This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/KEIqtKdHOr2xFwyul2M4Mj3OCXg.roa File: KEIqtKdHOr2xFwyul2M4Mj3OCXg.roa (raw, json) Hash identifier: 3sxiPnrD0Gc6fzs8KkM4ayt1dKyCeKq1vgI2Ien7IrU= Subject key identifier: 28:42:2A:B4:A7:47:3A:BD:B1:17:0C:AE:97:63:38:32:3D:CE:09:78 Certificate issuer: /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d Certificate serial: 019B7AC8C99CA3AB61631FE7E885B246BAEA Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/KEIqtKdHOr2xFwyul2M4Mj3OCXg.roa Signing time: Thu 01 Jan 2026 18:18:57 +0000 ROA not before: Thu 01 Jan 2026 18:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57866 IP address blocks: 176.61.131.0/24 maxlen: 24 176.61.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c9:9c:a3:ab:61:63:1f:e7:e8:85:b2:46:ba:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d Validity Not Before: Jan 1 18:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28422ab4a7473abdb1170cae976338323dce0978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4b:a6:e1:a0:8e:a6:92:90:14:39:1f:ec:3c: d5:dd:df:e6:70:7a:94:e8:8b:e0:ec:c4:96:51:77: 61:6d:ae:30:0c:fb:90:be:ca:70:df:d2:46:93:06: 35:a1:8f:a1:e1:33:77:6c:ab:d4:45:1f:25:53:40: b3:59:71:ab:7f:c2:6d:76:b9:7d:9b:34:4f:ee:38: 66:77:b3:cf:78:f7:4c:a1:25:53:99:6f:52:f7:d0: a6:e1:c4:19:f8:82:be:c3:fc:b2:35:1f:7e:11:80: cc:35:5e:ce:74:97:9c:de:f8:14:12:0d:1e:13:14: d5:40:85:9d:fb:fb:a4:66:63:0b:73:bd:70:d4:fa: fe:53:39:e2:3b:11:56:90:2e:94:6f:a9:a5:f8:e7: c5:80:04:9c:d8:09:2d:ea:af:88:51:1c:35:03:c8: 44:4d:09:db:d3:4f:a4:fe:aa:21:63:82:6f:73:09: 64:4c:ed:ed:f4:19:58:23:1b:71:a3:4f:05:d2:f3: 79:20:ef:57:08:c1:44:f8:a6:0c:f3:b9:09:16:40: 4b:1c:b3:53:b7:81:d9:34:64:c9:64:e6:ca:9d:04: 33:94:da:b8:1e:8f:1d:68:5a:ab:37:9a:0d:2e:f2: 53:fc:9a:c9:87:8d:25:8d:f7:c2:74:1a:55:48:3c: 56:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:42:2A:B4:A7:47:3A:BD:B1:17:0C:AE:97:63:38:32:3D:CE:09:78 X509v3 Authority Key Identifier: keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/KEIqtKdHOr2xFwyul2M4Mj3OCXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.61.131.0-176.61.132.255 Signature Algorithm: sha256WithRSAEncryption 8d:89:af:62:1a:66:31:bd:04:9e:ca:db:35:b6:f5:41:ad:f6: 49:3e:83:31:0f:5c:c2:d6:a7:a4:1b:2f:01:4a:87:3c:ac:0a: f5:f6:7f:bc:c2:f0:f4:20:24:6c:6c:4b:ab:7e:a6:35:61:03: 76:d3:3e:b6:cc:c5:97:d5:1c:4e:41:23:01:dd:3f:5e:89:30: 54:07:3e:2c:18:8b:d3:37:9d:b4:ee:63:52:1e:5c:cd:25:03: 24:c5:56:e6:7c:8a:48:86:d6:82:f7:3c:7f:3d:0d:c6:9f:8b: 3d:bc:1c:72:7a:11:f5:c4:cc:b0:1d:fe:3c:ff:c6:f8:28:7e: 4d:5c:b1:98:27:e0:97:49:02:20:20:95:0f:46:0f:eb:f1:62: 0f:2f:c6:5d:db:a3:f8:38:07:a6:9e:4b:8a:6a:fe:af:39:ab: 1b:87:1a:87:aa:62:65:6e:af:0f:b8:cc:cd:ce:f2:f2:a8:b3: 59:6a:8d:6a:07:e4:78:d9:8d:38:48:af:f7:a5:cc:b9:62:c1: 1b:31:63:44:08:cc:f8:62:eb:61:f6:6c:08:d9:d0:88:32:ae: db:14:ec:74:65:91:38:f1:1b:41:29:04:de:26:15:58:ff:14: 2c:aa:9c:f1:00:91:bc:86:62:77:a6:6a:0c:72:5a:95:6b:ed: d1:4d:3b:5f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6yMmco6thYx/n6IWyRrrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNjBiMGE1NWE4N2E2NmU5MGE3NDYzYTAxZGE2NDE0ZmMw MzRkM2QwHhcNMjYwMTAxMTgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODQyMmFiNGE3NDczYWJkYjExNzBjYWU5NzYzMzgzMjNkY2UwOTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kum4aCOppKQFDkf7DzV3d/mcHqU 6Ivg7MSWUXdhba4wDPuQvspw39JGkwY1oY+h4TN3bKvURR8lU0CzWXGrf8Jtdrl9 mzRP7jhmd7PPePdMoSVTmW9S99Cm4cQZ+IK+w/yyNR9+EYDMNV7OdJec3vgUEg0e ExTVQIWd+/ukZmMLc71w1Pr+UzniOxFWkC6Ub6ml+OfFgASc2Akt6q+IURw1A8hE TQnb00+k/qohY4JvcwlkTO3t9BlYIxtxo08F0vN5IO9XCMFE+KYM87kJFkBLHLNT t4HZNGTJZObKnQQzlNq4Ho8daFqrN5oNLvJT/JrJh40ljffCdBpVSDxWfwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFChCKrSnRzq9sRcMrpdjODI9zgl4MB8GA1UdIwQY MBaAFOJgsKVah6ZukKdGOgHaZBT8A009MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xYmNiMTEtMzQxZC00YWRlLTk2YjEt ZDIyNjlmNDBmM2QzLzEvS0VJcXRLZEhPcjJ4Rnd5dWwyTTRNajNPQ1hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8xYmNiMTEtMzQxZC00YWRlLTk2YjEtZDIyNjlmNDBmM2Qz LzEvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACwPYMD BACwPYQwDQYJKoZIhvcNAQELBQADggEBAI2Jr2IaZjG9BJ7K2zW29UGt9kk+gzEP XMLWp6QbLwFKhzysCvX2f7zC8PQgJGxsS6t+pjVhA3bTPrbMxZfVHE5BIwHdP16J MFQHPiwYi9M3nbTuY1IeXM0lAyTFVuZ8ikiG1oL3PH89Dcafiz28HHJ6EfXEzLAd /jz/xvgofk1csZgn4JdJAiAglQ9GD+vxYg8vxl3bo/g4B6aeS4pq/q85qxuHGoeq YmVurw+4zM3O8vKos1lqjWoH5HjZjThIr/elzLliwRsxY0QIzPhi62H2bAjZ0Igy rtsU7HRlkTjxG0EpBN4mFVj/FCyqnPEAkbyGYnemagxyWpVr7dFNO18= -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:07 2026 by rpki-client