This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/keDaDU-vCcS6klKiWWvwuQqa3NE.roa File: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (raw, json) Hash identifier: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA= Subject key identifier: 91:E0:DA:0D:4F:AF:09:C4:BA:92:52:A2:59:6B:F0:B9:0A:9A:DC:D1 Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e Certificate serial: 019B7B3637BBE97CB3AA806C12A282325814 Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/keDaDU-vCcS6klKiWWvwuQqa3NE.roa Signing time: Thu 01 Jan 2026 20:18:29 +0000 ROA not before: Thu 01 Jan 2026 20:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61207 IP address blocks: 212.16.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:37:bb:e9:7c:b3:aa:80:6c:12:a2:82:32:58:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e Validity Not Before: Jan 1 20:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91e0da0d4faf09c4ba9252a2596bf0b90a9adcd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c2:15:34:13:a4:c5:dd:19:47:8d:56:41:c4: b8:20:39:9f:f6:63:1e:89:a1:63:4a:b9:2a:ee:44: b3:0b:a6:48:08:aa:57:64:e0:49:0f:fc:17:7c:b4: 22:44:5d:01:df:af:67:4b:1b:1d:d4:5d:61:85:cd: 70:08:86:09:cf:ae:b9:59:0f:3d:a2:19:69:2c:73: a6:d6:c0:c1:38:36:e8:04:f2:58:13:67:b5:4e:bd: a7:9d:2f:9e:e1:5e:b1:e0:a5:02:b5:ae:ca:99:eb: 83:8f:ac:1e:66:fe:02:f7:10:b6:00:b2:44:de:7c: 8c:bd:cd:b6:39:ab:8a:3e:03:78:3d:c5:3b:df:88: f0:33:c1:39:f0:60:2e:ca:82:78:64:85:ef:be:30: ef:5a:f8:5d:28:22:f8:67:97:4a:5d:be:1e:7e:ee: 02:cd:52:00:cd:32:4b:52:ce:49:f5:03:e5:39:b3: 51:58:0d:25:01:4c:30:43:8d:68:e9:9e:9c:0d:8b: 02:25:a7:e1:91:19:96:b5:fe:07:43:5a:5e:2c:d2: 1f:63:07:15:fa:ed:b0:61:80:da:6b:0f:56:5a:e1: ed:44:2e:41:b7:ac:8f:17:c8:ce:39:9d:83:94:93: e2:29:7c:4b:af:bf:b0:9f:18:00:be:db:b3:55:44: ed:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E0:DA:0D:4F:AF:09:C4:BA:92:52:A2:59:6B:F0:B9:0A:9A:DC:D1 X509v3 Authority Key Identifier: keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/keDaDU-vCcS6klKiWWvwuQqa3NE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.16.184.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:3d:23:0f:e4:8a:82:0a:94:0b:46:ff:67:8d:2e:94:3c:0c: 44:af:32:6e:af:64:41:a1:8d:2d:b4:c9:f8:f3:f3:0e:5a:10: f5:bf:e7:e5:66:2b:3d:d3:69:78:3f:db:35:31:85:e5:97:19: c4:40:55:f9:d2:22:68:b8:53:7b:d6:98:75:55:f5:83:91:52: e3:57:76:b2:50:f2:cd:57:fa:e4:af:61:09:78:51:f9:0f:ec: 7e:be:87:02:67:49:47:ab:c4:cd:a2:1f:db:f0:ee:23:0a:b8: 02:79:c2:cd:bf:13:8d:2c:25:8e:55:8c:16:5a:09:42:60:c0: 10:f5:ad:82:a3:88:d8:df:1c:ac:aa:e7:f4:66:18:68:6c:0d: bb:61:cc:91:9c:53:25:0c:80:e6:57:4a:40:4a:47:60:84:43: 96:4b:4a:13:cd:55:93:8a:cc:8a:ff:66:04:ac:bf:7b:fb:50: 5f:7d:07:65:13:5a:73:f8:45:e5:6b:85:11:a6:02:83:32:90: 52:88:34:b7:68:34:40:ec:75:cd:67:48:c0:ac:04:6c:e0:be: cc:e4:c0:5a:37:da:da:57:ea:90:38:7f:ff:a2:5d:c3:bb:09: 57:0b:9f:5d:c7:af:38:19:68:d2:ce:28:4f:5a:4b:01:55:3a: 99:f6:21:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nje76XyzqoBsEqKCMlgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3 M2QwMmUwHhcNMjYwMTAxMjAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWUwZGEwZDRmYWYwOWM0YmE5MjUyYTI1OTZiZjBiOTBhOWFkY2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsIVNBOkxd0ZR41WQcS4IDmf9mMe iaFjSrkq7kSzC6ZICKpXZOBJD/wXfLQiRF0B369nSxsd1F1hhc1wCIYJz665WQ89 ohlpLHOm1sDBODboBPJYE2e1Tr2nnS+e4V6x4KUCta7KmeuDj6weZv4C9xC2ALJE 3nyMvc22OauKPgN4PcU734jwM8E58GAuyoJ4ZIXvvjDvWvhdKCL4Z5dKXb4efu4C zVIAzTJLUs5J9QPlObNRWA0lAUwwQ41o6Z6cDYsCJafhkRmWtf4HQ1peLNIfYwcV +u2wYYDaaw9WWuHtRC5Bt6yPF8jOOZ2DlJPiKXxLr7+wnxgAvtuzVUTthwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJHg2g1PrwnEupJSollr8LkKmtzRMB8GA1UdIwQY MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt M2I4YjBkMWE1OWE5LzEva2VEYURVLXZDY1M2a2xLaVdXdnd1UXFhM05FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5 LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1BC4MA0G CSqGSIb3DQEBCwUAA4IBAQCaPSMP5IqCCpQLRv9njS6UPAxErzJur2RBoY0ttMn4 8/MOWhD1v+flZis902l4P9s1MYXllxnEQFX50iJouFN71ph1VfWDkVLjV3ayUPLN V/rkr2EJeFH5D+x+vocCZ0lHq8TNoh/b8O4jCrgCecLNvxONLCWOVYwWWglCYMAQ 9a2Co4jY3xysquf0ZhhobA27YcyRnFMlDIDmV0pASkdghEOWS0oTzVWTisyK/2YE rL97+1BffQdlE1pz+EXla4URpgKDMpBSiDS3aDRA7HXNZ0jArARs4L7M5MBaN9ra V+qQOH//ol3DuwlXC59dx684GWjSzihPWksBVTqZ9iHm -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:47 2026 by rpki-client