This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Kyf5heLwSi5U3rZkdpAZyV8bXbo.roa File: Kyf5heLwSi5U3rZkdpAZyV8bXbo.roa (raw, json) Hash identifier: ujg1A0vQ9FG1rTPZa8Vj4tuAeoDxeA7TxCNsFbsOZaw= Subject key identifier: 2B:27:F9:85:E2:F0:4A:2E:54:DE:B6:64:76:90:19:C9:5F:1B:5D:BA Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B77C66C715B84375B959999D4FF8BBA06 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Kyf5heLwSi5U3rZkdpAZyV8bXbo.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11439 IP address blocks: 141.98.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6c:71:5b:84:37:5b:95:99:99:d4:ff:8b:ba:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b27f985e2f04a2e54deb664769019c95f1b5dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:08:c5:c7:a9:fb:a3:2d:2d:33:09:bf:98:7a: bd:0a:a9:b9:15:04:26:06:23:ad:0e:97:a3:49:a8: 48:af:67:21:8b:75:f7:86:94:6f:ce:99:2d:61:ca: 06:f6:26:1d:ed:c6:44:2a:87:e6:99:71:35:12:a4: 59:11:74:27:b2:0d:e7:47:d1:df:91:30:d3:ae:78: ff:5d:4d:7d:e9:af:30:5a:fa:37:6f:b9:d6:1b:71: 23:ed:ee:86:94:47:9f:91:eb:3d:3a:66:38:2c:a4: f0:14:a4:8e:4f:cf:6a:40:00:54:85:33:79:1a:40: 54:de:fb:b1:fc:38:b7:93:ac:cf:cb:d0:de:85:4d: d6:58:a2:36:42:67:c9:14:5c:9c:9a:c4:5b:98:8f: e8:4b:69:b2:45:a2:80:ac:76:e8:6a:30:65:12:54: 3b:57:a1:8d:80:4e:ec:74:f5:6e:7f:93:7c:a9:67: 5a:96:33:0e:aa:ca:62:3a:98:8e:12:8a:a2:72:38: 36:41:44:62:25:a4:f2:37:08:61:62:c8:f3:3d:16: 0e:50:d2:5a:f4:56:06:3b:30:81:ee:ec:cb:a1:39: fb:a6:dc:ce:53:d4:96:c3:78:0d:2b:bf:b8:20:46: 38:c4:11:31:ce:3b:17:5e:c9:71:75:e8:86:d0:ef: 21:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:27:F9:85:E2:F0:4A:2E:54:DE:B6:64:76:90:19:C9:5F:1B:5D:BA X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Kyf5heLwSi5U3rZkdpAZyV8bXbo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.148.0/24 Signature Algorithm: sha256WithRSAEncryption ab:5d:c7:bd:ed:62:6e:d7:77:be:9d:81:02:4e:96:35:59:94: b3:2c:b1:0e:09:c2:2b:ec:23:c4:be:9c:40:c3:d7:b1:7a:b5: 89:14:6e:0d:d0:3d:b1:61:c8:82:c5:bb:7f:08:4c:6e:f0:de: 5e:d0:db:a6:1f:83:83:95:bd:4a:87:b0:55:a6:a8:c1:33:00: 0a:c7:c8:90:9b:7d:23:f4:99:df:2f:73:90:21:7b:49:0a:a9: 9d:7a:97:0a:e0:66:e9:85:73:40:c2:1b:d9:f6:57:5b:55:8c: 80:06:64:21:39:fa:be:53:94:33:c3:17:5a:d2:cf:11:63:2e: 4f:4b:72:41:fb:22:97:9d:61:d7:88:95:7c:59:6b:6e:46:8a: 99:60:b8:6e:9a:3d:5c:8a:66:1a:11:52:2b:27:36:4f:66:3c: e4:5f:d3:f2:c7:8b:98:c5:75:a6:3d:75:2f:a2:60:c2:ef:2b: f4:4b:f4:97:02:87:e5:6b:68:64:db:ed:c0:52:c9:17:02:ae: 55:3f:2b:cf:fe:ec:1f:8b:cc:aa:10:bc:47:e4:73:40:38:dc: 06:90:98:8d:01:ee:30:00:e6:7b:15:60:5d:3a:37:21:9f:35: 5a:23:3e:e1:b4:99:77:96:19:da:f1:9e:07:10:e7:38:aa:3e: 2e:d9:34:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmxxW4Q3W5WZmdT/i7oGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjI3Zjk4NWUyZjA0YTJlNTRkZWI2NjQ3NjkwMTljOTVmMWI1ZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngjFx6n7oy0tMwm/mHq9Cqm5FQQm BiOtDpejSahIr2chi3X3hpRvzpktYcoG9iYd7cZEKofmmXE1EqRZEXQnsg3nR9Hf kTDTrnj/XU196a8wWvo3b7nWG3Ej7e6GlEefkes9OmY4LKTwFKSOT89qQABUhTN5 GkBU3vux/Di3k6zPy9DehU3WWKI2QmfJFFycmsRbmI/oS2myRaKArHboajBlElQ7 V6GNgE7sdPVuf5N8qWdaljMOqspiOpiOEoqicjg2QURiJaTyNwhhYsjzPRYOUNJa 9FYGOzCB7uzLoTn7ptzOU9SWw3gNK7+4IEY4xBExzjsXXslxdeiG0O8hJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCsn+YXi8EouVN62ZHaQGclfG126MB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvS3lmNWhlTHdTaTVVM3Jaa2RwQVp5VjhiWGJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWKUMA0G CSqGSIb3DQEBCwUAA4IBAQCrXce97WJu13e+nYECTpY1WZSzLLEOCcIr7CPEvpxA w9exerWJFG4N0D2xYciCxbt/CExu8N5e0NumH4ODlb1Kh7BVpqjBMwAKx8iQm30j 9JnfL3OQIXtJCqmdepcK4GbphXNAwhvZ9ldbVYyABmQhOfq+U5Qzwxda0s8RYy5P S3JB+yKXnWHXiJV8WWtuRoqZYLhumj1cimYaEVIrJzZPZjzkX9Pyx4uYxXWmPXUv omDC7yv0S/SXAofla2hk2+3AUskXAq5VPyvP/uwfi8yqELxH5HNAONwGkJiNAe4w AOZ7FWBdOjchnzVaIz7htJl3lhna8Z4HEOc4qj4u2TR2 -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:59 2026 by rpki-client