This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/kNeO88W6WiZjVCqS0huGRYDNIkU.roa File: kNeO88W6WiZjVCqS0huGRYDNIkU.roa (raw, json) Hash identifier: lTC2ffNYxbrVzusWfHz2XumlwYx6P/xuLd8Z8WVhDpk= Subject key identifier: 90:D7:8E:F3:C5:BA:5A:26:63:54:2A:92:D2:1B:86:45:80:CD:22:45 Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547 Certificate serial: 019B7AC8A1FB513F4D7CD87275FF59372B06 Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/kNeO88W6WiZjVCqS0huGRYDNIkU.roa Signing time: Thu 01 Jan 2026 18:18:47 +0000 ROA not before: Thu 01 Jan 2026 18:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61153 IP address blocks: 193.17.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a1:fb:51:3f:4d:7c:d8:72:75:ff:59:37:2b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547 Validity Not Before: Jan 1 18:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90d78ef3c5ba5a2663542a92d21b864580cd2245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6f:cd:77:25:85:63:c8:92:68:31:95:8d:46: d0:73:b1:1a:d9:ee:80:b0:cd:ab:21:15:3d:9e:3e: 91:5c:90:5c:fd:b9:47:eb:5c:37:5c:19:ba:65:78: c6:40:9b:bd:20:96:a5:ac:49:c0:7d:60:e5:22:f1: ed:de:85:e0:17:8c:9d:18:4d:8e:d5:ab:a6:5a:ec: 6e:b2:e4:e8:8b:34:35:d3:86:db:41:3b:80:64:2e: d3:60:71:44:9a:5d:02:af:9c:66:c5:fd:e7:9b:96: c1:7a:29:f1:df:fb:3c:e5:69:8f:3e:6c:c5:47:e7: c4:14:be:b8:23:de:9c:2d:ea:e7:a0:ab:93:4f:00: 82:fc:bd:00:b9:5d:6a:03:85:ec:51:a3:29:85:87: 2b:5b:10:7f:37:8e:72:19:e3:f1:62:6c:c8:4e:7b: 81:0b:1b:a0:68:c1:ac:9c:4f:d6:f8:8e:5a:51:47: 3c:92:ec:0e:3f:6e:15:26:9a:5c:9a:27:5e:dc:a0: 72:c1:99:fb:7f:b7:a1:83:24:5b:8a:55:ca:94:de: f8:3f:f7:bc:2c:a3:fd:29:e9:c6:c9:33:13:6c:9f: 38:47:a5:8b:34:94:24:e5:61:06:29:52:cd:ec:4f: d8:c6:05:fa:9d:09:54:85:0d:b8:b0:17:a4:64:0d: a6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D7:8E:F3:C5:BA:5A:26:63:54:2A:92:D2:1B:86:45:80:CD:22:45 X509v3 Authority Key Identifier: keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/kNeO88W6WiZjVCqS0huGRYDNIkU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.96.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:e0:6a:ce:cb:6d:1e:f0:be:48:f9:ad:e0:58:68:ad:ec:64: f3:ea:2a:fa:4c:22:a5:fa:b7:17:04:98:4b:8a:94:81:fc:be: 28:0f:6c:08:d0:b8:95:ab:5d:8e:57:8e:33:08:54:3a:af:be: 8f:32:55:d5:67:36:d5:33:c9:a1:a6:be:ca:34:f2:e2:05:0a: 79:f2:ee:97:c1:45:73:85:b4:25:83:ae:8a:d8:8a:84:f2:6c: af:59:7f:bd:02:0e:dd:5c:e6:d3:80:d4:60:6e:8f:a3:03:e0: 0a:4e:03:26:84:9a:88:84:74:17:76:10:e3:6c:97:fe:85:10: ac:3f:d0:8e:49:a6:74:d5:4f:c6:5b:c6:11:fc:4a:f2:ee:45: 75:e4:d7:6a:54:90:f5:9d:36:ad:e0:90:47:03:56:ab:ba:41: 0b:e7:21:59:d0:fc:f2:2d:f4:be:a2:2b:27:7e:32:a2:62:2c: f2:93:90:8b:3d:6e:df:d4:ed:ac:98:a3:c1:50:b5:4d:9e:ec: 7e:13:bf:65:f8:a8:65:e0:d5:b9:70:3e:01:a2:de:9a:75:2d: 39:5d:93:a5:b9:20:f7:79:8f:50:e8:2b:0c:87:00:57:69:ee: 77:60:58:44:a0:f9:d8:47:40:6a:02:7b:e9:ab:92:5e:5b:50: 79:f0:39:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yKH7UT9NfNhydf9ZNysGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMjBhMGNlMDEzZTJkNTJhNmZmMzU0YTI3MDg5NGJiOTk4 ZTQ1NDcwHhcNMjYwMTAxMTgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGQ3OGVmM2M1YmE1YTI2NjM1NDJhOTJkMjFiODY0NTgwY2QyMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW/NdyWFY8iSaDGVjUbQc7Ea2e6A sM2rIRU9nj6RXJBc/blH61w3XBm6ZXjGQJu9IJalrEnAfWDlIvHt3oXgF4ydGE2O 1aumWuxusuToizQ104bbQTuAZC7TYHFEml0Cr5xmxf3nm5bBeinx3/s85WmPPmzF R+fEFL64I96cLernoKuTTwCC/L0AuV1qA4XsUaMphYcrWxB/N45yGePxYmzITnuB CxugaMGsnE/W+I5aUUc8kuwOP24VJppcmide3KBywZn7f7ehgyRbilXKlN74P/e8 LKP9KenGyTMTbJ84R6WLNJQk5WEGKVLN7E/YxgX6nQlUhQ24sBekZA2mMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJDXjvPFulomY1QqktIbhkWAzSJFMB8GA1UdIwQY MBaAFBEgoM4BPi1Spv81SicIlLuZjkVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MjE0OTgtMjhkMy00Mzc2LWI2MjUt MzFhZjNlMjk0NjcxLzEva05lTzg4VzZXaVpqVkNxUzBodUdSWUROSWtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MjE0OTgtMjhkMy00Mzc2LWI2MjUtMzFhZjNlMjk0Njcx LzEvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwRFgMA0G CSqGSIb3DQEBCwUAA4IBAQA74GrOy20e8L5I+a3gWGit7GTz6ir6TCKl+rcXBJhL ipSB/L4oD2wI0LiVq12OV44zCFQ6r76PMlXVZzbVM8mhpr7KNPLiBQp58u6XwUVz hbQlg66K2IqE8myvWX+9Ag7dXObTgNRgbo+jA+AKTgMmhJqIhHQXdhDjbJf+hRCs P9COSaZ01U/GW8YR/Ery7kV15NdqVJD1nTat4JBHA1arukEL5yFZ0PzyLfS+oisn fjKiYizyk5CLPW7f1O2smKPBULVNnux+E79l+Khl4NW5cD4Bot6adS05XZOluSD3 eY9Q6CsMhwBXae53YFhEoPnYR0BqAnvpq5JeW1B58Dln -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:05 2026 by rpki-client