This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/cJk6WJU5ehWy8-U-yXkTbWHSkMY.roa File: cJk6WJU5ehWy8-U-yXkTbWHSkMY.roa (raw, json) Hash identifier: ftDP4pZ3eNxETRoUjads3a6itNwmo/OSVHPqfA9ovHM= Subject key identifier: 70:99:3A:58:95:39:7A:15:B2:F3:E5:3E:C9:79:13:6D:61:D2:90:C6 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE67538691A6AE0AA9A25B5D5F095F Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/cJk6WJU5ehWy8-U-yXkTbWHSkMY.roa Signing time: Fri 02 Jan 2026 04:19:17 +0000 ROA not before: Fri 02 Jan 2026 04:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204026 IP address blocks: 213.181.202.0/24 maxlen: 24 213.181.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:67:53:86:91:a6:ae:0a:a9:a2:5b:5d:5f:09:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70993a5895397a15b2f3e53ec979136d61d290c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a8:c0:9d:5f:9b:ee:7c:69:fa:c0:72:ad:b3: c1:d9:29:cc:b0:84:fb:c9:be:ae:b7:75:74:ea:8a: f7:41:f7:cd:db:ab:60:af:6e:c1:f1:14:74:5a:b6: f3:53:91:87:7e:bb:b8:5e:3c:9a:73:0b:49:b5:ec: 55:ff:bb:96:c3:26:23:11:d7:2f:a3:52:e7:5c:e8: 56:87:34:ca:99:57:19:37:7c:e2:f0:9e:be:db:ab: 33:44:c6:6a:98:13:2a:59:15:25:6a:a8:98:8d:03: 52:79:58:38:b3:89:36:c8:0c:eb:06:3d:f7:d5:26: 3f:10:ab:20:05:42:e4:2f:8b:f1:2d:6e:15:6c:fe: e5:0f:0b:22:ed:c2:6f:25:02:e2:34:ff:90:7d:82: bf:40:83:bc:55:99:af:51:74:b3:2a:d5:f1:54:56: 71:1d:39:d0:90:79:cf:1f:93:f8:6b:fa:e8:c3:8e: e3:ae:c4:5c:0a:5f:00:ea:72:f7:aa:31:e5:1c:ca: 24:f1:db:0b:df:08:d0:cd:33:f6:3c:74:61:d1:26: 01:99:63:93:09:59:e7:39:76:56:29:33:95:14:c8: 7a:f6:e1:f6:d0:3e:a1:a1:98:3d:15:88:48:13:c4: b5:9d:57:4c:b0:be:27:a9:4a:d1:f4:a9:25:2d:48: 18:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:99:3A:58:95:39:7A:15:B2:F3:E5:3E:C9:79:13:6D:61:D2:90:C6 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/cJk6WJU5ehWy8-U-yXkTbWHSkMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.181.202.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:19:12:24:19:40:04:29:da:e6:cd:91:59:fc:7e:34:8c:d9: 2e:83:80:15:19:91:4d:7f:1e:f3:6b:ae:e0:1a:fc:47:d3:64: 80:d3:c6:35:8f:07:c1:8b:6d:32:16:f8:fa:c3:0b:fb:2f:ad: d5:c6:bf:df:24:6b:e1:57:15:f8:51:cc:b2:12:47:23:ce:bf: 43:d0:35:75:98:30:bb:0d:2f:4f:83:61:46:5d:d2:00:1d:31: ae:1e:fd:ee:21:48:01:26:10:a2:44:c5:9c:e8:e3:58:b1:9f: 94:ce:93:8c:be:95:0c:1f:6c:e3:00:ed:e4:36:1d:26:60:e9: 83:45:ee:6a:b4:d9:af:10:2b:45:7e:46:27:73:f2:43:16:88: 08:c7:24:a4:1f:64:ba:a3:dc:cc:78:1e:bd:1b:2d:19:e5:fe: 96:8b:de:51:9d:51:45:1d:f7:58:c3:56:9d:0b:05:b9:32:87: 6a:21:9e:6c:2f:bf:9c:b0:30:29:76:93:f3:13:3a:bc:53:f6: ad:51:86:a3:c8:db:2b:b9:c2:b1:2b:ba:20:59:eb:20:bf:dd: b8:64:d6:fb:75:10:a8:0a:cf:87:23:4e:2f:af:d5:78:02:1d: 65:7d:02:9f:e2:f3:6a:48:1b:a3:de:b3:65:67:94:e1:88:ef: a7:9c:5e:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mdThpGmrgqpoltdXwlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDk5M2E1ODk1Mzk3YTE1YjJmM2U1M2VjOTc5MTM2ZDYxZDI5MGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKjAnV+b7nxp+sByrbPB2SnMsIT7 yb6ut3V06or3QffN26tgr27B8RR0WrbzU5GHfru4XjyacwtJtexV/7uWwyYjEdcv o1LnXOhWhzTKmVcZN3zi8J6+26szRMZqmBMqWRUlaqiYjQNSeVg4s4k2yAzrBj33 1SY/EKsgBULkL4vxLW4VbP7lDwsi7cJvJQLiNP+QfYK/QIO8VZmvUXSzKtXxVFZx HTnQkHnPH5P4a/row47jrsRcCl8A6nL3qjHlHMok8dsL3wjQzTP2PHRh0SYBmWOT CVnnOXZWKTOVFMh69uH20D6hoZg9FYhIE8S1nVdMsL4nqUrR9KklLUgYIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHCZOliVOXoVsvPlPsl5E21h0pDGMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvY0prNldKVTVlaFd5OC1VLXlYa1RiV0hTa01ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1bXKMA0G CSqGSIb3DQEBCwUAA4IBAQBPGRIkGUAEKdrmzZFZ/H40jNkug4AVGZFNfx7za67g GvxH02SA08Y1jwfBi20yFvj6wwv7L63Vxr/fJGvhVxX4UcyyEkcjzr9D0DV1mDC7 DS9Pg2FGXdIAHTGuHv3uIUgBJhCiRMWc6ONYsZ+UzpOMvpUMH2zjAO3kNh0mYOmD Re5qtNmvECtFfkYnc/JDFogIxySkH2S6o9zMeB69Gy0Z5f6Wi95RnVFFHfdYw1ad CwW5ModqIZ5sL7+csDApdpPzEzq8U/atUYajyNsrucKxK7ogWesgv924ZNb7dRCo Cs+HI04vr9V4Ah1lfQKf4vNqSBuj3rNlZ5ThiO+nnF6d -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:33 2026 by rpki-client