This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/koAkQl0MePCNW4Y4JZqpOiTCN9E.roa File: koAkQl0MePCNW4Y4JZqpOiTCN9E.roa (raw, json) Hash identifier: x75NgXHqA7n0kAgkhO/V09XN1e73tsblCTop3J68rwI= Subject key identifier: 92:80:24:42:5D:0C:78:F0:8D:5B:86:38:25:9A:A9:3A:24:C2:37:D1 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C80204625296F6E7A6E6D87FEC3DE8A Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/koAkQl0MePCNW4Y4JZqpOiTCN9E.roa Signing time: Fri 02 Jan 2026 02:18:50 +0000 ROA not before: Fri 02 Jan 2026 02:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48125 IP address blocks: 217.109.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:20:46:25:29:6f:6e:7a:6e:6d:87:fe:c3:de:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=928024425d0c78f08d5b8638259aa93a24c237d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:8b:61:9b:7c:49:bf:2c:55:65:4d:82:07: 31:a1:68:36:91:07:d9:96:2c:b7:e3:8f:ed:fb:4d: 63:8e:1d:df:ae:4c:70:4a:4e:01:5e:0a:60:8d:e5: 10:2d:bd:ee:96:a6:13:50:59:97:f9:d4:6c:ef:81: 80:ed:55:24:57:e2:92:ae:6d:e9:21:f6:93:b5:3c: 15:6d:c1:f7:67:bb:91:2b:47:18:d2:6d:a7:e8:96: f9:d9:81:5d:11:03:75:9a:47:d4:f5:ed:01:94:4c: 58:b2:cd:40:1a:01:50:86:ab:b0:a0:30:26:ce:92: 27:54:be:3a:3b:49:18:1c:a9:39:6c:fd:68:6d:17: 05:0e:d2:7e:28:30:8a:31:47:ae:27:91:d2:89:3e: d2:67:5d:ca:c2:c3:01:3e:00:a0:0a:9c:bc:63:e3: 6a:69:34:b8:69:ab:66:a9:27:02:d6:de:89:00:12: ce:00:9a:0e:c8:49:43:9e:e0:0d:d2:88:7c:e8:e8: 1f:6a:65:3f:64:9a:d3:a3:3b:52:91:1b:1a:fc:c1: 31:77:84:10:20:b4:2c:91:49:a1:ee:8b:2c:62:7a: 96:20:f3:86:a1:bd:3d:12:0c:a4:4a:0d:da:52:78: 51:cc:c2:d6:61:d7:d2:f9:3b:6c:ec:f7:95:55:7a: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:80:24:42:5D:0C:78:F0:8D:5B:86:38:25:9A:A9:3A:24:C2:37:D1 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/koAkQl0MePCNW4Y4JZqpOiTCN9E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.109.116.0/24 Signature Algorithm: sha256WithRSAEncryption 91:9c:1d:c8:26:af:bc:27:39:ac:5b:62:17:b8:9e:b2:a7:20: c2:96:97:d1:55:6d:da:7e:71:f8:1a:ae:2f:ca:cf:65:31:82: 72:21:b3:6d:8a:cc:8d:84:40:ce:a3:82:65:35:ef:7b:b6:85: bd:8a:86:e8:7d:ed:84:68:ca:15:9a:08:d0:f0:18:95:7c:c8: 94:f4:56:27:13:09:62:b6:ae:3c:3b:57:97:6f:34:86:5d:ee: f7:77:5e:e6:0e:76:d5:26:b1:b5:bb:b3:ed:64:00:0c:f8:25: bf:f8:62:51:f1:a0:6a:be:dd:3b:ba:28:16:f0:ec:06:0e:db: f5:85:b4:05:e9:35:c0:0b:bf:38:f2:80:c9:08:65:e2:c0:22: b8:bf:80:97:7e:16:ed:21:f1:c0:a4:12:8c:09:f6:04:8c:8b: b7:8d:94:77:9f:10:0c:f2:75:fe:b2:ba:9e:a6:29:59:5e:11: 8b:42:ad:d7:07:36:5e:89:4e:90:1c:30:81:de:7d:b9:40:48: 14:65:8f:05:ac:03:61:cf:64:3b:a2:5c:e0:62:c0:a0:4d:9d: cf:2c:6b:06:37:08:71:82:91:03:fd:db:97:08:b4:63:00:d2: 47:3b:91:dc:c9:8d:3d:ec:4b:ca:98:16:3c:f3:42:0e:7e:10: b6:d4:31:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gCBGJSlvbnpubYf+w96KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjgwMjQ0MjVkMGM3OGYwOGQ1Yjg2MzgyNTlhYTkzYTI0YzIzN2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZWLYZt8Sb8sVWVNggcxoWg2kQfZ liy344/t+01jjh3frkxwSk4BXgpgjeUQLb3ulqYTUFmX+dRs74GA7VUkV+KSrm3p IfaTtTwVbcH3Z7uRK0cY0m2n6Jb52YFdEQN1mkfU9e0BlExYss1AGgFQhquwoDAm zpInVL46O0kYHKk5bP1obRcFDtJ+KDCKMUeuJ5HSiT7SZ13KwsMBPgCgCpy8Y+Nq aTS4aatmqScC1t6JABLOAJoOyElDnuAN0oh86OgfamU/ZJrToztSkRsa/MExd4QQ ILQskUmh7ossYnqWIPOGob09EgykSg3aUnhRzMLWYdfS+Tts7PeVVXoT6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJKAJEJdDHjwjVuGOCWaqTokwjfRMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEva29Ba1FsME1lUENOVzRZNEpacXBPaVRDTjlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2W10MA0G CSqGSIb3DQEBCwUAA4IBAQCRnB3IJq+8JzmsW2IXuJ6ypyDClpfRVW3afnH4Gq4v ys9lMYJyIbNtisyNhEDOo4JlNe97toW9iobofe2EaMoVmgjQ8BiVfMiU9FYnEwli tq48O1eXbzSGXe73d17mDnbVJrG1u7PtZAAM+CW/+GJR8aBqvt07uigW8OwGDtv1 hbQF6TXAC7848oDJCGXiwCK4v4CXfhbtIfHApBKMCfYEjIu3jZR3nxAM8nX+srqe pilZXhGLQq3XBzZeiU6QHDCB3n25QEgUZY8FrANhz2Q7olzgYsCgTZ3PLGsGNwhx gpED/duXCLRjANJHO5HcyY097EvKmBY880IOfhC21DFh -----END CERTIFICATE-----Generated at Sun Jan 25 21:57:52 2026 by rpki-client