This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/kWmdNWKi9Z8NkBJjIP6q2qnDIzE.roa File: kWmdNWKi9Z8NkBJjIP6q2qnDIzE.roa (raw, json) Hash identifier: IDZUcKyb2+KauUsdYDvGc0d+DoUPFNW0+bS0KsggXC0= Subject key identifier: 91:69:9D:35:62:A2:F5:9F:0D:90:12:63:20:FE:AA:DA:A9:C3:23:31 Certificate issuer: /CN=10543a5197eb2544447e9d36b3ebf14452c777eb Certificate serial: 019B797EE8CFEA8E2EE0D1D039667DDFC6D0 Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/kWmdNWKi9Z8NkBJjIP6q2qnDIzE.roa Signing time: Thu 01 Jan 2026 12:18:38 +0000 ROA not before: Thu 01 Jan 2026 12:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56410 IP address blocks: 193.120.22.0/24 maxlen: 24 193.120.40.0/23 maxlen: 23 193.120.55.0/24 maxlen: 24 193.120.164.0/23 maxlen: 23 194.125.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e8:cf:ea:8e:2e:e0:d1:d0:39:66:7d:df:c6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb Validity Not Before: Jan 1 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91699d3562a2f59f0d90126320feaadaa9c32331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:76:7b:82:01:d2:50:3a:f6:f6:48:a1:b4:55: 78:83:5d:49:b7:3d:eb:33:0d:e6:6a:61:bf:3d:77: 56:39:87:36:6e:94:0a:e4:b5:6e:4c:e5:4c:23:41: b4:86:23:ff:50:04:3d:56:2b:9d:e6:24:69:6b:8f: 0f:e2:e2:81:12:0a:c2:d3:b0:20:fe:d2:0e:bb:82: 04:4b:47:10:3d:62:4d:e5:84:54:e6:9d:b4:12:76: 52:f8:4f:b6:c7:32:6d:2b:32:75:a2:0b:e1:51:72: 2b:d4:a7:d7:d4:77:46:30:7a:76:59:7d:1e:19:2d: 54:34:32:32:81:71:ce:69:47:3b:d3:e2:26:f6:7c: 78:79:87:ef:e9:72:69:fb:f2:c2:46:e9:6e:13:26: 16:51:9d:51:c6:65:f2:83:df:b7:51:4d:56:43:c5: b7:ae:36:00:71:b4:f3:68:1c:3e:fb:f9:66:f1:7d: dd:6c:0d:3a:ad:4b:75:82:a9:a3:b8:39:d9:b8:2f: 59:0d:74:92:c4:fe:b9:29:1f:e9:5b:6e:0f:f9:75: 69:7b:1c:76:22:b3:9b:6a:c8:6d:9e:ce:f7:fd:7d: 11:37:73:38:f0:08:d5:0f:88:68:25:67:91:59:f6: 97:e0:0c:45:ae:87:c4:1e:71:1e:83:fb:3f:b2:2a: 0f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:69:9D:35:62:A2:F5:9F:0D:90:12:63:20:FE:AA:DA:A9:C3:23:31 X509v3 Authority Key Identifier: keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/kWmdNWKi9Z8NkBJjIP6q2qnDIzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.120.22.0/24 193.120.40.0/23 193.120.55.0/24 193.120.164.0/23 194.125.118.