This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/kseNmYdhBq1K_noazDOmBmDbF5s.roa File: kseNmYdhBq1K_noazDOmBmDbF5s.roa (raw, json) Hash identifier: ATubQciMVM4Jml+pZxIMMSnD/6uFD6UKEHkdr+OIXB0= Subject key identifier: 92:C7:8D:99:87:61:06:AD:4A:FE:7A:1A:CC:33:A6:06:60:DB:17:9B Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64 Certificate serial: 019B7C7FB184ACD862F433DEAB6D6B07F5E1 Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/kseNmYdhBq1K_noazDOmBmDbF5s.roa Signing time: Fri 02 Jan 2026 02:18:21 +0000 ROA not before: Fri 02 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35008 IP address blocks: 194.246.109.0/24 maxlen: 24 2001:67c:760::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b1:84:ac:d8:62:f4:33:de:ab:6d:6b:07:f5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64 Validity Not Before: Jan 2 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92c78d99876106ad4afe7a1acc33a60660db179b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:48:55:21:b6:11:ed:50:69:ca:72:32:59:ca: 48:46:c9:f0:7e:d0:bf:71:88:7b:98:12:31:76:07: 1d:f9:94:3c:49:0a:8c:85:91:c4:d6:dd:c7:2f:cb: fd:92:d1:69:42:78:68:2f:47:61:55:cc:39:bc:ac: 41:8a:69:ad:e7:99:0a:2d:4e:63:36:a1:97:59:c1: 04:b8:79:5c:e6:ab:2a:2d:12:25:95:16:06:8d:4f: 18:e8:59:fa:f4:fe:f0:7a:18:1a:41:13:9b:19:cb: cf:6f:8d:f7:2d:f9:d4:d6:8a:e2:fa:bd:65:40:70: eb:da:0d:d0:6e:79:05:80:aa:8b:9a:08:03:b0:7f: 65:fa:89:8e:67:c7:7e:a5:79:08:af:8c:7b:c4:5e: 0e:02:11:9e:92:44:30:95:91:cb:03:98:ef:8e:8b: bb:a6:1d:cd:92:80:94:d3:62:f3:2e:00:6f:fc:d9: f3:3a:2d:68:66:57:55:a3:6c:73:f0:aa:c4:72:c4: 17:46:74:ed:15:a0:3c:66:3a:72:c0:b4:ec:10:f3: 86:13:fc:31:f9:77:c1:bd:fb:9a:ea:c2:60:c5:03: d1:cc:ac:ab:87:af:a1:2f:a2:ba:a1:f7:f4:99:d1: d5:28:34:c6:68:7d:a7:6b:fd:8d:8b:38:0e:c7:9c: 73:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C7:8D:99:87:61:06:AD:4A:FE:7A:1A:CC:33:A6:06:60:DB:17:9B X509v3 Authority Key Identifier: keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/kseNmYdhBq1K_noazDOmBmDbF5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.246.109.0/24 IPv6: 2001:67c:760::/48 Signature Algorithm: sha256WithRSAEncryption 77:96:ca:d6:56:a4:2c:70:43:ef:71:09:49:8d:8e:81:7f:75: a9:22:38:e8:6c:6b:63:a2:e2:13:78:f4:4a:a6:26:32:9c:06: d4:be:0c:a1:47:ec:3c:66:9d:11:6c:2d:bc:ef:61:b8:cf:2f: c2:76:03:1c:11:a9:25:32:de:e7:13:d9:9b:c8:bc:e7:da:a7: f3:c6:ae:0c:12:1a:b1:a1:58:b9:31:9a:10:8d:a8:26:1a:aa: 27:fe:a5:8f:1d:e4:5d:63:97:3a:da:fa:00:7d:c5:87:51:81: 2a:3e:31:4a:de:d0:f4:21:0d:c6:50:3d:5d:bc:63:40:13:47: ce:18:e5:e6:b7:23:26:24:ae:13:d8:53:22:3f:74:dc:e9:f0: a5:21:78:c1:dc:d5:3c:00:a0:f4:e1:4a:28:f9:82:e1:c8:53: 4e:77:e4:5e:3c:43:f4:3c:11:a7:5a:b3:a6:6c:89:33:2a:f1: 01:af:2c:dc:70:2a:d3:51:6e:3f:fc:d5:60:1b:7a:7a:f7:40: bb:60:18:cd:1e:43:1c:95:9d:d1:e1:cd:88:14:fa:da:9f:01: 09:38:0e:2d:75:c8:e2:1d:ce:b8:42:b1:e2:5e:31:f5:3e:e4: ac:55:d2:4f:e2:2e:cc:bb:99:8d:b9:e2:af:14:4b:f7:b3:2e: ad:a9:fb:84 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8f7GErNhi9DPeq21rB/XhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjlkZDllMzRmZTY2ZDc1MTM4OTAzNzA4ZjhjZTFmYmQz NDJkNjQwHhcNMjYwMTAyMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmM3OGQ5OTg3NjEwNmFkNGFmZTdhMWFjYzMzYTYwNjYwZGIxNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00hVIbYR7VBpynIyWcpIRsnwftC/ cYh7mBIxdgcd+ZQ8SQqMhZHE1t3HL8v9ktFpQnhoL0dhVcw5vKxBimmt55kKLU5j NqGXWcEEuHlc5qsqLRIllRYGjU8Y6Fn69P7wehgaQRObGcvPb433LfnU1ori+r1l QHDr2g3QbnkFgKqLmggDsH9l+omOZ8d+pXkIr4x7xF4OAhGekkQwlZHLA5jvjou7 ph3NkoCU02LzLgBv/NnzOi1oZldVo2xz8KrEcsQXRnTtFaA8ZjpywLTsEPOGE/wx +XfBvfua6sJgxQPRzKyrh6+hL6K6off0mdHVKDTGaH2na/2NizgOx5xzDwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJLHjZmHYQatSv56GswzpgZg2xebMB8GA1UdIwQY MBaAFPS53Z40/mbXUTiQNwj4zh+9NC1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMt MjYyYmVjNzE3YjE3LzEva3NlTm1ZZGhCcTFLX25vYXpET21CbURiRjVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMtMjYyYmVjNzE3YjE3 LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwvZtMA8E AgACMAkDBwAgAQZ8B2AwDQYJKoZIhvcNAQELBQADggEBAHeWytZWpCxwQ+9xCUmN joF/dakiOOhsa2Oi4hN49EqmJjKcBtS+DKFH7DxmnRFsLbzvYbjPL8J2AxwRqSUy 3ucT2ZvIvOfap/PGrgwSGrGhWLkxmhCNqCYaqif+pY8d5F1jlzra+gB9xYdRgSo+ MUre0PQhDcZQPV28Y0ATR84Y5ea3IyYkrhPYUyI/dNzp8KUheMHc1TwAoPThSij5 guHIU0535F48Q/Q8Eadas6ZsiTMq8QGvLNxwKtNRbj/81WAbenr3QLtgGM0eQxyV ndHhzYgU+tqfAQk4Di11yOIdzrhCseJeMfU+5KxV0k/iLsy7mY254q8US/ezLq2p +4Q= -----END CERTIFICATE-----Generated at Mon Jan 12 01:05:13 2026 by rpki-client