This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/K5YDcjKsp2dVL85kNUc99-8H_LY.roa File: K5YDcjKsp2dVL85kNUc99-8H_LY.roa (raw, json) Hash identifier: 37fbBMQozX0Gt+Mp8SZBctlx7YgLy/vQjPxsGo+QI+s= Subject key identifier: 2B:96:03:72:32:AC:A7:67:55:2F:CE:64:35:47:3D:F7:EF:07:FC:B6 Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C122FB0A393F23C7BAFECA74F81C515 Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/K5YDcjKsp2dVL85kNUc99-8H_LY.roa Signing time: Fri 02 Jan 2026 00:18:45 +0000 ROA not before: Fri 02 Jan 2026 00:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5474 IP address blocks: 193.140.108.0/24 maxlen: 24 193.140.109.0/24 maxlen: 24 193.140.110.0/24 maxlen: 24 193.140.111.0/24 maxlen: 24 2001:a98:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:2f:b0:a3:93:f2:3c:7b:af:ec:a7:4f:81:c5:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b96037232aca767552fce6435473df7ef07fcb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:6d:75:65:06:9a:cd:17:58:19:08:3b:02: 1a:32:97:a2:3e:b3:df:ec:8c:0b:f8:f4:05:54:a1: 80:7d:e1:ad:aa:69:5d:92:c3:e2:10:a5:07:e0:71: 57:fd:01:d6:8d:83:d5:33:11:c0:9c:96:f3:19:28: b7:67:3b:93:6e:33:0f:04:ff:dd:e6:dd:fd:6f:11: 08:ed:62:7b:be:cc:64:97:0c:89:8b:da:ab:45:b7: ae:b5:af:bb:47:18:63:ba:cb:46:dc:7f:48:c5:ed: e2:6a:aa:f3:d2:28:f4:5b:69:2c:17:bd:ec:64:e4: a4:1b:4d:51:86:a6:aa:30:e9:13:3c:8f:fa:6e:e7: 27:3e:0e:3d:34:3c:88:ce:18:90:5a:bf:27:62:94: d3:29:57:a3:fe:58:6e:b6:a7:17:ea:40:bf:9c:de: 20:cc:d3:24:ab:6c:67:cf:eb:a8:9c:71:a2:e5:39: 54:58:34:46:00:35:b7:b5:fe:f3:2d:3d:ea:4c:ae: 47:22:3a:75:a1:fe:db:1c:3f:41:39:4c:13:6a:d6: 18:af:30:5d:23:53:7f:3a:cc:36:ea:dc:5d:88:29: 4d:e1:98:a3:1a:aa:56:f1:8c:bf:f9:20:33:61:36: 06:5d:fe:ff:b4:e0:6d:2f:61:07:3d:2f:10:62:a5: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:96:03:72:32:AC:A7:67:55:2F:CE:64:35:47:3D:F7:EF:07:FC:B6 X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/K5YDcjKsp2dVL85kNUc99-8H_LY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.140.108.0/22 IPv6: 2001:a98:100::/48 Signature Algorithm: sha256WithRSAEncryption 6b:c6:e3:d1:8d:7b:ba:09:13:e2:08:14:8e:d6:6a:c5:cf:f9: 95:38:42:4a:35:ba:ce:fb:50:72:93:da:ef:88:e5:de:97:d4: 8b:22:7c:b5:7c:f2:30:58:ff:33:86:99:7f:9e:76:80:e0:da: de:76:4b:dc:35:0b:d8:ad:c3:0e:1c:bc:d2:65:db:10:56:93: 9f:3f:68:57:09:bd:44:d5:a2:a1:f9:6b:33:31:89:68:7c:e5: 41:f8:a3:f5:80:9c:fa:40:a4:cc:73:70:d5:eb:e5:bc:9a:f1: 2a:3b:5f:f0:42:e3:89:a5:cf:19:fd:60:65:30:94:45:b9:43: 8f:e4:04:c2:20:7d:2c:7d:31:0c:8c:00:ef:24:04:03:75:97: ec:4f:fa:b9:75:75:7b:a1:41:07:9e:12:53:d0:a6:9f:d2:5d: 38:8a:89:a2:9c:1b:1b:17:24:51:5f:89:43:66:bd:5d:af:96: 5e:c0:00:87:07:d1:e8:03:fc:2a:c2:43:1f:9c:1c:09:9c:60: 9c:c1:83:19:2c:02:19:21:7c:fb:dd:d0:48:21:b1:98:b8:2a: 83:69:83:30:34:2d:85:81:d7:d7:91:f8:9d:e2:13:d2:f7:bc: 9a:02:f7:9f:8c:6a:2b:64:4e:b2:8e:30:a6:9f:f0:da:81:e0: 00:6c:ae:dc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8Ei+wo5PyPHuv7KdPgcUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjk2MDM3MjMyYWNhNzY3NTUyZmNlNjQzNTQ3M2RmN2VmMDdmY2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVptdWUGms0XWBkIOwIaMpeiPrPf 7IwL+PQFVKGAfeGtqmldksPiEKUH4HFX/QHWjYPVMxHAnJbzGSi3ZzuTbjMPBP/d 5t39bxEI7WJ7vsxklwyJi9qrRbeuta+7RxhjustG3H9Ixe3iaqrz0ij0W2ksF73s ZOSkG01RhqaqMOkTPI/6bucnPg49NDyIzhiQWr8nYpTTKVej/lhutqcX6kC/nN4g zNMkq2xnz+uonHGi5TlUWDRGADW3tf7zLT3qTK5HIjp1of7bHD9BOUwTatYYrzBd I1N/Osw26txdiClN4ZijGqpW8Yy/+SAzYTYGXf7/tOBtL2EHPS8QYqWrbQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCuWA3IyrKdnVS/OZDVHPffvB/y2MB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvSzVZRGNqS3NwMmRWTDg1a05VYzk5LThIX0xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwYxsMA8E AgACMAkDBwAgAQqYAQAwDQYJKoZIhvcNAQELBQADggEBAGvG49GNe7oJE+IIFI7W asXP+ZU4Qko1us77UHKT2u+I5d6X1IsifLV88jBY/zOGmX+edoDg2t52S9w1C9it ww4cvNJl2xBWk58/aFcJvUTVoqH5azMxiWh85UH4o/WAnPpApMxzcNXr5bya8So7 X/BC44mlzxn9YGUwlEW5Q4/kBMIgfSx9MQyMAO8kBAN1l+xP+rl1dXuhQQeeElPQ pp/SXTiKiaKcGxsXJFFfiUNmvV2vll7AAIcH0egD/CrCQx+cHAmcYJzBgxksAhkh fPvd0EghsZi4KoNpgzA0LYWB19eR+J3iE9L3vJoC95+MaitkTrKOMKaf8NqB4ABs rtw= -----END CERTIFICATE-----Generated at Mon Jan 26 11:05:03 2026 by rpki-client