This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/H11MTFd46fdH6z5wjZ7ve2YmtiI.roa File: H11MTFd46fdH6z5wjZ7ve2YmtiI.roa (raw, json) Hash identifier: QdW2iqbhH5D5/XsdW+guvc14MeyntUmDOnmU8s9B0UQ= Subject key identifier: 1F:5D:4C:4C:57:78:E9:F7:47:EB:3E:70:8D:9E:EF:7B:66:26:B6:22 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F44FBBBFF99458066423A461E91A8 Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/H11MTFd46fdH6z5wjZ7ve2YmtiI.roa Signing time: Thu 01 Jan 2026 12:19:02 +0000 ROA not before: Thu 01 Jan 2026 12:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51540 IP address blocks: 213.238.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:44:fb:bb:ff:99:45:80:66:42:3a:46:1e:91:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f5d4c4c5778e9f747eb3e708d9eef7b6626b622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3c:b6:9a:31:9f:31:65:e3:a8:fb:f0:65:b3: 2e:89:29:19:0a:77:74:13:1f:4f:fd:29:59:dc:0e: ec:f2:84:84:19:dd:d4:dc:e2:7c:f8:dc:0f:97:f9: 6f:b3:50:f3:cd:7e:76:a7:51:13:c4:b8:aa:d8:09: 88:35:89:98:da:bc:d8:84:aa:37:66:58:a8:d4:04: ac:54:c6:e1:a3:d6:e6:7d:ec:a2:e6:c8:71:dd:d6: 06:85:27:ec:eb:4f:f7:20:4b:57:cf:04:a3:be:1a: a8:88:3a:de:29:37:f2:11:cc:33:19:be:b9:d7:ab: d8:57:69:49:4b:a7:00:2b:55:c4:08:79:82:93:2a: a8:c0:38:c4:37:12:1f:a6:ee:cb:20:27:c6:13:0b: 85:cf:66:2f:1d:67:2b:b8:87:c2:87:56:2a:01:8b: c6:5a:cc:60:f6:7c:b2:36:ae:a0:77:0b:5e:4f:85: 51:59:88:c5:75:28:0e:52:ca:ec:33:cc:1f:0f:04: dc:13:d9:d8:94:21:dd:37:03:c8:9f:ba:cf:f7:bc: f7:96:63:19:22:20:38:13:2e:7a:1c:71:7d:f1:0b: f9:ca:e0:3f:35:b3:18:5e:df:00:b8:8a:a0:84:be: c4:ee:d0:aa:0b:e5:6f:fe:1a:65:02:1a:a4:46:aa: c1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5D:4C:4C:57:78:E9:F7:47:EB:3E:70:8D:9E:EF:7B:66:26:B6:22 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/H11MTFd46fdH6z5wjZ7ve2YmtiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.176.0/24 Signature Algorithm: sha256WithRSAEncryption 70:79:43:04:da:64:be:09:77:26:be:be:df:98:65:a5:7c:86: 43:06:8c:83:0a:69:d5:2e:36:02:8a:3b:15:fa:e1:f1:f6:48: 33:f1:6a:92:f4:52:af:70:10:11:50:06:e7:96:3c:98:4c:30: 7b:a5:52:36:de:f6:60:45:9b:64:03:66:b1:fd:1d:37:c2:49: 4a:e0:6d:15:8e:70:a7:01:f4:a3:90:11:d1:94:e5:77:42:b7: b7:a5:69:13:3e:cb:89:32:34:f1:e1:66:ee:ac:5a:e7:45:f3: f6:4a:e1:20:f9:2e:30:35:bd:ad:73:a5:67:6a:ef:2c:94:e0: 09:8f:20:db:46:71:1d:19:53:8e:72:17:59:a3:b6:eb:11:cb: 21:55:4e:80:14:87:04:ed:08:07:94:8a:eb:0c:47:d9:fe:38: c0:f3:db:b1:43:fb:b2:99:33:e9:bc:c3:4b:25:e3:10:1d:66: 28:02:14:55:07:4e:6c:9c:16:e0:80:2d:1f:ed:96:51:1a:0b: 15:0d:b7:33:96:79:16:a1:ad:45:f3:5c:eb:c3:e3:c6:c3:03: 17:7f:e5:de:c6:bf:3d:d1:96:f3:4c:14:28:00:85:15:95:57: 23:2f:52:36:68:a2:f2:11:b7:19:69:51:9c:d4:17:d4:05:2b: 84:40:cd:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f0T7u/+ZRYBmQjpGHpGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjVkNGM0YzU3NzhlOWY3NDdlYjNlNzA4ZDllZWY3YjY2MjZiNjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Dy2mjGfMWXjqPvwZbMuiSkZCnd0 Ex9P/SlZ3A7s8oSEGd3U3OJ8+NwPl/lvs1DzzX52p1ETxLiq2AmINYmY2rzYhKo3 Zlio1ASsVMbho9bmfeyi5shx3dYGhSfs60/3IEtXzwSjvhqoiDreKTfyEcwzGb65 16vYV2lJS6cAK1XECHmCkyqowDjENxIfpu7LICfGEwuFz2YvHWcruIfCh1YqAYvG Wsxg9nyyNq6gdwteT4VRWYjFdSgOUsrsM8wfDwTcE9nYlCHdNwPIn7rP97z3lmMZ IiA4Ey56HHF98Qv5yuA/NbMYXt8AuIqghL7E7tCqC+Vv/hplAhqkRqrBNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB9dTExXeOn3R+s+cI2e73tmJrYiMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvSDExTVRGZDQ2ZmRINno1d2paN3ZlMlltdGlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e6wMA0G CSqGSIb3DQEBCwUAA4IBAQBweUME2mS+CXcmvr7fmGWlfIZDBoyDCmnVLjYCijsV +uHx9kgz8WqS9FKvcBARUAbnljyYTDB7pVI23vZgRZtkA2ax/R03wklK4G0VjnCn AfSjkBHRlOV3Qre3pWkTPsuJMjTx4WburFrnRfP2SuEg+S4wNb2tc6Vnau8slOAJ jyDbRnEdGVOOchdZo7brEcshVU6AFIcE7QgHlIrrDEfZ/jjA89uxQ/uymTPpvMNL JeMQHWYoAhRVB05snBbggC0f7ZZRGgsVDbczlnkWoa1F81zrw+PGwwMXf+Xexr89 0ZbzTBQoAIUVlVcjL1I2aKLyEbcZaVGc1BfUBSuEQM3c -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:58 2026 by rpki-client