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:a3:9c:c7:a2:e4:bd:5f:df:5a:7d:a0:ae:7d:b5:9a:6c:ff: f7:ee:92:83:a6:24:1d:6f:16:da:f4:1c:a8:7c:d0:9e:d7:7e: ba:8b:97:55:70:ef:72:ef:e8:dd:ba:bd:3c:94:86:c3:66:12: ce:5c:de:f6:c3:6f:0a:77:6a:e7:de:a6:b2:0e:4f:e5:c1:86: 35:d4:09:00:e4:93:58:0e:8f:fd:c4:95:a1:9c:b8:8d:9d:22: 82:98:5a:bc:79:98:00:71:7b:fa:e0:d5:6c:79:d3:c3:be:4a: c3:89:3a:b8:84:40:4f:03:63:be:a9:e9:81:96:30:71:33:ad: 59:47:c0:07:c0:e1:7f:54:24:63:8f:36:d1:ab:32:0a:3f:ee: 37:9e:96:53:6f:87:fe:e3:90:fc:16:7d:66:b7:89:dc:aa:58: 35:b3:eb:a9:e4:ab:6b:50:61:92:2c:2d:9a:4b:98:81:e5:68: a2:b2:9c:16:12:4c:2a:75:72:a4:1a:44:bb:d8:2d:4f:e8:e5: 61:51:db:c1:95:4a:27:ff:9e:7f:52:63:f9:90:5d:a6:5f:8e: 90:79:92:15:94:d7:b1:1b:8e:50:84:c3:a1:1b:a3:9f:3b:0a: 2f:fb:a0:d3:dd:ef:3e:05:eb:e8:04:3b:c0:4a:b0:a2:31:a8: 3c:42:91:89 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5fujP6o4u4NHQOWZ938bQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTQzYTUxOTdlYjI1NDQ0NDdlOWQzNmIzZWJmMTQ0NTJj Nzc3ZWIwHhcNMjYwMTAxMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTY5OWQzNTYyYTJmNTlmMGQ5MDEyNjMyMGZlYWFkYWE5YzMyMzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3Z7ggHSUDr29kihtFV4g11Jtz3r Mw3mamG/PXdWOYc2bpQK5LVuTOVMI0G0hiP/UAQ9Viud5iRpa48P4uKBEgrC07Ag /tIOu4IES0cQPWJN5YRU5p20EnZS+E+2xzJtKzJ1ogvhUXIr1KfX1HdGMHp2WX0e GS1UNDIygXHOaUc70+Im9nx4eYfv6XJp+/LCRuluEyYWUZ1RxmXyg9+3UU1WQ8W3 rjYAcbTzaBw++/lm8X3dbA06rUt1gqmjuDnZuC9ZDXSSxP65KR/pW24P+XVpexx2 IrObashtns73/X0RN3M48AjVD4hoJWeRWfaX4AxFrofEHnEeg/s/sioPhQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJFpnTViovWfDZASYyD+qtqpwyMxMB8GA1UdIwQY MBaAFBBUOlGX6yVERH6dNrPr8URSx3frMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZRNlVaZnJKVVJFZnAwMnMtdnhSRkxIZC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xYmU3YmMtYjY0Mi00YTBkLThlNmIt ZjdlMGM1ZTI3MDJlLzEva1dtZE5XS2k5WjhOa0JKaklQNnEycW5ESXpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8xYmU3YmMtYjY0Mi00YTBkLThlNmItZjdlMGM1ZTI3MDJl LzEvRUZRNlVaZnJKVVJFZnAwMnMtdnhSRkxIZC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwXgWAwQB wXgoAwQAwXg3AwQBwXikAwQAwn12MA0GCSqGSIb3DQEBCwUAA4IBAQBeo5zHouS9 X99afaCufbWabP/37pKDpiQdbxba9ByofNCe1366i5dVcO9y7+jdur08lIbDZhLO XN72w28Kd2rn3qayDk/lwYY11AkA5JNYDo/9xJWhnLiNnSKCmFq8eZgAcXv64NVs edPDvkrDiTq4hEBPA2O+qemBljBxM61ZR8AHwOF/VCRjjzbRqzIKP+43npZTb4f+ 45D8Fn1mt4ncqlg1s+up5KtrUGGSLC2aS5iB5WiispwWEkwqdXKkGkS72C1P6OVh UdvBlUon/55/UmP5kF2mX46QeZIVlNexG45QhMOhG6OfOwov+6DT3e8+BevoBDvA SrCiMag8QpGJ -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:00 2026 by rpki-client