This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/kpH5WlJCrMlmeeDd1J72A3S1E9Q.roa File: kpH5WlJCrMlmeeDd1J72A3S1E9Q.roa (raw, json) Hash identifier: x6Dsqlz32ptPq4ZLP9ca9ot80w2DB6vu3sGi4SsF0p4= Subject key identifier: 92:91:F9:5A:52:42:AC:C9:66:79:E0:DD:D4:9E:F6:03:74:B5:13:D4 Certificate issuer: /CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2 Certificate serial: 019B7A5B19BFA0C0B9651314C563FCA3FA9E Authority key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/kpH5WlJCrMlmeeDd1J72A3S1E9Q.roa Signing time: Thu 01 Jan 2026 16:19:09 +0000 ROA not before: Thu 01 Jan 2026 16:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55002 IP address blocks: 194.33.68.0/24 maxlen: 24 194.33.70.0/23 maxlen: 23 2001:67c:2994::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:19:bf:a0:c0:b9:65:13:14:c5:63:fc:a3:fa:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9291f95a5242acc96679e0ddd49ef60374b513d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d9:39:a2:e5:1b:93:ec:37:c7:77:93:42:6b: cb:31:c4:12:2d:1a:0f:ea:1e:93:90:d7:75:b5:16: 8d:e0:ac:2b:c9:3f:ad:03:88:0c:5d:aa:88:e3:30: e0:30:c4:d0:90:ae:f2:9f:40:c7:25:91:da:01:a6: a6:52:3b:35:34:21:a2:66:21:d1:32:97:b7:3a:9d: f8:45:63:74:de:49:a9:9b:bd:0a:33:7d:c1:01:53: 84:2b:6f:a6:65:71:63:54:88:f1:21:82:04:9d:d8: f1:b3:8c:29:a7:a4:08:47:96:95:9a:aa:50:9b:ca: 19:39:fd:99:25:3d:3e:d1:5f:e8:46:74:ad:7b:8a: 8d:3f:78:5f:30:4f:fa:3a:93:e0:6f:85:70:f5:ac: b6:ae:a1:94:c0:27:1f:ed:72:c3:85:59:7b:0d:cf: fe:7d:fb:1d:d1:e4:c5:8a:8a:86:13:94:bb:c0:7a: 45:45:31:4f:7e:6a:0a:b7:3c:b5:41:47:a1:7d:fe: e1:87:6c:7a:92:02:c2:4e:f8:b5:07:ca:de:45:1e: b5:52:d9:d3:85:1e:f6:e1:14:1f:6d:93:d9:13:79: fe:82:4e:c3:a4:87:c6:c8:c4:7c:10:3a:0c:28:08: 24:92:6f:67:55:ec:c5:c1:d1:e9:64:9b:e5:34:92: 14:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:91:F9:5A:52:42:AC:C9:66:79:E0:DD:D4:9E:F6:03:74:B5:13:D4 X509v3 Authority Key Identifier: keyid:C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/kpH5WlJCrMlmeeDd1J72A3S1E9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.68.0/24 194.33.70.0/23 IPv6: 2001:67c:2994::/48 Signature Algorithm: sha256WithRSAEncryption 93:0f:2d:a0:a8:4b:ee:76:b0:6d:35:03:b5:e9:58:cd:7a:dc: ab:af:c3:e1:97:2e:8a:9a:22:95:a8:ba:25:70:91:83:eb:0f: ee:d5:cb:2e:8c:bd:0c:e7:c9:5c:2d:81:ce:98:86:5d:49:94: 