This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/CTkFnxq5k5gkKBOyHIjTnJxEA10.roa File: CTkFnxq5k5gkKBOyHIjTnJxEA10.roa (raw, json) Hash identifier: wNOA1anlJOJNxwL/khfQbYI7GWefAhmxsi5L1GTuKvA= Subject key identifier: 09:39:05:9F:1A:B9:93:98:24:28:13:B2:1C:88:D3:9C:9C:44:03:5D Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019B7BA3E31C3C0FB3FD2B22E941DB620799 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/CTkFnxq5k5gkKBOyHIjTnJxEA10.roa Signing time: Thu 01 Jan 2026 22:18:16 +0000 ROA not before: Thu 01 Jan 2026 22:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34262 IP address blocks: 82.141.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e3:1c:3c:0f:b3:fd:2b:22:e9:41:db:62:07:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jan 1 22:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0939059f1ab99398242813b21c88d39c9c44035d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:f2:9a:cb:61:d9:a8:88:c5:24:05:91:fe: 7b:6d:f9:5b:d4:b1:af:f2:4f:8a:af:50:31:97:54: bd:93:61:8d:05:e0:0b:f4:18:b0:c5:17:9f:ba:5e: 1b:cd:87:5a:f4:0c:6f:e7:46:26:e4:9a:a5:ca:16: 9b:4e:b3:38:25:2c:dd:c1:f4:9b:81:3c:1a:37:b3: 2c:c6:7d:02:b0:a2:c9:0b:03:a3:71:18:ce:25:40: bc:5f:ed:87:1f:3c:75:bc:37:a6:66:00:24:57:98: 8e:cb:d5:41:b1:cc:3e:45:d2:06:58:84:0b:dc:ae: ec:ce:ef:1e:dc:e8:9a:98:3c:39:32:c3:6a:c9:c4: 3d:5b:db:d6:3e:4b:5d:92:6f:80:25:8b:6c:ac:fc: 12:4c:f8:2d:af:96:db:a4:02:09:9c:ad:1c:a6:8f: de:f0:a3:30:e0:a7:15:e9:e0:89:18:98:13:57:e6: 6e:fe:9e:08:e0:88:6e:6a:5f:70:72:c3:8d:a0:f1: 40:b6:88:d9:c6:66:bb:7f:93:de:4c:1c:f8:77:3a: 45:c2:f6:d3:d9:8d:a6:21:34:1a:13:92:76:da:a6: 7e:7a:4a:11:a7:64:b6:bd:63:45:bd:9b:f7:c5:1e: 92:74:c9:60:af:ca:79:45:5f:7b:3e:1e:b1:24:b8: 9b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:39:05:9F:1A:B9:93:98:24:28:13:B2:1C:88:D3:9C:9C:44:03:5D X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/CTkFnxq5k5gkKBOyHIjTnJxEA10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.141.154.0/24 Signature Algorithm: sha256WithRSAEncryption ad:bf:bb:57:71:76:ab:2c:68:8f:26:9c:2b:a5:c7:4c:5a:26: 71:a3:52:cf:f2:b7:53:28:da:bc:a3:db:56:f7:51:ba:a8:53: ba:d7:58:89:26:8b:d1:b5:3a:5f:36:53:b1:17:35:d1:44:01: 40:67:4e:e2:b5:b4:2c:d8:dd:ab:76:bc:d3:06:ce:7b:a3:51: 75:d8:26:7e:23:de:47:46:ea:88:39:8a:2e:52:b8:70:6e:57: eb:dd:0f:08:ce:48:26:00:dc:19:22:5d:af:95:9f:4f:d9:1a: f2:92:fd:10:fe:61:46:31:f7:92:b7:93:73:7c:c4:b3:7e:eb: 42:49:74:42:8c:fc:ad:a2:08:76:23:9b:fb:91:6a:c9:73:aa: 82:a1:ee:58:f6:4f:df:af:90:df:0c:f5:60:80:16:14:a2:63: e1:cb:e3:9c:50:64:92:b4:69:13:05:e5:6f:42:1d:a3:7e:ea: 1c:0b:26:b1:3e:53:32:02:14:03:60:9b:3d:f7:e8:87:d0:03: d5:09:ae:ab:24:ee:22:4c:83:4e:29:57:6b:48:18:37:31:5d: 8b:5f:d2:e7:bb:18:ad:7a:85:0d:e3:cf:bc:e5:e8:9a:68:9d: 1d:1b:7b:40:6f:b2:a9:0e:a8:4b:c0:2d:c9:2e:36:87:00:58: 10:25:9d:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+McPA+z/Ssi6UHbYgeZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMTAxMjIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTM5MDU5ZjFhYjk5Mzk4MjQyODEzYjIxYzg4ZDM5YzljNDQwMzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnrymsth2aiIxSQFkf57bflb1LGv 8k+Kr1Axl1S9k2GNBeAL9BiwxReful4bzYda9Axv50Ym5JqlyhabTrM4JSzdwfSb gTwaN7Msxn0CsKLJCwOjcRjOJUC8X+2HHzx1vDemZgAkV5iOy9VBscw+RdIGWIQL 3K7szu8e3OiamDw5MsNqycQ9W9vWPktdkm+AJYtsrPwSTPgtr5bbpAIJnK0cpo/e 8KMw4KcV6eCJGJgTV+Zu/p4I4Ihual9wcsONoPFAtojZxma7f5PeTBz4dzpFwvbT 2Y2mITQaE5J22qZ+ekoRp2S2vWNFvZv3xR6SdMlgr8p5RV97Ph6xJLibOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAk5BZ8auZOYJCgTshyI05ycRANdMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvQ1RrRm54cTVrNWdrS0JPeUhJalRuSnhFQTEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUo2aMA0G CSqGSIb3DQEBCwUAA4IBAQCtv7tXcXarLGiPJpwrpcdMWiZxo1LP8rdTKNq8o9tW 91G6qFO611iJJovRtTpfNlOxFzXRRAFAZ07itbQs2N2rdrzTBs57o1F12CZ+I95H RuqIOYouUrhwblfr3Q8IzkgmANwZIl2vlZ9P2Rrykv0Q/mFGMfeSt5NzfMSzfutC SXRCjPytogh2I5v7kWrJc6qCoe5Y9k/fr5DfDPVggBYUomPhy+OcUGSStGkTBeVv Qh2jfuocCyaxPlMyAhQDYJs99+iH0APVCa6rJO4iTINOKVdrSBg3MV2LX9Lnuxit eoUN48+85eiaaJ0dG3tAb7KpDqhLwC3JLjaHAFgQJZ30 -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:12 2026 by rpki-client