This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/K_paFEQGcD7Dwb0KkGKaMQdIqNM.roa File: K_paFEQGcD7Dwb0KkGKaMQdIqNM.roa (raw, json) Hash identifier: ivJfY98y3w5lIdblfpjkHHl9Y491gAGuVUxW2bbSNrk= Subject key identifier: 2B:FA:5A:14:44:06:70:3E:C3:C1:BD:0A:90:62:9A:31:07:48:A8:D3 Certificate issuer: /CN=41763db1ed334a7c5280ab9854742914ae0c4c52 Certificate serial: 019B7CECD198F496500B3022C620283D80E0 Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/K_paFEQGcD7Dwb0KkGKaMQdIqNM.roa Signing time: Fri 02 Jan 2026 04:17:33 +0000 ROA not before: Fri 02 Jan 2026 04:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15924 IP address blocks: 195.142.200.0/24 maxlen: 24 195.142.201.0/24 maxlen: 24 195.142.202.0/24 maxlen: 24 195.142.203.0/24 maxlen: 24 195.142.244.0/24 maxlen: 24 195.142.245.0/24 maxlen: 24 195.142.246.0/24 maxlen: 24 195.142.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d1:98:f4:96:50:0b:30:22:c6:20:28:3d:80:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52 Validity Not Before: Jan 2 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bfa5a144406703ec3c1bd0a90629a310748a8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:53:e7:7c:4f:b5:ae:55:4e:47:22:a4:f4:dc: e9:61:38:83:5c:bf:b2:a6:39:1c:79:0c:f8:9e:1c: 47:dc:d5:0a:09:e6:e9:8f:04:97:55:f3:c3:ab:7e: 5c:2e:4b:cb:a0:42:6c:7c:48:a4:2f:5c:79:f8:e5: 27:d6:9d:75:52:ac:5e:6e:b6:74:01:30:05:7a:a2: b1:d3:e9:fe:f5:ea:17:bc:a9:56:fb:06:3f:b4:49: 4e:b5:2a:80:1b:c7:ac:cb:5a:95:c2:95:05:26:08: ee:20:b2:21:8d:1c:6c:75:0b:1e:47:96:da:a5:ac: af:49:51:f0:a7:5d:7a:fc:5f:59:dc:c2:18:5c:da: d4:d4:20:39:92:96:1c:9d:a3:b8:8d:7f:51:9a:07: 2c:aa:52:49:83:2a:aa:aa:5f:d8:dd:ce:e2:85:ee: 43:e7:a8:b4:e8:94:89:45:11:49:6a:e3:28:3b:fb: a5:c9:c5:4e:00:59:82:ab:8f:26:ff:da:47:46:42: 72:db:c0:8c:4c:40:28:dd:e6:81:59:4f:41:79:78: 5a:07:bf:c2:60:40:04:6f:02:3c:74:ff:62:37:03: 3d:71:9e:3c:d4:87:1a:fb:bb:5e:b1:6c:65:d3:88: d9:64:79:9a:1a:9c:f7:a5:f8:b0:26:30:63:a6:fd: e0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FA:5A:14:44:06:70:3E:C3:C1:BD:0A:90:62:9A:31:07:48:A8:D3 X509v3 Authority Key Identifier: keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/K_paFEQGcD7Dwb0KkGKaMQdIqNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.142.200.0/22 195.142.244.