This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/K01hEvp_oFx3qc2-IUwd8VFE1hI.roa File: K01hEvp_oFx3qc2-IUwd8VFE1hI.roa (raw, json) Hash identifier: cm5jfcRdjk0yhdi3HnxUE7FN1POO9527wRj/2D2vjMs= Subject key identifier: 2B:4D:61:12:FA:7F:A0:5C:77:A9:CD:BE:21:4C:1D:F1:51:44:D6:12 Certificate issuer: /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d Certificate serial: 019B7E37F6A9A8822E7214801FAF741449FF Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/K01hEvp_oFx3qc2-IUwd8VFE1hI.roa Signing time: Fri 02 Jan 2026 10:19:15 +0000 ROA not before: Fri 02 Jan 2026 10:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48038 IP address blocks: 185.170.88.0/24 maxlen: 24 185.170.90.0/24 maxlen: 24 193.8.190.0/23 maxlen: 23 193.8.190.0/24 maxlen: 24 193.8.191.0/24 maxlen: 24 193.73.208.0/24 maxlen: 24 193.134.94.0/24 maxlen: 24 194.11.164.0/24 maxlen: 24 194.11.166.0/24 maxlen: 24 2001:67c:4f0::/48 maxlen: 48 2a09:5f80::/48 maxlen: 48 2a09:5f80:2::/48 maxlen: 48 2a09:5f80:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f6:a9:a8:82:2e:72:14:80:1f:af:74:14:49:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d Validity Not Before: Jan 2 10:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b4d6112fa7fa05c77a9cdbe214c1df15144d612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:99:7f:64:77:a4:51:3f:f0:6b:9b:bc:28:63: f1:5c:27:e0:38:4f:fd:74:c2:73:dc:9d:23:2f:ff: e7:96:5a:d6:da:2a:76:4f:07:5e:30:e5:d6:0c:99: 10:7e:7f:1b:e1:2b:d4:8f:35:7f:80:09:87:83:7c: 4b:b1:de:99:99:bd:38:bc:9a:b7:6d:0c:54:9b:0c: 82:0f:3a:fd:c9:4f:92:98:51:06:47:55:b4:f7:53: 57:2b:66:5e:d5:92:48:4f:df:7f:83:13:e9:f3:b4: 2b:4d:c9:c8:66:b6:54:a1:7a:69:1f:57:ae:5c:a7: 53:00:a3:76:0e:23:5b:d5:1c:7e:96:b1:b3:a3:ed: f5:23:e5:3a:bb:00:11:1b:97:4b:8f:85:4a:11:cc: 65:14:3b:a1:04:8a:2d:32:07:7f:09:a6:3e:27:6b: 86:26:8d:c2:78:48:39:44:b9:50:90:25:26:73:ea: 85:dc:cd:49:d1:a5:f0:9c:88:c8:ad:5a:98:08:a1: 98:6c:c5:4d:ff:53:0d:40:15:82:1b:a1:8d:97:57: 62:ea:ba:8e:11:5a:45:91:33:66:6f:99:c3:d3:2b: 01:15:b3:6a:e6:bc:b3:0d:2b:e3:9f:0b:4d:a9:2f: 40:17:e9:28:3d:18:95:e1:0a:4c:a9:a8:76:4a:77: d6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4D:61:12:FA:7F:A0:5C:77:A9:CD:BE:21:4C:1D:F1:51:44:D6:12 X509v3 Authority Key Identifier: keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/K01hEvp_oFx3qc2-IUwd8VFE1hI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.170.88.0/24 185.170.90.0/24 193.8.190.0/23 193.73.208.0/24 193.134.94.0/24 194.11.164.0/24 194.11.166.0/24 IPv6: 2001:67c:4f0::/48 2a09:5f80::/48 