This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/KHUoX9iRMr8MWj7KrZX1ErQ1SGU.roa File: KHUoX9iRMr8MWj7KrZX1ErQ1SGU.roa (raw, json) Hash identifier: 4gBgum5MWPlAQtpHYeC2hA4pL23ODMXf31DF5ppTdUI= Subject key identifier: 28:75:28:5F:D8:91:32:BF:0C:5A:3E:CA:AD:95:F5:12:B4:35:48:65 Certificate issuer: /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b Certificate serial: 019B7A5ABB8E393587C5D340B7E6BD2EAFC9 Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/KHUoX9iRMr8MWj7KrZX1ErQ1SGU.roa Signing time: Thu 01 Jan 2026 16:18:44 +0000 ROA not before: Thu 01 Jan 2026 16:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16265 IP address blocks: 176.103.222.0/23 maxlen: 23 194.169.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bb:8e:39:35:87:c5:d3:40:b7:e6:bd:2e:af:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b Validity Not Before: Jan 1 16:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2875285fd89132bf0c5a3ecaad95f512b4354865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a7:88:a7:25:5c:c3:79:9f:07:ec:ee:d1:b8: 0a:9d:9d:1e:06:18:c0:83:24:1d:a3:0c:84:a2:39: fb:6a:b3:ae:18:7e:f2:c3:44:44:7f:1b:bb:d2:d9: 12:cf:e4:b1:ed:34:21:a1:c8:61:6e:c4:e3:b3:f6: 67:54:3b:74:60:b5:8f:1d:9d:52:9b:2f:37:4e:ff: 2e:9a:45:06:c0:f2:d2:68:11:d3:76:d2:3f:a3:88: cd:9d:55:57:60:25:df:6e:f3:e8:e4:57:f0:a0:6a: db:c1:9b:b9:2d:63:89:e2:ac:41:f0:00:1c:06:ae: 78:a7:cb:80:b4:11:22:13:ec:db:7c:1e:d7:5d:ea: 3c:e6:bf:66:2e:78:b6:97:17:8e:97:31:54:d2:62: a4:5a:1c:37:63:85:24:75:07:2c:7d:93:fc:88:d9: d6:24:79:dc:57:94:ba:ec:1c:44:3d:88:ec:a0:98: c8:c9:32:79:c6:0c:13:92:ed:2f:d8:1b:82:7a:89: 5b:90:1c:aa:f8:c1:fb:74:5a:6f:e0:0e:80:f4:60: 13:9a:b5:fc:a1:96:f2:fb:a7:7d:de:4f:3c:bc:dc: db:64:fd:51:8f:1a:ca:40:61:07:d5:27:33:9e:70: b4:d3:3e:e8:7e:7d:1b:80:75:70:b2:08:bb:66:62: b7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:75:28:5F:D8:91:32:BF:0C:5A:3E:CA:AD:95:F5:12:B4:35:48:65 X509v3 Authority Key Identifier: keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/KHUoX9iRMr8MWj7KrZX1ErQ1SGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.103.222.0/23 194.169.245.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:6e:74:5a:dc:5d:63:c1:3e:89:c0:99:dd:1e:07:bb:d1:3d: b7:62:fd:bd:9d:23:f9:da:33:64:0c:c4:72:8f:4a:61:a2:ba: 64:c5:13:ae:cf:1e:c7:48:84:ce:ea:d7:72:fc:88:83:86:50: af:52:b3:4c:27:f3:01:2c:20:d2:f0:ae:a3:e4:82:4d:de:86: 80:60:9a:2f:78:d1:c5:0c:57:bb:50:de:93:db:6f:07:29:9e: b8:aa:8e:db:93:b7:51:2c:4a:8f:b7:b2:ee:94:4b:7b:b6:35: 26:ab:5e:a9:f3:f7:bc:08:56:70:14:70:c6:59:2f:06:1c:9a: 10:ea:e1:68:a0:80:01:95:f5:51:c9:3f:ac:4b:38:a5:35:8b: 20:d3:5f:f1:6c:07:4f:16:30:30:d7:27:b3:a2:9e:98:93:37: 43:93:a1:26:ea:a9:91:3f:98:1f:eb:de:2c:a9:3c:2a:67:c7: 2f:1c:72:cf:11:85:2a:b7:0d:56:ad:95:ce:26:ac:47:ba:30: 8f:80:43:53:07:06:b3:ea:01:0d:40:02:8e:be:5b:d9:38:57: 95:c1:c0:74:8c:27:fc:d5:f6:9d:1a:f3:be:88:a8:a8:28:41: 6c:1a:a1:0c:33:2f:ce:e7:b8:28:48:c2:8e:19:ef:61:c2:5d: 04:b3:02:63 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WruOOTWHxdNAt+a9Lq/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYmRjMjZjZGRjMGJiY2ZhMzU0ZjExYTAxZTZmZjAxMjk2 YjNjN2IwHhcNMjYwMTAxMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODc1Mjg1ZmQ4OTEzMmJmMGM1YTNlY2FhZDk1ZjUxMmI0MzU0ODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqeIpyVcw3mfB+zu0bgKnZ0eBhjA gyQdowyEojn7arOuGH7yw0REfxu70tkSz+Sx7TQhochhbsTjs/ZnVDt0YLWPHZ1S my83Tv8umkUGwPLSaBHTdtI/o4jNnVVXYCXfbvPo5FfwoGrbwZu5LWOJ4qxB8AAc Bq54p8uAtBEiE+zbfB7XXeo85r9mLni2lxeOlzFU0mKkWhw3Y4UkdQcsfZP8iNnW JHncV5S67BxEPYjsoJjIyTJ5xgwTku0v2BuCeolbkByq+MH7dFpv4A6A9GATmrX8 oZby+6d93k88vNzbZP1RjxrKQGEH1ScznnC00z7ofn0bgHVwsgi7ZmK3yQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCh1KF/YkTK/DFo+yq2V9RK0NUhlMB8GA1UdIwQY MBaAFIq9wmzdwLvPo1TxGgHm/wEpazx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXIzQ2JOM0F1OC1qVlBFYUFlYl9BU2xyUEhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNWMwYTMtNzM3OC00NTQyLTg5N2Qt ZDNhNThiNWNiMGMwLzEvS0hVb1g5aVJNcjhNV2o3S3JaWDFFclExU0dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8wNWMwYTMtNzM3OC00NTQyLTg5N2QtZDNhNThiNWNiMGMw LzEvaXIzQ2JOM0F1OC1qVlBFYUFlYl9BU2xyUEhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBsGfeAwQA wqn1MA0GCSqGSIb3DQEBCwUAA4IBAQA7bnRa3F1jwT6JwJndHge70T23Yv29nSP5 2jNkDMRyj0phorpkxROuzx7HSITO6tdy/IiDhlCvUrNMJ/MBLCDS8K6j5IJN3oaA YJoveNHFDFe7UN6T228HKZ64qo7bk7dRLEqPt7LulEt7tjUmq16p8/e8CFZwFHDG WS8GHJoQ6uFooIABlfVRyT+sSzilNYsg01/xbAdPFjAw1yezop6YkzdDk6Em6qmR P5gf694sqTwqZ8cvHHLPEYUqtw1WrZXOJqxHujCPgENTBwaz6gENQAKOvlvZOFeV wcB0jCf81fadGvO+iKioKEFsGqEMMy/O57goSMKOGe9hwl0EswJj -----END CERTIFICATE-----Generated at Sun Jan 25 10:10:16 2026 by rpki-client