00:25:e1:57:21:cb:e2:11:bb:df:d1:1e:2e:5c:44:49:0e:69: d5:bd:95:98:14:8f:93:93:ff:09:05:44:3e:af:d3:f4:9d:f5: 52:02:1a:2f:88:09:de:e9:55:96:f2:0f:58:e6:84:e0:6c:09: 81:bb:d5:f2:27:32:b9:63:62:92:d4:1d:f7:b5:54:51:75:73: 30:81:43:bf:0a:12:90:5b:90:52:50:29:87:a1:04:6d:64:11: fe:f9:50:58:f8:b3:34:b9:35:c7:76:63:5b:b4:c2:6f:17:18: ad:5f:9b:c3:50:f4:74:5a:41:7a:22:50:dc:55:f2:c8:d0:6b: a4:72:11:4a:ce:97:cf:ce:08:a1:8a:31:a4:4f:06:0d:df:68: 09:e8:a4:18:0c:8c:1a:c1:58:41:ca:27:26:be:5e:16:3b:3d: 35:a1:a9:4e:b9:2a:d4:4a:99:7c:82:be:d1:76:14:60:0f:47: 5f:78:37:e4:79:2c:32:c9:5b:38:f1:94:e9:f2:a7:13:b4:c7: 0c:42:52:a5 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6Wxm/oMC5ZRMUxWP8o/qeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YTJlNGViOWZkM2NjZDFiYTQ0YTM2MmY3NmY5ODliN2I0 NGQ1ZjIwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjkxZjk1YTUyNDJhY2M5NjY3OWUwZGRkNDllZjYwMzc0YjUxM2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNk5ouUbk+w3x3eTQmvLMcQSLRoP 6h6TkNd1tRaN4KwryT+tA4gMXaqI4zDgMMTQkK7yn0DHJZHaAaamUjs1NCGiZiHR Mpe3Op34RWN03kmpm70KM33BAVOEK2+mZXFjVIjxIYIEndjxs4wpp6QIR5aVmqpQ m8oZOf2ZJT0+0V/oRnSte4qNP3hfME/6OpPgb4Vw9ay2rqGUwCcf7XLDhVl7Dc/+ ffsd0eTFioqGE5S7wHpFRTFPfmoKtzy1QUehff7hh2x6kgLCTvi1B8reRR61UtnT hR724RQfbZPZE3n+gk7DpIfGyMR8EDoMKAgkkm9nVezFwdHpZJvlNJIUSwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJKR+VpSQqzJZnng3dSe9gN0tRPUMB8GA1UdIwQY MBaAFMei5Ouf08zRukSjYvdvmJt7RNXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDZMazY1X1R6Tkc2UktOaTkyLVltM3RFMWZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wZTQ5NzYtZTc1MC00NTY4LTg1ODMt ZGU2ZWY3Yzk1NTI2LzEva3BINVdsSkNyTWxtZWVEZDFKNzJBM1MxRTlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wZTQ5NzYtZTc1MC00NTY4LTg1ODMtZGU2ZWY3Yzk1NTI2 LzEveDZMazY1X1R6Tkc2UktOaTkyLVltM3RFMWZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwiFEAwQB wiFGMA8EAgACMAkDBwAgAQZ8KZQwDQYJKoZIhvcNAQELBQADggEBAJMPLaCoS+52 sG01A7XpWM163Kuvw+GXLoqaIpWouiVwkYPrD+7Vyy6MvQznyVwtgc6Yhl1JlAAl 4Vchy+IRu9/RHi5cREkOadW9lZgUj5OT/wkFRD6v0/Sd9VICGi+ICd7pVZbyD1jm hOBsCYG71fInMrljYpLUHfe1VFF1czCBQ78KEpBbkFJQKYehBG1kEf75UFj4szS5 Ncd2Y1u0wm8XGK1fm8NQ9HRaQXoiUNxV8sjQa6RyEUrOl8/OCKGKMaRPBg3faAno pBgMjBrBWEHKJya+XhY7PTWhqU65KtRKmXyCvtF2FGAPR194N+R5LDLJWzjxlOny pxO0xwxCUqU= -----END CERTIFICATE-----Generated at Wed Jan 7 16:23:37 2026 by rpki-client