This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/kIc25lNhDl4D7pUCbie5D4jyeE4.roa File: kIc25lNhDl4D7pUCbie5D4jyeE4.roa (raw, json) Hash identifier: IhxMDpi+INQ3n3VWqRXdFP57vs6T6oZx2cztKdPMw6s= Subject key identifier: 90:87:36:E6:53:61:0E:5E:03:EE:95:02:6E:27:B9:0F:88:F2:78:4E Certificate issuer: /CN=eee573084100b41d7cc1e447295ba71d019d5192 Certificate serial: 019B797E63E8CE1081CD8B03517BD8F5B51B Authority key identifier: EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/kIc25lNhDl4D7pUCbie5D4jyeE4.roa Signing time: Thu 01 Jan 2026 12:18:04 +0000 ROA not before: Thu 01 Jan 2026 12:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8262 IP address blocks: 217.168.232.0/24 maxlen: 24 2a05:b6c2::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:63:e8:ce:10:81:cd:8b:03:51:7b:d8:f5:b5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eee573084100b41d7cc1e447295ba71d019d5192 Validity Not Before: Jan 1 12:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=908736e653610e5e03ee95026e27b90f88f2784e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f2:42:7f:4c:47:59:24:4a:d3:88:35:e5:4d: 67:4e:76:23:f3:14:da:de:7d:72:d2:e2:92:dd:7d: a4:8f:72:73:59:cf:a2:76:a0:5c:8f:0d:9b:e0:49: 94:4a:a2:68:e2:f5:7b:1d:f2:f6:29:e5:de:12:9b: 34:75:87:3f:43:81:de:e4:b3:23:7c:4a:c3:ca:6d: 48:37:b9:68:24:d9:b6:8c:73:af:0d:e4:5d:78:d7: d5:c5:25:01:d7:b2:20:d2:fe:e4:23:b8:4c:f4:76: aa:9c:38:d2:ad:d1:95:a3:c8:66:34:b2:22:e4:49: fa:bd:37:dd:81:de:24:d3:22:95:0f:3f:4d:8f:86: 04:26:88:45:13:a2:45:b4:6c:7e:3e:10:93:19:36: 29:7b:13:cf:47:d2:1c:26:95:0a:53:6f:83:5c:10: d8:6c:e0:37:db:8f:2d:11:f4:15:88:60:c7:17:dc: 46:de:4e:e3:e5:32:07:35:46:28:58:a8:55:11:37: 31:b4:c7:b6:c0:29:90:da:98:56:4c:f2:cc:f3:63: eb:42:59:64:02:6f:23:af:dc:39:e3:2c:ad:a7:fa: 32:ba:5b:be:12:cb:96:85:07:eb:9c:ef:29:d1:c3: 62:57:ac:a7:e2:2b:d7:1c:b0:48:09:c9:8b:8b:67: 59:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:87:36:E6:53:61:0E:5E:03:EE:95:02:6E:27:B9:0F:88:F2:78:4E X509v3 Authority Key Identifier: keyid:EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/kIc25lNhDl4D7pUCbie5D4jyeE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.168.232.0/24 IPv6: 2a05:b6c2::/32 Signature Algorithm: sha256WithRSAEncryption 5b:6e:87:cb:e6:b6:61:eb:2b:fb:8f:8c:bb:a3:62:fe:64:42: e7:ff:a2:39:60:79:06:d6:0e:74:4b:4c:f3:f9:4a:9d:9b:77: