This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/k0xBB9M4rejoK-xa296UslTUOvY.roa File: k0xBB9M4rejoK-xa296UslTUOvY.roa (raw, json) Hash identifier: 75o+NV6p86/LQQ/MopmL1MWxvjfE9hcGYjNSLsPOYiw= Subject key identifier: 93:4C:41:07:D3:38:AD:E8:E8:2B:EC:5A:DB:DE:94:B2:54:D4:3A:F6 Certificate issuer: /CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38 Certificate serial: 019B7AC8FCAD53743B13F8E0514D846D90CF Authority key identifier: 31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/k0xBB9M4rejoK-xa296UslTUOvY.roa Signing time: Thu 01 Jan 2026 18:19:10 +0000 ROA not before: Thu 01 Jan 2026 18:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33103 IP address blocks: 202.22.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:fc:ad:53:74:3b:13:f8:e0:51:4d:84:6d:90:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38 Validity Not Before: Jan 1 18:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=934c4107d338ade8e82bec5adbde94b254d43af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c0:a5:2f:12:04:e7:b1:c6:a7:ab:cf:0d:e3: 5d:43:1f:02:a2:2a:66:6c:44:16:ef:04:fa:60:d4: 58:f0:10:bf:26:18:79:79:6c:f5:0c:b5:2e:5b:35: 3a:64:99:b7:54:ee:03:c7:1e:1e:e3:89:e3:80:1f: cc:1f:72:35:db:7c:91:60:6c:c4:21:c8:99:77:ad: 7f:eb:92:94:5b:01:18:fa:a5:1f:cd:19:12:7e:84: 41:f7:a1:a2:5f:7a:d9:d1:e4:94:7f:43:17:7e:30: 0b:90:d1:d4:f8:6c:df:a3:47:58:98:6f:16:79:8f: f6:b1:45:ef:1e:ca:c3:d1:6e:c1:b1:49:01:9c:af: f2:6a:93:29:43:bd:e6:e4:24:ed:36:10:c5:7e:bf: e2:a2:ad:ad:69:9b:36:02:40:2e:32:a2:78:8f:bb: 36:97:83:9f:c1:d9:5a:8c:ab:9a:07:70:20:94:fa: c9:fa:5e:85:cd:68:94:34:1f:ff:dc:1c:95:94:c4: 1d:1a:ac:81:06:26:1f:65:02:f0:66:51:c0:47:ae: 9c:18:1f:c6:71:6c:5d:25:db:a3:d4:d6:7b:a8:5d: 8e:cc:c1:ce:77:27:ae:82:c7:66:82:e2:ae:0b:e0: cf:b8:78:35:7e:ef:6a:f5:5c:e3:99:fd:40:9e:74: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4C:41:07:D3:38:AD:E8:E8:2B:EC:5A:DB:DE:94:B2:54:D4:3A:F6 X509v3 Authority Key Identifier: keyid:31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/k0xBB9M4rejoK-xa296UslTUOvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.22.167.0/24 Signature Algorithm: sha256WithRSAEncryption 45:2f:c4:e6:68:06:c8:0b:c1:38:5d:70:35:11:1b:44:29:cc: 90:79:4c:04:9a:38:31:97:c6:bf:86:63:a5:25:4b:5f:d3:15: 37:c1:f0:7d:b5:67:8f:95:dd:43:f2:bb:bb:ae:36:c6:2b:04: 87:a4:0b:80:fd:e7:62:7f:f6:d4:f8:58:df:25:80:4b:98:b3: cf:6d:64:5b:82:6d:29:a6:aa:55:f2:42:88:db:39:25:64:09: ca:04:b8:e6:7d:f0:d8:4e:33:99:7a:c2:16:c1:e2:de:d9:5b: c1:e2:1e:61:08:40:67:bc:6d:32:68:c8:c0:0e:53:85:28:bc: 47:e3:84:35:d4:cf:d1:0d:03:f9:07:d9:3d:cf:88:f6:a3:4f: 0d:44:d5:a2:de:7b:06:8f:c4:b0:e1:5c:e0:60:2b:36:ad:4f: 81:1a:e8:f3:2c:72:9c:d4:87:67:46:29:5e:4c:8f:35:d6:40: b8:d9:ed:fd:d7:14:a8:4c:36:ce:5b:1c:d5:0e:68:b2:cb:6e: da:19:3f:be:62:06:9e:43:ba:70:f7:8c:7b:d2:3d:ac:c6:e1: 56:c6:f7:6d:d8:98:7b:ac:7b:80:f4:6f:14:f4:d9:b7:8b:18: ab:2e:cb:c1:73:c6:3a:25:42:01:e7:dd:70:60:32:ae:25:03: 5c:58:9c:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yPytU3Q7E/jgUU2EbZDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZWI5YjJkYjRhM2JkZGY4YzkyZmM1MGI5NzEzMDQzZGQ1 NmRjMzgwHhcNMjYwMTAxMTgxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzRjNDEwN2QzMzhhZGU4ZTgyYmVjNWFkYmRlOTRiMjU0ZDQzYWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsClLxIE57HGp6vPDeNdQx8Coipm bEQW7wT6YNRY8BC/Jhh5eWz1DLUuWzU6ZJm3VO4Dxx4e44njgB/MH3I123yRYGzE IciZd61/65KUWwEY+qUfzRkSfoRB96GiX3rZ0eSUf0MXfjALkNHU+Gzfo0dYmG8W eY/2sUXvHsrD0W7BsUkBnK/yapMpQ73m5CTtNhDFfr/ioq2taZs2AkAuMqJ4j7s2 l4OfwdlajKuaB3AglPrJ+l6FzWiUNB//3ByVlMQdGqyBBiYfZQLwZlHAR66cGB/G cWxdJduj1NZ7qF2OzMHOdyeugsdmguKuC+DPuHg1fu9q9Vzjmf1AnnR4PwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJNMQQfTOK3o6CvsWtvelLJU1Dr2MB8GA1UdIwQY MBaAFDHrmy20o73fjJL8ULlxMEPdVtw4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWV1YkxiU2p2ZC1Na3Z4UXVYRXdROTFXM0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNDcwMDUtNTU5ZC00ZWI0LWIzZTgt YmQyNGYwMDM1NzhmLzEvazB4QkI5TTRyZWpvSy14YTI5NlVzbFRVT3ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yNDcwMDUtNTU5ZC00ZWI0LWIzZTgtYmQyNGYwMDM1Nzhm LzEvTWV1YkxiU2p2ZC1Na3Z4UXVYRXdROTFXM0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyhanMA0G CSqGSIb3DQEBCwUAA4IBAQBFL8TmaAbIC8E4XXA1ERtEKcyQeUwEmjgxl8a/hmOl JUtf0xU3wfB9tWePld1D8ru7rjbGKwSHpAuA/edif/bU+FjfJYBLmLPPbWRbgm0p pqpV8kKI2zklZAnKBLjmffDYTjOZesIWweLe2VvB4h5hCEBnvG0yaMjADlOFKLxH 44Q11M/RDQP5B9k9z4j2o08NRNWi3nsGj8Sw4VzgYCs2rU+BGujzLHKc1IdnRile TI811kC42e391xSoTDbOWxzVDmiyy27aGT++YgaeQ7pw94x70j2sxuFWxvdt2Jh7 rHuA9G8U9Nm3ixirLsvBc8Y6JUIB591wYDKuJQNcWJxg -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:26 2026 by rpki-client