This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/Ki_V1gbeMTHzzb2sAJkjbiTIB4k.roa File: Ki_V1gbeMTHzzb2sAJkjbiTIB4k.roa (raw, json) Hash identifier: G8coFslA7SGGsh7OBwFjSWY/mTtlNbU81EsuVTVQlk4= Subject key identifier: 2A:2F:D5:D6:06:DE:31:31:F3:CD:BD:AC:00:99:23:6E:24:C8:07:89 Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0 Certificate serial: 019B7EA570A4E745F673F27A71F22D5E9A2A Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/Ki_V1gbeMTHzzb2sAJkjbiTIB4k.roa Signing time: Fri 02 Jan 2026 12:18:50 +0000 ROA not before: Fri 02 Jan 2026 12:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29030 IP address blocks: 87.121.8.0/21 maxlen: 21 87.121.24.0/22 maxlen: 22 87.121.152.0/21 maxlen: 21 94.156.194.0/24 maxlen: 24 94.156.195.0/24 maxlen: 24 94.156.198.0/24 maxlen: 24 94.156.199.0/24 maxlen: 24 94.156.208.0/21 maxlen: 21 185.217.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:70:a4:e7:45:f6:73:f2:7a:71:f2:2d:5e:9a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0 Validity Not Before: Jan 2 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a2fd5d606de3131f3cdbdac0099236e24c80789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ab:07:23:ff:47:78:d1:e1:86:ca:db:98:44: f9:7d:0e:2e:39:a2:42:ae:1e:12:4e:f1:9f:96:8e: c8:27:2a:fe:21:fb:73:8a:25:79:e7:fe:5f:10:18: 09:0e:36:fd:65:a7:f5:5d:1d:d8:23:c3:4c:87:9a: 69:cb:cf:2e:2c:2e:3a:e8:72:25:0d:ff:f3:89:b1: db:4a:ec:76:c9:77:7e:d6:43:08:74:4b:c6:c9:aa: 76:7a:9e:ce:77:23:45:56:5c:cd:cf:35:d1:be:33: 9e:ea:b9:27:d5:7e:00:ad:81:dc:3d:46:08:ac:83: 00:fa:c3:a3:95:dd:ce:21:a5:8f:37:c9:41:67:65: 68:a4:cb:fb:15:63:3b:46:b8:8f:a9:23:50:3f:a7: e3:cc:94:20:69:4f:01:15:51:70:a8:3f:59:84:42: 02:1f:3e:41:13:7e:2d:82:c2:8a:4a:ad:58:48:42: f6:23:2e:3a:e3:fd:16:b2:ec:6e:15:45:54:fb:d4: 28:2e:92:14:aa:88:53:e0:9d:ea:ce:ba:bb:09:9e: 27:d8:c9:e7:88:0b:2c:7c:96:66:13:8f:1c:e3:b5: 0d:e2:80:67:6e:2f:3e:8e:52:02:47:1e:39:35:36: ff:87:06:2c:65:31:4d:1d:10:af:6a:ed:e3:a7:42: d5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2F:D5:D6:06:DE:31:31:F3:CD:BD:AC:00:99:23:6E:24:C8:07:89 X509v3 Authority Key Identifier: keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/Ki_V1gbeMTHzzb2sAJkjbiTIB4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.8.0/21 87.121.24.0/22 87.121.152.0/21 94.156.194.0/23 94.156.198.0/23 94.156.208.0/21 185.217.38.0/24 Signature Algorithm: sha256WithRSAEncryption 