This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/K3qBhc7GbUtYTzIB8QsX1bZg5Yk.roa File: K3qBhc7GbUtYTzIB8QsX1bZg5Yk.roa (raw, json) Hash identifier: JSFwHIx7vP3EWzZF1h6edZ/FGqmE4+3G54QHH7p4aUY= Subject key identifier: 2B:7A:81:85:CE:C6:6D:4B:58:4F:32:01:F1:0B:17:D5:B6:60:E5:89 Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F846D133F66AE0659ACD6F35889BF97 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/K3qBhc7GbUtYTzIB8QsX1bZg5Yk.roa Signing time: Fri 02 Jan 2026 16:22:23 +0000 ROA not before: Fri 02 Jan 2026 16:22:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199333 IP address blocks: 212.252.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:6d:13:3f:66:ae:06:59:ac:d6:f3:58:89:bf:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b7a8185cec66d4b584f3201f10b17d5b660e589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7c:4d:92:ba:b7:4f:f1:0f:6e:05:2a:24:1e: 41:ae:df:33:49:aa:bd:a8:c0:3a:fc:d3:78:20:23: 99:4b:53:92:80:ac:7c:cc:63:c3:73:78:ae:ef:49: 25:73:29:61:94:98:57:c9:5e:45:d4:ff:83:47:15: 25:b2:86:1b:0e:01:b7:b9:ca:d3:ba:f9:f6:1d:0b: 7c:e2:17:8d:ea:58:bb:65:c3:b2:ee:88:d8:1f:9a: ff:80:99:d8:e5:a6:37:2a:c8:11:7b:08:e0:c1:e5: d2:61:95:4f:eb:bb:bd:57:2a:eb:c5:dc:b7:25:b9: 04:b1:aa:ed:63:a7:50:30:f1:6a:89:d2:fe:f0:58: cf:c0:88:cb:04:06:e3:2a:a6:c8:c1:2b:d8:fa:69: 3b:fd:28:2d:07:a6:bb:a1:af:5f:b1:a2:a5:e2:2a: 8e:dc:8e:46:f1:e3:9b:31:d6:9d:34:e1:f1:5a:de: 4c:94:ad:4a:69:75:50:e2:49:6c:19:c3:92:51:c1: 17:a9:9c:48:e2:57:a2:7a:5a:b2:a4:0b:99:b1:1c: 6e:79:33:52:92:ec:4d:59:75:52:54:ae:34:e6:a9: 0a:ec:90:6f:ca:19:f9:b0:9b:05:c2:d4:d1:0d:30: 3f:34:c1:a6:39:b3:a3:2d:a3:c5:c9:b0:93:5a:65: f1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7A:81:85:CE:C6:6D:4B:58:4F:32:01:F1:0B:17:D5:B6:60:E5:89 X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/K3qBhc7GbUtYTzIB8QsX1bZg5Yk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.252.124.0/24 Signature Algorithm: sha256WithRSAEncryption 50:1f:44:84:7a:4b:19:23:ae:21:b9:d5:8e:eb:52:41:83:89: 54:7b:ad:d4:9c:8a:9e:cf:98:31:d9:08:1e:a5:a6:e9:42:65: 05:a4:e5:98:0e:e3:6d:18:8a:05:f5:62:de:66:e9:28:4f:1a: ec:9e:ef:f1:1e:a2:06:f7:89:fa:e7:85:44:41:a9:d1:e1:6b: 28:2d:0e:af:56:fb:88:bf:63:24:7b:54:88:9c:0b:74:52:6d: 6b:1b:96:a7:e1:3a:77:1d:29:f6:04:69:d2:39:24:71:b0:8e: 57:d6:69:ac:7d:7e:7b:1a:b9:fd:4d:a1:41:d6:61:ef:82:67: 26:bf:c1:a6:3c:fc:7a:fa:2a:b4:4c:58:26:84:6f:7f:47:83: fe:9b:5e:9d:d8:27:a8:95:97:7e:d0:e2:69:f1:1b:48:af:e2: 83:b6:27:3a:e2:9f:35:94:73:be:b1:e8:b3:ef:2f:8c:9a:96: a1:2b:85:e3:9a:2a:81:dd:60:79:64:fb:0f:69:ad:58:df:06: da:67:71:41:be:0d:d4:8e:01:68:16:1d:8a:6e:65:39:aa:21: c6:72:db:71:4b:8c:6a:ae:36:23:40:75:1a:f9:77:19:e0:4e: 93:47:48:83:bd:5b:e9:36:0c:d3:e4:71:a0:23:c3:19:28:c6: 58:ce:61:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hG0TP2auBlms1vNYib+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjdhODE4NWNlYzY2ZDRiNTg0ZjMyMDFmMTBiMTdkNWI2NjBlNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nxNkrq3T/EPbgUqJB5Brt8zSaq9 qMA6/NN4ICOZS1OSgKx8zGPDc3iu70klcylhlJhXyV5F1P+DRxUlsoYbDgG3ucrT uvn2HQt84heN6li7ZcOy7ojYH5r/gJnY5aY3KsgRewjgweXSYZVP67u9Vyrrxdy3 JbkEsartY6dQMPFqidL+8FjPwIjLBAbjKqbIwSvY+mk7/SgtB6a7oa9fsaKl4iqO 3I5G8eObMdadNOHxWt5MlK1KaXVQ4klsGcOSUcEXqZxI4leielqypAuZsRxueTNS kuxNWXVSVK405qkK7JBvyhn5sJsFwtTRDTA/NMGmObOjLaPFybCTWmXxRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCt6gYXOxm1LWE8yAfELF9W2YOWJMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvSzNxQmhjN0diVXRZVHpJQjhRc1gxYlpnNVlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Px8MA0G CSqGSIb3DQEBCwUAA4IBAQBQH0SEeksZI64hudWO61JBg4lUe63UnIqez5gx2Qge pabpQmUFpOWYDuNtGIoF9WLeZukoTxrsnu/xHqIG94n654VEQanR4WsoLQ6vVvuI v2Mke1SInAt0Um1rG5an4Tp3HSn2BGnSOSRxsI5X1mmsfX57Grn9TaFB1mHvgmcm v8GmPPx6+iq0TFgmhG9/R4P+m16d2CeolZd+0OJp8RtIr+KDtic64p81lHO+seiz 7y+MmpahK4XjmiqB3WB5ZPsPaa1Y3wbaZ3FBvg3UjgFoFh2KbmU5qiHGcttxS4xq rjYjQHUa+XcZ4E6TR0iDvVvpNgzT5HGgI8MZKMZYzmGN -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:56 2026 by rpki-client