This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/k_NknFuW4fn4bDMEidouhfOP4yE.roa File: k_NknFuW4fn4bDMEidouhfOP4yE.roa (raw, json) Hash identifier: /QvV9YqG7NdPkIkhFC2G0RzWP2PLlZH/17cSaHRPmK8= Subject key identifier: 93:F3:64:9C:5B:96:E1:F9:F8:6C:33:04:89:DA:2E:85:F3:8F:E3:21 Certificate issuer: /CN=07d44a52778aa65f736e72436003f6654f268318 Certificate serial: 019B797E93FB895E31F5D90003D1B2F8D58F Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/k_NknFuW4fn4bDMEidouhfOP4yE.roa Signing time: Thu 01 Jan 2026 12:18:17 +0000 ROA not before: Thu 01 Jan 2026 12:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1955 IP address blocks: 193.6.0.0/16 maxlen: 16 193.224.0.0/15 maxlen: 15 195.111.0.0/16 maxlen: 16 195.199.0.0/16 maxlen: 16 2001:738::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:93:fb:89:5e:31:f5:d9:00:03:d1:b2:f8:d5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d44a52778aa65f736e72436003f6654f268318 Validity Not Before: Jan 1 12:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93f3649c5b96e1f9f86c330489da2e85f38fe321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6e:60:95:5c:b9:de:0c:32:50:f9:f1:20:d4: 8a:7a:34:90:fb:d7:5a:00:d5:c1:3b:2d:c6:79:cb: 12:1a:00:14:88:de:ae:7b:40:75:74:07:31:2f:3a: c0:4a:2e:d0:b7:47:3b:5c:99:ea:96:b7:df:a4:fb: d5:42:0e:2c:e2:82:29:71:f1:02:6e:4e:7e:9a:1a: ef:b1:a1:65:43:08:b4:de:28:3b:52:cd:a4:df:4a: a6:cc:05:b9:d7:7a:85:76:f4:a7:a4:ca:47:3c:de: ae:24:d9:cc:d9:d1:ff:af:02:fb:27:73:49:85:66: ab:d0:7b:db:e9:c2:37:b8:87:62:ec:57:39:a2:26: 3c:ac:58:e7:1d:c4:de:a7:f7:78:75:94:f7:87:f6: a0:30:02:3f:27:2f:11:e9:82:ee:11:25:f1:a9:8d: 5d:3a:9e:25:32:d6:bb:cf:83:be:e4:d2:76:52:c5: 41:5f:ca:05:36:d2:09:b2:a0:71:8a:40:b5:f9:90: 79:da:4d:b6:fe:02:99:e8:dc:c3:38:fe:e4:e1:ab: d3:e1:bd:d9:c6:20:a4:20:83:bc:1a:b8:85:a4:ef: 96:51:17:c6:57:cb:1f:68:04:09:ad:c8:0f:d9:0a: 02:83:42:2e:6c:a1:a4:23:90:3d:3d:86:ef:76:31: 5a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F3:64:9C:5B:96:E1:F9:F8:6C:33:04:89:DA:2E:85:F3:8F:E3:21 X509v3 Authority Key Identifier: keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/k_NknFuW4fn4bDMEidouhfOP4yE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.6.0.0/16 193.224.0.0/15 195.111.0.0/16 195.199.0.0/16 IPv6: 2001:738::/32 Signature Algorithm: sha256WithRSAEncryption 32:b6:09:3e:1d:92:c9:8d:94:bc:9f:de:3e:16:72:a1:e1:26: 23:96:90:f0:d4:5b:8b:c9:36:f0:ff:91:45:66:3f:12:d8:cb: 