This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/kEStRgFFvUE-F5ouVzsvLSOaSko.roa File: kEStRgFFvUE-F5ouVzsvLSOaSko.roa (raw, json) Hash identifier: CPss/SLu7PEcptxsMsF+R9khBX0xPafGY3ozU4mC0YU= Subject key identifier: 90:44:AD:46:01:45:BD:41:3E:17:9A:2E:57:3B:2F:2D:23:9A:4A:4A Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330 Certificate serial: 019B7A5A6383C6593F1D2F338AB7D7F7F72A Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/kEStRgFFvUE-F5ouVzsvLSOaSko.roa Signing time: Thu 01 Jan 2026 16:18:22 +0000 ROA not before: Thu 01 Jan 2026 16:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210788 IP address blocks: 193.41.47.0/24 maxlen: 24 193.41.82.0/24 maxlen: 24 2a0f:7ec0:1::/48 maxlen: 48 2a0f:7ec0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:63:83:c6:59:3f:1d:2f:33:8a:b7:d7:f7:f7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330 Validity Not Before: Jan 1 16:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9044ad460145bd413e179a2e573b2f2d239a4a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:1d:c2:d3:c2:87:91:ce:14:90:00:fc:f5: 6d:69:bd:1f:0d:bb:cd:d8:95:26:f0:4f:92:83:06: b6:50:27:d8:c4:b5:53:e2:96:94:bc:5c:e7:50:ca: 06:77:f2:28:90:d9:f0:20:05:33:91:8c:01:a4:b1: d6:b0:76:93:cc:de:dc:30:51:d0:51:11:e0:e3:dd: c2:1f:0b:56:3f:2a:d1:01:c4:2e:cb:d7:5f:34:49: 88:11:c1:1c:45:6a:10:09:d7:5e:e9:6e:1d:8e:e2: f2:8d:0b:8b:7e:79:6b:91:4f:6e:57:27:ad:ba:0f: 8d:0c:ea:f5:04:82:9f:8b:4a:55:cf:c0:49:9a:c9: 69:2f:56:d6:6a:8a:0c:90:ca:28:b2:2f:42:18:9f: 85:89:91:9e:e2:a2:19:5e:0e:3c:54:d6:db:0f:31: 05:e9:94:16:de:04:fd:05:bc:0c:d7:e2:cf:72:7e: 12:e9:65:bf:0a:39:e9:df:34:5b:e4:0f:45:03:89: ee:e2:96:fa:60:7c:21:75:1f:0c:86:4e:40:11:00: 89:6d:57:b4:ae:ff:88:dc:cc:f6:4a:59:41:bf:dd: 8c:04:54:66:bc:71:00:79:ce:0e:58:2f:aa:81:52: 89:41:f5:ef:4d:23:d4:fd:37:3f:77:a9:81:8d:18: 96:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:44:AD:46:01:45:BD:41:3E:17:9A:2E:57:3B:2F:2D:23:9A:4A:4A X509v3 Authority Key Identifier: keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/kEStRgFFvUE-F5ouVzsvLSOaSko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.47.0/24 193.41.82.0/24 IPv6: 2a0f:7ec0:1::/48 2a0f:7ec0:100::/48 Signature Algorithm: sha256WithRSAEncryption 77:5e:f8:14:b1:46:ba:f0:62:5b:c9:5b:42:7b:69:7f:bd:cf: 32:38:c7:60:2c:39:3f:b1:dc:e6:2a:4f:87:eb:d9:c1:d1:99: 89:36:bb:90:c1:09:c5:99:43:ba:62:01:f2:2f:c3:7d:30:4d: