This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/keMt9GC91bHZXuQ0h87FQe-gBaY.roa File: keMt9GC91bHZXuQ0h87FQe-gBaY.roa (raw, json) Hash identifier: W4gS8hqr2Jgdapo27zgTBxXWuHg7t03Y6FgU8O4hTKw= Subject key identifier: 91:E3:2D:F4:60:BD:D5:B1:D9:5E:E4:34:87:CE:C5:41:EF:A0:05:A6 Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Certificate serial: 019B76EBA2985AA8A4AE87E8CDBEA12AE5AF Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/keMt9GC91bHZXuQ0h87FQe-gBaY.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49338 IP address blocks: 81.4.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a2:98:5a:a8:a4:ae:87:e8:cd:be:a1:2a:e5:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91e32df460bdd5b1d95ee43487cec541efa005a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ed:c5:76:2b:d2:eb:ea:29:07:b5:87:5d:62: 34:2e:3e:fb:71:c7:bd:03:70:6e:0a:bd:f1:b8:19: 9f:11:7e:1b:7f:98:f5:fa:45:07:4b:74:f1:cd:c1: 62:ae:44:48:c8:e7:7a:b1:67:bd:bc:ca:d2:80:fa: e8:4b:5f:5d:be:3f:c8:12:fe:37:76:59:60:69:ab: 77:82:5d:bc:fa:f1:6b:24:56:81:06:28:a1:a1:a6: bc:0e:06:86:f1:98:76:1b:54:1e:f2:c2:a8:1d:ef: 6d:e0:3b:a7:7e:91:28:86:f9:b5:2d:6c:e6:e1:18: 99:e2:1d:5c:10:0a:68:64:9b:8a:45:4a:3d:fa:21: 69:37:a7:1f:96:43:cf:a3:9e:5e:2a:8a:48:2e:0b: b4:83:3b:bb:61:c1:c4:f6:8f:05:bd:f8:aa:c3:47: 17:3c:79:2c:79:b1:54:9f:df:ae:11:4d:e4:58:87: 55:6f:3c:ba:1a:0d:d0:07:e2:55:98:fa:a3:ec:da: 78:af:2c:62:51:63:b6:31:f7:f7:4a:3c:43:9e:32: 0b:2b:a9:61:30:19:eb:5a:e8:f8:1e:0d:9a:c4:fe: 55:4f:7e:63:ea:ba:f7:32:1c:52:d6:25:31:87:3b: 0e:74:9e:b4:7a:20:5e:5c:6a:3c:0f:9b:b1:ec:76: fd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E3:2D:F4:60:BD:D5:B1:D9:5E:E4:34:87:CE:C5:41:EF:A0:05:A6 X509v3 Authority Key Identifier: keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/keMt9GC91bHZXuQ0h87FQe-gBaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.4.186.0/23 Signature Algorithm: sha256WithRSAEncryption a9:72:43:7b:61:fc:a4:7f:4a:d4:fb:eb:d0:e9:97:9f:d5:a8: 9f:af:b6:76:2a:99:40:8a:9f:27:2b:51:87:c3:dc:4f:28:26: 20:43:99:88:0f:63:38:93:4e:0e:0e:d1:d6:66:2e:6c:65:e9: c0:f8:2d:81:f3:4a:25:34:94:cc:bf:6f:ef:71:57:11:01:30: 10:97:c5:24:61:ab:1b:d9:06:4a:52:5a:20:4b:7e:c2:8c:39: 72:47:1a:81:0b:3e:47:6b:66:9a:e8:91:67:5e:db:02:30:04: 62:98:89:ec:84:9a:01:fc:20:b2:a2:70:8e:3b:3a:31:02:4a: 13:c7:a7:78:3e:41:9c:99:09:be:d3:b2:cf:3a:30:2e:ea:56: 35:c3:c7:2a:f2:93:c8:95:59:2d:14:86:b3:60:42:d6:f0:0a: b5:de:14:d4:3f:33:65:29:00:a9:8e:c4:b0:de:74:07:0f:76: 8b:0c:55:ad:b6:1c:1f:19:c3:02:5d:9e:a8:3f:ad:6d:2a:2f: f3:3b:54:8d:d9:57:d3:3c:1d:de:59:26:d7:9d:d6:00:76:8d: 5d:ba:b7:c0:d2:b0:89:cb:52:5c:62:c6:f3:7e:94:70:c7:08: 75:b3:24:77:e0:f1:78:1d:c9:63:0a:db:7d:1e:17:f1:ca:10: 1c:c1:cb:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266KYWqikrofozb6hKuWvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5 MzZmZDUwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWUzMmRmNDYwYmRkNWIxZDk1ZWU0MzQ4N2NlYzU0MWVmYTAwNWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu3FdivS6+opB7WHXWI0Lj77cce9 A3BuCr3xuBmfEX4bf5j1+kUHS3TxzcFirkRIyOd6sWe9vMrSgProS19dvj/IEv43 dllgaat3gl28+vFrJFaBBiihoaa8DgaG8Zh2G1Qe8sKoHe9t4DunfpEohvm1LWzm 4RiZ4h1cEApoZJuKRUo9+iFpN6cflkPPo55eKopILgu0gzu7YcHE9o8Fvfiqw0cX PHksebFUn9+uEU3kWIdVbzy6Gg3QB+JVmPqj7Np4ryxiUWO2Mff3SjxDnjILK6lh MBnrWuj4Hg2axP5VT35j6rr3MhxS1iUxhzsOdJ60eiBeXGo8D5ux7Hb99wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJHjLfRgvdWx2V7kNIfOxUHvoAWmMB8GA1UdIwQY MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt YjBmNGI5YzM3ZTQ5LzEva2VNdDlHQzkxYkhaWHVRMGg4N0ZRZS1nQmFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5 LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUQS6MA0G CSqGSIb3DQEBCwUAA4IBAQCpckN7Yfykf0rU++vQ6Zef1aifr7Z2KplAip8nK1GH w9xPKCYgQ5mID2M4k04ODtHWZi5sZenA+C2B80olNJTMv2/vcVcRATAQl8UkYasb 2QZKUlogS37CjDlyRxqBCz5Ha2aa6JFnXtsCMARimInshJoB/CCyonCOOzoxAkoT x6d4PkGcmQm+07LPOjAu6lY1w8cq8pPIlVktFIazYELW8Aq13hTUPzNlKQCpjsSw 3nQHD3aLDFWtthwfGcMCXZ6oP61tKi/zO1SN2VfTPB3eWSbXndYAdo1durfA0rCJ y1JcYsbzfpRwxwh1syR34PF4HcljCtt9HhfxyhAcwctZ -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:31 2026 by rpki-client