41:98:02:b0:c4:65:c2:24:0e:c6:84:f3:92:7e:12:f8:c2:b8: 49:b7:cf:f8:4a:a3:0d:08:41:ae:0d:42:a1:06:d7:64:6a:36: 90:fd:95:aa:1b:86:9e:2d:7e:81:56:25:2a:1f:46:3d:97:79: 28:83:3d:63:ec:f2:97:25:e2:2e:0c:5c:99:30:76:e9:49:0f: 74:b4:8b:11:45:b6:a8:12:ae:94:4c:6b:25:7c:83:91:1d:dc: 96:ed:c4:80:e3:c3:e4:0a:d5:67:87:d9:28:0d:53:2a:e3:84: 1e:f9:96:17:45:05:7c:e5:d4:a2:b0:d9:53:bb:c3:2a:09:c1: 45:b1:1b:39:12:af:ff:34:5d:0f:f9:a5:a2:92:23:99:a5:d6: fb:f2:1a:03:49:c5:dc:5e:d3:74:86:5d:b1:57:57:7a:e8:c2: 57:f5:fe:d5:38:d4:bd:cc:d4:04:e0:ae:55:67:f6:4e:9b:a8: 14:19:8d:5e:99:1e:d5:b4:f3:60:55:36:33:47:38:10:8b:79: 40:2f:f8:82:91:cf:a8:bc:48:e3:56:e5:04:80:6c:59:8e:7a: 5e:25:83:32:84:be:85:9b:24:c6:e9:2a:2f:7b:31:55:ef:57: 1c:57:b2:0d:b6:78:b8:6a:54:ae:92:b8:cf:85:e2:94:9a:61: 6a:76:4d:d5 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt+pXCk50X2c/J6cfItXpoqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNDRmM2UyNGJiZmM2MDQ4ZTVmZmE1MGMzZGNlMzY0ZmZj MDEyYjAwHhcNMjYwMTAyMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTJmZDVkNjA2ZGUzMTMxZjNjZGJkYWMwMDk5MjM2ZTI0YzgwNzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KsHI/9HeNHhhsrbmET5fQ4uOaJC rh4STvGflo7IJyr+IftziiV55/5fEBgJDjb9Zaf1XR3YI8NMh5ppy88uLC466HIl Df/zibHbSux2yXd+1kMIdEvGyap2ep7OdyNFVlzNzzXRvjOe6rkn1X4ArYHcPUYI rIMA+sOjld3OIaWPN8lBZ2VopMv7FWM7RriPqSNQP6fjzJQgaU8BFVFwqD9ZhEIC Hz5BE34tgsKKSq1YSEL2Iy464/0WsuxuFUVU+9QoLpIUqohT4J3qzrq7CZ4n2Mnn iAssfJZmE48c47UN4oBnbi8+jlICRx45NTb/hwYsZTFNHRCvau3jp0LVwwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFCov1dYG3jEx8829rACZI24kyAeJMB8GA1UdIwQY MBaAFAxE8+JLv8YEjl/6UMPc42T/wBKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85OTE4YWEtMzQ3ZC00ODc4LWExNmIt OGFjN2JlNDZjYzRiLzEvS2lfVjFnYmVNVEh6emIyc0FKa2piaVRJQjRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS85OTE4YWEtMzQ3ZC00ODc4LWExNmItOGFjN2JlNDZjYzRi LzEvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDV3kIAwQC V3kYAwQDV3mYAwQBXpzCAwQBXpzGAwQDXpzQAwQAudkmMA0GCSqGSIb3DQEBCwUA A4IBAQBBmAKwxGXCJA7GhPOSfhL4wrhJt8/4SqMNCEGuDUKhBtdkajaQ/ZWqG4ae LX6BViUqH0Y9l3kogz1j7PKXJeIuDFyZMHbpSQ90tIsRRbaoEq6UTGslfIORHdyW 7cSA48PkCtVnh9koDVMq44Qe+ZYXRQV85dSisNlTu8MqCcFFsRs5Eq//NF0P+aWi kiOZpdb78hoDScXcXtN0hl2xV1d66MJX9f7VONS9zNQE4K5VZ/ZOm6gUGY1emR7V tPNgVTYzRzgQi3lAL/iCkc+ovEjjVuUEgGxZjnpeJYMyhL6FmyTG6SovezFV71cc V7INtni4alSukrjPheKUmmFqdk3V -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:45 2026 by rpki-client