This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa File: kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa (raw, json) Hash identifier: oPLgkHy5uqEh77+OXee0sAfzK1xOwlBFgn/lM+qBthY= Subject key identifier: 92:AA:51:B3:C3:D0:DF:7C:67:3E:53:FE:15:D7:3A:2E:03:BE:11:72 Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d Certificate serial: 019B77C6C60F1E5FFC4ACE69D7524A962E9F Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3215 IP address blocks: 194.5.190.0/24 maxlen: 24 194.5.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c6:0f:1e:5f:fc:4a:ce:69:d7:52:4a:96:2e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92aa51b3c3d0df7c673e53fe15d73a2e03be1172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:3c:bd:ef:c1:0c:32:b6:16:85:cd:a5:a6: 4f:13:d8:38:2c:d1:9b:3c:de:21:71:0d:aa:5e:e0: db:aa:9c:1f:58:06:97:3e:75:dd:60:a0:ab:df:74: 93:fb:69:fa:74:06:e4:d9:67:61:65:5a:4d:9a:22: a8:51:1c:91:cb:00:22:02:ea:14:51:9b:22:00:89: 58:d6:a2:36:1c:39:13:5a:00:64:dc:c4:83:c7:bd: 8e:bf:68:2b:26:67:08:70:1b:3a:ab:c8:c9:02:db: 2e:a6:e2:f9:68:03:a8:2c:3b:4c:3d:bd:03:ef:02: 40:d8:b0:ef:50:0b:d7:91:e7:12:4b:37:e4:9e:86: 69:82:94:6b:9a:ab:87:37:cc:42:43:27:8c:08:44: b4:1b:91:70:3b:50:99:c4:e7:4f:2c:27:27:e4:4f: fb:7c:86:c1:6a:6c:40:8f:0d:45:e8:2b:54:80:ec: 4c:49:f4:8c:17:56:34:d4:c5:b3:fc:99:66:69:d7: 50:89:b0:11:e3:c4:80:64:f4:ce:57:06:95:b2:a0: e5:f8:d8:00:ba:31:48:8f:60:1e:ee:35:40:73:78: fb:86:da:9c:44:fe:3f:91:4c:a7:a5:7b:cb:5b:ec: f7:95:b4:e4:00:8a:68:8b:47:c5:36:b5:c9:91:55: cc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AA:51:B3:C3:D0:DF:7C:67:3E:53:FE:15:D7:3A:2E:03:BE:11:72 X509v3 Authority Key Identifier: keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.190.0/23 Signature Algorithm: sha256WithRSAEncryption 60:28:ca:03:80:6e:65:58:8e:5d:b7:4e:96:d6:8d:a0:57:8a: 87:48:4f:b7:9e:29:6c:6a:af:60:5c:3d:9e:06:e4:20:03:2b: 61:52:74:2c:68:5c:92:be:aa:1d:2e:97:6a:78:a6:cc:a6:bc: 3e:51:ad:a5:63:4e:d0:56:6e:4b:a4:67:bb:ec:5f:30:3d:8f: 41:f6:10:84:4e:ce:95:1f:17:8c:23:af:1d:8a:44:dc:dd:d8: 1c:a6:03:71:f7:45:2a:d9:73:91:91:27:18:de:bf:ad:7d:bf: c9:33:6f:04:69:ab:20:10:60:af:1e:03:e5:90:05:8f:c7:94: b1:12:60:3e:e0:15:52:2b:f3:d4:a9:4f:d6:0b:25:ed:4b:8e: 1c:d5:51:75:dd:30:da:11:c9:dd:d2:a7:46:97:c6:0f:2c:22: e6:04:c1:03:44:ec:a5:89:30:7a:67:2d:65:72:7d:00:02:f8: 76:25:e9:b1:86:07:7d:42:65:fe:69:e0:ca:a8:fd:94:19:0d: 6d:2d:7f:e7:4a:b3:8e:87:23:71:63:c7:4c:91:b9:1e:f8:23: de:8d:7e:37:2c:16:1c:b4:3e:76:c3:ae:e7:bf:0e:db:b4:15: 71:7e:fa:66:7a:f0:1b:48:e5:43:a7:7f:c1:7b:b9:89:b4:8c: b8:f5:3e:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsYPHl/8Ss5p11JKli6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDIxNmIwMDU3NDRjMThjYjM4NGQzZDA5ZDEyNDA2NmQ1 NWY2MmQwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmFhNTFiM2MzZDBkZjdjNjczZTUzZmUxNWQ3M2EyZTAzYmUxMTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fA8ve/BDDK2FoXNpaZPE9g4LNGb PN4hcQ2qXuDbqpwfWAaXPnXdYKCr33ST+2n6dAbk2WdhZVpNmiKoURyRywAiAuoU UZsiAIlY1qI2HDkTWgBk3MSDx72Ov2grJmcIcBs6q8jJAtsupuL5aAOoLDtMPb0D 7wJA2LDvUAvXkecSSzfknoZpgpRrmquHN8xCQyeMCES0G5FwO1CZxOdPLCcn5E/7 fIbBamxAjw1F6CtUgOxMSfSMF1Y01MWz/JlmaddQibAR48SAZPTOVwaVsqDl+NgA ujFIj2Ae7jVAc3j7htqcRP4/kUynpXvLW+z3lbTkAIpoi0fFNrXJkVXM9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJKqUbPD0N98Zz5T/hXXOi4DvhFyMB8GA1UdIwQY MBaAFMvSFrAFdEwYyzhNPQnRJAZtVfYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2Qt MDViYmU0ZWYwNmMwLzEva3FwUnM4UFEzM3huUGxQLUZkYzZMZ08tRVhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2QtMDViYmU0ZWYwNmMw LzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwgW+MA0G CSqGSIb3DQEBCwUAA4IBAQBgKMoDgG5lWI5dt06W1o2gV4qHSE+3nilsaq9gXD2e BuQgAythUnQsaFySvqodLpdqeKbMprw+Ua2lY07QVm5LpGe77F8wPY9B9hCETs6V HxeMI68dikTc3dgcpgNx90Uq2XORkScY3r+tfb/JM28EaasgEGCvHgPlkAWPx5Sx EmA+4BVSK/PUqU/WCyXtS44c1VF13TDaEcnd0qdGl8YPLCLmBMEDROyliTB6Zy1l cn0AAvh2Jemxhgd9QmX+aeDKqP2UGQ1tLX/nSrOOhyNxY8dMkbke+CPejX43LBYc tD52w67nvw7btBVxfvpmevAbSOVDp3/Be7mJtIy49T5A -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:19 2026 by rpki-client