This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/m00WEi-KUhPZOZ6m8xsbkwzAAqQ.roa File: m00WEi-KUhPZOZ6m8xsbkwzAAqQ.roa (raw, json) Hash identifier: 7OLk561MR7BV3oxXePdGss3bEUcPG6YjZLBOYNNOHXA= Subject key identifier: 9B:4D:16:12:2F:8A:52:13:D9:39:9E:A6:F3:1B:1B:93:0C:C0:02:A4 Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729 Certificate serial: 019B7FF217B385D08DD98BF70BFA72157138 Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/m00WEi-KUhPZOZ6m8xsbkwzAAqQ.roa Signing time: Fri 02 Jan 2026 18:22:10 +0000 ROA not before: Fri 02 Jan 2026 18:22:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9023 IP address blocks: 193.46.40.0/22 maxlen: 22 2001:67c:2418::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:17:b3:85:d0:8d:d9:8b:f7:0b:fa:72:15:71:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729 Validity Not Before: Jan 2 18:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b4d16122f8a5213d9399ea6f31b1b930cc002a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:65:c8:f0:6b:72:e9:a1:f2:24:78:62:ae: ab:84:2a:23:d0:8a:fc:da:e2:f3:42:e3:10:77:28: 42:72:e3:34:a9:25:2d:bd:4a:25:4a:a6:63:a0:d0: 83:f0:7e:36:06:fb:b6:c8:64:21:00:3d:1e:7b:fe: 2f:be:05:e3:19:d2:85:58:0f:26:12:4d:77:15:a1: 25:d8:69:41:43:4f:f6:70:24:ce:66:a9:ac:f9:90: f6:41:ef:47:d2:ed:d5:b8:79:1b:5b:6c:92:8b:1d: e1:af:ae:d0:69:06:6b:f0:ae:12:11:25:bb:8e:6b: 56:55:13:5f:78:dc:c6:7f:7d:fb:06:e3:5e:01:03: d9:a4:d1:6c:d2:cd:e8:41:c1:d6:da:ab:c2:8e:29: 03:b6:79:6d:09:7e:1f:2e:6d:a3:42:02:59:dc:61: a8:f0:da:ba:f4:40:e3:8b:0b:4b:73:71:74:cb:4d: 1e:c4:7c:85:fe:b4:d0:69:aa:ad:fe:5e:36:1e:ea: f4:72:e3:14:71:ae:51:a9:ba:6d:75:53:d5:f6:85: 9a:4d:3b:38:bb:6f:13:e6:94:e5:02:8e:24:44:6b: 3f:24:ae:33:e0:c6:b4:af:9a:ac:01:14:e1:41:17: 8f:b8:00:49:01:37:21:e5:33:06:2b:51:b3:26:95: a2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4D:16:12:2F:8A:52:13:D9:39:9E:A6:F3:1B:1B:93:0C:C0:02:A4 X509v3 Authority Key Identifier: keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/m00WEi-KUhPZOZ6m8xsbkwzAAqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.40.0/22 IPv6: 2001:67c:2418::/48 Signature Algorithm: sha256WithRSAEncryption 48:d3:c7:3f:ff:9d:56:52:25:67:c2:cd:54:13:61:92:22:52: 25:06:66:c1:b9:38:61:a7:c9:13:c7:52:fb:f5:23:42:0e:8c: 7c:5d:40:ee:e1:3d:ce:78:0a:47:26:69:20:40:a3:83:d6:44: e5:a0:ad:76:b2:bb:b3:96:70:a2:47:eb:2d:82:43:78:a0:26: d4:21:3c:a9:69:00:61:95:8a:f2:58:76:8f:07:8c:78:9e:68: 57:2e:9c:d1:e5:23:62:60:57:95:5d:ff:f3:d9:f5:a3:5e:27: ea:b1:13:f5:da:89:0c:73:d3:23:28:da:0d:ad:26:48:f6:86: e1:d4:79:0c:67:88:c2:02:b3:0a:22:79:ff:e6:d3:7e:f3:2c: a5:69:71:5e:f6:c1:6e:18:0e:3e:1e:40:d4:a8:16:fd:74:f7: 17:9f:a5:01:a5:27:68:f5:84:59:c5:39:ad:9a:6a:17:d4:bc: 27:b5:b3:76:a9:de:24:a6:54:d4:57:4e:5f:e4:0a:3c:ec:6d: 4b:bc:ab:70:25:06:30:bc:6a:25:20:b9:d0:a2:49:05:f8:c1: a4:0c:32:15:4d:34:65:ad:e4:64:0d:81:83:2b:8c:9d:4e:37: fd:93:b6:98:b2:40:0a:82:3a:35:cb:b9:5e:de:db:05:ac:f4: 62:f6:96:ea -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/8hezhdCN2Yv3C/pyFXE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMTJlNjkzZThlN2ZiOGIzMWFhODU1M2IzMGQ5NWJlZjA0 ODM3MjkwHhcNMjYwMTAyMTgyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjRkMTYxMjJmOGE1MjEzZDkzOTllYTZmMzFiMWI5MzBjYzAwMmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1FlyPBrcumh8iR4Yq6rhCoj0Ir8 2uLzQuMQdyhCcuM0qSUtvUolSqZjoNCD8H42Bvu2yGQhAD0ee/4vvgXjGdKFWA8m Ek13FaEl2GlBQ0/2cCTOZqms+ZD2Qe9H0u3VuHkbW2ySix3hr67QaQZr8K4SESW7 jmtWVRNfeNzGf337BuNeAQPZpNFs0s3oQcHW2qvCjikDtnltCX4fLm2jQgJZ3GGo 8Nq69EDjiwtLc3F0y00exHyF/rTQaaqt/l42Hur0cuMUca5RqbptdVPV9oWaTTs4 u28T5pTlAo4kRGs/JK4z4Ma0r5qsARThQRePuABJATch5TMGK1GzJpWiFQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJtNFhIvilIT2TmepvMbG5MMwAKkMB8GA1UdIwQY MBaAFEIS5pPo5/uLMaqFU7MNlb7wSDcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lMjEzMjUtOTkxMC00N2U4LTk5Y2Mt NzVhNTU1YzhmYjQxLzEvbTAwV0VpLUtVaFBaT1o2bTh4c2Jrd3pBQXFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lMjEzMjUtOTkxMC00N2U4LTk5Y2MtNzVhNTU1YzhmYjQx LzEvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwS4oMA8E AgACMAkDBwAgAQZ8JBgwDQYJKoZIhvcNAQELBQADggEBAEjTxz//nVZSJWfCzVQT YZIiUiUGZsG5OGGnyRPHUvv1I0IOjHxdQO7hPc54CkcmaSBAo4PWROWgrXayu7OW cKJH6y2CQ3igJtQhPKlpAGGVivJYdo8HjHieaFcunNHlI2JgV5Vd//PZ9aNeJ+qx E/XaiQxz0yMo2g2tJkj2huHUeQxniMICswoief/m037zLKVpcV72wW4YDj4eQNSo Fv109xefpQGlJ2j1hFnFOa2aahfUvCe1s3ap3iSmVNRXTl/kCjzsbUu8q3AlBjC8 aiUgudCiSQX4waQMMhVNNGWt5GQNgYMrjJ1ON/2TtpiyQAqCOjXLuV7e2wWs9GL2 luo= -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:03 2026 by rpki-client