This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/Kch5YnfnliI8NHiCA07xVEbQzV4.roa File: Kch5YnfnliI8NHiCA07xVEbQzV4.roa (raw, json) Hash identifier: 6jE9VEbDYjIrbBsLXEa9CMfNyqfSxGZFUWK682Q2o9I= Subject key identifier: 29:C8:79:62:77:E7:96:22:3C:34:78:82:03:4E:F1:54:46:D0:CD:5E Certificate issuer: /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a Certificate serial: 019B7C124752AABEA579D912BBABAC6D8CC0 Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/Kch5YnfnliI8NHiCA07xVEbQzV4.roa Signing time: Fri 02 Jan 2026 00:18:51 +0000 ROA not before: Fri 02 Jan 2026 00:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59796 IP address blocks: 193.104.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:47:52:aa:be:a5:79:d9:12:bb:ab:ac:6d:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a Validity Not Before: Jan 2 00:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29c8796277e796223c347882034ef15446d0cd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f4:f6:bb:9d:98:ce:e2:a6:ad:20:2f:85:72: c9:df:37:9b:fb:67:bc:02:6f:d7:27:48:bc:f4:13: a0:20:3a:ab:46:12:60:4f:9f:5a:37:41:ad:8b:7f: ea:74:56:78:83:fd:61:27:c2:2b:4a:3f:f3:16:01: 83:d8:7d:5c:ae:fd:f7:48:aa:9b:cb:f8:15:6a:0d: 4c:19:4b:93:70:66:0c:fd:ea:93:e2:f7:21:c4:d4: b9:89:9a:a0:46:bb:62:50:9f:8d:2d:7d:f4:e5:c8: 7e:d7:66:92:92:55:50:19:88:8e:52:67:91:91:c9: a2:17:87:eb:03:f1:d8:15:f4:77:f6:fd:5a:b3:cc: d1:4b:c0:21:3c:76:de:f5:dc:fb:65:d5:45:12:20: 90:5e:d5:b7:11:fe:f1:82:32:10:ad:49:e7:1f:5b: 4f:bd:9c:27:53:a4:f6:57:21:d4:98:af:50:1f:f7: b0:13:6f:8a:20:5a:3c:5e:05:ef:7b:bc:ad:1b:59: d1:9b:ed:bc:79:f0:5e:33:75:2d:7e:bd:ad:ec:1a: d3:cd:3d:8d:e8:25:53:e5:55:c7:96:30:6e:5e:1e: 2f:6b:2d:3c:f5:50:8e:df:12:60:9a:29:f0:f8:07: 21:a0:c4:44:4a:75:0b:9f:3c:79:de:43:23:09:bb: 83:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C8:79:62:77:E7:96:22:3C:34:78:82:03:4E:F1:54:46:D0:CD:5E X509v3 Authority Key Identifier: keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/Kch5YnfnliI8NHiCA07xVEbQzV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.120.0/24 Signature Algorithm: sha256WithRSAEncryption a1:4f:46:2a:06:99:2e:5a:84:9e:d1:f4:72:40:a8:ef:ea:15: e8:79:0d:e3:29:a3:81:c5:a0:3c:ff:95:d6:11:c1:12:ba:fe: d3:a7:4b:aa:5f:16:4f:9d:a3:67:7f:65:b6:40:81:de:da:51: dc:c4:df:b1:f9:0d:e8:5b:8a:41:55:be:de:8e:64:d6:b9:c7: fc:89:b1:2f:c3:ad:b7:7b:d7:41:6d:a9:33:df:3e:ff:fa:1a: a4:5b:ca:91:12:34:f6:7c:dc:2c:40:f0:67:91:21:2a:9f:a5: 06:71:e7:00:13:89:b6:15:11:09:f4:62:10:ab:d3:9c:76:50: 2a:0d:be:24:99:9e:76:4f:7c:c4:23:68:29:b3:9f:a6:9d:7c: a4:77:04:35:19:bc:9a:be:a2:c7:db:7e:ca:7f:38:36:7e:3a: 01:df:df:4b:71:18:38:25:08:f6:a5:69:a1:06:92:e1:ce:eb: 3a:ed:b0:38:ca:52:87:b3:6d:52:3e:50:88:ac:ba:38:a1:30: 42:a5:2a:7c:32:d2:e7:f0:d6:a7:b0:ae:ac:72:8d:ac:ff:93: a4:55:58:30:50:ea:ba:f6:10:44:ac:b0:50:6a:d8:24:a0:46: ad:93:41:bf:ec:bd:31:f8:dc:7d:8d:de:79:6e:0a:20:a6:0b: 5c:48:fc:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EkdSqr6ledkSu6usbYzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZjAyYjVjZmI0MTcyNTA4ZTA3MzdiZjI1Y2Q1ZDIyYTAx ZGM0NWEwHhcNMjYwMTAyMDAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWM4Nzk2Mjc3ZTc5NjIyM2MzNDc4ODIwMzRlZjE1NDQ2ZDBjZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fT2u52YzuKmrSAvhXLJ3zeb+2e8 Am/XJ0i89BOgIDqrRhJgT59aN0Gti3/qdFZ4g/1hJ8IrSj/zFgGD2H1crv33SKqb y/gVag1MGUuTcGYM/eqT4vchxNS5iZqgRrtiUJ+NLX305ch+12aSklVQGYiOUmeR kcmiF4frA/HYFfR39v1as8zRS8AhPHbe9dz7ZdVFEiCQXtW3Ef7xgjIQrUnnH1tP vZwnU6T2VyHUmK9QH/ewE2+KIFo8XgXve7ytG1nRm+28efBeM3Utfr2t7BrTzT2N 6CVT5VXHljBuXh4vay089VCO3xJgminw+AchoMRESnULnzx53kMjCbuDrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCnIeWJ355YiPDR4ggNO8VRG0M1eMB8GA1UdIwQY MBaAFJjwK1z7QXJQjgc3vyXNXSKgHcRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80M2QzMDEtZjgxYS00OTJlLTkyMmMt Yzk3MWRjNzEzYjFmLzEvS2NoNVluZm5saUk4TkhpQ0EwN3hWRWJRelY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80M2QzMDEtZjgxYS00OTJlLTkyMmMtYzk3MWRjNzEzYjFm LzEvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWh4MA0G CSqGSIb3DQEBCwUAA4IBAQChT0YqBpkuWoSe0fRyQKjv6hXoeQ3jKaOBxaA8/5XW EcESuv7Tp0uqXxZPnaNnf2W2QIHe2lHcxN+x+Q3oW4pBVb7ejmTWucf8ibEvw623 e9dBbakz3z7/+hqkW8qREjT2fNwsQPBnkSEqn6UGcecAE4m2FREJ9GIQq9OcdlAq Db4kmZ52T3zEI2gps5+mnXykdwQ1GbyavqLH237Kfzg2fjoB399LcRg4JQj2pWmh BpLhzus67bA4ylKHs21SPlCIrLo4oTBCpSp8MtLn8NansK6sco2s/5OkVVgwUOq6 9hBErLBQatgkoEatk0G/7L0x+Nx9jd55bgogpgtcSPwi -----END CERTIFICATE-----Generated at Mon Jan 26 00:16:11 2026 by rpki-client