This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/mEKtfvYTAxtM6bZgtdK_dA7354E.roa File: mEKtfvYTAxtM6bZgtdK_dA7354E.roa (raw, json) Hash identifier: 6ZHlqAoO39Sn5BGYKBp6Jdixn3sYjX1kubhVv/phslc= Subject key identifier: 98:42:AD:7E:F6:13:03:1B:4C:E9:B6:60:B5:D2:BF:74:0E:F7:E7:81 Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Certificate serial: 019B32F7A7E658A2A25777E2AD66C9CB6BB7 Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/mEKtfvYTAxtM6bZgtdK_dA7354E.roa Signing time: Thu 18 Dec 2025 19:37:29 +0000 ROA not before: Thu 18 Dec 2025 19:37:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215625 IP address blocks: 46.235.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:f7:a7:e6:58:a2:a2:57:77:e2:ad:66:c9:cb:6b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Validity Not Before: Dec 18 19:37:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9842ad7ef613031b4ce9b660b5d2bf740ef7e781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0e:8f:1d:18:38:de:80:d4:50:c3:5b:b3:32: de:68:85:8e:a7:4b:e7:bf:84:00:d5:3d:48:e1:9c: 09:63:14:f6:e6:0b:0c:76:69:b7:09:a9:0d:5b:c0: 53:3c:0c:46:77:95:5f:30:bc:69:de:1e:b6:7f:f1: fd:64:31:81:1e:55:8a:45:1b:4b:03:55:f2:eb:b5: 9c:85:6f:b8:d7:57:1c:b9:7d:9a:7d:14:b2:5a:67: 9d:b7:b2:40:19:fb:08:f0:2b:d1:2e:86:22:49:d3: c5:cd:07:39:1c:78:15:14:6d:b4:4d:7c:48:8f:f7: a5:cc:98:88:3b:a4:f6:c4:d9:9e:71:93:36:56:89: c4:43:12:2f:66:3f:bc:15:d9:94:60:61:bc:72:26: 7a:19:75:19:e2:63:99:ba:e2:a3:0b:5d:11:d1:64: da:a6:eb:48:29:11:33:ae:ae:29:0c:7b:32:ec:41: e4:3d:36:8e:d4:bc:96:72:c0:43:61:d2:54:cd:df: ff:25:de:e6:2c:99:c1:b5:30:ce:71:96:df:5d:ee: 09:41:df:3d:26:de:8b:b5:c0:ae:4b:72:e0:5e:fc: 37:c6:bf:8c:b4:08:f5:0b:3a:e7:7c:fd:b6:5b:e1: c5:bc:21:5e:e3:b5:a0:34:82:f9:ce:43:25:ca:75: 8e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:42:AD:7E:F6:13:03:1B:4C:E9:B6:60:B5:D2:BF:74:0E:F7:E7:81 X509v3 Authority Key Identifier: keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/mEKtfvYTAxtM6bZgtdK_dA7354E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.12.0/24 Signature Algorithm: sha256WithRSAEncryption 59:ee:6b:0b:c3:26:db:f9:35:5e:a4:f0:a0:03:4d:93:86:cd: d1:f4:f8:9f:6a:24:f9:48:95:ee:9a:0d:96:96:91:c1:93:9b: 7b:32:14:4c:3c:ca:9f:ea:d5:75:2e:7f:1d:7b:7c:79:f4:9d: 76:e1:36:04:35:17:41:8e:48:fe:62:91:11:6a:96:3c:b1:1c: 1c:c9:62:18:bf:6c:7a:87:10:d5:b4:8f:2d:c1:b2:5b:d6:51: 14:47:8b:f4:97:e3:3a:0d:b0:09:57:5e:f1:09:8c:60:16:24: 57:12:fd:34:0f:d4:03:2d:2f:65:9c:69:70:43:e1:d5:67:50: ab:e9:d5:f0:1e:2c:a6:9f:51:32:ec:1e:1c:9e:68:16:29:25: 81:bc:7d:17:7b:22:9b:54:92:3e:69:f9:cc:5a:61:4d:2f:b1: f0:f1:f5:53:91:a2:74:02:4d:e6:eb:ee:ff:7d:74:cf:99:38: 92:25:6f:7a:cf:40:35:1f:56:c0:cd:0a:3d:67:64:f0:43:12: 06:1e:3f:50:90:dc:bf:70:2c:85:71:72:f2:d6:02:cd:4d:db: ac:e2:1a:fe:0f:1d:18:de:e8:2e:ce:0f:e2:75:f7:23:1f:9a: df:18:38:d5:4e:72:88:fd:be:9b:68:14:0a:23:2a:45:85:fe: 9a:5f:07:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsy96fmWKKiV3firWbJy2u3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGE5MzMzZjkzY2NhNTQ0ZmRhYmUyZWE3YTY3MzhhNTRh Zjc1OWUwHhcNMjUxMjE4MTkzNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODQyYWQ3ZWY2MTMwMzFiNGNlOWI2NjBiNWQyYmY3NDBlZjdlNzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw6PHRg43oDUUMNbszLeaIWOp0vn v4QA1T1I4ZwJYxT25gsMdmm3CakNW8BTPAxGd5VfMLxp3h62f/H9ZDGBHlWKRRtL A1Xy67WchW+411ccuX2afRSyWmedt7JAGfsI8CvRLoYiSdPFzQc5HHgVFG20TXxI j/elzJiIO6T2xNmecZM2VonEQxIvZj+8FdmUYGG8ciZ6GXUZ4mOZuuKjC10R0WTa putIKREzrq4pDHsy7EHkPTaO1LyWcsBDYdJUzd//Jd7mLJnBtTDOcZbfXe4JQd89 Jt6LtcCuS3LgXvw3xr+MtAj1CzrnfP22W+HFvCFe47WgNIL5zkMlynWOVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJhCrX72EwMbTOm2YLXSv3QO9+eBMB8GA1UdIwQY MBaAFC4KkzP5PMpUT9q+Lqemc4pUr3WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEt MGEwYWFlYWVlNGYxLzEvbUVLdGZ2WVRBeHRNNmJaZ3RkS19kQTczNTRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEtMGEwYWFlYWVlNGYx LzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALusMMA0G CSqGSIb3DQEBCwUAA4IBAQBZ7msLwybb+TVepPCgA02Ths3R9PifaiT5SJXumg2W lpHBk5t7MhRMPMqf6tV1Ln8de3x59J124TYENRdBjkj+YpERapY8sRwcyWIYv2x6 hxDVtI8twbJb1lEUR4v0l+M6DbAJV17xCYxgFiRXEv00D9QDLS9lnGlwQ+HVZ1Cr 6dXwHiymn1Ey7B4cnmgWKSWBvH0XeyKbVJI+afnMWmFNL7Hw8fVTkaJ0Ak3m6+7/ fXTPmTiSJW96z0A1H1bAzQo9Z2TwQxIGHj9QkNy/cCyFcXLy1gLNTdus4hr+Dx0Y 3uguzg/idfcjH5rfGDjVTnKI/b6baBQKIypFhf6aXwcb -----END CERTIFICATE-----Generated at Sun Dec 21 03:47:32 2025 by rpki-client