This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/kZOcgE-yQiEGZ59-58kZODUnVtk.roa File: kZOcgE-yQiEGZ59-58kZODUnVtk.roa (raw, json) Hash identifier: NpX21ZAdgdJK8Ql3JOW4Xo/GtwmqnfCpzM6EirlUM7w= Subject key identifier: 91:93:9C:80:4F:B2:42:21:06:67:9F:7E:E7:C9:19:38:35:27:56:D9 Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23 Certificate serial: 019B79EC2CB97994E363BC07A3DB5D02DC1D Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/kZOcgE-yQiEGZ59-58kZODUnVtk.roa Signing time: Thu 01 Jan 2026 14:17:59 +0000 ROA not before: Thu 01 Jan 2026 14:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204163 IP address blocks: 194.152.213.0/24 maxlen: 24 194.152.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:2c:b9:79:94:e3:63:bc:07:a3:db:5d:02:dc:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23 Validity Not Before: Jan 1 14:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91939c804fb2422106679f7ee7c91938352756d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e7:f5:9c:80:3d:62:78:a4:5f:a8:3e:70:86: c3:1a:30:88:1b:5c:9f:1a:0b:ec:94:92:dd:30:51: 86:a7:59:fa:2f:f1:16:c1:df:f2:7c:8a:b5:e3:ca: f2:80:7b:72:2a:1c:bc:ca:08:83:16:5b:8b:b1:b1: 16:85:39:8a:80:fb:0b:f5:a8:57:c5:a5:c6:f7:58: 66:5a:7f:29:0f:f9:e2:ff:56:30:b3:9b:14:e2:e7: 12:e8:02:53:76:5b:e3:ac:95:c8:c5:fe:68:83:cc: 11:32:ee:9f:76:3c:3f:36:eb:9c:c9:b3:32:0b:ab: 22:80:b7:17:6e:4e:44:5c:85:22:c9:9b:bd:34:e5: 10:d9:c7:91:f1:f6:ff:d2:ac:48:f1:0b:3f:87:e9: 50:11:f4:de:80:73:3e:b8:ef:7d:8c:74:7e:b2:7a: 05:9f:15:1f:f5:e3:3b:d7:e9:5f:c0:d8:0a:b7:71: 34:1a:02:b7:4c:c5:36:fa:ac:6a:a2:50:bf:16:f7: fc:65:62:b7:ff:8b:14:d9:2a:c9:05:59:63:55:6e: cb:af:4d:05:c2:c2:d7:36:76:95:e4:3e:03:ea:62: 1b:b7:d7:c3:11:1c:b6:18:04:f5:ad:da:9e:b9:33: b3:f2:27:ec:ef:44:40:f7:38:a2:62:1c:8a:31:d1: 54:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:93:9C:80:4F:B2:42:21:06:67:9F:7E:E7:C9:19:38:35:27:56:D9 X509v3 Authority Key Identifier: keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/kZOcgE-yQiEGZ59-58kZODUnVtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.152.213.0/24 194.152.238.0/24 Signature Algorithm: sha256WithRSAEncryption 78:80:0f:fa:e4:d2:b3:f8:67:9f:a3:79:75:f5:b0:fa:f8:95: 9a:f9:e5:61:68:cb:54:ab:ca:a7:0b:3e:09:e4:d0:ee:7b:61: 2a:0b:97:9a:4c:08:e0:51:e4:9d:5e:93:59:cc:f9:b3:03:30: 24:d8:9b:ef:9a:25:4c:49:12:4f:5f:8c:81:9d:02:5b:ba:7e: 19:77:2c:ed:c5:15:7b:2a:4b:5c:8a:b7:09:a2:fa:6d:c9:00: 52:98:1f:bc:7c:c7:43:30:0f:30:d2:a1:5c:dd:98:d8:8b:a9: c0:b8:93:aa:de:9d:e8:47:88:0f:b3:f7:3d:e1:18:a5:63:28: a4:41:a6:e0:e9:b5:f4:41:39:8c:b1:01:b2:02:4d:a6:09:6f: cf:7a:53:87:40:e6:bd:ec:4f:87:e5:81:63:d6:1a:e4:39:a9: 51:b5:d3:25:21:f9:05:bf:4d:05:54:c6:97:7a:bf:76:99:71: da:be:e2:7a:ec:84:92:d7:11:e3:7b:05:8b:f4:9c:b3:e5:bc: 76:9a:1c:e1:39:c0:ff:b7:ea:6e:c7:24:99:79:3b:d0:d2:b8: bf:d5:e3:35:65:7d:1c:3f:a5:c4:31:30:90:b9:20:1e:a9:62: 05:82:2b:b7:83:9a:44:c5:9f:57:e8:aa:5e:14:98:fd:f7:44: 34:a6:e4:da -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57Cy5eZTjY7wHo9tdAtwdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMGY0ODcyYWQxYzFmNGZjYjIxM2I2YjJlZGIzODhhMmQ5 YzlhMjMwHhcNMjYwMTAxMTQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTkzOWM4MDRmYjI0MjIxMDY2NzlmN2VlN2M5MTkzODM1Mjc1NmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuf1nIA9YnikX6g+cIbDGjCIG1yf GgvslJLdMFGGp1n6L/EWwd/yfIq148rygHtyKhy8ygiDFluLsbEWhTmKgPsL9ahX xaXG91hmWn8pD/ni/1Yws5sU4ucS6AJTdlvjrJXIxf5og8wRMu6fdjw/NuucybMy C6sigLcXbk5EXIUiyZu9NOUQ2ceR8fb/0qxI8Qs/h+lQEfTegHM+uO99jHR+snoF nxUf9eM71+lfwNgKt3E0GgK3TMU2+qxqolC/Fvf8ZWK3/4sU2SrJBVljVW7Lr00F wsLXNnaV5D4D6mIbt9fDERy2GAT1rdqeuTOz8ifs70RA9ziiYhyKMdFUzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJGTnIBPskIhBmeffufJGTg1J1bZMB8GA1UdIwQY MBaAFA4PSHKtHB9PyyE7ay7bOIotnJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQt YzAxZjgwYTFjODA1LzEva1pPY2dFLXlRaUVHWjU5LTU4a1pPRFVuVnRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQtYzAxZjgwYTFjODA1 LzEvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwpjVAwQA wpjuMA0GCSqGSIb3DQEBCwUAA4IBAQB4gA/65NKz+Gefo3l19bD6+JWa+eVhaMtU q8qnCz4J5NDue2EqC5eaTAjgUeSdXpNZzPmzAzAk2JvvmiVMSRJPX4yBnQJbun4Z dyztxRV7KktcircJovptyQBSmB+8fMdDMA8w0qFc3ZjYi6nAuJOq3p3oR4gPs/c9 4RilYyikQabg6bX0QTmMsQGyAk2mCW/PelOHQOa97E+H5YFj1hrkOalRtdMlIfkF v00FVMaXer92mXHavuJ67ISS1xHjewWL9Jyz5bx2mhzhOcD/t+puxySZeTvQ0ri/ 1eM1ZX0cP6XEMTCQuSAeqWIFgiu3g5pExZ9X6KpeFJj990Q0puTa -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:29 2026 by rpki-client