This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/K8kQWZApKyfdrSsvJbtGF46eEXk.roa File: K8kQWZApKyfdrSsvJbtGF46eEXk.roa (raw, json) Hash identifier: oi6V0dHlcK/YOzzPobmFLKwDp2XrDFduC+6KEZC8gLw= Subject key identifier: 2B:C9:10:59:90:29:2B:27:DD:AD:2B:2F:25:BB:46:17:8E:9E:11:79 Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45 Certificate serial: 019B78A35E45711769021BEE3B7016C886EE Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/K8kQWZApKyfdrSsvJbtGF46eEXk.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.5.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5e:45:71:17:69:02:1b:ee:3b:70:16:c8:86:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45 Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bc9105990292b27ddad2b2f25bb46178e9e1179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:82:aa:fe:bc:d1:e8:49:7a:9d:e7:2b:4b:21: d7:57:34:95:9c:53:11:f6:4a:20:ed:65:2a:cc:f5: 87:4c:b8:d9:d1:6b:3a:8f:03:7d:de:ed:5d:82:2f: 2a:d4:2d:02:52:3c:08:20:ac:73:b8:9f:67:15:78: a3:88:04:d0:48:bc:87:0f:1d:d0:4d:a1:2c:62:6f: ad:22:33:e6:36:d5:3e:a8:a1:a4:5d:22:d2:67:76: 01:26:a2:73:58:8c:c9:e7:3f:40:ca:8e:56:b3:ce: 28:3f:65:b0:b9:17:97:e8:6d:e0:f4:ee:ff:13:bc: b0:29:5d:51:97:cd:1a:84:92:3b:7c:cb:a7:59:f6: 50:0f:cc:81:5d:da:ab:aa:ae:69:32:4b:3f:9d:93: 5f:42:ee:70:2b:7d:af:90:72:27:82:d5:9f:a3:eb: d5:b3:b9:d9:4b:3f:1b:86:7a:11:c5:bf:57:18:5b: e7:7e:1b:90:76:a7:1a:1b:e6:45:7e:ba:b9:0f:70: a5:72:2d:1e:2d:2c:82:4a:8d:03:09:89:84:13:84: 57:2c:c9:39:09:d8:bd:a3:c2:2e:78:c8:ac:d6:f6: 1d:04:17:89:82:5f:28:20:8e:ab:14:65:92:03:6f: a3:67:69:29:07:ba:4c:8f:5b:29:d3:bd:47:29:b1: 4d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C9:10:59:90:29:2B:27:DD:AD:2B:2F:25:BB:46:17:8E:9E:11:79 X509v3 Authority Key Identifier: keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/K8kQWZApKyfdrSsvJbtGF46eEXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.144.0/24 Signature Algorithm: sha256WithRSAEncryption 50:06:bc:4f:0d:b5:13:2e:3e:66:7e:2d:72:a9:9b:80:f0:c8: 16:b7:db:c7:a8:36:2e:74:1f:8f:c9:24:ce:81:0e:61:64:d7: ac:41:66:93:65:f3:2a:f4:e6:77:b0:41:37:f5:ef:28:54:40: 37:fd:59:3f:be:a8:78:53:64:cf:43:18:00:66:0f:9e:05:12: 55:6d:57:56:12:c1:73:ed:da:1e:f9:f7:53:cb:34:57:9f:92: d7:bf:c6:95:57:e8:02:a4:8f:42:c1:64:6c:6d:a8:fa:76:81: aa:7c:b1:69:f3:32:90:87:c1:23:3e:f1:82:7a:23:54:4c:2f: 80:c0:a5:9f:3b:f6:94:30:cd:e3:5b:d7:f2:c7:71:e2:c4:ac: 02:70:14:79:a4:8b:38:b7:92:cd:4e:08:33:d5:11:73:4a:7f: 07:26:8e:cd:15:1b:72:5f:d0:33:b3:80:88:b5:20:06:f0:b9: 2d:38:4b:85:80:cd:73:be:a8:42:fc:b4:0e:b4:0e:43:16:ec: 4e:ea:67:2b:ed:93:a9:75:76:2b:18:24:a9:21:43:c3:3e:24: 39:cd:3c:51:3f:b0:44:8f:df:fc:c9:b7:c4:30:fc:f5:39:2d: 1a:07:2f:d0:0f:b9:35:57:98:cb:1b:a6:e6:0c:eb:2b:14:17: 9b:49:19:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o15FcRdpAhvuO3AWyIbuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NjNjNzEwNmE1ZjI2NDAxNjJlNzk4MDU4M2VhYjViZDgw MDhjNDUwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmM5MTA1OTkwMjkyYjI3ZGRhZDJiMmYyNWJiNDYxNzhlOWUxMTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oKq/rzR6El6necrSyHXVzSVnFMR 9kog7WUqzPWHTLjZ0Ws6jwN93u1dgi8q1C0CUjwIIKxzuJ9nFXijiATQSLyHDx3Q TaEsYm+tIjPmNtU+qKGkXSLSZ3YBJqJzWIzJ5z9Ayo5Ws84oP2WwuReX6G3g9O7/ E7ywKV1Rl80ahJI7fMunWfZQD8yBXdqrqq5pMks/nZNfQu5wK32vkHIngtWfo+vV s7nZSz8bhnoRxb9XGFvnfhuQdqcaG+ZFfrq5D3Clci0eLSyCSo0DCYmEE4RXLMk5 Cdi9o8IueMis1vYdBBeJgl8oII6rFGWSA2+jZ2kpB7pMj1sp071HKbFNKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCvJEFmQKSsn3a0rLyW7RheOnhF5MB8GA1UdIwQY MBaAFDdjxxBqXyZAFi55gFg+q1vYAIxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTct ODhhMGU0NTBhMTdiLzEvSzhrUVdaQXBLeWZkclNzdkpidEdGNDZlRVhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTctODhhMGU0NTBhMTdi LzEvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQWQMA0G CSqGSIb3DQEBCwUAA4IBAQBQBrxPDbUTLj5mfi1yqZuA8MgWt9vHqDYudB+PySTO gQ5hZNesQWaTZfMq9OZ3sEE39e8oVEA3/Vk/vqh4U2TPQxgAZg+eBRJVbVdWEsFz 7doe+fdTyzRXn5LXv8aVV+gCpI9CwWRsbaj6doGqfLFp8zKQh8EjPvGCeiNUTC+A wKWfO/aUMM3jW9fyx3HixKwCcBR5pIs4t5LNTggz1RFzSn8HJo7NFRtyX9Azs4CI tSAG8LktOEuFgM1zvqhC/LQOtA5DFuxO6mcr7ZOpdXYrGCSpIUPDPiQ5zTxRP7BE j9/8ybfEMPz1OS0aBy/QD7k1V5jLG6bmDOsrFBebSRnp -----END CERTIFICATE-----Generated at Thu Jan 1 15:43:12 2026 by rpki-client