This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/_pmSmEyGoFs3fpqzGtBjfXV-fa8.roa
File: _pmSmEyGoFs3fpqzGtBjfXV-fa8.roa (raw, json)
Hash identifier: fW2hww6BoaOymLlW23CIMa7uBnEa/2LTaq/FpjqoNLI=
Subject key identifier: FE:99:92:98:4C:86:A0:5B:37:7E:9A:B3:1A:D0:63:7D:75:7E:7D:AF
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019B7F81332C9052C57EA0A1673235F5F523
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/_pmSmEyGoFs3fpqzGtBjfXV-fa8.roa
Signing time: Fri 02 Jan 2026 16:18:52 +0000
ROA not before: Fri 02 Jan 2026 16:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201867
IP address blocks: 213.152.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:81:33:2c:90:52:c5:7e:a0:a1:67:32:35:f5:f5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 16:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe9992984c86a05b377e9ab31ad0637d757e7daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:56:10:9a:30:47:b7:e7:be:ef:dd:ae:8c:74:
d7:ae:ec:4d:66:5b:50:e7:aa:ec:05:f8:43:a4:78:
23:f6:d5:01:6b:1f:33:cc:d2:e1:29:b9:56:fc:57:
58:52:8a:2c:32:a1:7e:7f:d9:36:97:52:d8:1d:61:
b5:f7:db:35:90:c7:2b:ba:a7:3e:3c:4c:60:32:e9:
80:2a:40:f4:92:9c:06:e9:e3:6e:5d:c4:17:03:5f:
04:f6:0b:53:02:d1:55:5a:68:8d:b9:b2:a5:69:21:
c1:87:f0:29:63:36:71:2a:01:2f:0f:69:ec:a9:aa:
ce:18:17:9a:d8:c5:02:b0:a7:c1:df:ae:6d:d1:88:
81:ee:53:f9:d3:2e:0a:25:16:ba:81:a3:f4:d8:ad:
fa:d0:1f:4f:c0:8a:5f:d3:9a:98:f1:ab:2c:f0:3d:
e5:41:4a:29:e1:b0:04:5d:d9:d0:48:d3:14:69:15:
d8:98:3e:97:f3:79:9c:13:49:c7:76:0c:79:57:06:
e4:7e:18:21:dd:08:f8:b0:56:48:5e:7e:95:e8:7a:
72:17:c2:9b:6c:bc:cc:aa:f9:3a:37:67:33:33:77:
63:a5:39:38:db:e7:b4:a0:8f:59:3a:3f:66:9d:64:
13:3d:83:39:a1:86:20:49:e9:ef:89:0f:80:30:b2:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:99:92:98:4C:86:A0:5B:37:7E:9A:B3:1A:D0:63:7D:75:7E:7D:AF
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/_pmSmEyGoFs3fpqzGtBjfXV-fa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.152.250.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:0b:7f:55:3d:2b:fe:15:84:45:6c:58:81:aa:30:c3:0b:e0:
7f:3f:f2:62:dd:fc:55:50:7f:2e:0e:c4:f9:9f:e8:3b:a5:f2:
9a:06:f1:31:57:9d:25:1c:85:30:f3:3c:43:62:a8:6b:ce:86:
53:5f:57:ef:6f:f0:cc:b6:f8:28:a6:1b:4a:99:f5:33:b3:82:
b5:d8:16:9c:d5:72:aa:cd:51:b5:5c:46:76:14:0f:c8:59:5f:
94:2a:28:64:c6:19:9d:6d:72:67:4f:94:7f:7c:70:ab:10:7c:
a7:31:2c:0b:26:d1:1a:f6:49:d8:37:c0:80:68:7e:37:2a:32:
aa:93:96:a4:dd:58:1a:16:24:1d:cb:1b:23:c4:80:c4:61:49:
7e:18:dc:aa:58:4d:f8:be:c6:3f:e9:4c:91:b7:cd:80:3a:d8:
19:b8:8e:86:52:a7:2a:f8:1e:34:56:88:f8:52:36:7d:2f:76:
91:b4:10:53:b7:aa:5d:37:9f:97:b5:f6:1e:f0:73:4b:47:fd:
f3:2d:1b:de:1e:38:12:1d:31:1a:30:74:17:93:84:6b:55:9e:
d8:26:78:88:7c:3a:b2:7d:e1:73:c4:02:1a:b1:c6:aa:fd:18:
4f:b5:31:d2:08:fd:89:25:9c:0f:fd:4c:63:e9:40:02:dd:4e:
21:43:5a:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/gTMskFLFfqChZzI19fUjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl
YmUyNTcwHhcNMjYwMTAyMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTk5OTI5ODRjODZhMDViMzc3ZTlhYjMxYWQwNjM3ZDc1N2U3ZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lYQmjBHt+e+792ujHTXruxNZltQ
56rsBfhDpHgj9tUBax8zzNLhKblW/FdYUoosMqF+f9k2l1LYHWG199s1kMcruqc+
PExgMumAKkD0kpwG6eNuXcQXA18E9gtTAtFVWmiNubKlaSHBh/ApYzZxKgEvD2ns
qarOGBea2MUCsKfB365t0YiB7lP50y4KJRa6gaP02K360B9PwIpf05qY8ass8D3l
QUop4bAEXdnQSNMUaRXYmD6X83mcE0nHdgx5Vwbkfhgh3Qj4sFZIXn6V6HpyF8Kb
bLzMqvk6N2czM3djpTk42+e0oI9ZOj9mnWQTPYM5oYYgSenviQ+AMLI+IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP6ZkphMhqBbN36asxrQY311fn2vMB8GA1UdIwQY
MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt
ZGI0ZjM1MmU5YWQzLzEvX3BtU21FeUdvRnMzZnBxekd0QmpmWFYtZmE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz
LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Zj6MA0G
CSqGSIb3DQEBCwUAA4IBAQDKC39VPSv+FYRFbFiBqjDDC+B/P/Ji3fxVUH8uDsT5
n+g7pfKaBvExV50lHIUw8zxDYqhrzoZTX1fvb/DMtvgophtKmfUzs4K12Bac1XKq
zVG1XEZ2FA/IWV+UKihkxhmdbXJnT5R/fHCrEHynMSwLJtEa9knYN8CAaH43KjKq
k5ak3VgaFiQdyxsjxIDEYUl+GNyqWE34vsY/6UyRt82AOtgZuI6GUqcq+B40Voj4
UjZ9L3aRtBBTt6pdN5+XtfYe8HNLR/3zLRveHjgSHTEaMHQXk4RrVZ7YJniIfDqy
feFzxAIascaq/RhPtTHSCP2JJZwP/Uxj6UAC3U4hQ1qP
-----END CERTIFICATE-----
Generated at Wed Jan 21 03:48:30 2026 by rpki-client