This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa File: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (raw, json) Hash identifier: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI= Subject key identifier: 92:C0:BC:DD:34:1B:2E:3F:19:4B:86:28:C4:65:05:CB:B2:1E:FB:46 Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019B7B364D466A89EA930651752E18948FAB Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa Signing time: Thu 01 Jan 2026 20:18:34 +0000 ROA not before: Thu 01 Jan 2026 20:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60118 IP address blocks: 176.126.236.0/22 maxlen: 22 2a02:59e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4d:46:6a:89:ea:93:06:51:75:2e:18:94:8f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92c0bcdd341b2e3f194b8628c46505cbb21efb46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:26:3d:ff:f7:b1:fd:9e:e2:29:61:36:06:28: 5d:8f:26:ee:fc:2c:14:0e:5c:b4:6e:b6:2d:16:1c: e5:0e:fc:00:5d:d2:9d:d9:02:3f:15:b4:75:5d:2b: 7b:fe:97:41:7a:63:6a:61:81:d2:7f:29:43:ee:45: fc:ed:db:72:57:d5:ce:6c:8d:c2:41:bf:a9:5a:b6: 56:66:97:91:01:3a:f1:1b:91:2c:08:9d:ee:b2:6a: 6b:95:de:14:48:b6:cd:4d:20:cd:fc:0b:fa:42:26: a8:3d:80:bf:7d:31:33:e2:17:18:86:ff:19:22:92: 8d:26:0f:43:b4:79:fb:c9:7a:60:13:b6:75:34:b5: 9e:af:4d:3a:be:27:97:8c:64:92:16:9d:81:7b:e1: 8d:da:3f:44:b4:c0:b2:3b:a5:4d:20:1a:ad:2d:05: 6b:1f:df:6c:71:0b:2f:8e:53:fe:1b:47:4d:23:aa: 92:1d:11:21:e4:15:b5:2c:34:9f:bf:30:5d:a4:0a: db:aa:f3:e5:42:72:23:1b:52:66:8c:30:12:e1:d5: 07:c3:7f:7d:73:04:5f:5f:c0:e1:d9:be:fb:7b:2a: f6:b4:ca:b8:95:1f:3d:04:e4:d2:ad:17:e3:08:d4: 4c:36:05:11:38:6c:7c:4b:39:36:6b:a1:d3:b0:a1: 0d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C0:BC:DD:34:1B:2E:3F:19:4B:86:28:C4:65:05:CB:B2:1E:FB:46 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.126.236.0/22 IPv6: 2a02:59e0::/48 Signature Algorithm: sha256WithRSAEncryption 6b:a5:3b:b7:09:37:85:e8:30:59:2b:98:06:2f:4a:df:33:ca: a6:ed:f7:34:ca:9e:f5:d7:7c:d7:57:b8:6d:e2:83:a3:55:12: ff:d3:61:b4:84:ce:af:2c:86:26:06:f9:6c:74:5e:8c:34:42: 5e:76:13:bc:65:ef:b4:49:9e:8a:07:23:9c:c2:80:ba:01:d2: 9b:fd:d3:4c:70:90:4b:57:7f:92:94:ae:f2:2b:98:99:32:b5: d1:18:6c:e8:e9:73:f5:99:44:e0:d0:df:e7:0c:04:2e:dc:d7: 55:34:e6:c5:9b:c2:b2:b3:ad:86:2f:72:16:85:73:9f:55:fe: 96:cd:e4:3a:ac:3f:bc:06:1d:4b:a7:ec:40:cc:1e:c9:39:d0: ec:ca:63:35:49:0b:a3:e4:e1:fc:f7:c7:ef:ae:60:49:7d:73: d5:ab:69:2f:2b:9d:02:a5:a4:8d:31:a8:9f:e9:77:97:0e:d4: 8b:af:63:93:bf:1b:91:cf:a4:9a:18:26:f7:e8:55:b5:17:b9: 1f:8e:16:ee:65:2f:dc:0f:fa:a2:e4:20:4a:5a:25:b2:60:e4: d3:83:bd:dd:06:ea:07:d2:6a:60:f0:58:82:66:ca:59:d3:bd: fb:0d:9a:26:9c:c7:c0:38:89:36:81:14:42:ab:18:cd:19:f1: c4:f6:13:ec -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7Nk1GaonqkwZRdS4YlI+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmMwYmNkZDM0MWIyZTNmMTk0Yjg2MjhjNDY1MDVjYmIyMWVmYjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyY9//ex/Z7iKWE2Bihdjybu/CwU Dly0brYtFhzlDvwAXdKd2QI/FbR1XSt7/pdBemNqYYHSfylD7kX87dtyV9XObI3C Qb+pWrZWZpeRATrxG5EsCJ3usmprld4USLbNTSDN/Av6QiaoPYC/fTEz4hcYhv8Z IpKNJg9DtHn7yXpgE7Z1NLWer006vieXjGSSFp2Be+GN2j9EtMCyO6VNIBqtLQVr H99scQsvjlP+G0dNI6qSHREh5BW1LDSfvzBdpArbqvPlQnIjG1JmjDAS4dUHw399 cwRfX8Dh2b77eyr2tMq4lR89BOTSrRfjCNRMNgUROGx8Szk2a6HTsKENUwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJLAvN00Gy4/GUuGKMRlBcuyHvtGMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEva3NDODNUUWJMajhaUzRZb3hHVUZ5N0llLTBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCsH7sMA8E AgACMAkDBwAqAlngAAAwDQYJKoZIhvcNAQELBQADggEBAGulO7cJN4XoMFkrmAYv St8zyqbt9zTKnvXXfNdXuG3ig6NVEv/TYbSEzq8shiYG+Wx0Xow0Ql52E7xl77RJ nooHI5zCgLoB0pv900xwkEtXf5KUrvIrmJkytdEYbOjpc/WZRODQ3+cMBC7c11U0 5sWbwrKzrYYvchaFc59V/pbN5DqsP7wGHUun7EDMHsk50OzKYzVJC6Pk4fz3x++u YEl9c9WraS8rnQKlpI0xqJ/pd5cO1IuvY5O/G5HPpJoYJvfoVbUXuR+OFu5lL9wP +qLkIEpaJbJg5NODvd0G6gfSamDwWIJmylnTvfsNmiacx8A4iTaBFEKrGM0Z8cT2 E+w= -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:31 2026 by rpki-client