This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ko0fPNlB0nMbM9kDJeK81bLhWTY.roa File: ko0fPNlB0nMbM9kDJeK81bLhWTY.roa (raw, json) Hash identifier: r1YN9Z2yu84IYFlcYtfC9A1ocu+AJRbb2W6AJ4N2E6Y= Subject key identifier: 92:8D:1F:3C:D9:41:D2:73:1B:33:D9:03:25:E2:BC:D5:B2:E1:59:36 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77595A49FE9E2011FFE86304EC4485D4 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ko0fPNlB0nMbM9kDJeK81bLhWTY.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57392 IP address blocks: 93.113.24.0/24 maxlen: 24 93.114.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5a:49:fe:9e:20:11:ff:e8:63:04:ec:44:85:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=928d1f3cd941d2731b33d90325e2bcd5b2e15936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:1e:d0:06:8c:89:10:bb:39:01:0d:91:a7: bb:30:21:8f:47:d3:f7:17:e2:b8:e0:57:64:60:b0: a5:e4:5e:ef:61:c5:8e:7d:f5:fb:4c:a0:2f:8c:39: e1:e4:74:9a:22:65:d2:c5:f1:94:fd:3c:e5:c9:ee: 77:fc:ed:4f:96:3e:4b:5d:de:c3:ae:ea:09:e5:26: dc:69:ed:1d:31:8f:1c:ba:1c:c4:38:2a:4a:e8:41: 6a:8b:7a:ab:8e:14:10:da:30:02:30:20:fc:64:84: 00:9b:2f:34:bc:14:ab:71:5e:dd:ff:a4:13:72:27: 6d:4e:93:5a:35:9d:a9:21:88:ac:d6:b6:e5:2c:15: 9a:fe:84:9c:11:f8:52:ab:06:f2:d0:a0:bd:a0:68: ab:9a:c8:45:1b:24:af:f4:b5:df:98:b1:d9:39:10: dc:1d:7f:00:3c:08:b9:86:06:99:05:17:77:75:51: 8a:24:a4:84:ba:d5:d9:26:d1:d7:9e:10:c6:b8:c9: af:80:8a:e8:c3:a5:1a:d8:36:51:3b:26:3c:10:8b: 05:97:e1:36:97:9f:2d:c1:8f:ae:5b:44:16:1b:ba: f7:83:aa:93:43:79:31:1d:1b:ff:fb:44:04:66:2a: 36:01:54:4f:89:00:ec:53:b8:5e:fc:74:30:da:97: c9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8D:1F:3C:D9:41:D2:73:1B:33:D9:03:25:E2:BC:D5:B2:E1:59:36 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ko0fPNlB0nMbM9kDJeK81bLhWTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.113.24.0/24 93.114.50.0/24 Signature Algorithm: sha256WithRSAEncryption 47:08:49:7d:d1:36:0d:a8:64:7c:c8:bd:e4:17:38:9d:72:b9: cf:15:c5:17:7a:29:61:66:24:a7:e2:47:bd:a9:73:7c:6e:bd: d6:9f:7f:e7:b1:c0:b5:ed:16:40:7d:dc:a2:f7:0b:eb:5d:33: b9:f9:e9:df:b2:15:ed:67:a1:dc:30:98:02:4d:e6:fd:17:1a: d5:84:cc:78:8b:ad:3b:66:d6:07:60:25:4a:03:8e:4c:9e:6d: 9e:51:7c:8e:37:92:f5:2b:bc:47:31:81:12:cd:91:a7:e5:60: b4:e8:6d:33:ea:11:50:15:82:b0:b0:ad:0b:90:a4:93:97:a8: e4:86:0f:3d:23:5f:a8:55:8d:1e:14:80:fb:1c:e7:47:8c:2d: c7:2a:0c:54:24:7f:92:f9:fc:1d:a2:40:71:36:5d:be:3e:01: 16:e1:03:dd:d9:71:de:c6:94:2b:c8:f8:26:f2:c1:14:37:28: 3e:bb:4b:c6:bf:3f:cc:c6:d4:8e:99:20:01:87:98:df:36:79: f4:c8:3e:84:9e:64:9d:c7:49:b7:5d:d9:ec:d3:31:f4:e4:12: 68:ab:dd:96:7f:47:15:0c:8e:a7:41:76:34:8b:39:2b:50:ca: 57:e1:2d:b0:23:2a:87:20:66:27:7f:2d:f7:ac:cd:ed:ab:d6: fd:63:7e:e2 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WVpJ/p4gEf/oYwTsRIXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjhkMWYzY2Q5NDFkMjczMWIzM2Q5MDMyNWUyYmNkNWIyZTE1OTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstse0AaMiRC7OQENkae7MCGPR9P3 F+K44FdkYLCl5F7vYcWOffX7TKAvjDnh5HSaImXSxfGU/Tzlye53/O1Plj5LXd7D ruoJ5Sbcae0dMY8cuhzEOCpK6EFqi3qrjhQQ2jACMCD8ZIQAmy80vBSrcV7d/6QT cidtTpNaNZ2pIYis1rblLBWa/oScEfhSqwby0KC9oGirmshFGySv9LXfmLHZORDc HX8APAi5hgaZBRd3dVGKJKSEutXZJtHXnhDGuMmvgIrow6Ua2DZROyY8EIsFl+E2 l58twY+uW0QWG7r3g6qTQ3kxHRv/+0QEZio2AVRPiQDsU7he/HQw2pfJFQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJKNHzzZQdJzGzPZAyXivNWy4Vk2MB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL2tvMGZQTmxCMG5NYk05a0RKZUs4MWJMaFdUWS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABdcRgD BABdcjIwDQYJKoZIhvcNAQELBQADggEBAEcISX3RNg2oZHzIveQXOJ1yuc8VxRd6 KWFmJKfiR72pc3xuvdaff+exwLXtFkB93KL3C+tdM7n56d+yFe1nodwwmAJN5v0X GtWEzHiLrTtm1gdgJUoDjkyebZ5RfI43kvUrvEcxgRLNkaflYLTobTPqEVAVgrCw rQuQpJOXqOSGDz0jX6hVjR4UgPsc50eMLccqDFQkf5L5/B2iQHE2Xb4+ARbhA93Z cd7GlCvI+CbywRQ3KD67S8a/P8zG1I6ZIAGHmN82efTIPoSeZJ3HSbdd2ezTMfTk Emir3ZZ/RxUMjqdBdjSLOStQylfhLbAjKocgZid/Lfesze2r1v1jfuI= -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:04 2026 by rpki-client