This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/KIJR5bkAO_pGUiMhRohQVSBU_kI.roa File: KIJR5bkAO_pGUiMhRohQVSBU_kI.roa (raw, json) Hash identifier: S9jYnqRzYwb6R8b1IcOy2MFwYiHVTAAwBFBwHGspJjA= Subject key identifier: 28:82:51:E5:B9:00:3B:FA:46:52:23:21:46:88:50:55:20:54:FE:42 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019B7E38B5E943F29C97FB82057E5292CC32 Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/KIJR5bkAO_pGUiMhRohQVSBU_kI.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 141.105.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b5:e9:43:f2:9c:97:fb:82:05:7e:52:92:cc:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=288251e5b9003bfa46522321468850552054fe42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:2a:8f:88:e0:62:7f:c6:7d:5c:f1:e5:28: e9:8b:b7:4f:59:62:7b:47:45:ee:f8:2e:dd:1d:9a: e6:86:16:e0:92:c1:48:44:a1:84:6f:da:00:da:4e: 12:7f:23:68:f5:3c:d1:29:0d:c6:ba:a2:7a:1d:8b: 40:e5:78:05:b5:ca:7e:87:95:9b:79:2a:90:b9:0a: 72:52:8d:16:62:3e:22:63:1a:88:1e:8c:0a:6d:e5: 92:02:94:e5:d3:18:ce:d2:b0:75:03:df:72:89:ac: bb:55:f9:2d:fd:d7:4a:39:f0:82:a7:91:25:af:bb: 70:67:34:52:c1:0d:ab:79:f9:55:53:04:fb:b0:30: b1:62:69:8e:e0:31:fb:e3:79:8f:c5:ad:18:ca:4b: cb:fc:34:7a:1b:0f:c8:28:1d:8d:88:82:27:be:75: 13:1c:38:8f:a6:f3:d0:66:56:a8:2f:a3:c8:75:e4: ba:28:d3:a6:af:21:e0:52:02:6e:ab:86:12:d6:ab: ab:52:e0:b2:ba:08:68:0e:c6:18:90:77:3d:5d:35: 15:fb:6d:6b:4f:da:90:4f:ce:a9:7b:b0:ef:0f:06: a1:e0:8a:df:55:2f:fa:7f:05:61:61:53:19:8b:48: 0d:82:55:c2:c5:4c:50:68:b4:6f:91:bb:7e:a2:e2: 39:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:82:51:E5:B9:00:3B:FA:46:52:23:21:46:88:50:55:20:54:FE:42 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/KIJR5bkAO_pGUiMhRohQVSBU_kI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.105.140.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:9f:51:c9:10:db:c2:96:a7:8a:f0:58:59:38:76:c3:98:f2: ae:25:8a:87:b1:f3:86:04:08:e4:ae:b1:5c:9c:8f:2c:8d:40: c7:e9:a1:92:21:14:c6:33:20:9f:f8:8b:de:53:47:8a:10:d0: 89:99:9d:3d:d5:b4:86:72:ff:e3:e8:78:13:9f:6e:da:6e:4e: da:e5:a8:09:70:a3:6e:ba:53:9f:40:86:da:b6:4a:6c:ba:c0: 8f:c7:05:3e:a1:ba:f7:69:fe:d9:48:e0:d6:63:b0:16:72:56: bd:b0:29:3e:98:7c:79:38:f5:c3:b5:d7:c2:e7:c8:e1:65:ae: fe:9f:a6:fc:46:58:12:01:73:ae:40:5d:78:35:a9:1b:79:f9: b5:86:d3:10:98:13:a0:5f:bb:3d:24:26:b7:ea:51:0c:4b:3d: 0e:0e:df:c2:26:31:c5:d6:f2:82:78:bb:1d:71:00:df:b9:a4: 22:5f:ac:5f:01:29:3d:24:19:47:6d:87:09:60:0f:ae:34:e7: 68:3d:79:28:d9:83:ab:35:2a:4d:f1:eb:20:45:53:d9:40:e3: 2e:a5:ff:21:26:53:8d:ec:4b:7c:b6:3f:1f:a7:de:97:68:66: 34:99:02:8d:47:a0:6a:58:52:50:49:37:ca:f4:e6:13:1f:f4: 27:6a:65:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OLXpQ/Kcl/uCBX5SkswyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODgyNTFlNWI5MDAzYmZhNDY1MjIzMjE0Njg4NTA1NTIwNTRmZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKkqj4jgYn/GfVzx5Sjpi7dPWWJ7 R0Xu+C7dHZrmhhbgksFIRKGEb9oA2k4SfyNo9TzRKQ3GuqJ6HYtA5XgFtcp+h5Wb eSqQuQpyUo0WYj4iYxqIHowKbeWSApTl0xjO0rB1A99yiay7Vfkt/ddKOfCCp5El r7twZzRSwQ2reflVUwT7sDCxYmmO4DH743mPxa0YykvL/DR6Gw/IKB2NiIInvnUT HDiPpvPQZlaoL6PIdeS6KNOmryHgUgJuq4YS1qurUuCyughoDsYYkHc9XTUV+21r T9qQT86pe7DvDwah4IrfVS/6fwVhYVMZi0gNglXCxUxQaLRvkbt+ouI5pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCiCUeW5ADv6RlIjIUaIUFUgVP5CMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvS0lKUjVia0FPX3BHVWlNaFJvaFFWU0JVX2tJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWmMMA0G CSqGSIb3DQEBCwUAA4IBAQBfn1HJENvClqeK8FhZOHbDmPKuJYqHsfOGBAjkrrFc nI8sjUDH6aGSIRTGMyCf+IveU0eKENCJmZ091bSGcv/j6HgTn27abk7a5agJcKNu ulOfQIbatkpsusCPxwU+obr3af7ZSODWY7AWcla9sCk+mHx5OPXDtdfC58jhZa7+ n6b8RlgSAXOuQF14Nakbefm1htMQmBOgX7s9JCa36lEMSz0ODt/CJjHF1vKCeLsd cQDfuaQiX6xfASk9JBlHbYcJYA+uNOdoPXko2YOrNSpN8esgRVPZQOMupf8hJlON 7Et8tj8fp96XaGY0mQKNR6BqWFJQSTfK9OYTH/QnamUK -----END CERTIFICATE-----Generated at Sun Jan 25 10:10:53 2026 by rpki-client