This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/k3EyxzEGO684lLpKgy_muF8oOKo.roa File: k3EyxzEGO684lLpKgy_muF8oOKo.roa (raw, json) Hash identifier: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg= Subject key identifier: 93:71:32:C7:31:06:3B:AF:38:94:BA:4A:83:2F:E6:B8:5F:28:38:AA Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 019B7E381DA74660C1D1147F1ECF932BD158 Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/k3EyxzEGO684lLpKgy_muF8oOKo.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60557 IP address blocks: 176.119.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1d:a7:46:60:c1:d1:14:7f:1e:cf:93:2b:d1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=937132c731063baf3894ba4a832fe6b85f2838aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:34:9f:d5:7c:5f:39:2f:8f:c3:f0:2b:de: 2b:a4:06:22:e7:35:7e:09:ae:cc:7e:ce:76:bf:67: a9:5b:d9:09:cc:cd:77:2a:5c:f5:f3:df:74:56:01: 3e:45:15:86:ca:2f:d1:7a:c3:be:48:a4:33:40:72: 7a:5b:09:41:77:16:88:7c:89:74:dd:d8:76:f9:d0: c6:39:7d:a0:1d:a3:cf:69:58:48:2d:f6:94:49:2c: 81:d9:94:45:ec:0a:f5:f1:1b:7f:e7:fd:99:9a:1c: bc:f3:61:a5:12:e8:81:74:39:1c:f3:1a:84:db:f1: 2a:21:33:22:a7:11:74:ad:24:f6:a0:e2:fa:8e:74: c9:b8:28:6f:94:0e:41:ce:76:72:b0:00:75:5e:d7: f9:a9:bc:3d:82:ea:00:73:65:89:b4:fa:ca:2d:30: e6:ee:b3:53:fe:7c:2a:b5:cb:dc:33:28:57:55:5e: 39:07:a6:05:ce:53:c5:17:64:17:32:49:e8:3f:8a: ac:eb:a9:40:70:37:7c:7b:e6:89:be:2e:48:b0:b4: cd:38:59:c4:47:54:f3:ab:e3:12:06:3b:68:7f:11: 6b:5f:a3:94:05:13:74:a8:05:aa:9f:4b:0b:12:49: a8:09:b0:f7:3f:7c:08:10:0d:5c:14:f9:71:10:ad: 87:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:71:32:C7:31:06:3B:AF:38:94:BA:4A:83:2F:E6:B8:5F:28:38:AA X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/k3EyxzEGO684lLpKgy_muF8oOKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.215.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:4a:32:a1:84:f9:12:da:92:d4:bc:33:4c:cc:9e:7b:c5:0f: 58:c6:b0:f6:11:ed:2f:ec:9a:e8:90:8c:dd:f9:94:c7:49:b8: f8:3d:cf:d8:1f:58:cd:1f:3c:a5:0f:21:f4:ec:ad:f6:c4:65: 51:13:51:45:14:4d:40:66:ab:2a:70:51:5f:c2:5f:6a:a6:5a: 70:87:e9:9e:0e:04:dd:1e:dd:e2:65:5f:24:4e:2d:f1:4a:8f: 8b:9f:88:91:3b:70:6b:30:15:6f:1e:86:c5:b4:87:62:8b:94: 96:1a:e9:fb:da:e1:37:de:0a:9b:8a:91:7a:e6:30:f4:25:97: d9:49:27:c2:b2:ab:18:48:54:52:99:13:7f:95:ae:34:c8:c5: 54:52:c7:bd:a3:b7:75:d2:2f:dd:f7:7a:5f:a4:2f:cc:c7:81: af:ed:f9:9e:a9:43:bd:95:3b:63:3e:7b:2f:16:37:df:fe:76: 18:03:51:3f:b3:30:ca:58:d2:4e:39:c1:21:c7:be:26:99:af: 98:87:07:60:b4:e6:5e:22:5f:72:36:b5:f7:93:70:33:57:db: 79:23:85:d5:e1:44:32:ee:77:ff:ce:23:12:39:d8:28:bc:86: a5:32:18:09:79:26:09:99:7f:c5:03:3d:f0:ca:b0:e3:36:e0: ce:b2:ac:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OB2nRmDB0RR/Hs+TK9FYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzcxMzJjNzMxMDYzYmFmMzg5NGJhNGE4MzJmZTZiODVmMjgzOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgw0n9V8Xzkvj8PwK94rpAYi5zV+ Ca7Mfs52v2epW9kJzM13Klz18990VgE+RRWGyi/ResO+SKQzQHJ6WwlBdxaIfIl0 3dh2+dDGOX2gHaPPaVhILfaUSSyB2ZRF7Ar18Rt/5/2Zmhy882GlEuiBdDkc8xqE 2/EqITMipxF0rST2oOL6jnTJuChvlA5BznZysAB1Xtf5qbw9guoAc2WJtPrKLTDm 7rNT/nwqtcvcMyhXVV45B6YFzlPFF2QXMknoP4qs66lAcDd8e+aJvi5IsLTNOFnE R1Tzq+MSBjtofxFrX6OUBRN0qAWqn0sLEkmoCbD3P3wIEA1cFPlxEK2HjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJNxMscxBjuvOJS6SoMv5rhfKDiqMB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvazNFeXh6RUdPNjg0bExwS2d5X211RjhvT0tvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHfXMA0G CSqGSIb3DQEBCwUAA4IBAQAcSjKhhPkS2pLUvDNMzJ57xQ9YxrD2Ee0v7JrokIzd +ZTHSbj4Pc/YH1jNHzylDyH07K32xGVRE1FFFE1AZqsqcFFfwl9qplpwh+meDgTd Ht3iZV8kTi3xSo+Ln4iRO3BrMBVvHobFtIdii5SWGun72uE33gqbipF65jD0JZfZ SSfCsqsYSFRSmRN/la40yMVUUse9o7d10i/d93pfpC/Mx4Gv7fmeqUO9lTtjPnsv Fjff/nYYA1E/szDKWNJOOcEhx74mma+YhwdgtOZeIl9yNrX3k3AzV9t5I4XV4UQy 7nf/ziMSOdgovIalMhgJeSYJmX/FAz3wyrDjNuDOsqyJ -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:26 2026 by rpki-client