This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/l1mG5Z4YPNNQqbRLZc6F0hI51zo.roa
File: l1mG5Z4YPNNQqbRLZc6F0hI51zo.roa (raw, json)
Hash identifier: 5esmhQSsR8LEDn5Rcs9n39XazWhSwX6C6n46FZAELtg=
Subject key identifier: 97:59:86:E5:9E:18:3C:D3:50:A9:B4:4B:65:CE:85:D2:12:39:D7:3A
Certificate issuer: /CN=30410f5ed386f879203cb4428a5f95fdc899b591
Certificate serial: 019B7FF2417BBBBE62841B010DD8DAC25E37
Authority key identifier: 30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/l1mG5Z4YPNNQqbRLZc6F0hI51zo.roa
Signing time: Fri 02 Jan 2026 18:22:21 +0000
ROA not before: Fri 02 Jan 2026 18:22:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200972
IP address blocks: 217.26.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:41:7b:bb:be:62:84:1b:01:0d:d8:da:c2:5e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30410f5ed386f879203cb4428a5f95fdc899b591
Validity
Not Before: Jan 2 18:22:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=975986e59e183cd350a9b44b65ce85d21239d73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:9c:9c:f8:f3:ae:35:08:3e:cf:44:f1:eb:
b0:fe:1f:32:4e:3f:57:0b:b5:13:78:4b:0d:d4:57:
51:c3:44:29:17:8a:37:8e:08:2d:b8:41:95:9a:e9:
c6:1f:04:c0:93:e1:79:11:de:c7:1d:99:69:9e:e7:
ce:9c:1c:a0:65:14:fa:ff:b6:c9:d1:b3:1f:bb:c9:
99:a0:ae:b1:a6:7e:50:dd:f0:ae:9b:7f:e3:6f:c6:
d3:53:6e:2a:97:b0:9f:48:b0:aa:0f:17:b2:82:4a:
ff:36:dd:ab:07:1f:4c:12:74:b9:62:c4:b2:58:d3:
44:e9:a1:d1:bf:d7:b1:ff:31:74:33:68:21:a5:f5:
f9:dc:24:ae:3b:76:56:70:f1:a7:45:5f:a7:85:16:
e5:0e:6c:92:67:1f:ff:33:e5:0e:f5:36:2b:c8:06:
25:99:18:48:e2:cb:96:f8:5d:52:9c:2e:d6:81:ae:
55:b0:a8:ec:b3:20:d9:3c:ef:2a:b7:5e:a9:2b:3f:
1a:03:d8:50:28:ba:7b:d0:00:73:0b:72:9b:c0:fe:
d9:a2:5f:53:28:e7:69:d1:bb:9e:9f:46:cc:00:71:
58:70:f5:7a:fc:53:c1:a5:74:23:ef:28:08:ae:45:
ce:e8:27:4d:d8:1e:bc:54:ee:a3:b5:3c:bf:16:1c:
3c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:59:86:E5:9E:18:3C:D3:50:A9:B4:4B:65:CE:85:D2:12:39:D7:3A
X509v3 Authority Key Identifier:
keyid:30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/l1mG5Z4YPNNQqbRLZc6F0hI51zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.216.0/24
Signature Algorithm: sha256WithRSAEncryption
96:2f:f1:92:be:50:17:3c:84:b2:c1:1a:8c:ea:b5:26:70:6f:
b9:55:f7:a1:42:32:5f:ba:ce:1f:1b:59:a5:26:b8:5e:ac:a8:
77:55:e5:00:2f:c2:5a:ac:72:2a:da:b3:02:62:a2:28:59:72:
9d:ea:03:d5:f6:b2:0c:6b:f9:8d:d8:15:08:72:ea:84:f7:e3:
3d:ba:34:d6:b8:ff:72:46:6f:c0:a1:fe:b0:37:61:57:8f:bd:
00:0b:0c:cc:c4:4e:8c:97:6e:6b:c4:4c:b9:22:1a:24:62:db:
e5:83:af:49:9d:da:03:0e:c3:d7:56:2d:76:6c:5b:48:ed:d5:
40:5c:a5:10:58:05:b8:85:f4:78:06:1b:cb:42:0c:e9:59:32:
a9:c5:be:f7:16:31:ac:f4:b8:24:fd:e3:b9:59:b8:4e:36:57:
de:81:e2:9d:ab:02:2c:d1:94:d5:38:09:14:56:f0:82:7f:ec:
28:1c:09:d8:36:c6:b1:aa:8c:74:9a:b5:91:27:3f:01:7a:af:
c1:6f:e5:2f:2a:bf:8f:7a:e7:e0:a0:e6:7b:88:c0:bc:ca:cb:
33:2d:b5:a3:24:6d:de:32:dc:ed:03:36:55:74:dc:73:48:a3:
f6:b9:44:62:0f:67:dc:58:86:0f:14:2c:79:20:bf:9a:9f:b6:
16:6e:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:46:40 2026 by rpki-client