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:49:09:c4:b1:26:e7:80:0e:1f:cb:ee:f3:71:ce:b4:9e:48: db:90:df:6f:7d:a6:2b:88:fc:a0:f8:ac:94:67:82:f4:d8:e1: 3a:88:ac:22:7c:b7:9e:f6:97:79:cc:aa:52:a6:e8:40:13:d1: 9e:ad:b8:47:ca:6b:d2:4b:8e:ae:c2:06:43:97:76:7c:45:99: 5c:67:a4:5b:3f:8d:df:a6:01:0a:8d:95:13:71:03:70:57:ea: 4c:37:5b:e7:1f:e4:e1:35:af:95:b3:17:08:eb:b5:24:43:10: 84:27:41:1d:9e:05:0a:88:37:ec:66:66:6d:a0:bd:ec:66:33: 66:33:8d:f2:50:1d:3a:cc:5a:c9:ef:db:24:fa:90:57:18:d4: 42:bb:ce:58:52:24:e3:ca:fe:d0:91:17:df:a6:14:ef:0d:28: 44:8f:7b:5b:25:27:d7:bb:49:b5:24:72:71:e1:f8:07:8a:b2: 6f:79:51:5f:c5:58:3d:1e:e5:75:62:99:92:ac:2c:fc:d2:07: 8e:9b:1a:cc:4b:61:d4:ed:7c:05:1a:ab:6c:3e:d0:f2:0b:c3: 64:4a:7d:9f:14:c6:1f:ff:12:d0:59:67:76:1a:26:2c:d7:04: ab:0c:c1:31:14:c5:f7:40:2d:75:1d:fa:74:57:25:58:23:f0: e6:4e:7a:1e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87NGY9JZQCzAixiAoPYDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzYzZGIxZWQzMzRhN2M1MjgwYWI5ODU0NzQyOTE0YWUw YzRjNTIwHhcNMjYwMTAyMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmZhNWExNDQ0MDY3MDNlYzNjMWJkMGE5MDYyOWEzMTA3NDhhOGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglPnfE+1rlVORyKk9NzpYTiDXL+y pjkceQz4nhxH3NUKCebpjwSXVfPDq35cLkvLoEJsfEikL1x5+OUn1p11UqxebrZ0 ATAFeqKx0+n+9eoXvKlW+wY/tElOtSqAG8esy1qVwpUFJgjuILIhjRxsdQseR5ba payvSVHwp116/F9Z3MIYXNrU1CA5kpYcnaO4jX9RmgcsqlJJgyqqql/Y3c7ihe5D 56i06JSJRRFJauMoO/ulycVOAFmCq48m/9pHRkJy28CMTEAo3eaBWU9BeXhaB7/C YEAEbwI8dP9iNwM9cZ481Ica+7tesWxl04jZZHmaGpz3pfiwJjBjpv3gqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCv6WhREBnA+w8G9CpBimjEHSKjTMB8GA1UdIwQY MBaAFEF2PbHtM0p8UoCrmFR0KRSuDExSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhZOXNlMHpTbnhTZ0t1WVZIUXBGSzRNVEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lZmQwOTQtNGJjMC00YWQwLWFiYTMt NDljOTVlZWFjODEyLzEvS19wYUZFUUdjRDdEd2IwS2tHS2FNUWRJcU5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lZmQwOTQtNGJjMC00YWQwLWFiYTMtNDljOTVlZWFjODEy LzEvUVhZOXNlMHpTbnhTZ0t1WVZIUXBGSzRNVEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCw47IAwQC w470MA0GCSqGSIb3DQEBCwUAA4IBAQB6SQnEsSbngA4fy+7zcc60nkjbkN9vfaYr iPyg+KyUZ4L02OE6iKwifLee9pd5zKpSpuhAE9GerbhHymvSS46uwgZDl3Z8RZlc Z6RbP43fpgEKjZUTcQNwV+pMN1vnH+ThNa+VsxcI67UkQxCEJ0EdngUKiDfsZmZt oL3sZjNmM43yUB06zFrJ79sk+pBXGNRCu85YUiTjyv7QkRffphTvDShEj3tbJSfX u0m1JHJx4fgHirJveVFfxVg9HuV1YpmSrCz80geOmxrMS2HU7XwFGqtsPtDyC8Nk Sn2fFMYf/xLQWWd2GiYs1wSrDMExFMX3QC11Hfp0VyVYI/DmTnoe -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:39 2026 by rpki-client