This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/5B318zH8NOu9OBi_TuoXg4_JM2k.roa File: 5B318zH8NOu9OBi_TuoXg4_JM2k.roa (raw, json) Hash identifier: KdWhEJLnniiRDILznsehxHC1zHSWP6KdhnB/WWL1Hi4= Subject key identifier: E4:1D:F5:F3:31:FC:34:EB:BD:38:18:BF:4E:EA:17:83:8F:C9:33:69 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019B7D5D26885DD61DA0C06A8428C9173B4F Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/5B318zH8NOu9OBi_TuoXg4_JM2k.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213999 IP address blocks: 45.93.11.0/24 maxlen: 24 188.119.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:26:88:5d:d6:1d:a0:c0:6a:84:28:c9:17:3b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e41df5f331fc34ebbd3818bf4eea17838fc93369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c3:f8:03:77:5e:16:3c:a4:d2:fd:9d:22:25: b7:e2:87:84:b4:a1:6c:d9:14:47:0f:71:b8:45:16: e3:87:3b:eb:f6:5c:3b:b4:6d:49:3a:e1:19:36:81: f0:4c:24:f5:fd:89:84:6d:fe:eb:2f:92:3e:db:25: de:d3:b4:28:f5:00:fa:d1:87:56:7e:31:3f:46:7e: 39:cc:72:b7:39:01:bd:f2:e5:cd:b4:1a:93:08:f7: 7e:2a:d1:78:85:99:df:9a:d2:26:37:b0:7e:a9:d7: 4a:40:6c:1f:19:1c:87:31:5b:d9:93:0d:75:04:bd: f0:15:7a:6a:b8:94:4f:a3:cd:59:f0:e7:cb:6d:ab: 45:e1:a2:01:e1:dc:65:d1:77:a4:d3:8d:d0:29:24: dd:0d:d8:54:bd:2d:66:e9:73:35:a7:a9:e2:75:6b: ca:b6:19:74:29:3d:9b:93:22:54:01:20:99:25:48: ba:17:76:2a:1c:b1:1c:fb:e5:ff:c0:09:cb:ab:f9: 8a:04:bf:04:aa:0e:8f:f1:09:2a:2d:e2:be:cb:2a: e5:9a:08:51:55:69:b4:5f:2b:e7:a2:6b:b5:6e:77: 47:0b:10:65:2b:b3:18:ea:7a:59:9d:32:4d:f8:d2: 94:f2:8a:98:11:00:82:c3:13:3e:2d:3a:37:bb:ae: f1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1D:F5:F3:31:FC:34:EB:BD:38:18:BF:4E:EA:17:83:8F:C9:33:69 X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/5B318zH8NOu9OBi_TuoXg4_JM2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.11.0/24 188.119.121.0/24 Signature Algorithm: sha256WithRSAEncryption 85:76:0b:78:e3:64:6d:22:c6:46:be:4d:c9:25:09:03:17:ae: 25:30:26:ff:b8:90:2c:d9:eb:4c:cf:2e:2e:77:52:6a:19:e7: 04:f4:e7:dd:81:dd:dc:96:2b:ce:38:45:25:dd:1c:40:f1:12: c8:b3:6b:6f:8d:c1:ee:df:90:95:24:b9:27:a5:84:a0:d4:94: 6c:c1:f4:37:2f:96:26:b5:f7:30:da:71:6a:ed:ea:6b:9d:8a: 52:b4:f8:98:4a:df:ae:62:a0:3d:84:1d:8c:5b:e6:86:d1:0a: c3:f5:ca:aa:c0:d2:33:3e:d3:1c:de:75:93:34:d4:41:9b:e2: 4b:3c:f1:94:ee:dc:34:e1:51:5f:8d:8c:07:7c:e3:a1:69:4b: 7e:fa:49:9e:8d:72:20:be:a6:44:57:80:5a:d7:af:0b:dc:65: 2f:53:ae:54:e5:7f:e7:fd:bd:77:37:f9:e8:5f:92:f5:d9:af: f0:2a:a9:a5:e4:98:46:65:0d:cf:c0:a7:a5:77:e4:3a:e8:dd: cc:3f:cd:57:16:03:bb:b3:4c:2a:96:c2:57:4b:e5:2d:71:37: 1f:86:dd:54:16:77:b9:b9:6b:de:5f:2a:fb:7a:a6:1b:3f:0d: 13:8d:1b:ca:c4:2f:4f:ce:1d:f7:9f:51:a0:ac:76:93:d6:63: 89:e5:61:7e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XSaIXdYdoMBqhCjJFztPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDFkZjVmMzMxZmMzNGViYmQzODE4YmY0ZWVhMTc4MzhmYzkzMzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsP4A3deFjyk0v2dIiW34oeEtKFs 2RRHD3G4RRbjhzvr9lw7tG1JOuEZNoHwTCT1/YmEbf7rL5I+2yXe07Qo9QD60YdW fjE/Rn45zHK3OQG98uXNtBqTCPd+KtF4hZnfmtImN7B+qddKQGwfGRyHMVvZkw11 BL3wFXpquJRPo81Z8OfLbatF4aIB4dxl0Xek043QKSTdDdhUvS1m6XM1p6nidWvK thl0KT2bkyJUASCZJUi6F3YqHLEc++X/wAnLq/mKBL8Eqg6P8QkqLeK+yyrlmghR VWm0Xyvnomu1bndHCxBlK7MY6npZnTJN+NKU8oqYEQCCwxM+LTo3u67xVQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOQd9fMx/DTrvTgYv07qF4OPyTNpMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvNUIzMTh6SDhOT3U5T0JpX1R1b1hnNF9KTTJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV0LAwQA vHd5MA0GCSqGSIb3DQEBCwUAA4IBAQCFdgt442RtIsZGvk3JJQkDF64lMCb/uJAs 2etMzy4ud1JqGecE9Ofdgd3clivOOEUl3RxA8RLIs2tvjcHu35CVJLknpYSg1JRs wfQ3L5Ymtfcw2nFq7eprnYpStPiYSt+uYqA9hB2MW+aG0QrD9cqqwNIzPtMc3nWT NNRBm+JLPPGU7tw04VFfjYwHfOOhaUt++kmejXIgvqZEV4Ba168L3GUvU65U5X/n /b13N/noX5L12a/wKqml5JhGZQ3PwKeld+Q66N3MP81XFgO7s0wqlsJXS+UtcTcf ht1UFne5uWveXyr7eqYbPw0TjRvKxC9Pzh33n1GgrHaT1mOJ5WF+ -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:20 2026 by rpki-client