This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/k8w0NUXD9JayBBvKF9ncDALdg78.roa File: k8w0NUXD9JayBBvKF9ncDALdg78.roa (raw, json) Hash identifier: lUbCLxx0DXi3nyWOu3iruTVHC0Q/jhFLMzT5toYmB6I= Subject key identifier: 93:CC:34:35:45:C3:F4:96:B2:04:1B:CA:17:D9:DC:0C:02:DD:83:BF Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b Certificate serial: 019B7F14F66BC41E5D5D70B91C9B63F4A788 Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/k8w0NUXD9JayBBvKF9ncDALdg78.roa Signing time: Fri 02 Jan 2026 14:20:38 +0000 ROA not before: Fri 02 Jan 2026 14:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35197 IP address blocks: 194.146.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f6:6b:c4:1e:5d:5d:70:b9:1c:9b:63:f4:a7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b Validity Not Before: Jan 2 14:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93cc343545c3f496b2041bca17d9dc0c02dd83bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:a3:46:00:71:1f:f9:f0:86:7f:e9:b8:b5: 6b:93:94:63:aa:88:01:0f:78:e4:24:34:e4:ae:ed: 44:11:96:f8:f3:ea:8e:fe:de:2d:21:be:dd:b3:41: 6e:0d:11:c1:3f:49:4a:e3:4b:80:3c:b5:3d:84:6d: c6:66:4a:58:4d:b0:17:4d:0e:94:53:98:1e:60:0f: d1:a8:aa:6f:c8:b1:a0:e5:83:83:a7:75:e1:55:2b: 72:cd:84:24:1d:18:fa:ad:0b:ba:54:1c:6b:60:92: 04:f3:b3:eb:8b:48:95:64:68:fb:e9:ed:80:ec:1b: bb:3b:1e:82:4a:65:44:96:04:7d:51:b4:a9:21:ef: 24:81:87:18:82:f0:41:5c:cf:c8:27:58:99:04:24: ea:5d:b7:01:29:04:11:96:df:10:7d:04:37:56:27: dc:9e:03:26:d1:c9:ba:76:cb:04:ae:6d:83:2c:76: 1f:db:7f:c6:33:b1:31:2b:46:df:1e:4a:9c:97:1f: ca:29:69:f2:d9:39:02:f3:cb:20:0e:2e:dc:34:2e: 09:9a:8f:6f:51:54:ff:d4:0a:fe:29:0c:9a:36:e1: 0c:78:48:18:29:94:5f:92:cb:0b:39:1f:fe:7f:72: b1:c1:66:73:c7:53:4d:c3:54:d8:94:38:41:68:62: 1e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CC:34:35:45:C3:F4:96:B2:04:1B:CA:17:D9:DC:0C:02:DD:83:BF X509v3 Authority Key Identifier: keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/k8w0NUXD9JayBBvKF9ncDALdg78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.146.152.0/24 Signature Algorithm: sha256WithRSAEncryption 99:36:87:d1:a7:21:2c:1f:8f:01:0c:94:69:b1:54:d6:bb:57: ad:e4:ef:24:c3:49:ae:20:d1:a2:f9:9d:3b:eb:f1:7c:ea:45: 15:f2:b0:33:e3:cf:43:73:14:ac:38:91:d3:4f:01:58:0e:81: 94:e9:57:ea:14:09:cd:67:f0:34:dc:65:ef:af:9d:71:1b:2f: a4:6f:b2:e5:92:1e:09:43:15:fa:94:45:20:ce:c1:78:71:0e: a6:ed:54:a4:51:9b:13:95:30:bc:69:26:e7:bd:6a:58:19:df: 62:4e:85:07:15:bf:65:be:b4:7a:72:f4:13:7b:52:fc:56:a0: 6d:51:f5:04:8b:1f:a2:b1:fa:9a:39:27:08:7f:c2:d3:05:85: 08:f3:88:0d:6e:e3:31:04:7b:1a:71:fb:34:1d:8e:4a:13:3c: 67:76:ca:b0:c6:dc:6b:0e:5d:7e:bb:f9:5c:d4:f3:db:0d:79: 23:b2:e1:d1:71:0b:e0:b5:55:ff:10:fe:6a:de:ab:4b:0f:89: e3:15:b6:c0:27:d2:bd:67:b9:c8:9d:91:cc:a7:a5:c8:bf:7f: 52:ee:14:2b:d9:3c:62:54:c7:d2:23:ca:02:c8:1a:d2:35:45: 70:65:26:f6:ae:82:a6:58:fe:95:0d:bb:b8:19:fa:06:a2:9f: ec:1b:d6:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FPZrxB5dXXC5HJtj9KeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMjVmNzFiYTQxMzE0ODNiYjliODIzZGQ4ODY1MWQzYWZk NDRlN2IwHhcNMjYwMTAyMTQyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2NjMzQzNTQ1YzNmNDk2YjIwNDFiY2ExN2Q5ZGMwYzAyZGQ4M2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdejRgBxH/nwhn/puLVrk5RjqogB D3jkJDTkru1EEZb48+qO/t4tIb7ds0FuDRHBP0lK40uAPLU9hG3GZkpYTbAXTQ6U U5geYA/RqKpvyLGg5YODp3XhVStyzYQkHRj6rQu6VBxrYJIE87Pri0iVZGj76e2A 7Bu7Ox6CSmVElgR9UbSpIe8kgYcYgvBBXM/IJ1iZBCTqXbcBKQQRlt8QfQQ3Vifc ngMm0cm6dssErm2DLHYf23/GM7ExK0bfHkqclx/KKWny2TkC88sgDi7cNC4Jmo9v UVT/1Ar+KQyaNuEMeEgYKZRfkssLOR/+f3KxwWZzx1NNw1TYlDhBaGIeBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJPMNDVFw/SWsgQbyhfZ3AwC3YO/MB8GA1UdIwQY MBaAFL0l9xukExSDu5uCPdiGUdOv1E57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yMDAzNjYtZDg4MS00MDMwLTgyODAt YjVlMGU0YzMzMTVjLzEvazh3ME5VWEQ5SmF5QkJ2S0Y5bmNEQUxkZzc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yMDAzNjYtZDg4MS00MDMwLTgyODAtYjVlMGU0YzMzMTVj LzEvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpKYMA0G CSqGSIb3DQEBCwUAA4IBAQCZNofRpyEsH48BDJRpsVTWu1et5O8kw0muINGi+Z07 6/F86kUV8rAz489DcxSsOJHTTwFYDoGU6VfqFAnNZ/A03GXvr51xGy+kb7Llkh4J QxX6lEUgzsF4cQ6m7VSkUZsTlTC8aSbnvWpYGd9iToUHFb9lvrR6cvQTe1L8VqBt UfUEix+isfqaOScIf8LTBYUI84gNbuMxBHsacfs0HY5KEzxndsqwxtxrDl1+u/lc 1PPbDXkjsuHRcQvgtVX/EP5q3qtLD4njFbbAJ9K9Z7nInZHMp6XIv39S7hQr2Txi VMfSI8oCyBrSNUVwZSb2roKmWP6VDbu4GfoGop/sG9b/ -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:57 2026 by rpki-client