This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/EXvqopQUjpPSAunZPq0-kwVMq7I.roa File: EXvqopQUjpPSAunZPq0-kwVMq7I.roa (raw, json) Hash identifier: 3HcUbyeV0B2a6urMN+QgFh6wnXOprPi9W17BhOcqzmk= Subject key identifier: 11:7B:EA:A2:94:14:8E:93:D2:02:E9:D9:3E:AD:3E:93:05:4C:AB:B2 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F4EC04B0990B44484E4EFEE2E53B6 Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/EXvqopQUjpPSAunZPq0-kwVMq7I.roa Signing time: Thu 01 Jan 2026 12:19:04 +0000 ROA not before: Thu 01 Jan 2026 12:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210574 IP address blocks: 213.238.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4e:c0:4b:09:90:b4:44:84:e4:ef:ee:2e:53:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=117beaa294148e93d202e9d93ead3e93054cabb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:2f:cd:f0:f1:65:2f:ff:c2:f8:b5:bd:86: 4e:f6:63:76:dc:1d:b2:bc:e3:4d:56:27:70:8d:83: 70:a2:4a:d7:ed:b9:6b:d8:86:77:41:d3:a6:a0:bb: 47:50:4b:58:cd:35:79:01:15:8f:e8:1c:0d:5c:62: be:df:4d:5a:1a:c6:fd:ae:dc:94:16:67:d3:7c:5b: 12:bb:e1:27:76:a5:35:39:3e:f3:c1:d9:25:80:43: b1:f3:a5:d4:25:e5:5a:1c:45:ba:3e:3c:1c:b0:b1: 93:a0:66:1b:25:7b:d0:57:dd:86:7e:9c:5c:45:9a: dd:ab:8d:a2:ed:3b:da:59:94:0f:3e:22:a2:5d:3f: f6:11:ec:24:bd:1a:86:9c:88:90:fd:c0:f4:35:90: 11:64:2e:15:77:bc:3d:b5:ad:b1:8d:a3:4b:a4:e1: da:04:3c:a5:0a:9e:cb:8a:16:e0:a3:86:e1:47:71: f1:c3:e9:00:88:26:2c:7d:5f:2f:29:c4:fc:a0:43: af:3f:84:16:47:43:37:1c:4e:de:de:7d:65:e8:c7: b7:c5:29:d2:c1:57:99:3f:b6:fb:32:52:7e:f6:c7: 1f:36:55:b9:1c:e2:50:fd:c0:57:15:53:5c:3c:6a: 93:6d:c2:7e:fa:f9:6e:35:f8:e2:4a:09:ff:f6:9d: e8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7B:EA:A2:94:14:8E:93:D2:02:E9:D9:3E:AD:3E:93:05:4C:AB:B2 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/EXvqopQUjpPSAunZPq0-kwVMq7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.180.0/24 Signature Algorithm: sha256WithRSAEncryption b4:9e:14:2d:66:87:8d:10:64:98:7e:9a:08:cf:93:4f:50:72: fd:56:11:8c:60:6f:f3:a3:f4:6d:cc:bd:88:77:4d:8d:40:62: 96:15:be:56:61:c5:5a:29:0a:27:42:a2:06:94:c1:85:a1:ca: f5:6c:45:63:09:dd:e8:dc:e0:4d:47:29:5d:94:ca:12:28:53: a5:90:dd:b6:7a:3a:54:e9:27:a1:9a:a2:d9:44:08:37:74:1b: 42:82:ff:39:12:38:82:a8:70:ab:4c:5d:8a:5f:01:bc:e7:ba: 4c:d7:3d:79:0d:c8:53:af:a0:03:4b:11:e3:5e:f6:ce:43:53: 8e:38:f4:b1:2e:60:57:fd:29:05:23:61:ae:6c:2f:bd:24:71: bb:c6:b2:29:7a:b0:c0:c7:4d:d2:09:93:bc:33:d5:f7:22:59: 4e:ff:14:e0:66:70:e0:50:85:99:10:e8:83:a7:64:59:61:1d: dc:c6:96:17:ef:59:9e:42:aa:9d:17:55:ee:c0:07:dc:c2:f8: 57:4b:a2:9f:18:f1:31:0d:00:44:05:a4:bc:9a:e7:ba:1b:ce: 29:62:73:0c:1d:8d:b5:84:e4:f6:74:b3:7b:34:a3:6f:7d:94: 9b:e1:27:64:64:ed:c6:c0:4a:dc:b7:4b:92:53:5e:a2:8b:1c: 06:ee:7e:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f07ASwmQtESE5O/uLlO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTdiZWFhMjk0MTQ4ZTkzZDIwMmU5ZDkzZWFkM2U5MzA1NGNhYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVsvzfDxZS//wvi1vYZO9mN23B2y vONNVidwjYNwokrX7blr2IZ3QdOmoLtHUEtYzTV5ARWP6BwNXGK+301aGsb9rtyU FmfTfFsSu+EndqU1OT7zwdklgEOx86XUJeVaHEW6PjwcsLGToGYbJXvQV92Gfpxc RZrdq42i7TvaWZQPPiKiXT/2EewkvRqGnIiQ/cD0NZARZC4Vd7w9ta2xjaNLpOHa BDylCp7Lihbgo4bhR3Hxw+kAiCYsfV8vKcT8oEOvP4QWR0M3HE7e3n1l6Me3xSnS wVeZP7b7MlJ+9scfNlW5HOJQ/cBXFVNcPGqTbcJ++vluNfjiSgn/9p3oCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBF76qKUFI6T0gLp2T6tPpMFTKuyMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvRVh2cW9wUVVqcFBTQXVuWlBxMC1rd1ZNcTdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e60MA0G CSqGSIb3DQEBCwUAA4IBAQC0nhQtZoeNEGSYfpoIz5NPUHL9VhGMYG/zo/RtzL2I d02NQGKWFb5WYcVaKQonQqIGlMGFocr1bEVjCd3o3OBNRyldlMoSKFOlkN22ejpU 6SehmqLZRAg3dBtCgv85EjiCqHCrTF2KXwG857pM1z15DchTr6ADSxHjXvbOQ1OO OPSxLmBX/SkFI2GubC+9JHG7xrIperDAx03SCZO8M9X3IllO/xTgZnDgUIWZEOiD p2RZYR3cxpYX71meQqqdF1XuwAfcwvhXS6KfGPExDQBEBaS8mue6G84pYnMMHY21 hOT2dLN7NKNvfZSb4SdkZO3GwErct0uSU16iixwG7n6w -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:27 2026 by rpki-client