This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/kdEPUuQDUI6I6jbSpPW6P-kkOuA.roa File: kdEPUuQDUI6I6jbSpPW6P-kkOuA.roa (raw, json) Hash identifier: zinbJQSjE4KwqubnM0+SQjc1EG+tlbXwWx2ZhYd6qEA= Subject key identifier: 91:D1:0F:52:E4:03:50:8E:88:EA:36:D2:A4:F5:BA:3F:E9:24:3A:E0 Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938 Certificate serial: 019B783545666C099A37B3A8AD7B93B423DB Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/kdEPUuQDUI6I6jbSpPW6P-kkOuA.roa Signing time: Thu 01 Jan 2026 06:18:35 +0000 ROA not before: Thu 01 Jan 2026 06:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213541 IP address blocks: 176.100.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:45:66:6c:09:9a:37:b3:a8:ad:7b:93:b4:23:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938 Validity Not Before: Jan 1 06:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91d10f52e403508e88ea36d2a4f5ba3fe9243ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:f8:5c:7b:8a:c9:17:02:ca:e0:ce:30:b5: f1:b9:ce:23:e9:55:5a:7f:68:12:df:31:04:a7:97: 7b:f8:1c:92:7a:86:6e:81:a6:21:02:2b:c0:80:20: 57:91:6d:62:18:f3:4c:74:e1:57:fc:28:18:a9:f3: f9:a9:64:60:71:02:9a:b7:a3:9c:4d:b0:fa:8b:7f: a5:ef:00:80:12:61:5e:42:c1:79:06:8e:f9:89:9e: b4:8d:70:c6:de:f9:db:d9:ac:29:57:ad:62:2c:b1: 23:96:5e:29:a8:e6:e2:58:99:aa:69:30:1b:bf:d1: 16:3b:76:3d:96:8c:72:c7:09:7d:50:55:86:da:d9: a3:b3:7e:54:5f:07:96:6c:ae:15:7c:81:ce:3b:54: 7b:c0:de:69:cd:6b:96:9e:8a:b2:aa:04:26:b5:29: f1:df:ee:69:3b:b0:05:86:e1:cf:c2:f6:82:d1:20: 2b:00:cc:fb:94:7f:c4:ed:f2:e1:07:0c:0e:f0:3d: b1:32:bc:15:0d:13:19:cb:6b:6c:c9:34:d0:f3:8d: db:ca:b3:ce:a4:8a:de:dc:a7:de:5d:b2:93:0e:04: a2:a3:62:eb:b0:34:20:9f:15:1f:48:48:29:7b:cb: ca:ea:56:65:c0:c9:42:ae:bb:6d:e4:04:7e:0f:15: f2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D1:0F:52:E4:03:50:8E:88:EA:36:D2:A4:F5:BA:3F:E9:24:3A:E0 X509v3 Authority Key Identifier: keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/kdEPUuQDUI6I6jbSpPW6P-kkOuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.100.128.0/19 Signature Algorithm: sha256WithRSAEncryption 10:46:2e:3c:32:81:85:96:dc:af:7a:cb:fd:9a:02:d1:da:2a: c0:98:9c:20:bd:bb:7a:8e:8a:54:44:28:9a:bf:de:65:af:6c: 5b:30:3f:90:9d:90:cd:16:84:63:bd:05:72:dd:64:c9:f2:d3: dc:b8:9a:ec:42:bc:50:04:a9:f8:8c:a1:52:b6:25:c0:d7:16: 9a:ec:61:f1:1a:b4:00:fe:fe:a5:cd:4c:61:c3:03:ee:f1:52: 78:aa:6d:6d:7d:49:65:83:48:34:ce:f6:dd:71:a9:3e:63:60: da:40:79:97:8e:69:e8:7f:3f:36:63:d2:3c:80:10:80:7d:52: e8:86:e0:01:11:6b:88:0e:ef:b7:57:0b:52:b7:21:12:6f:63: d0:f2:4f:fc:7c:e8:6b:dc:b1:58:06:56:b1:2c:c1:68:7a:d6: e9:6e:75:7b:71:b0:b9:8f:27:a1:e0:17:a2:a5:08:97:73:bb: 4c:2d:3a:eb:67:14:4b:50:5e:ec:bd:d4:f8:62:b2:76:90:c0: 67:1b:f6:37:70:5f:55:cd:fb:c2:a1:0c:d9:ca:4a:f5:39:7f: 51:95:46:49:c0:ee:bf:11:cd:b1:96:d0:1e:21:30:97:f2:91: 99:8e:c8:01:ef:66:55:2d:12:bd:c6:11:00:4a:be:af:cc:07: 40:0a:9c:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NUVmbAmaN7OorXuTtCPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZjM2YjBhZGVlNmNiNTUxODc2M2I1YmM4ZWFhM2Q0MWYy M2U5MzgwHhcNMjYwMTAxMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWQxMGY1MmU0MDM1MDhlODhlYTM2ZDJhNGY1YmEzZmU5MjQzYWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMj4XHuKyRcCyuDOMLXxuc4j6VVa f2gS3zEEp5d7+BySeoZugaYhAivAgCBXkW1iGPNMdOFX/CgYqfP5qWRgcQKat6Oc TbD6i3+l7wCAEmFeQsF5Bo75iZ60jXDG3vnb2awpV61iLLEjll4pqObiWJmqaTAb v9EWO3Y9loxyxwl9UFWG2tmjs35UXweWbK4VfIHOO1R7wN5pzWuWnoqyqgQmtSnx 3+5pO7AFhuHPwvaC0SArAMz7lH/E7fLhBwwO8D2xMrwVDRMZy2tsyTTQ843byrPO pIre3KfeXbKTDgSio2LrsDQgnxUfSEgpe8vK6lZlwMlCrrtt5AR+DxXyZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJHRD1LkA1COiOo20qT1uj/pJDrgMB8GA1UdIwQY MBaAFIPzawre5stVGHY7W8jqo9QfI+k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGIt YWY2NGYzZmEyNDU5LzEva2RFUFV1UURVSTZJNmpiU3BQVzZQLWtrT3VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGItYWY2NGYzZmEyNDU5 LzEvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFsGSAMA0G CSqGSIb3DQEBCwUAA4IBAQAQRi48MoGFltyvesv9mgLR2irAmJwgvbt6jopURCia v95lr2xbMD+QnZDNFoRjvQVy3WTJ8tPcuJrsQrxQBKn4jKFStiXA1xaa7GHxGrQA /v6lzUxhwwPu8VJ4qm1tfUllg0g0zvbdcak+Y2DaQHmXjmnofz82Y9I8gBCAfVLo huABEWuIDu+3VwtStyESb2PQ8k/8fOhr3LFYBlaxLMFoetbpbnV7cbC5jyeh4Bei pQiXc7tMLTrrZxRLUF7svdT4YrJ2kMBnG/Y3cF9VzfvCoQzZykr1OX9RlUZJwO6/ Ec2xltAeITCX8pGZjsgB72ZVLRK9xhEASr6vzAdACpxs -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:49 2026 by rpki-client