This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/rmbNOlT11Y0vmokiNgeLI05NKhI.roa File: rmbNOlT11Y0vmokiNgeLI05NKhI.roa (raw, json) Hash identifier: BuA3h42+P1TM5X/zoS1KTDulUo41R66I7Fn4rVqrUqs= Subject key identifier: AE:66:CD:3A:54:F5:D5:8D:2F:9A:89:22:36:07:8B:23:4E:4D:2A:12 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 019B7BA39B508359680430281DB158DD5D4A Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/rmbNOlT11Y0vmokiNgeLI05NKhI.roa Signing time: Thu 01 Jan 2026 22:17:58 +0000 ROA not before: Thu 01 Jan 2026 22:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50795 IP address blocks: 188.75.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:9b:50:83:59:68:04:30:28:1d:b1:58:dd:5d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Jan 1 22:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae66cd3a54f5d58d2f9a892236078b234e4d2a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:62:f9:68:84:ca:5b:0c:f1:36:44:82:2c:08: d3:b0:73:d0:09:c0:1c:06:51:e5:56:1c:88:ab:61: c6:c4:11:1b:eb:91:ab:41:ca:2d:fd:15:1c:ac:94: 20:31:f9:f0:b5:ad:76:6b:ed:ee:36:25:0f:cc:b3: 52:c3:3b:e9:a9:20:87:97:b4:48:cd:85:c1:1c:66: de:01:8f:70:ec:94:4f:c5:ee:0d:ed:0f:1a:5c:07: 92:d7:fd:19:55:ba:51:d7:5c:98:7b:7c:b8:d5:12: 75:55:32:f3:66:83:e5:66:d8:f9:d9:dc:36:94:e9: dc:2c:af:76:1c:91:dc:60:d6:56:a0:cc:04:52:1c: eb:0c:1d:3a:ef:18:e9:a8:93:8f:b1:18:98:84:c9: 80:87:36:2a:81:e6:16:03:6f:59:f7:96:ed:b7:ad: 52:e3:6e:bd:6c:1c:fa:ae:6c:a1:48:6e:0f:fa:2b: 0c:4d:44:2c:25:dc:15:dd:15:39:14:37:06:6d:f2: 14:82:7d:33:be:14:f3:2e:05:54:78:d3:b1:b0:52: f5:fd:30:c4:54:b4:e5:e0:b3:9f:9f:09:10:c7:9a: bb:d4:80:03:b6:92:9c:22:e7:de:ce:c1:c0:e4:73: ac:fd:0c:8f:a6:f3:e2:92:c8:06:81:59:87:53:08: 9d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:66:CD:3A:54:F5:D5:8D:2F:9A:89:22:36:07:8B:23:4E:4D:2A:12 X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/rmbNOlT11Y0vmokiNgeLI05NKhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.75.112.0/24 Signature Algorithm: sha256WithRSAEncryption 32:6e:b3:2d:bf:ae:da:c0:e7:94:c2:ee:d5:91:6f:dd:1d:f8: a6:4e:6b:f5:92:fd:3b:fa:9e:4e:07:c2:99:4a:82:61:33:7e: 19:27:51:68:2f:f5:c3:79:ac:8d:f5:da:d1:26:76:ad:ba:db: c0:27:91:a5:c3:94:80:b4:fe:da:f4:d9:c8:9a:78:89:31:e5: 68:4a:94:49:c4:84:bf:21:92:ae:7f:41:3b:f2:ef:b7:4a:c4: 40:50:82:97:3a:a1:eb:e1:f6:f1:c4:b8:2f:11:51:9a:f7:59: 97:d0:19:9b:26:10:65:f8:54:5c:fc:ab:9e:88:f7:24:8c:cd: 65:82:23:95:bb:6e:02:16:04:f5:97:0f:80:32:16:fc:e1:f4: 0e:ae:bd:b5:01:d0:6e:76:b3:35:8c:57:90:f3:ea:c5:f3:01: b5:0d:35:d3:14:e8:62:43:05:5a:f7:f3:1b:61:e6:af:37:10: f9:6e:00:6a:78:11:f6:68:3a:74:01:43:f9:1b:12:aa:62:d6: 34:6b:a3:28:1f:d8:cc:ea:6b:1e:ff:1e:cc:02:27:df:85:ed: 6e:cb:6b:ad:2e:7c:18:6c:d2:94:b2:bf:a3:aa:f4:18:33:c8: d9:68:72:b1:6b:32:d7:91:6c:35:ab:e8:6b:17:7c:7d:7b:7e: bd:9e:25:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o5tQg1loBDAoHbFY3V1KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjYwMTAxMjIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTY2Y2QzYTU0ZjVkNThkMmY5YTg5MjIzNjA3OGIyMzRlNGQyYTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2L5aITKWwzxNkSCLAjTsHPQCcAc BlHlVhyIq2HGxBEb65GrQcot/RUcrJQgMfnwta12a+3uNiUPzLNSwzvpqSCHl7RI zYXBHGbeAY9w7JRPxe4N7Q8aXAeS1/0ZVbpR11yYe3y41RJ1VTLzZoPlZtj52dw2 lOncLK92HJHcYNZWoMwEUhzrDB067xjpqJOPsRiYhMmAhzYqgeYWA29Z95btt61S 4269bBz6rmyhSG4P+isMTUQsJdwV3RU5FDcGbfIUgn0zvhTzLgVUeNOxsFL1/TDE VLTl4LOfnwkQx5q71IADtpKcIufezsHA5HOs/QyPpvPiksgGgVmHUwidgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK5mzTpU9dWNL5qJIjYHiyNOTSoSMB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvcm1iTk9sVDExWTB2bW9raU5nZUxJMDVOS2hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEtwMA0G CSqGSIb3DQEBCwUAA4IBAQAybrMtv67awOeUwu7VkW/dHfimTmv1kv07+p5OB8KZ SoJhM34ZJ1FoL/XDeayN9drRJnatutvAJ5Glw5SAtP7a9NnImniJMeVoSpRJxIS/ IZKuf0E78u+3SsRAUIKXOqHr4fbxxLgvEVGa91mX0BmbJhBl+FRc/KueiPckjM1l giOVu24CFgT1lw+AMhb84fQOrr21AdBudrM1jFeQ8+rF8wG1DTXTFOhiQwVa9/Mb YeavNxD5bgBqeBH2aDp0AUP5GxKqYtY0a6MoH9jM6mse/x7MAiffhe1uy2utLnwY bNKUsr+jqvQYM8jZaHKxazLXkWw1q+hrF3x9e369niWK -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:42 2026 by rpki-client