This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/lNE372lL8qcGQINaJ34D1sYHmUk.roa File: lNE372lL8qcGQINaJ34D1sYHmUk.roa (raw, json) Hash identifier: EPzoqrmOZN5eN0vWG8PADRm/JaJmyc5H0e8OBhYA018= Subject key identifier: 94:D1:37:EF:69:4B:F2:A7:06:40:83:5A:27:7E:03:D6:C6:07:99:49 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F51D1B8BC66E3B27FDB2DE17F9251 Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/lNE372lL8qcGQINaJ34D1sYHmUk.roa Signing time: Thu 01 Jan 2026 12:19:05 +0000 ROA not before: Thu 01 Jan 2026 12:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213261 IP address blocks: 213.238.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:51:d1:b8:bc:66:e3:b2:7f:db:2d:e1:7f:92:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94d137ef694bf2a70640835a277e03d6c6079949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:93:14:21:ec:25:c3:2b:21:18:31:2a:9f: 33:ec:eb:27:7c:cf:a7:ce:cd:1e:bd:78:bf:de:ea: 03:be:92:37:8e:e2:cc:2d:25:90:a0:0f:96:90:a6: 71:cd:7a:f9:26:62:cc:2d:16:d1:bc:5f:a9:c6:0c: 45:05:1b:45:55:95:85:9a:9b:14:54:20:d5:1a:c2: fd:cd:31:1e:8d:5e:91:6c:b0:33:1b:e9:ff:b9:a3: 53:84:2d:99:0a:c6:b2:28:85:88:0e:64:86:b4:62: 6b:55:0d:70:7d:b3:8f:aa:40:5e:bc:a3:26:f8:a0: f5:d8:46:f9:2c:38:ce:dd:0f:18:fc:65:db:09:c1: 2e:57:f6:9f:d3:71:03:1b:b5:5d:83:4f:c4:bb:6d: 98:f4:49:43:d6:e4:e0:83:79:b4:b7:4f:40:f7:2c: 91:8f:91:3c:38:8b:31:18:55:3a:b5:5d:40:77:62: 18:6e:4a:af:68:64:9c:f3:9c:cc:6e:d8:45:e8:e7: d6:d1:5c:a1:bf:e3:23:61:cc:d1:65:f0:5f:39:05: f1:06:11:75:6a:93:bb:0c:64:22:aa:4c:0b:a4:15: a1:d7:f2:e2:e0:ef:d6:8f:52:20:95:83:ff:88:0b: 9b:a0:b9:c4:cc:aa:45:6e:2f:0e:ae:f5:0a:ef:24: a3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D1:37:EF:69:4B:F2:A7:06:40:83:5A:27:7E:03:D6:C6:07:99:49 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/lNE372lL8qcGQINaJ34D1sYHmUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.188.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:a1:c9:bb:9c:ed:06:fd:e1:8a:00:f7:d0:98:39:03:ea:d9: f7:a1:dd:45:8f:4f:58:ca:87:9e:c8:07:72:39:81:28:4f:82: b5:76:16:9d:63:d1:b5:b0:5b:a2:ba:22:b8:f7:93:2d:0b:5b: 9e:8e:39:03:24:23:00:e4:ed:fa:c1:d6:65:bb:d6:d5:36:db: 52:27:1b:8c:e1:30:fc:42:2a:84:1f:bb:db:9f:73:06:9a:53: 05:8e:66:23:94:59:3e:aa:b3:eb:ed:e9:a6:be:4c:56:c4:e3: 8a:8f:40:9a:33:5f:a6:7c:84:d0:2d:d5:39:d7:87:3a:13:bb: 24:b5:a2:81:38:68:02:49:3f:d6:73:5a:b5:2f:3a:49:d5:5f: 46:d9:2e:b4:ce:ac:b4:a3:90:be:44:52:8b:e8:30:9f:23:b7: a8:4f:16:6d:67:9c:44:bb:04:f5:3f:d1:30:60:00:7d:50:c3: d8:74:c8:14:02:b9:29:32:a8:53:a2:42:92:5c:78:b1:1c:e4: f5:65:ac:2d:c9:df:83:d2:b0:dd:36:4a:46:2e:bc:e4:b1:0a: 09:4f:06:17:e5:06:2c:82:38:bb:74:34:cd:f1:e3:36:79:b4: ab:7e:b2:06:72:57:44:88:04:c6:83:9f:1b:72:8a:c8:24:12: 7c:c0:23:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f1HRuLxm47J/2y3hf5JRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGQxMzdlZjY5NGJmMmE3MDY0MDgzNWEyNzdlMDNkNmM2MDc5OTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspaTFCHsJcMrIRgxKp8z7OsnfM+n zs0evXi/3uoDvpI3juLMLSWQoA+WkKZxzXr5JmLMLRbRvF+pxgxFBRtFVZWFmpsU VCDVGsL9zTEejV6RbLAzG+n/uaNThC2ZCsayKIWIDmSGtGJrVQ1wfbOPqkBevKMm +KD12Eb5LDjO3Q8Y/GXbCcEuV/af03EDG7Vdg0/Eu22Y9ElD1uTgg3m0t09A9yyR j5E8OIsxGFU6tV1Ad2IYbkqvaGSc85zMbthF6OfW0Vyhv+MjYczRZfBfOQXxBhF1 apO7DGQiqkwLpBWh1/Li4O/Wj1IglYP/iAuboLnEzKpFbi8OrvUK7ySjKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJTRN+9pS/KnBkCDWid+A9bGB5lJMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvbE5FMzcybEw4cWNHUUlOYUozNEQxc1lIbVVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e68MA0G CSqGSIb3DQEBCwUAA4IBAQBKocm7nO0G/eGKAPfQmDkD6tn3od1Fj09YyoeeyAdy OYEoT4K1dhadY9G1sFuiuiK495MtC1uejjkDJCMA5O36wdZlu9bVNttSJxuM4TD8 QiqEH7vbn3MGmlMFjmYjlFk+qrPr7emmvkxWxOOKj0CaM1+mfITQLdU514c6E7sk taKBOGgCST/Wc1q1LzpJ1V9G2S60zqy0o5C+RFKL6DCfI7eoTxZtZ5xEuwT1P9Ew YAB9UMPYdMgUArkpMqhTokKSXHixHOT1Zawtyd+D0rDdNkpGLrzksQoJTwYX5QYs gji7dDTN8eM2ebSrfrIGcldEiATGg58bcorIJBJ8wCOU -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:57 2026 by rpki-client