:9a:fd:99:1b: e3:73:7a:02:91:09:ff:a7:1c:3c:12:ff:1c:17:4f: cb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E3:A5:9A:74:14:98:54:EA:30:D2:F3:73:C4:13:D9:46:8C:A6:14 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/CeOlmnQUmFTqMNLzc8QT2UaMphQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.168.0/24 Signature Algorithm: sha256WithRSAEncryption bb:dd:a6:2d:7e:25:30:c7:fd:60:8d:67:5d:8e:c4:cf:bd:2f: cd:4a:b8:85:f4:b4:47:29:17:9f:2f:94:3c:4c:e1:7d:0b:ef: 38:ce:78:a3:c7:aa:0e:fc:f3:3d:08:de:e8:e1:e4:09:22:57: 0c:b5:7f:30:80:87:86:19:5c:14:27:f0:c4:b0:c3:48:3c:68: 47:87:1e:16:3b:d3:12:31:c7:4b:1f:b0:fc:e6:30:a1:5f:1c: 15:75:cf:dd:3b:1c:b3:9e:69:3e:ec:b5:9e:d9:bd:7f:d4:aa: 87:0d:3f:e4:f7:a0:ab:f3:db:e8:8a:a6:9b:de:53:2b:9a:38: 8e:d1:fc:f2:bb:d9:d1:aa:a8:9f:2b:96:a8:da:3f:87:01:e7: 6d:b7:44:de:d5:e6:39:28:0a:5e:ae:89:04:fb:3f:90:a5:1c: fc:fa:80:87:c0:b8:54:f8:4a:b5:8f:bc:11:ad:25:e7:d4:8b: b0:f2:90:39:34:d6:1d:51:b7:52:fc:0e:63:2e:45:fa:67:b0: 62:22:63:2c:9e:e1:cb:68:37:23:d4:84:a8:4a:c6:da:40:29: 7c:61:6a:10:7b:22:5c:0d:2a:a5:c3:06:f8:e6:1b:19:06:37: 4d:9b:36:71:7e:9e:57:5c:16:51:10:c9:39:65:a4:ed:3c:b4: 4b:1a:c5:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f02+vhbdcqgiW908G5QGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWUzYTU5YTc0MTQ5ODU0ZWEzMGQyZjM3M2M0MTNkOTQ2OGNhNjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB61rip5aAPICIfo/XRhAQKMdmBq 1Mdlp1b5IjRYF0Fv6i9L7qHZ13alpqXmGVs8O4wD8Ahxp7zFB/+kRm/Jw2xr/SnN vfSEJn/F5ltrPT48SaSZU6Ipn2w1JfUlzPgmMZapQL4Vh74ssNkIjjo2/dnUsaJ3 M6J53dSRfDh5OPAtMFoYdkcQjHx+VruZ/yTHcyRf2/ZYEX/fNGApEcwTerqeTNNl lp3y5QkbBHF2Pu0FK9XvVpiBsoF86pGTj51ZLtJeOu6X7ISOm9vGPeQfBobQKSTH KV4vwfhRqVyi8+8uKyApZ6CqUKFNDJr9mRvjc3oCkQn/pxw8Ev8cF0/L7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAnjpZp0FJhU6jDS83PEE9lGjKYUMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvQ2VPbG1uUVVtRlRxTU5MemM4UVQyVWFNcGhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e6oMA0G CSqGSIb3DQEBCwUAA4IBAQC73aYtfiUwx/1gjWddjsTPvS/NSriF9LRHKRefL5Q8 TOF9C+84znijx6oO/PM9CN7o4eQJIlcMtX8wgIeGGVwUJ/DEsMNIPGhHhx4WO9MS McdLH7D85jChXxwVdc/dOxyznmk+7LWe2b1/1KqHDT/k96Cr89voiqab3lMrmjiO 0fzyu9nRqqifK5ao2j+HAedtt0Te1eY5KAperokE+z+QpRz8+oCHwLhU+Eq1j7wR rSXn1Iuw8pA5NNYdUbdS/A5jLkX6Z7BiImMsnuHLaDcj1ISoSsbaQCl8YWoQeyJc DSqlwwb45hsZBjdNmzZxfp5XXBZREMk5ZaTtPLRLGsUq -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:49 2026 by rpki-client