This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/kCm_uKpWKjhNUczVOAQvBZ4TtMQ.roa File: kCm_uKpWKjhNUczVOAQvBZ4TtMQ.roa (raw, json) Hash identifier: S9J7ulFMDCXhT6uUyj2J+Qhp8QQOqTeuNdKWWsuYDSA= Subject key identifier: 90:29:BF:B8:AA:56:2A:38:4D:51:CC:D5:38:04:2F:05:9E:13:B4:C4 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 019B7D5D1D0C8FC1E9E9D58ED56C1BF26FAA Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/kCm_uKpWKjhNUczVOAQvBZ4TtMQ.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47696 IP address blocks: 194.8.96.0/19 maxlen: 25 194.145.64.0/19 maxlen: 25 2a01:8180::/36 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1d:0c:8f:c1:e9:e9:d5:8e:d5:6c:1b:f2:6f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9029bfb8aa562a384d51ccd538042f059e13b4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:97:8e:ed:f5:e1:66:c6:9a:4b:f2:61:b6: ab:8a:7a:05:98:01:68:ba:22:02:b0:97:a5:7a:ce: 78:e4:9b:70:a3:c7:f9:23:ce:9a:8c:bf:6d:98:cf: 94:cf:5d:af:8b:66:44:ef:b5:25:4a:31:07:4f:5e: 74:1f:e9:38:56:95:16:a4:8f:f6:6b:a1:54:75:db: e6:ac:d5:68:07:ad:dd:65:34:9a:ee:d1:e1:4f:2b: 9c:cb:96:35:dd:76:e7:69:23:f9:33:32:9b:cd:05: 4b:ee:b8:73:52:39:8d:e9:8d:e5:a2:12:c3:8a:b3: aa:8e:b7:9b:03:03:64:3d:32:19:6d:76:80:82:94: bc:1e:c6:2c:d0:79:35:13:f2:7e:4a:f4:e4:43:d4: 8e:10:00:19:e9:44:a1:a6:44:50:c4:12:18:9b:25: 3c:f1:d1:e7:d9:cc:55:0c:0c:1b:e0:35:0c:52:99: 77:d2:49:ab:73:ef:b5:01:86:e9:24:e5:c7:cc:e8: 14:23:5c:4c:b3:a8:3c:ca:f3:a5:cc:8a:2d:1b:70: a3:b5:17:07:98:a9:b5:98:6e:4d:df:95:b6:3b:69: 29:c8:19:d8:1e:e3:a0:ad:6c:da:63:d9:3f:78:3e: 8e:44:e8:93:2b:97:09:72:cd:84:97:47:73:1b:20: 2b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:29:BF:B8:AA:56:2A:38:4D:51:CC:D5:38:04:2F:05:9E:13:B4:C4 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/kCm_uKpWKjhNUczVOAQvBZ4TtMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.96.0/19 194.145.64.0/19 IPv6: 2a01:8180::/36 Signature Algorithm: sha256WithRSAEncryption 13:78:c4:f6:49:ce:b5:80:5f:9e:14:30:6e:7c:5e:47:96:f4: 74:79:84:40:5d:ae:ea:6f:58:50:0a:70:40:c5:6f:46:11:25: 47:fb:ed:57:77:5c:6c:83:59:59:86:9c:69:36:24:91:cd:ed: 34:b8:90:5f:46:84:17:14:77:a3:2f:60:76:fe:98:24:fa:07: 4f:cb:77:5e:4d:73:b4:0b:76:bf:6d:2a:ed:8a:ea:d1:20:7c: cb:11:5c:de:08:b3:28:e3:55:6c:9f:a6:03:0a:61:4a:15:3d: de:db:95:5f:70:02:1c:34:bd:8e:82:8a:db:f6:7f:25:71:62: 40:60:dc:78:09:87:a0:df:b9:71:cd:58:79:5d:09:ec:27:8e: 93:30:e5:91:e5:be:bc:91:29:00:24:a1:06:d5:ee:47:02:90: bd:72:78:3f:a7:98:1e:6b:5c:45:5b:a2:f4:e4:d6:76:b7:53: a6:0e:bb:b7:3f:79:64:9e:bf:7f:d0:21:f2:f4:7f:55:d6:c7: 70:0f:e1:25:29:e4:ff:7a:9c:9d:bd:63:90:ac:d9:70:0f:5a: 2f:d0:ae:02:71:ef:b5:08:ed:e7:ca:4e:c9:59:e6:f8:e7:ed: 54:40:32:b9:58:b8:cb:e9:f9:6b:e2:6f:94:7b:55:47:ca:7a: 97:e8:bb:2d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt9XR0Mj8Hp6dWO1Wwb8m+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDI5YmZiOGFhNTYyYTM4NGQ1MWNjZDUzODA0MmYwNTllMTNiNGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUOXju314WbGmkvyYbarinoFmAFo uiICsJeles545Jtwo8f5I86ajL9tmM+Uz12vi2ZE77UlSjEHT150H+k4VpUWpI/2 a6FUddvmrNVoB63dZTSa7tHhTyucy5Y13XbnaSP5MzKbzQVL7rhzUjmN6Y3lohLD irOqjrebAwNkPTIZbXaAgpS8HsYs0Hk1E/J+SvTkQ9SOEAAZ6UShpkRQxBIYmyU8 8dHn2cxVDAwb4DUMUpl30kmrc++1AYbpJOXHzOgUI1xMs6g8yvOlzIotG3CjtRcH mKm1mG5N35W2O2kpyBnYHuOgrWzaY9k/eD6OROiTK5cJcs2El0dzGyAruQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFJApv7iqVio4TVHM1TgELwWeE7TEMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEva0NtX3VLcFdLamhOVWN6Vk9BUXZCWjRUdE1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQFwghgAwQF wpFAMA4EAgACMAgDBgQqAYGAADANBgkqhkiG9w0BAQsFAAOCAQEAE3jE9knOtYBf nhQwbnxeR5b0dHmEQF2u6m9YUApwQMVvRhElR/vtV3dcbINZWYacaTYkkc3tNLiQ X0aEFxR3oy9gdv6YJPoHT8t3Xk1ztAt2v20q7Yrq0SB8yxFc3gizKONVbJ+mAwph ShU93tuVX3ACHDS9joKK2/Z/JXFiQGDceAmHoN+5cc1YeV0J7CeOkzDlkeW+vJEp ACShBtXuRwKQvXJ4P6eYHmtcRVui9OTWdrdTpg67tz95ZJ6/f9Ah8vR/VdbHcA/h JSnk/3qcnb1jkKzZcA9aL9CuAnHvtQjt58pOyVnm+OftVEAyuVi4y+n5a+JvlHtV R8p6l+i7LQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:51:00 2026 by rpki-client