ba:27:5e:3c:68:3c:4f:52:83:e5:88:d0:a5:2f:81:b0:9f:74: 9c:22:fd:1e:82:c6:3e:d5:08:2e:28:fc:06:4a:ea:68:bd:74: d2:d6:4e:c6:63:41:c7:bb:b2:c4:70:f5:5f:f4:08:dc:ff:e9: ac:b6:65:58:9c:bb:51:7a:3a:12:84:24:54:0f:04:28:52:23: d5:34:cf:9d:3d:5b:86:a3:51:28:21:6f:1a:bb:0a:32:ae:15: dd:04:43:d3:86:70:bb:74:26:6a:01:bb:f0:8e:0b:fb:eb:b8: df:30:09:69:fd:cd:30:f7:d6:61:d9:88:47:d2:4f:0d:b4:8e: 9b:ef:9d:84:f2:24:88:52:e1:5b:c7:37:a3:c1:cf:5a:72:2b: 36:b4:aa:d4:07:73:92:38:ec:8f:b6:38:c3:26:bc:2c:1e:e7: 7b:cf:ac:75:f9:00:96:81:ef:32:c4:55:03:f1:43:ae:1e:ed: 3b:60:38:a1:eb:11:3c:cc:6d:67:d8:31:89:8a:11:8f:6b:21: b2:e7:5f:e8 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt6WmODxlk/HS8zirfX9/cqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzQ1YjY1OGIxZWMwZmRlYjQ1OWU2ZmYyNTc3ZGI4Y2E2 YTkzMzAwHhcNMjYwMTAxMTYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDQ0YWQ0NjAxNDViZDQxM2UxNzlhMmU1NzNiMmYyZDIzOWE0YTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgsdwtPCh5HOFJAA/PVtab0fDbvN 2JUm8E+Sgwa2UCfYxLVT4paUvFznUMoGd/IokNnwIAUzkYwBpLHWsHaTzN7cMFHQ URHg493CHwtWPyrRAcQuy9dfNEmIEcEcRWoQCdde6W4djuLyjQuLfnlrkU9uVyet ug+NDOr1BIKfi0pVz8BJmslpL1bWaooMkMoosi9CGJ+FiZGe4qIZXg48VNbbDzEF 6ZQW3gT9BbwM1+LPcn4S6WW/Cjnp3zRb5A9FA4nu4pb6YHwhdR8Mhk5AEQCJbVe0 rv+I3Mz2SllBv92MBFRmvHEAec4OWC+qgVKJQfXvTSPU/Tc/d6mBjRiWxwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFJBErUYBRb1BPheaLlc7Ly0jmkpKMB8GA1UdIwQY MBaAFKvEW2WLHsD960Web/JXfbjKapMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThSYlpZc2V3UDNyUlo1djhsZDl1TXBxa3pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jNWMxYjMtZTVjYS00YTgzLTgzOTAt OTE3OTMzYjE1MDJlLzEva0VTdFJnRkZ2VUUtRjVvdVZ6c3ZMU09hU2tvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jNWMxYjMtZTVjYS00YTgzLTgzOTAtOTE3OTMzYjE1MDJl LzEvcThSYlpZc2V3UDNyUlo1djhsZDl1TXBxa3pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAwSkvAwQA wSlSMBgEAgACMBIDBwAqD37AAAEDBwAqD37AAQAwDQYJKoZIhvcNAQELBQADggEB AHde+BSxRrrwYlvJW0J7aX+9zzI4x2AsOT+x3OYqT4fr2cHRmYk2u5DBCcWZQ7pi AfIvw30wTbonXjxoPE9Sg+WI0KUvgbCfdJwi/R6Cxj7VCC4o/AZK6mi9dNLWTsZj Qce7ssRw9V/0CNz/6ay2ZVicu1F6OhKEJFQPBChSI9U0z509W4ajUSghbxq7CjKu Fd0EQ9OGcLt0JmoBu/COC/vruN8wCWn9zTD31mHZiEfSTw20jpvvnYTyJIhS4VvH N6PBz1pyKza0qtQHc5I47I+2OMMmvCwe53vPrHX5AJaB7zLEVQPxQ64e7TtgOKHr ETzMbWfYMYmKEY9rIbLnX+g= -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:19 2026 by rpki-client