This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/kEA4tj_KkVDLvM2DWnwX5k8m6BI.roa File: kEA4tj_KkVDLvM2DWnwX5k8m6BI.roa (raw, json) Hash identifier: pnHIraVgBAZPz/3bw02SbdT0VFhTYaLYb8ZPwjAg3r4= Subject key identifier: 90:40:38:B6:3F:CA:91:50:CB:BC:CD:83:5A:7C:17:E6:4F:26:E8:12 Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Certificate serial: 019B7C126FC34900B97D071E24D71EFC6B0E Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/kEA4tj_KkVDLvM2DWnwX5k8m6BI.roa Signing time: Fri 02 Jan 2026 00:19:01 +0000 ROA not before: Fri 02 Jan 2026 00:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 194.59.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6f:c3:49:00:b9:7d:07:1e:24:d7:1e:fc:6b:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Validity Not Before: Jan 2 00:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=904038b63fca9150cbbccd835a7c17e64f26e812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c2:ca:af:fe:49:02:e2:53:b0:aa:1d:de:06: dd:66:41:26:fc:7b:d0:2f:5f:27:33:18:0e:88:a9: da:c4:60:6f:24:db:e7:98:90:7e:c2:08:63:d1:fa: 8c:37:e5:c5:7a:be:93:02:df:e9:72:d2:e9:f7:22: 74:49:1e:7a:8d:94:34:a1:f6:b4:40:15:04:e1:7c: e4:3e:00:d2:a3:92:e7:12:30:a2:50:dc:53:65:ed: e6:7c:62:87:e9:05:5c:9b:09:9b:ad:38:91:74:28: ba:97:e1:49:cf:62:9d:46:3c:9f:a9:d4:db:db:94: 2e:09:30:91:79:20:8a:6d:af:f8:28:91:f4:58:31: 7d:2a:de:69:10:54:6a:9e:9d:88:7f:97:be:37:31: 58:c7:74:12:d6:8c:21:ee:91:6a:30:68:5f:42:3b: 99:2c:85:69:08:aa:a5:35:70:46:4f:3d:9c:fa:89: 43:77:5d:99:5d:0e:84:b7:a6:ca:24:f6:5a:92:98: 8b:ba:62:f8:2d:6e:6b:99:b9:cd:52:fb:46:56:8a: f1:cc:d2:94:d5:eb:53:15:b0:29:23:9f:9a:54:c0: fa:40:1d:d2:80:67:79:cd:01:fa:bb:79:31:20:24: 6f:29:91:5d:ed:1f:fb:72:66:d5:fe:77:63:03:ee: 45:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:40:38:B6:3F:CA:91:50:CB:BC:CD:83:5A:7C:17:E6:4F:26:E8:12 X509v3 Authority Key Identifier: keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/kEA4tj_KkVDLvM2DWnwX5k8m6BI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.183.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:31:54:4c:06:a5:3c:79:d5:c2:3b:04:1f:b6:05:fa:0c:f8: 11:ee:eb:79:a3:a0:22:e7:8e:ff:5a:d9:f7:30:b6:ff:54:d1: 93:43:ee:eb:9a:ba:85:bc:1a:14:67:2e:33:15:94:db:7b:3d: b0:80:a5:67:15:e9:85:37:e7:3f:27:04:2c:fe:c1:3b:59:2b: 30:45:7c:8b:a7:12:2f:f2:69:2e:d8:5c:52:b0:3c:38:53:b5: a7:dd:b9:c2:c2:82:4e:f6:6e:b8:20:d4:c5:d0:38:7f:b8:fa: b9:e4:8b:18:b5:a8:b7:b4:76:b5:b7:5d:99:f4:44:5e:14:d1: 0c:16:4a:7e:34:cc:c4:86:ce:0f:a7:bc:fc:31:44:cb:5a:37: 2c:00:f8:f0:1b:77:27:96:80:62:5a:33:e3:5d:20:b1:b5:7b: a1:94:49:28:da:a8:93:25:23:2d:57:5b:b3:6a:0f:ff:82:32: a4:87:04:95:cc:ed:b1:a6:42:54:90:1d:0f:e4:76:e1:66:b7: 49:db:a8:ed:65:d5:4d:f0:94:f4:64:94:ef:fe:95:90:92:6d: c8:54:a7:7f:81:22:6e:cb:04:f1:e2:61:e4:5c:f4:fa:f2:e5: 93:7d:d6:0a:1b:dd:0b:b8:d6:7c:a3:4e:80:24:c9:4f:6d:7a: f3:e3:50:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Em/DSQC5fQceJNce/GsOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk M2RjMTYwHhcNMjYwMTAyMDAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDQwMzhiNjNmY2E5MTUwY2JiY2NkODM1YTdjMTdlNjRmMjZlODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsLKr/5JAuJTsKod3gbdZkEm/HvQ L18nMxgOiKnaxGBvJNvnmJB+wghj0fqMN+XFer6TAt/pctLp9yJ0SR56jZQ0ofa0 QBUE4XzkPgDSo5LnEjCiUNxTZe3mfGKH6QVcmwmbrTiRdCi6l+FJz2KdRjyfqdTb 25QuCTCReSCKba/4KJH0WDF9Kt5pEFRqnp2If5e+NzFYx3QS1owh7pFqMGhfQjuZ LIVpCKqlNXBGTz2c+olDd12ZXQ6Et6bKJPZakpiLumL4LW5rmbnNUvtGVorxzNKU 1etTFbApI5+aVMD6QB3SgGd5zQH6u3kxICRvKZFd7R/7cmbV/ndjA+5FfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJBAOLY/ypFQy7zNg1p8F+ZPJugSMB8GA1UdIwQY MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt OGFjNGEyMTkzOGI0LzEva0VBNHRqX0trVkRMdk0yRFdud1g1azhtNkJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0 LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwju3MA0G CSqGSIb3DQEBCwUAA4IBAQA6MVRMBqU8edXCOwQftgX6DPgR7ut5o6Ai547/Wtn3 MLb/VNGTQ+7rmrqFvBoUZy4zFZTbez2wgKVnFemFN+c/JwQs/sE7WSswRXyLpxIv 8mku2FxSsDw4U7Wn3bnCwoJO9m64INTF0Dh/uPq55IsYtai3tHa1t12Z9EReFNEM Fkp+NMzEhs4Pp7z8MUTLWjcsAPjwG3cnloBiWjPjXSCxtXuhlEko2qiTJSMtV1uz ag//gjKkhwSVzO2xpkJUkB0P5HbhZrdJ26jtZdVN8JT0ZJTv/pWQkm3IVKd/gSJu ywTx4mHkXPT68uWTfdYKG90LuNZ8o06AJMlPbXrz41A+ -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:34 2026 by rpki-client