This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/pmMHoCeiYkyuWIBqrZmK4CC1Qhs.roa
File: pmMHoCeiYkyuWIBqrZmK4CC1Qhs.roa (raw, json)
Hash identifier: qIpgZAvACZiZoj7IMOJaeVVTQ89Jj1BHX4QV5zS2blA=
Subject key identifier: A6:63:07:A0:27:A2:62:4C:AE:58:80:6A:AD:99:8A:E0:20:B5:42:1B
Certificate issuer: /CN=159ba29a75ae1325c0382fb484b321d68d154384
Certificate serial: 019B7EA539CF88D41FE3BD6FFFD1A4D4C516
Authority key identifier: 15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/pmMHoCeiYkyuWIBqrZmK4CC1Qhs.roa
Signing time: Fri 02 Jan 2026 12:18:35 +0000
ROA not before: Fri 02 Jan 2026 12:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64236
IP address blocks: 217.61.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:39:cf:88:d4:1f:e3:bd:6f:ff:d1:a4:d4:c5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159ba29a75ae1325c0382fb484b321d68d154384
Validity
Not Before: Jan 2 12:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a66307a027a2624cae58806aad998ae020b5421b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:41:ed:7b:7a:aa:38:c3:26:a7:af:8b:6a:
0f:59:4f:47:d0:53:2c:5c:bc:7d:7b:5e:28:71:58:
be:61:6b:77:95:4d:f8:37:2f:85:ca:09:76:84:20:
a1:71:01:06:66:6f:fd:0b:f9:26:d7:16:3f:b7:ec:
0c:c8:a7:81:03:9d:a6:5b:57:dd:e3:15:cd:18:08:
df:64:fd:56:a0:6f:1e:e1:bc:f2:65:7d:2a:18:9d:
ae:08:b8:b8:11:fd:5d:0d:77:52:c3:ee:c2:3a:8a:
cd:47:df:c2:d5:50:ff:55:e6:f1:4b:a9:13:dd:5b:
fc:a2:48:c3:76:2a:c8:b7:75:a4:47:8c:96:e9:ce:
04:56:39:04:31:39:94:c8:2a:4c:f6:db:41:fc:0d:
0a:a8:16:e1:c0:07:6e:94:46:44:92:60:84:13:52:
c9:b4:df:e2:e4:0a:14:a6:7a:34:1d:7c:42:a9:2c:
9d:43:4f:a3:89:ee:a3:89:43:7f:de:c8:42:85:a3:
71:39:cf:3d:21:f3:a1:21:97:3d:60:47:51:9e:68:
cf:22:11:41:6e:e2:d2:7b:b3:ff:f9:08:f7:71:4a:
d4:94:59:7c:94:8c:08:cc:3f:bd:56:92:18:b9:0d:
69:92:fc:c5:34:26:0c:fd:c1:dd:77:e3:cf:cf:72:
19:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:63:07:A0:27:A2:62:4C:AE:58:80:6A:AD:99:8A:E0:20:B5:42:1B
X509v3 Authority Key Identifier:
keyid:15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/pmMHoCeiYkyuWIBqrZmK4CC1Qhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.61.240.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c6:a0:dc:9f:81:21:c2:18:60:86:03:a4:d9:a7:33:39:aa:
ac:48:eb:3b:84:a3:fd:77:3b:18:b9:c6:bd:79:50:cb:70:b4:
25:e9:6e:71:b3:6b:4b:98:13:6a:f5:aa:91:9d:fc:2d:f2:81:
0a:38:25:ae:96:cc:fa:b7:39:31:2b:6d:4e:57:30:50:df:7e:
bb:4d:50:6d:97:d4:bf:31:b7:1e:b4:4f:bb:d3:08:14:0f:03:
c3:6c:41:f5:82:fe:11:85:ee:27:b9:14:ce:54:b3:22:96:a3:
8a:99:14:89:e0:c2:43:f0:7a:28:28:0f:97:81:99:46:15:a3:
3c:ab:30:05:f9:5b:c3:33:72:94:9a:ba:9f:67:66:f4:ff:f7:
8c:5f:27:53:49:6d:c1:a2:7c:c1:19:63:ce:25:66:12:eb:90:
e5:79:e4:db:b5:b1:36:50:ba:b5:a6:b5:25:67:ee:cb:6f:25:
09:f5:32:14:d0:52:d7:b7:ef:a7:c6:c2:85:4c:67:fa:fb:9f:
5f:56:3f:8e:a2:0a:26:95:38:e8:3e:f7:7b:ba:e3:00:c2:a7:
50:26:3d:44:5f:4c:4c:c8:5b:6a:49:d4:49:81:a2:45:4c:17:
20:a8:77:7e:28:01:17:7d:43:4c:f3:29:fd:e9:eb:aa:9d:43:
7f:ad:31:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+pTnPiNQf471v/9Gk1MUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OWJhMjlhNzVhZTEzMjVjMDM4MmZiNDg0YjMyMWQ2OGQx
NTQzODQwHhcNMjYwMTAyMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjYzMDdhMDI3YTI2MjRjYWU1ODgwNmFhZDk5OGFlMDIwYjU0MjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvshB7Xt6qjjDJqevi2oPWU9H0FMs
XLx9e14ocVi+YWt3lU34Ny+Fygl2hCChcQEGZm/9C/km1xY/t+wMyKeBA52mW1fd
4xXNGAjfZP1WoG8e4bzyZX0qGJ2uCLi4Ef1dDXdSw+7COorNR9/C1VD/VebxS6kT
3Vv8okjDdirIt3WkR4yW6c4EVjkEMTmUyCpM9ttB/A0KqBbhwAdulEZEkmCEE1LJ
tN/i5AoUpno0HXxCqSydQ0+jie6jiUN/3shChaNxOc89IfOhIZc9YEdRnmjPIhFB
buLSe7P/+Qj3cUrUlFl8lIwIzD+9VpIYuQ1pkvzFNCYM/cHdd+PPz3IZ/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKZjB6AnomJMrliAaq2ZiuAgtUIbMB8GA1UdIwQY
MBaAFBWbopp1rhMlwDgvtISzIdaNFUOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlp1aW1uV3VFeVhBT0MtMGhMTWgxbzBWUTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zMDAxOTUtN2U3Yi00ZTk5LWE1MmQt
Y2FmNGZhMDcyNjgyLzEvcG1NSG9DZWlZa3l1V0lCcXJabUs0Q0MxUWhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zMDAxOTUtN2U3Yi00ZTk5LWE1MmQtY2FmNGZhMDcyNjgy
LzEvRlp1aW1uV3VFeVhBT0MtMGhMTWgxbzBWUTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2T3wMA0G
CSqGSIb3DQEBCwUAA4IBAQBMxqDcn4EhwhhghgOk2aczOaqsSOs7hKP9dzsYuca9
eVDLcLQl6W5xs2tLmBNq9aqRnfwt8oEKOCWulsz6tzkxK21OVzBQ3367TVBtl9S/
MbcetE+70wgUDwPDbEH1gv4Rhe4nuRTOVLMilqOKmRSJ4MJD8HooKA+XgZlGFaM8
qzAF+VvDM3KUmrqfZ2b0//eMXydTSW3BonzBGWPOJWYS65DleeTbtbE2ULq1prUl
Z+7LbyUJ9TIU0FLXt++nxsKFTGf6+59fVj+OogomlTjoPvd7uuMAwqdQJj1EX0xM
yFtqSdRJgaJFTBcgqHd+KAEXfUNM8yn96euqnUN/rTFL
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:13:15 2026 by rpki-client