53:c2:65:04:c0:9d:4b:dc:41:4e:ca:60:51:62:f9:1c:71:15: 8f:8b:38:b9:6c:ad:e4:f2:44:a6:b3:49:28:02:26:24:27:08: ab:ae:32:65:e0:53:64:9a:f0:1c:2f:ce:02:e0:eb:10:bd:dc: 69:46:cd:87:da:0b:d5:a1:f5:d0:18:c6:e4:d9:0d:ec:2b:ee: 15:42:4d:25:99:da:f0:27:ca:97:2e:2f:52:0f:dd:82:15:79: 87:22:97:7b:4a:c4:fa:83:83:aa:3c:fe:6a:3f:bd:bb:30:f3: 0a:26:ce:5e:9f:87:66:03:55:f7:dc:fb:56:1c:1a:fb:75:b1: 80:ce:27:a1:ff:81:cc:45:76:8c:63:b3:e9:5a:71:31:a9:81: ba:76:34:2a:ac:1d:e3:4a:82:b2:09:c7:d1:de:5c:3f:6e:1b: a1:85:49:85:77:f3:d3:af:8a:1e:46:a4:b1:2f:1b:9c:0d:39: 1f:47:72:33:ac:3c:84:0e:5e:ed:69:9f:a9:8f:42:d4:58:25: d2:1a:f7:d9:95:82:09:f7:a7:ec:13:59:2c:14:0c:2d:0b:28: 15:52:c8:45 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt5fpP7iV4x9dkAA9Gy+NWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDQ0YTUyNzc4YWE2NWY3MzZlNzI0MzYwMDNmNjY1NGYy NjgzMTgwHhcNMjYwMTAxMTIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2YzNjQ5YzViOTZlMWY5Zjg2YzMzMDQ4OWRhMmU4NWYzOGZlMzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG5glVy53gwyUPnxINSKejSQ+9da ANXBOy3GecsSGgAUiN6ue0B1dAcxLzrASi7Qt0c7XJnqlrffpPvVQg4s4oIpcfEC bk5+mhrvsaFlQwi03ig7Us2k30qmzAW513qFdvSnpMpHPN6uJNnM2dH/rwL7J3NJ hWar0Hvb6cI3uIdi7Fc5oiY8rFjnHcTep/d4dZT3h/agMAI/Jy8R6YLuESXxqY1d Op4lMta7z4O+5NJ2UsVBX8oFNtIJsqBxikC1+ZB52k22/gKZ6NzDOP7k4avT4b3Z xiCkIIO8GriFpO+WURfGV8sfaAQJrcgP2QoCg0IubKGkI5A9PYbvdjFaVwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFJPzZJxbluH5+GwzBInaLoXzj+MhMB8GA1UdIwQY MBaAFAfUSlJ3iqZfc25yQ2AD9mVPJoMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlSS1VuZUtwbDl6Ym5KRFlBUDJaVThtZ3hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84MTNjYmMtNGZhNC00NjQ2LWE4ZGIt MWQyOGE2MGUwZTMwLzEva19Oa25GdVc0Zm40YkRNRWlkb3VoZk9QNHlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS84MTNjYmMtNGZhNC00NjQ2LWE4ZGItMWQyOGE2MGUwZTMw LzEvQjlSS1VuZUtwbDl6Ym5KRFlBUDJaVThtZ3hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwMAwQYDAwHB 4AMDAMNvAwMAw8cwDQQCAAIwBwMFACABBzgwDQYJKoZIhvcNAQELBQADggEBADK2 CT4dksmNlLyf3j4WcqHhJiOWkPDUW4vJNvD/kUVmPxLYy1PCZQTAnUvcQU7KYFFi +RxxFY+LOLlsreTyRKazSSgCJiQnCKuuMmXgU2Sa8BwvzgLg6xC93GlGzYfaC9Wh 9dAYxuTZDewr7hVCTSWZ2vAnypcuL1IP3YIVeYcil3tKxPqDg6o8/mo/vbsw8wom zl6fh2YDVffc+1YcGvt1sYDOJ6H/gcxFdoxjs+lacTGpgbp2NCqsHeNKgrIJx9He XD9uG6GFSYV389Ovih5GpLEvG5wNOR9HcjOsPIQOXu1pn6mPQtRYJdIa99mVggn3 p+wTWSwUDC0LKBVSyEU= -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:01 2026 by rpki-client