This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/tKebX1FWuux3IXuG2sUXIXIBJsw.roa File: tKebX1FWuux3IXuG2sUXIXIBJsw.roa (raw, json) Hash identifier: +oj9FAD3Ulh0IuD5nAYshWSIbL3rR2EIAg3bpYOtpOI= Subject key identifier: B4:A7:9B:5F:51:56:BA:EC:77:21:7B:86:DA:C5:17:21:72:01:26:CC Certificate issuer: /CN=90087236f161c5c705ef73dfe9e5e3986e7126c8 Certificate serial: 019B79EC2FDE8310C05C1B27CF13FB1E9CB2 Authority key identifier: 90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/tKebX1FWuux3IXuG2sUXIXIBJsw.roa Signing time: Thu 01 Jan 2026 14:18:00 +0000 ROA not before: Thu 01 Jan 2026 14:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216152 IP address blocks: 195.182.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:2f:de:83:10:c0:5c:1b:27:cf:13:fb:1e:9c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90087236f161c5c705ef73dfe9e5e3986e7126c8 Validity Not Before: Jan 1 14:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4a79b5f5156baec77217b86dac51721720126cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:b6:d2:69:42:0a:db:40:52:7e:05:88:f0: 98:0f:f7:2a:d6:b1:1e:d3:f2:2a:61:30:6b:9b:b6: 77:03:36:d3:bb:c0:18:fa:a4:d3:a4:a6:a6:5c:f9: a9:83:9c:43:b2:80:07:26:b5:88:90:34:9c:22:3d: d8:5c:2e:2a:74:98:89:57:76:68:bc:01:d1:e5:41: 33:d8:15:2a:61:95:3b:8b:32:aa:50:be:68:76:96: 90:30:fa:c5:1b:6e:40:44:f0:c9:28:db:aa:71:7f: 61:c4:eb:b7:b2:f4:a9:8f:0c:89:c3:27:c4:88:f9: 73:65:9f:c9:93:2c:24:ea:04:1f:68:f1:b4:52:e8: c5:dc:52:bb:4a:19:c8:f2:42:b5:ab:62:b2:d8:c8: 29:23:4c:00:94:49:bd:ef:81:b6:05:c1:58:66:ec: 85:e7:86:c9:1d:77:e7:4a:b5:a4:36:f8:14:75:ee: 3e:19:03:d1:c9:94:4b:47:72:28:bc:8c:8c:ed:30: 18:9b:97:89:90:f2:64:e7:13:f6:7d:53:b0:07:05: 33:c5:42:e2:4b:e9:c9:65:64:a2:2e:5b:2a:0c:6a: 7f:d1:cf:9f:11:da:c5:6d:25:14:c4:4a:2a:c1:ee: a0:26:19:be:d6:e6:f4:48:f9:77:3f:49:43:8e:4d: bd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A7:9B:5F:51:56:BA:EC:77:21:7B:86:DA:C5:17:21:72:01:26:CC X509v3 Authority Key Identifier: keyid:90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/tKebX1FWuux3IXuG2sUXIXIBJsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.48.0/24 Signature Algorithm: sha256WithRSAEncryption 23:49:29:4e:fe:ec:a9:dc:76:17:be:c0:df:99:53:85:07:8d: ec:49:96:1e:23:67:10:d0:c1:e1:59:81:bb:9c:a6:68:d0:db: 2d:9b:af:07:f9:91:59:b5:74:53:68:37:20:cf:29:fb:d3:51: ec:c8:37:a4:e9:3b:e5:09:49:7d:4c:b8:b1:87:16:f0:ae:90: 13:1b:67:c2:41:69:87:6c:ed:ba:d8:98:71:bf:1b:f4:b8:52: ad:5b:04:45:d0:72:2f:4c:15:92:a0:45:54:e7:a7:3d:4c:97: 65:93:f4:00:15:69:38:a1:38:36:a5:c2:b5:d5:ab:9e:fb:86: b2:84:4e:23:a0:21:10:be:c1:26:c4:67:1a:c1:cb:b6:43:51: d4:7b:2e:40:ae:1c:4a:6a:71:02:04:a8:8d:10:44:2b:3f:4a: 16:71:d3:c8:37:39:ef:ea:6b:de:eb:2a:a7:30:b9:5e:af:62: f1:74:9a:96:5d:34:ff:12:6a:a5:8c:c9:a2:41:1a:ac:26:5d: aa:d3:14:0b:01:fd:87:da:27:78:e5:31:42:08:d6:ff:cf:43: f3:6f:c4:b4:9c:35:90:69:dc:34:74:0a:51:c7:a6:a3:4a:12: eb:8d:e0:75:c8:a9:57:bc:1c:af:90:33:65:ab:8a:02:a9:86: 17:e3:5a:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57C/egxDAXBsnzxP7HpyyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwMDg3MjM2ZjE2MWM1YzcwNWVmNzNkZmU5ZTVlMzk4NmU3 MTI2YzgwHhcNMjYwMTAxMTQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGE3OWI1ZjUxNTZiYWVjNzcyMTdiODZkYWM1MTcyMTcyMDEyNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVy20mlCCttAUn4FiPCYD/cq1rEe 0/IqYTBrm7Z3AzbTu8AY+qTTpKamXPmpg5xDsoAHJrWIkDScIj3YXC4qdJiJV3Zo vAHR5UEz2BUqYZU7izKqUL5odpaQMPrFG25ARPDJKNuqcX9hxOu3svSpjwyJwyfE iPlzZZ/Jkywk6gQfaPG0UujF3FK7ShnI8kK1q2Ky2MgpI0wAlEm974G2BcFYZuyF 54bJHXfnSrWkNvgUde4+GQPRyZRLR3IovIyM7TAYm5eJkPJk5xP2fVOwBwUzxULi S+nJZWSiLlsqDGp/0c+fEdrFbSUUxEoqwe6gJhm+1ub0SPl3P0lDjk29HQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLSnm19RVrrsdyF7htrFFyFyASbMMB8GA1UdIwQY MBaAFJAIcjbxYcXHBe9z3+nl45hucSbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0FoeU52Rmh4Y2NGNzNQZjZlWGptRzV4SnNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9kZjgzM2ItYzg3YS00MWZjLWJhMmUt ZTUzYzVlYzVkNDAyLzEvdEtlYlgxRld1dXgzSVh1RzJzVVhJWElCSnN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9kZjgzM2ItYzg3YS00MWZjLWJhMmUtZTUzYzVlYzVkNDAy LzEva0FoeU52Rmh4Y2NGNzNQZjZlWGptRzV4SnNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7YwMA0G CSqGSIb3DQEBCwUAA4IBAQAjSSlO/uyp3HYXvsDfmVOFB43sSZYeI2cQ0MHhWYG7 nKZo0Nstm68H+ZFZtXRTaDcgzyn701HsyDek6TvlCUl9TLixhxbwrpATG2fCQWmH bO262Jhxvxv0uFKtWwRF0HIvTBWSoEVU56c9TJdlk/QAFWk4oTg2pcK11aue+4ay hE4joCEQvsEmxGcawcu2Q1HUey5ArhxKanECBKiNEEQrP0oWcdPINznv6mve6yqn MLler2LxdJqWXTT/EmqljMmiQRqsJl2q0xQLAf2H2id45TFCCNb/z0Pzb8S0nDWQ adw0dApRx6ajShLrjeB1yKlXvByvkDNlq4oCqYYX41pW -----END CERTIFICATE-----Generated at Mon Jan 12 00:12:03 2026 by rpki-client