This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/hOPnmTS48VcPY2J3s55SG4nC3qc.roa File: hOPnmTS48VcPY2J3s55SG4nC3qc.roa (raw, json) Hash identifier: UVfeDjStvhmc+WlaE00l3sfPRsMJ9AbZxGC6QPzHW1k= Subject key identifier: 84:E3:E7:99:34:B8:F1:57:0F:63:62:77:B3:9E:52:1B:89:C2:DE:A7 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F4E6E04336991EDFEBDE4EDA79B57 Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/hOPnmTS48VcPY2J3s55SG4nC3qc.roa Signing time: Thu 01 Jan 2026 12:19:04 +0000 ROA not before: Thu 01 Jan 2026 12:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210388 IP address blocks: 213.238.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4e:6e:04:33:69:91:ed:fe:bd:e4:ed:a7:9b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84e3e79934b8f1570f636277b39e521b89c2dea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a4:40:f2:7b:d3:fa:0f:4a:ad:7f:1a:1d:2a: 00:e7:af:9b:63:d0:eb:2d:69:70:fe:01:82:e9:9f: 79:a1:a8:b7:29:68:e4:0b:93:d8:e5:75:02:50:24: 11:81:84:61:83:02:c6:3a:98:c1:86:79:86:d4:ed: 15:49:cf:06:35:b0:45:fc:2c:a6:56:51:ae:01:66: b3:43:a8:56:4c:76:16:fc:74:11:3f:50:ff:52:5d: 44:51:10:69:60:b6:ac:93:f7:d7:a5:1c:04:fa:1a: 05:de:3c:bc:dc:ef:24:89:97:54:fb:18:58:c0:70: 54:f3:f0:01:aa:ec:c3:9a:0b:33:87:1b:a6:25:b1: 81:30:6f:3f:3e:67:a7:d5:3e:78:ae:6e:bf:42:06: 7d:0a:99:55:80:09:72:d0:99:f3:87:9e:46:ea:6c: 86:5a:e6:f9:ab:18:de:b9:2a:6d:cd:c8:24:4e:6d: fd:bb:1e:c0:bb:4c:ae:f3:1f:5c:9c:c8:51:1d:34: 23:57:0c:77:e9:a1:c2:b1:fe:17:b3:7c:2b:13:97: 19:a9:7f:ed:7d:ab:13:87:3f:28:40:63:6f:8b:ac: 04:58:af:98:eb:85:63:c3:54:cf:2c:7e:a8:e8:7b: 7d:5c:3e:f3:69:33:33:f1:47:47:56:23:30:77:32: 85:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E3:E7:99:34:B8:F1:57:0F:63:62:77:B3:9E:52:1B:89:C2:DE:A7 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/hOPnmTS48VcPY2J3s55SG4nC3qc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.191.0/24 Signature Algorithm: sha256WithRSAEncryption 02:3c:4e:d0:e5:10:86:72:c3:a2:b3:be:86:ea:52:dc:20:e8: 71:ba:45:84:f2:ac:b2:cf:de:ca:13:17:06:85:d3:65:54:3c: ad:7e:7d:85:a0:34:5c:1c:3d:d1:6d:23:00:fc:39:c6:0d:a7: 51:da:5d:ff:da:fc:66:48:1c:9b:02:05:87:10:80:db:71:95: 08:e8:53:fb:17:f2:10:21:d9:27:04:04:c0:57:97:18:dd:96: 5b:b9:d2:1e:fa:74:1d:06:41:9b:78:31:52:a5:a0:c7:2e:18: 78:a6:6b:07:8b:81:4f:cd:2b:78:de:99:76:29:f0:9b:b1:b1: ca:da:17:0c:c7:88:bb:24:d2:c6:67:d9:12:e5:fa:af:fc:72: 5f:ed:1a:9d:61:5a:27:cc:ac:ff:78:dd:f7:99:12:e4:36:4f: ee:6a:8c:13:00:31:1a:31:b5:12:0e:20:8d:8e:9b:44:7c:d4: 06:0c:bf:29:46:e1:9a:13:ea:fb:35:17:31:10:9a:21:6a:b4: 76:09:d6:2e:fc:cb:89:69:3f:0f:58:eb:4a:1a:a9:f6:96:3a: fb:9b:60:b0:ca:b2:5e:d6:43:a7:7d:0b:a6:af:66:e0:7b:62: 83:77:d6:d1:ee:a9:06:dc:76:79:5b:06:62:73:2b:95:d9:f3: 2a:d9:15:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f05uBDNpke3+veTtp5tXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGUzZTc5OTM0YjhmMTU3MGY2MzYyNzdiMzllNTIxYjg5YzJkZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aRA8nvT+g9KrX8aHSoA56+bY9Dr LWlw/gGC6Z95oai3KWjkC5PY5XUCUCQRgYRhgwLGOpjBhnmG1O0VSc8GNbBF/Cym VlGuAWazQ6hWTHYW/HQRP1D/Ul1EURBpYLask/fXpRwE+hoF3jy83O8kiZdU+xhY wHBU8/ABquzDmgszhxumJbGBMG8/Pmen1T54rm6/QgZ9CplVgAly0Jnzh55G6myG Wub5qxjeuSptzcgkTm39ux7Au0yu8x9cnMhRHTQjVwx36aHCsf4Xs3wrE5cZqX/t fasThz8oQGNvi6wEWK+Y64Vjw1TPLH6o6Ht9XD7zaTMz8UdHViMwdzKFzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITj55k0uPFXD2Nid7OeUhuJwt6nMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvaE9Qbm1UUzQ4VmNQWTJKM3M1NVNHNG5DM3FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e6/MA0G CSqGSIb3DQEBCwUAA4IBAQACPE7Q5RCGcsOis76G6lLcIOhxukWE8qyyz97KExcG hdNlVDytfn2FoDRcHD3RbSMA/DnGDadR2l3/2vxmSBybAgWHEIDbcZUI6FP7F/IQ IdknBATAV5cY3ZZbudIe+nQdBkGbeDFSpaDHLhh4pmsHi4FPzSt43pl2KfCbsbHK 2hcMx4i7JNLGZ9kS5fqv/HJf7RqdYVonzKz/eN33mRLkNk/uaowTADEaMbUSDiCN jptEfNQGDL8pRuGaE+r7NRcxEJoharR2CdYu/MuJaT8PWOtKGqn2ljr7m2CwyrJe 1kOnfQumr2bge2KDd9bR7qkG3HZ5WwZicyuV2fMq2RVh -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:58 2026 by rpki-client