2a09:5f80:2::/47 Signature Algorithm: sha256WithRSAEncryption c1:83:d6:e6:a9:6b:63:34:e1:67:28:4e:67:99:2b:06:79:a3: 6e:7a:39:03:b9:9f:ce:0c:8e:43:c5:69:2f:8f:b2:c5:bb:8d: 42:b0:4c:14:26:a9:e3:b2:53:2a:a2:89:39:fc:52:d7:66:3a: 36:ce:82:c0:f2:f0:84:ea:b6:33:98:c0:40:31:37:cc:29:1b: 7f:cb:74:ce:71:c6:0a:cc:23:bd:db:04:35:57:4e:ec:31:9d: 58:79:82:00:0b:68:bc:13:0a:67:d5:72:e4:e0:5f:e3:cf:c9: 0e:59:73:7d:1d:26:2e:67:3a:ba:64:21:ca:86:41:3d:ad:c5: a0:79:8e:2c:3e:e4:60:7c:31:b5:4e:31:dd:71:c6:6c:92:1e: f9:80:ac:bb:f7:67:81:d3:9f:8d:e3:6b:b9:06:f3:d8:34:1b: 2f:44:b7:9e:24:2d:bf:59:d9:e3:ec:37:0c:70:7f:41:b2:f5: 3f:0b:31:45:84:3e:30:8f:b5:f7:c4:b7:e9:18:40:e8:b8:70: 9e:2f:1a:e0:7d:be:45:22:bc:a7:df:fa:16:69:d2:0a:f9:22: 6e:8a:66:6a:5e:88:57:2f:d1:8b:15:12:13:e4:85:7a:85:51: 3b:5f:d7:dc:da:73:77:fd:9a:05:9d:47:f7:9e:40:16:3e:a1: 2d:07:7d:42 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZt+N/apqIIuchSAH690FEn/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NzcyNmQzOGZjZjJhN2ZiYmI3YmZjMjhkNjNmZTM1Nzll ZDIxMWQwHhcNMjYwMTAyMTAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjRkNjExMmZhN2ZhMDVjNzdhOWNkYmUyMTRjMWRmMTUxNDRkNjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppl/ZHekUT/wa5u8KGPxXCfgOE/9 dMJz3J0jL//nllrW2ip2TwdeMOXWDJkQfn8b4SvUjzV/gAmHg3xLsd6Zmb04vJq3 bQxUmwyCDzr9yU+SmFEGR1W091NXK2Ze1ZJIT99/gxPp87QrTcnIZrZUoXppH1eu XKdTAKN2DiNb1Rx+lrGzo+31I+U6uwARG5dLj4VKEcxlFDuhBIotMgd/CaY+J2uG Jo3CeEg5RLlQkCUmc+qF3M1J0aXwnIjIrVqYCKGYbMVN/1MNQBWCG6GNl1di6rqO EVpFkTNmb5nD0ysBFbNq5ryzDSvjnwtNqS9AF+koPRiV4QpMqah2SnfWwQIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFCtNYRL6f6Bcd6nNviFMHfFRRNYSMB8GA1UdIwQY MBaAFGh3JtOPzyp/u7e/wo1j/jV57SEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNzFlMjctYzY4Ny00ZmQ3LTgxODAt NGIyZGExOTdhN2U2LzEvSzAxaEV2cF9vRngzcWMyLUlVd2Q4VkZFMWhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lNzFlMjctYzY4Ny00ZmQ3LTgxODAtNGIyZGExOTdhN2U2 LzEvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTAwBAIAATAqAwQAuapYAwQA uapaAwQBwQi+AwQAwUnQAwQAwYZeAwQAwgukAwQAwgumMCEEAgACMBsDBwAgAQZ8 BPADBwAqCV+AAAADBwEqCV+AAAIwDQYJKoZIhvcNAQELBQADggEBAMGD1uapa2M0 4WcoTmeZKwZ5o256OQO5n84MjkPFaS+PssW7jUKwTBQmqeOyUyqiiTn8UtdmOjbO gsDy8ITqtjOYwEAxN8wpG3/LdM5xxgrMI73bBDVXTuwxnVh5ggALaLwTCmfVcuTg X+PPyQ5Zc30dJi5nOrpkIcqGQT2txaB5jiw+5GB8MbVOMd1xxmySHvmArLv3Z4HT n43ja7kG89g0Gy9Et54kLb9Z2ePsNwxwf0Gy9T8LMUWEPjCPtffEt+kYQOi4cJ4v GuB9vkUivKff+hZp0gr5Im6KZmpeiFcv0YsVEhPkhXqFUTtf19zac3f9mgWdR/ee QBY+oS0HfUI= -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:43 2026 by rpki-client