This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/0mENkr9R3Eaz0bgbzTHZ_lmoh-k.roa File: 0mENkr9R3Eaz0bgbzTHZ_lmoh-k.roa (raw, json) Hash identifier: awpYUvwutpxyVAYPBKGZqnzY4J1Y2wVFIsJg6l5sbpw= Subject key identifier: D2:61:0D:92:BF:51:DC:46:B3:D1:B8:1B:CD:31:D9:FE:59:A8:87:E9 Certificate issuer: /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8 Certificate serial: 019B7B365FFD5C8D7403360D4C8A493BA3C6 Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/0mENkr9R3Eaz0bgbzTHZ_lmoh-k.roa Signing time: Thu 01 Jan 2026 20:18:39 +0000 ROA not before: Thu 01 Jan 2026 20:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 193.101.11.0/24 maxlen: 24 193.101.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5f:fd:5c:8d:74:03:36:0d:4c:8a:49:3b:a3:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8 Validity Not Before: Jan 1 20:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2610d92bf51dc46b3d1b81bcd31d9fe59a887e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:ce:86:1e:d0:16:2a:5a:67:a3:36:04:40: 95:78:a2:f1:2f:29:78:ea:8e:b6:13:ae:82:e0:b8: 10:0f:ff:96:ad:07:1a:80:6e:30:34:b0:33:70:d6: 33:dc:ec:97:1d:77:fb:2b:e0:66:89:5a:95:0b:c8: 9b:c5:6f:ab:06:c1:e8:53:6e:4e:cd:dd:16:6c:f1: ae:93:14:fe:8e:1e:81:15:42:c4:d5:ca:39:0b:e9: 25:7b:8a:b8:e2:3d:02:00:a7:de:db:ee:b6:4d:3a: 4a:b7:8d:74:f5:2d:b6:4c:72:6b:b3:25:7c:30:22: aa:dc:25:b2:e5:67:50:88:63:8f:31:e3:c1:16:d3: 2a:1e:a4:7b:3d:21:9b:30:c0:4b:a6:37:a3:c8:07: 07:9a:55:5b:65:5d:af:74:7b:3f:d2:6e:6f:ba:eb: e2:2e:68:61:42:80:4e:4a:d5:ad:1a:3d:47:5a:c5: 92:df:8b:ab:fd:89:e7:45:b0:29:d0:32:65:bf:15: 26:05:a4:74:c3:5c:f6:15:f4:62:6b:5c:2a:48:39: 3b:6b:63:af:68:71:68:19:7f:8c:cf:64:7a:47:6d: 6f:9e:a5:33:f6:60:a8:23:b0:42:5a:67:bf:94:b7: fa:19:86:63:3e:f4:fa:26:74:84:b8:00:c1:e7:37: 29:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:61:0D:92:BF:51:DC:46:B3:D1:B8:1B:CD:31:D9:FE:59:A8:87:E9 X509v3 Authority Key Identifier: keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/0mENkr9R3Eaz0bgbzTHZ_lmoh-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.101.11.0/24 193.101.24.0/21 Signature Algorithm: sha256WithRSAEncryption 6e:21:ac:51:f9:c4:c1:82:c5:20:c5:92:f4:fe:fd:c7:db:db: a2:0b:a2:7c:10:d4:0e:b9:d8:a7:8d:bc:92:94:8e:fd:2c:16: e9:f0:46:3d:fd:f8:4f:5a:09:f9:1a:ef:da:2c:71:5c:42:22: 84:3b:8f:f9:9d:9a:10:e3:ca:a7:6a:37:e2:9e:d3:ca:bc:de: bf:48:d9:87:e8:15:5d:85:2b:fd:b3:31:f0:01:85:8c:11:a4: e2:ba:50:9c:33:91:a3:5b:66:b2:30:5e:b2:f0:33:38:30:10: af:e6:01:f1:9e:a2:c6:a4:bb:13:38:ae:ed:35:62:e4:57:8e: ff:ae:b0:b5:87:79:a7:50:83:5e:ad:5c:61:24:97:f2:5f:cc: 63:30:93:8f:d7:6c:5a:d2:b6:37:29:f3:c2:53:c0:31:f6:57: 18:24:42:b5:c2:91:1c:b1:17:09:e7:d8:db:32:f1:33:a3:3f: 60:68:c3:28:90:05:a6:b0:26:e4:f4:4f:cc:be:8b:57:00:6f: 67:17:b5:11:53:c5:6a:be:81:b3:42:21:e2:c1:54:24:cb:f2: 1e:78:45:f8:43:1c:10:2f:c5:0f:9e:2f:7a:0f:a2:f5:80:e8: 46:69:da:72:32:4d:3d:f0:11:43:40:54:e7:c2:db:de:5f:f9: 6c:95:4f:eb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Nl/9XI10AzYNTIpJO6PGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MGM1ODEyNDhiMTFhZTJhNDZmNTUyZTVjYTQzYzY5ZDY1 ZTcyYTgwHhcNMjYwMTAxMjAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjYxMGQ5MmJmNTFkYzQ2YjNkMWI4MWJjZDMxZDlmZTU5YTg4N2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7XOhh7QFipaZ6M2BECVeKLxLyl4 6o62E66C4LgQD/+WrQcagG4wNLAzcNYz3OyXHXf7K+BmiVqVC8ibxW+rBsHoU25O zd0WbPGukxT+jh6BFULE1co5C+kle4q44j0CAKfe2+62TTpKt4109S22THJrsyV8 MCKq3CWy5WdQiGOPMePBFtMqHqR7PSGbMMBLpjejyAcHmlVbZV2vdHs/0m5vuuvi LmhhQoBOStWtGj1HWsWS34ur/YnnRbAp0DJlvxUmBaR0w1z2FfRia1wqSDk7a2Ov aHFoGX+Mz2R6R21vnqUz9mCoI7BCWme/lLf6GYZjPvT6JnSEuADB5zcpQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNJhDZK/UdxGs9G4G80x2f5ZqIfpMB8GA1UdIwQY MBaAFEUMWBJIsRripG9VLlykPGnWXnKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMt NzQ5OWE4MjMxZjU2LzEvMG1FTmtyOVIzRWF6MGJnYnpUSFpfbG1vaC1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMtNzQ5OWE4MjMxZjU2 LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwWULAwQD wWUYMA0GCSqGSIb3DQEBCwUAA4IBAQBuIaxR+cTBgsUgxZL0/v3H29uiC6J8ENQO udinjbySlI79LBbp8EY9/fhPWgn5Gu/aLHFcQiKEO4/5nZoQ48qnajfintPKvN6/ SNmH6BVdhSv9szHwAYWMEaTiulCcM5GjW2ayMF6y8DM4MBCv5gHxnqLGpLsTOK7t NWLkV47/rrC1h3mnUINerVxhJJfyX8xjMJOP12xa0rY3KfPCU8Ax9lcYJEK1wpEc sRcJ59jbMvEzoz9gaMMokAWmsCbk9E/MvotXAG9nF7URU8VqvoGzQiHiwVQky/Ie eEX4QxwQL8UPni96D6L1gOhGadpyMk098BFDQFTnwtveX/lslU/r -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:30 2026 by rpki-client