This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/kRt0tDJSVJ_omHpQrdWtGbX3JFE.roa File: kRt0tDJSVJ_omHpQrdWtGbX3JFE.roa (raw, json) Hash identifier: CrMe+KpHmjRar77RkffCDnmY1XQPJsNcEG8vS6cPsZI= Subject key identifier: 91:1B:74:B4:32:52:54:9F:E8:98:7A:50:AD:D5:AD:19:B5:F7:24:51 Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019B79ED511543433C5970360BE911012128 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/kRt0tDJSVJ_omHpQrdWtGbX3JFE.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205384 IP address blocks: 2.57.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:51:15:43:43:3c:59:70:36:0b:e9:11:01:21:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=911b74b43252549fe8987a50add5ad19b5f72451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:09:49:b9:1b:af:5d:ee:c0:67:f2:b0:e9: 8f:b2:5a:53:75:d4:10:75:7e:be:6a:9c:9b:d6:0e: 0b:4b:57:72:6b:57:29:e2:27:43:45:f3:51:a9:2f: e3:98:8b:a4:47:49:e2:da:15:be:d7:ce:2e:11:1f: 86:61:24:df:fb:57:a4:3b:43:ff:e8:82:5f:d7:02: 7f:0b:0f:76:45:03:5f:f7:8b:d3:42:c1:4a:10:b2: 63:a2:15:4c:0e:45:79:36:52:b5:f9:dd:4f:4e:26: 4a:be:22:49:2f:5a:d7:95:67:4c:b6:52:c6:65:c1: a9:84:b9:d0:ad:33:88:53:c6:91:5b:29:98:19:b1: e2:c4:e6:64:01:57:c6:8a:bd:63:86:3b:38:bf:08: b8:2a:c7:0f:ec:89:63:67:b3:a8:ab:f7:e8:83:a3: 36:00:2f:29:7f:a6:44:13:d2:43:f1:c5:d1:e2:3d: 91:0e:27:9b:af:63:ad:93:ac:ac:c9:d9:c4:ce:9b: 12:3d:7b:75:9a:b5:73:e5:96:0a:f7:c3:e8:19:a5: eb:ac:a9:f3:9a:07:4a:8d:71:a2:91:65:b2:5e:37: 56:01:a7:68:b3:5b:c2:ca:af:65:ea:d8:4d:07:0b: 23:66:d5:6b:d5:6e:e3:34:45:20:e0:24:94:6d:ac: ab:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1B:74:B4:32:52:54:9F:E8:98:7A:50:AD:D5:AD:19:B5:F7:24:51 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/kRt0tDJSVJ_omHpQrdWtGbX3JFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.10.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:03:b6:23:fa:41:bf:10:05:68:76:65:62:28:5a:30:07:c5: f4:f2:c5:3b:28:b8:58:26:6b:7a:3b:3a:8b:9a:dc:b7:da:a0: 13:54:da:27:3c:a5:98:e7:d6:05:4a:23:41:1c:b9:11:1d:3a: 43:1d:6b:d7:04:80:70:05:62:e0:ec:a6:83:1c:01:e3:00:73: f0:57:7f:b7:ad:cf:af:60:56:00:af:9b:4f:b1:e7:16:6d:83: d1:4f:e8:9a:af:4d:5c:03:25:01:a8:1f:bf:bd:3c:48:fd:1d: e6:a3:c6:d1:19:e9:be:7f:02:b1:fd:12:01:6c:ec:ac:a2:4e: 1f:2b:25:67:62:de:5b:3d:41:2e:17:27:5e:09:29:ee:dd:66: 5b:93:ab:c4:a6:b6:77:a0:9e:07:c8:56:62:4a:6f:ab:db:2f: b7:0b:66:9d:c2:a9:49:ea:b2:e1:12:14:e8:39:fc:ca:17:04: a8:b2:20:7e:51:89:27:29:89:5d:87:c6:8c:9a:25:ce:3b:c6: 89:a6:cb:bc:f4:d4:a2:57:29:31:3a:27:91:be:e2:9a:ba:2e: 15:26:b0:6b:55:e5:72:88:b8:7d:44:0b:23:4d:b8:75:4e:6f: 4d:8c:22:47:32:b1:13:27:d2:ac:c7:cb:b2:ad:7b:b1:72:56: a0:c3:23:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VEVQ0M8WXA2C+kRASEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTFiNzRiNDMyNTI1NDlmZTg5ODdhNTBhZGQ1YWQxOWI1ZjcyNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXkJSbkbr13uwGfysOmPslpTddQQ dX6+apyb1g4LS1dya1cp4idDRfNRqS/jmIukR0ni2hW+184uER+GYSTf+1ekO0P/ 6IJf1wJ/Cw92RQNf94vTQsFKELJjohVMDkV5NlK1+d1PTiZKviJJL1rXlWdMtlLG ZcGphLnQrTOIU8aRWymYGbHixOZkAVfGir1jhjs4vwi4KscP7IljZ7Ooq/fog6M2 AC8pf6ZEE9JD8cXR4j2RDiebr2Otk6ysydnEzpsSPXt1mrVz5ZYK98PoGaXrrKnz mgdKjXGikWWyXjdWAados1vCyq9l6thNBwsjZtVr1W7jNEUg4CSUbayr2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJEbdLQyUlSf6Jh6UK3VrRm19yRRMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEva1J0MHRESlNWSl9vbUhwUXJkV3RHYlgzSkZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBAjkKMA0G CSqGSIb3DQEBCwUAA4IBAQCPA7Yj+kG/EAVodmViKFowB8X08sU7KLhYJmt6OzqL mty32qATVNonPKWY59YFSiNBHLkRHTpDHWvXBIBwBWLg7KaDHAHjAHPwV3+3rc+v YFYAr5tPsecWbYPRT+iar01cAyUBqB+/vTxI/R3mo8bRGem+fwKx/RIBbOysok4f KyVnYt5bPUEuFydeCSnu3WZbk6vEprZ3oJ4HyFZiSm+r2y+3C2adwqlJ6rLhEhTo OfzKFwSosiB+UYknKYldh8aMmiXOO8aJpsu89NSiVykxOieRvuKaui4VJrBrVeVy iLh9RAsjTbh1Tm9NjCJHMrETJ9Ksx8uyrXuxclagwyOx -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:57 2026 by rpki-client