f7:0a:ec:9f:a6:85:21:12:08:b0:6b:39:38:27:01:2d:fb:b6: 0b:eb:96:06:e4:3e:3b:3a:4c:8e:16:d7:2a:11:7d:66:eb:a1: be:5f:89:01:fe:b6:d3:c0:8b:94:b4:6b:e1:01:c9:b7:06:4d: 03:a2:e6:6e:57:12:13:4d:b9:0f:08:ba:11:c9:30:f7:ac:a0: 12:da:7e:4c:f9:8c:7c:81:d5:0b:ca:49:84:b7:7f:65:5d:1d: b5:09:62:a5:8c:86:a2:23:23:ce:dc:8e:67:18:9e:b7:11:90: dd:7a:e7:84:e8:fe:b9:c9:ff:42:40:0a:46:f3:04:d4:4e:98: 67:80:6d:b9:4d:a4:3e:31:28:23:09:fc:02:30:20:6f:ec:fb: 85:6b:77:81:da:ea:34:d0:ec:22:3f:e2:2b:3f:f5:cd:81:04: e1:7b:37:e9:1f:c8:cb:f9:45:8e:f7:9c:03:c1:e9:fc:5d:50: 25:e3:ea:ba:3c:16:26:fc:37:cc:34:c8:f8:be:34:05:2c:61: 79:09:bc:59:bd:6b:ca:6f:69:5c:d9:ac:db:04:07:11:04:c4: a8:91:29:b8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fmPozhCBzYsDUXvY9bUbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZTU3MzA4NDEwMGI0MWQ3Y2MxZTQ0NzI5NWJhNzFkMDE5 ZDUxOTIwHhcNMjYwMTAxMTIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDg3MzZlNjUzNjEwZTVlMDNlZTk1MDI2ZTI3YjkwZjg4ZjI3ODRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovJCf0xHWSRK04g15U1nTnYj8xTa 3n1y0uKS3X2kj3JzWc+idqBcjw2b4EmUSqJo4vV7HfL2KeXeEps0dYc/Q4He5LMj fErDym1IN7loJNm2jHOvDeRdeNfVxSUB17Ig0v7kI7hM9HaqnDjSrdGVo8hmNLIi 5En6vTfdgd4k0yKVDz9Nj4YEJohFE6JFtGx+PhCTGTYpexPPR9IcJpUKU2+DXBDY bOA3248tEfQViGDHF9xG3k7j5TIHNUYoWKhVETcxtMe2wCmQ2phWTPLM82PrQllk Am8jr9w54yytp/oyulu+EsuWhQfrnO8p0cNiV6yn4ivXHLBICcmLi2dZbwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJCHNuZTYQ5eA+6VAm4nuQ+I8nhOMB8GA1UdIwQY MBaAFO7lcwhBALQdfMHkRylbpx0BnVGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3VWekNFRUF0QjE4d2VSSEtWdW5IUUdkVVpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xMWE4NjQtZDFjYi00MDAwLWIyYmMt MTllZTNkOGI1NzdlLzEva0ljMjVsTmhEbDREN3BVQ2JpZTVENGp5ZUU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8xMWE4NjQtZDFjYi00MDAwLWIyYmMtMTllZTNkOGI1Nzdl LzEvN3VWekNFRUF0QjE4d2VSSEtWdW5IUUdkVVpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA2ajoMA0E AgACMAcDBQAqBbbCMA0GCSqGSIb3DQEBCwUAA4IBAQBbbofL5rZh6yv7j4y7o2L+ ZELn/6I5YHkG1g50S0zz+Uqdm3f3CuyfpoUhEgiwazk4JwEt+7YL65YG5D47OkyO FtcqEX1m66G+X4kB/rbTwIuUtGvhAcm3Bk0DouZuVxITTbkPCLoRyTD3rKAS2n5M +Yx8gdULykmEt39lXR21CWKljIaiIyPO3I5nGJ63EZDdeueE6P65yf9CQApG8wTU TphngG25TaQ+MSgjCfwCMCBv7PuFa3eB2uo00OwiP+IrP/XNgQThezfpH8jL+UWO 95wDwen8XVAl4+q6PBYm/DfMNMj4vjQFLGF5CbxZvWvKb2lc2azbBAcRBMSokSm4 -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:33 2026 by rpki-client