This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/kAXSfNSROn_rmw5gMzBrXVizXwo.roa File: kAXSfNSROn_rmw5gMzBrXVizXwo.roa (raw, json) Hash identifier: 4kRdX8MpG+nZzNE2xpZ/hnNoYobcWB4nE8u0YEUjVtU= Subject key identifier: 90:05:D2:7C:D4:91:3A:7F:EB:9B:0E:60:33:30:6B:5D:58:B3:5F:0A Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77594171B51012F71123499EAAE805F5 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/kAXSfNSROn_rmw5gMzBrXVizXwo.roa Signing time: Thu 01 Jan 2026 02:18:16 +0000 ROA not before: Thu 01 Jan 2026 02:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33829 IP address blocks: 188.241.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:41:71:b5:10:12:f7:11:23:49:9e:aa:e8:05:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9005d27cd4913a7feb9b0e6033306b5d58b35f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9e:4c:ea:a7:3a:f9:c2:d3:d7:b7:90:6f:f9: f5:28:9b:ff:b8:54:ba:6e:59:f0:ea:b3:83:59:28: 0c:60:2b:64:11:6e:89:a0:dd:51:df:e7:65:77:07: cb:e7:d7:01:4d:a8:55:1b:f8:5a:2d:06:6a:ee:7b: 0a:d5:2a:03:28:f0:55:39:16:8e:b9:96:39:38:0f: cd:ae:63:e4:90:36:78:df:2f:0a:6e:23:fa:36:ca: 75:ef:99:a2:5c:ec:56:5f:6e:94:90:29:2b:18:78: 36:24:e2:84:5c:9b:61:39:e4:3d:c5:6a:ec:5d:bf: a9:35:2e:81:52:67:cb:45:ff:02:53:69:9d:ab:13: 57:a1:bf:48:fc:5d:bf:d1:34:1f:4e:41:49:45:3d: 33:21:06:9d:c9:ad:5d:3e:49:30:79:fa:6b:18:36: d7:99:7b:96:98:a4:aa:62:37:3f:7e:51:33:7e:85: d5:b8:11:2b:8d:c3:29:b1:8c:33:c9:86:10:58:75: 32:7b:89:c8:44:0d:85:b4:7a:36:ca:9c:5d:d6:8f: 09:ed:8c:4e:cd:81:c4:7b:9e:06:ff:f7:a8:f8:a7: 93:be:6c:16:91:2b:c6:98:8a:95:90:ce:77:94:b7: 82:3e:f8:9b:6e:2d:d1:07:66:8a:4c:c8:ba:54:6a: 69:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:05:D2:7C:D4:91:3A:7F:EB:9B:0E:60:33:30:6B:5D:58:B3:5F:0A X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/kAXSfNSROn_rmw5gMzBrXVizXwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.241.64.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:04:11:4f:a0:93:9e:d4:22:e3:f2:5c:28:c3:8e:e9:2d:ea: 77:f3:12:eb:79:95:98:7d:db:3d:b1:09:bc:23:97:bd:60:43: 18:69:77:46:3c:7e:57:74:b9:26:ee:df:7a:e5:9e:1a:46:11: 3d:e3:7e:02:b8:55:0a:43:77:a6:a7:a2:4f:a3:c9:18:ae:ca: cd:e0:10:85:80:2f:ae:8d:cd:68:04:33:d0:3b:c8:3f:0c:a7: 62:39:0c:e6:e2:0d:36:a5:33:4d:be:46:35:4e:1e:79:2e:03: 3e:a0:6f:06:48:1e:f6:a2:23:89:e8:f1:e1:f4:49:78:58:26: cf:be:14:83:2a:64:bb:01:70:25:75:b3:19:69:0f:53:16:a3: 9e:a9:42:97:3f:2c:48:67:eb:79:5a:59:2c:d7:6c:e8:0b:4c: c7:49:b0:b7:e1:1e:ed:44:5e:31:bc:be:5f:13:dd:8e:78:05: 34:9b:50:d9:d3:40:27:95:2b:74:63:90:41:97:00:3c:68:a5: 37:13:58:01:a8:59:f2:be:85:72:ee:88:20:9d:fb:27:d2:d4: 3e:d7:f1:85:56:d7:cd:59:e1:c3:1e:bb:c5:bd:bf:37:39:f7: 70:12:18:61:17:10:22:13:00:1c:6f:ee:4c:25:c2:48:aa:a2: e1:34:49:43 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WUFxtRAS9xEjSZ6q6AX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDA1ZDI3Y2Q0OTEzYTdmZWI5YjBlNjAzMzMwNmI1ZDU4YjM1ZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp5M6qc6+cLT17eQb/n1KJv/uFS6 blnw6rODWSgMYCtkEW6JoN1R3+dldwfL59cBTahVG/haLQZq7nsK1SoDKPBVORaO uZY5OA/NrmPkkDZ43y8KbiP6Nsp175miXOxWX26UkCkrGHg2JOKEXJthOeQ9xWrs Xb+pNS6BUmfLRf8CU2mdqxNXob9I/F2/0TQfTkFJRT0zIQadya1dPkkwefprGDbX mXuWmKSqYjc/flEzfoXVuBErjcMpsYwzyYYQWHUye4nIRA2FtHo2ypxd1o8J7YxO zYHEe54G//eo+KeTvmwWkSvGmIqVkM53lLeCPvibbi3RB2aKTMi6VGppdQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJAF0nzUkTp/65sOYDMwa11Ys18KMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL2tBWFNmTlNST25fcm13NWdNekJyWFZpelh3by5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC88UAw DQYJKoZIhvcNAQELBQADggEBAAsEEU+gk57UIuPyXCjDjukt6nfzEut5lZh92z2x Cbwjl71gQxhpd0Y8fld0uSbu33rlnhpGET3jfgK4VQpDd6anok+jyRiuys3gEIWA L66NzWgEM9A7yD8Mp2I5DObiDTalM02+RjVOHnkuAz6gbwZIHvaiI4no8eH0SXhY Js++FIMqZLsBcCV1sxlpD1MWo56pQpc/LEhn63laWSzXbOgLTMdJsLfhHu1EXjG8 vl8T3Y54BTSbUNnTQCeVK3RjkEGXADxopTcTWAGoWfK+hXLuiCCd+yfS1D7X8YVW 181Z4cMeu8W9vzc593ASGGEXECITABxv7kwlwkiqouE0SUM= -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:51 2026 by rpki-client