This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/0Lm7esoKkHareAs6Ls8vjEmxa3Q.roa File: 0Lm7esoKkHareAs6Ls8vjEmxa3Q.roa (raw, json) Hash identifier: x+lTP2mMfmYdH0ZyCDCtnT35GU+4XuQiyxHUZ4mGGfo= Subject key identifier: D0:B9:BB:7A:CA:0A:90:76:AB:78:0B:3A:2E:CF:2F:8C:49:B1:6B:74 Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED281BD12AD1F822B85B8F32E37A2E Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/0Lm7esoKkHareAs6Ls8vjEmxa3Q.roa Signing time: Thu 01 Jan 2026 14:19:03 +0000 ROA not before: Thu 01 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208491 IP address blocks: 195.187.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:28:1b:d1:2a:d1:f8:22:b8:5b:8f:32:e3:7a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0b9bb7aca0a9076ab780b3a2ecf2f8c49b16b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:11:a6:74:20:a0:a9:38:b9:c9:99:ca:4c: 1a:5f:d7:87:25:bc:aa:7e:72:fe:d1:8e:13:ee:6b: 0f:49:b6:a9:11:65:bc:c1:75:d5:51:64:c3:1d:c1: 0c:e9:33:29:d6:c5:b2:f5:dd:1a:8a:a2:2b:40:79: ef:b0:6e:ed:06:ce:98:0d:6d:6a:87:65:13:06:5e: a8:c0:c5:ac:ff:36:cb:c9:30:b1:07:4e:71:89:0b: 00:29:67:24:d1:29:1b:6e:31:6e:57:e2:9c:ec:25: 24:71:a9:e9:91:80:6d:46:fa:a6:b5:2d:2b:e7:4b: 63:e4:1a:0d:c3:75:d4:2e:c2:3b:26:e7:08:85:59: fa:50:8b:fb:d4:79:a7:6f:0e:40:de:92:d7:62:49: 50:35:75:bd:54:53:5b:25:0a:29:1f:2b:ac:8e:37: cb:6b:86:74:f0:8b:b6:8f:cf:fe:38:7d:6b:8c:91: 67:ac:9a:32:31:5b:80:d1:dc:34:d2:d4:80:f4:99: 3b:df:e7:e8:fe:ab:67:c6:6e:dd:c6:03:b4:35:9a: 07:2c:e1:d3:43:7b:7a:16:32:46:21:a7:95:b4:a9: 96:77:78:67:90:86:80:df:d0:7a:bc:32:f9:61:e6: 45:ac:96:e9:cf:4d:b7:7b:43:2b:fc:33:ae:bb:97: 11:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B9:BB:7A:CA:0A:90:76:AB:78:0B:3A:2E:CF:2F:8C:49:B1:6B:74 X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/0Lm7esoKkHareAs6Ls8vjEmxa3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.187.32.0/24 Signature Algorithm: sha256WithRSAEncryption 82:9a:4c:73:2c:0f:c5:7f:ee:22:e3:b9:b2:5d:20:96:45:4f: ac:ee:87:03:ee:20:f1:24:1b:9b:49:39:80:98:20:a7:f0:5a: 84:c3:31:76:b4:6f:77:08:7d:c6:3e:01:e8:6f:45:d2:98:80: 17:8c:27:f7:51:18:60:52:c8:30:08:ec:ab:b1:66:78:a2:8d: 4d:a9:06:d6:cb:e2:e4:0a:30:e7:78:30:b4:76:2d:17:11:3a: b9:fb:b7:db:08:14:6a:9e:33:65:09:bd:18:41:32:53:ee:b6: aa:d4:2c:d6:99:8f:87:c5:dc:4c:86:29:14:06:52:06:d2:61: 8a:a2:8b:73:0b:8d:13:29:49:68:b7:d4:28:ae:1f:0f:4f:aa: c9:dc:a2:39:a0:17:9e:fd:89:50:59:aa:9d:72:c2:eb:8f:f3: 8e:9e:ba:30:17:3c:30:39:46:13:0f:29:df:83:9b:f9:b9:03: 00:c9:04:53:cc:b5:2c:a0:cf:0d:5e:c1:08:6d:e9:6c:8a:3a: ac:6e:78:4d:a3:84:cb:75:67:75:c8:ef:50:20:4b:71:86:20: a5:8f:67:e1:18:9a:61:1e:2c:d0:00:0c:db:7e:c8:b0:79:d9: eb:25:2f:27:33:91:40:e4:d1:8a:9d:21:23:cd:df:59:5c:46: fa:de:b0:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Sgb0SrR+CK4W48y43ouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGI5YmI3YWNhMGE5MDc2YWI3ODBiM2EyZWNmMmY4YzQ5YjE2Yjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq8RpnQgoKk4ucmZykwaX9eHJbyq fnL+0Y4T7msPSbapEWW8wXXVUWTDHcEM6TMp1sWy9d0aiqIrQHnvsG7tBs6YDW1q h2UTBl6owMWs/zbLyTCxB05xiQsAKWck0SkbbjFuV+Kc7CUkcanpkYBtRvqmtS0r 50tj5BoNw3XULsI7JucIhVn6UIv71Hmnbw5A3pLXYklQNXW9VFNbJQopHyusjjfL a4Z08Iu2j8/+OH1rjJFnrJoyMVuA0dw00tSA9Jk73+fo/qtnxm7dxgO0NZoHLOHT Q3t6FjJGIaeVtKmWd3hnkIaA39B6vDL5YeZFrJbpz023e0Mr/DOuu5cR2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNC5u3rKCpB2q3gLOi7PL4xJsWt0MB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvMExtN2Vzb0trSGFyZUFzNkxzOHZqRW14YTNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7sgMA0G CSqGSIb3DQEBCwUAA4IBAQCCmkxzLA/Ff+4i47myXSCWRU+s7ocD7iDxJBubSTmA mCCn8FqEwzF2tG93CH3GPgHob0XSmIAXjCf3URhgUsgwCOyrsWZ4oo1NqQbWy+Lk CjDneDC0di0XETq5+7fbCBRqnjNlCb0YQTJT7raq1CzWmY+HxdxMhikUBlIG0mGK ootzC40TKUlot9Qorh8PT6rJ3KI5oBee/YlQWaqdcsLrj/OOnrowFzwwOUYTDynf g5v5uQMAyQRTzLUsoM8NXsEIbelsijqsbnhNo4TLdWd1yO9QIEtxhiClj2fhGJph HizQAAzbfsiwednrJS8nM5FA5NGKnSEjzd9ZXEb63rBO -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:38 2026 by rpki-client