This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/rKBqA4AVr8V474f1fS0u1WEme_g.roa File: rKBqA4AVr8V474f1fS0u1WEme_g.roa (raw, json) Hash identifier: Ztg6Dzjy4Iu5rj4fL+sFN+yMeB/hu7159PSBkLZlOq0= Subject key identifier: AC:A0:6A:03:80:15:AF:C5:78:EF:87:F5:7D:2D:2E:D5:61:26:7B:F8 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019B7E38B30144CEAA43B5894CBBC5A9D04D Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/rKBqA4AVr8V474f1fS0u1WEme_g.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203394 IP address blocks: 141.105.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b3:01:44:ce:aa:43:b5:89:4c:bb:c5:a9:d0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aca06a038015afc578ef87f57d2d2ed561267bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:74:ed:a8:b5:59:9a:c2:7b:c8:e9:d5:38:9d: cf:eb:68:68:fa:01:6c:42:88:b5:82:5e:88:81:f5: 1a:87:bf:dd:ad:fd:d0:a0:d3:2b:1a:eb:e0:99:48: 24:9a:67:27:d5:99:47:40:54:5a:92:69:5e:0e:c2: 06:0a:46:6c:c4:7d:a4:82:1b:3d:61:4b:51:2d:ef: 77:48:55:61:2d:bd:bc:df:66:48:df:c1:c8:b1:18: 8d:b9:3a:27:72:86:d1:3b:57:b0:13:e6:bd:36:d3: d3:8d:57:9e:7a:8b:68:60:c2:bd:9b:e2:8f:9c:38: b8:8d:76:b9:52:01:d7:2e:9e:54:e8:81:df:f8:09: 63:b3:a7:43:22:dc:a4:13:9a:b2:b4:52:00:4f:67: 65:81:0f:03:e7:c1:69:c0:27:90:03:a4:d5:0f:ef: 15:ed:cb:99:3d:cd:16:80:85:4a:c2:fa:1d:92:a4: da:28:21:10:81:3f:07:85:f3:db:89:cf:37:56:50: 3f:cf:38:6e:e1:4c:90:cf:1e:47:ab:42:7d:25:8f: 6b:7c:91:bd:bb:cc:3c:d7:45:0d:0e:bb:bc:15:ec: 79:2b:e1:50:5a:d6:38:92:90:d8:bc:cd:1c:52:f5: 60:f6:ef:1e:4c:1c:0f:01:09:9f:e1:67:32:94:ad: d1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A0:6A:03:80:15:AF:C5:78:EF:87:F5:7D:2D:2E:D5:61:26:7B:F8 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/rKBqA4AVr8V474f1fS0u1WEme_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.105.130.0/24 Signature Algorithm: sha256WithRSAEncryption 21:2a:2d:0c:70:96:1f:38:43:47:20:4d:0d:4a:6c:ca:14:a0: 03:8a:4a:b4:8c:2f:1f:11:37:c2:18:a7:5b:8b:19:06:e2:04: 3c:99:76:ac:67:3c:fc:75:ce:fb:6e:ef:6a:f4:a0:98:92:07: 21:9b:33:66:3d:56:fe:b4:89:1e:0a:c9:ff:92:b5:4e:f4:f6: c8:67:3a:29:fc:99:fc:4a:27:fb:8f:04:cf:83:59:fb:90:0d: d3:a8:e0:84:51:94:85:56:2f:55:b1:be:f1:a7:af:5c:72:3a: 19:bd:48:4f:ef:24:4b:91:67:36:d9:55:25:7c:81:c8:3b:2e: da:20:0c:70:a2:04:4e:f1:d6:60:bc:64:2c:7c:d3:7c:f2:0e: f6:bc:c9:08:0b:90:17:75:da:d9:d6:81:10:07:a8:51:80:1b: 68:af:44:ab:6e:d4:3f:15:ea:32:cb:ac:1b:27:c2:73:f4:3d: c0:fb:b6:4f:5e:f3:86:38:f0:93:ce:c7:e0:81:84:41:59:cc: 90:26:aa:cd:b6:92:b8:cd:ed:67:d5:05:6c:0b:27:3c:d6:7d: d5:b3:be:dc:b1:99:fa:11:d1:fa:a3:bf:91:af:99:57:ca:8a: 7f:74:ed:a3:b3:bf:60:c2:53:0b:35:54:ad:7e:79:64:5a:57: bc:61:cf:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OLMBRM6qQ7WJTLvFqdBNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2EwNmEwMzgwMTVhZmM1NzhlZjg3ZjU3ZDJkMmVkNTYxMjY3YmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnTtqLVZmsJ7yOnVOJ3P62ho+gFs Qoi1gl6IgfUah7/drf3QoNMrGuvgmUgkmmcn1ZlHQFRakmleDsIGCkZsxH2kghs9 YUtRLe93SFVhLb2832ZI38HIsRiNuToncobRO1ewE+a9NtPTjVeeeotoYMK9m+KP nDi4jXa5UgHXLp5U6IHf+Aljs6dDItykE5qytFIAT2dlgQ8D58FpwCeQA6TVD+8V 7cuZPc0WgIVKwvodkqTaKCEQgT8HhfPbic83VlA/zzhu4UyQzx5Hq0J9JY9rfJG9 u8w810UNDru8Fex5K+FQWtY4kpDYvM0cUvVg9u8eTBwPAQmf4WcylK3RTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKygagOAFa/FeO+H9X0tLtVhJnv4MB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvcktCcUE0QVZyOFY0NzRmMWZTMHUxV0VtZV9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWmCMA0G CSqGSIb3DQEBCwUAA4IBAQAhKi0McJYfOENHIE0NSmzKFKADikq0jC8fETfCGKdb ixkG4gQ8mXasZzz8dc77bu9q9KCYkgchmzNmPVb+tIkeCsn/krVO9PbIZzop/Jn8 Sif7jwTPg1n7kA3TqOCEUZSFVi9Vsb7xp69ccjoZvUhP7yRLkWc22VUlfIHIOy7a IAxwogRO8dZgvGQsfNN88g72vMkIC5AXddrZ1oEQB6hRgBtor0SrbtQ/Feoyy6wb J8Jz9D3A+7ZPXvOGOPCTzsfggYRBWcyQJqrNtpK4ze1n1QVsCyc81n3Vs77csZn6 EdH6o7+Rr5lXyop/dO2js79gwlMLNVStfnlkWle8Yc8S -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:54 2026 by rpki-client