This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/kTBqn1AXF810Aup86JvGCWPm7_g.roa File: kTBqn1AXF810Aup86JvGCWPm7_g.roa (raw, json) Hash identifier: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY= Subject key identifier: 91:30:6A:9F:50:17:17:CD:74:02:EA:7C:E8:9B:C6:09:63:E6:EF:F8 Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019B78A36EAC87A7A45A3E1AE0D29EC31683 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/kTBqn1AXF810Aup86JvGCWPm7_g.roa Signing time: Thu 01 Jan 2026 08:18:55 +0000 ROA not before: Thu 01 Jan 2026 08:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29691 IP address blocks: 37.235.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6e:ac:87:a7:a4:5a:3e:1a:e0:d2:9e:c3:16:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jan 1 08:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91306a9f501717cd7402ea7ce89bc60963e6eff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:06:5f:30:c0:d8:68:93:c8:55:ac:eb:01: 66:71:07:25:5b:af:f6:de:90:b3:a9:48:19:33:7e: a8:aa:20:b8:8d:81:f4:21:8c:4d:49:99:7b:d2:84: eb:53:60:23:e4:0f:87:6d:dc:6b:4f:e5:44:dc:e4: 76:91:7a:92:7a:75:6a:7b:79:79:2a:ac:92:91:42: 79:a1:72:49:80:1f:4e:1a:68:0f:e3:80:73:9c:16: ff:b4:92:fe:6b:90:9a:c0:e5:13:3e:2c:36:e5:e4: 55:ec:ae:3b:40:ac:e1:fe:58:9f:f3:60:c4:3f:16: 84:11:c6:29:e5:b8:7b:b5:30:2f:96:51:be:16:8e: 44:d8:b1:2e:ee:94:d6:07:10:a3:96:ac:04:81:c1: 9e:8e:0e:9c:dc:82:a4:ce:47:36:18:e3:ec:eb:4c: 7b:92:7b:d4:75:3e:f9:29:96:ae:f4:ff:c1:9e:4b: 03:cc:be:bb:f6:cc:4d:71:7c:c9:27:2d:40:78:27: 39:dc:cf:02:1a:50:66:4a:42:e0:d1:7e:9c:e6:13: 24:6d:7e:c3:fe:e4:d9:f7:1f:ba:98:eb:79:e2:17: 55:91:44:89:c5:d6:76:d5:6b:bc:bc:ce:ba:79:9f: 5e:b2:3a:9f:9d:cc:b5:fa:06:27:0e:14:9b:1e:3c: 27:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:30:6A:9F:50:17:17:CD:74:02:EA:7C:E8:9B:C6:09:63:E6:EF:F8 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/kTBqn1AXF810Aup86JvGCWPm7_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.235.50.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:c9:6d:2e:8e:4a:87:75:9c:66:79:cb:d9:f6:c7:62:36:6e: 3f:77:06:7e:11:ec:8a:08:55:77:2d:df:36:76:3b:80:d8:a5: b3:90:05:d2:fa:ce:74:34:8f:2a:00:83:bd:17:1f:fb:bb:19: b7:d9:43:43:54:12:d8:e4:d2:cd:48:79:b9:7d:84:49:fd:e7: 1e:22:85:74:f6:82:0c:d1:22:33:7d:97:e8:d5:7a:99:00:76: 07:0e:bc:54:26:d9:89:74:73:e9:c3:c8:6e:d6:39:6f:af:4b: d8:02:0e:28:3e:36:98:65:8a:21:ba:5f:a4:76:83:94:47:0e: ad:29:5e:50:5c:9d:4e:8d:64:03:1f:ff:52:a7:af:91:74:1a: 4b:c3:a4:37:a4:df:2c:e4:20:31:f1:07:1c:e7:67:8f:05:2c: 47:f6:21:b7:41:ef:aa:24:d3:19:a3:15:5c:5e:e9:68:d5:b0: 0d:bd:b8:e9:3b:f3:a1:99:59:be:c0:37:5b:56:92:a4:c5:8e: b1:af:33:29:06:45:4b:6b:ad:be:e3:e2:a2:1b:bc:e6:bb:cd: 8b:33:6d:62:83:cb:55:e8:6d:c0:a2:42:4c:39:d1:28:3c:cf: 91:ad:42:3e:d4:34:18:d0:44:fc:0c:f0:51:4f:31:24:c6:ab: 65:90:d2:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o26sh6ekWj4a4NKewxaDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMTAxMDgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTMwNmE5ZjUwMTcxN2NkNzQwMmVhN2NlODliYzYwOTYzZTZlZmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7wGXzDA2GiTyFWs6wFmcQclW6/2 3pCzqUgZM36oqiC4jYH0IYxNSZl70oTrU2Aj5A+HbdxrT+VE3OR2kXqSenVqe3l5 KqySkUJ5oXJJgB9OGmgP44BznBb/tJL+a5CawOUTPiw25eRV7K47QKzh/lif82DE PxaEEcYp5bh7tTAvllG+Fo5E2LEu7pTWBxCjlqwEgcGejg6c3IKkzkc2GOPs60x7 knvUdT75KZau9P/BnksDzL679sxNcXzJJy1AeCc53M8CGlBmSkLg0X6c5hMkbX7D /uTZ9x+6mOt54hdVkUSJxdZ21Wu8vM66eZ9esjqfncy1+gYnDhSbHjwnjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJEwap9QFxfNdALqfOibxglj5u/4MB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEva1RCcW4xQVhGODEwQXVwODZKdkdDV1BtN19nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJesyMA0G CSqGSIb3DQEBCwUAA4IBAQAcyW0ujkqHdZxmecvZ9sdiNm4/dwZ+EeyKCFV3Ld82 djuA2KWzkAXS+s50NI8qAIO9Fx/7uxm32UNDVBLY5NLNSHm5fYRJ/eceIoV09oIM 0SIzfZfo1XqZAHYHDrxUJtmJdHPpw8hu1jlvr0vYAg4oPjaYZYohul+kdoOURw6t KV5QXJ1OjWQDH/9Sp6+RdBpLw6Q3pN8s5CAx8Qcc52ePBSxH9iG3Qe+qJNMZoxVc Xulo1bANvbjpO/OhmVm+wDdbVpKkxY6xrzMpBkVLa62+4+KiG7zmu82LM21ig8tV 6G3AokJMOdEoPM+RrUI+1DQY0ET8DPBRTzEkxqtlkNLE -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:45 2026 by rpki-client