This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/kUXE8hYM020bhlzRN8sB-vlSjMU.roa File: kUXE8hYM020bhlzRN8sB-vlSjMU.roa (raw, json) Hash identifier: QRPib/BUrSv3o9RirY5aUxusQjF4i6DzwBFFCHHdLeM= Subject key identifier: 91:45:C4:F2:16:0C:D3:6D:1B:86:5C:D1:37:CB:01:FA:F9:52:8C:C5 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA41641232A0DC45B366439279C3BE8 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/kUXE8hYM020bhlzRN8sB-vlSjMU.roa Signing time: Thu 01 Jan 2026 22:18:29 +0000 ROA not before: Thu 01 Jan 2026 22:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209181 IP address blocks: 5.252.117.0/24 maxlen: 24 193.34.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:16:41:23:2a:0d:c4:5b:36:64:39:27:9c:3b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9145c4f2160cd36d1b865cd137cb01faf9528cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:7e:48:50:c8:ba:b9:8f:29:9f:a4:6c:66: 01:7a:74:85:d5:4d:d4:e0:09:04:75:f0:29:07:83: 1f:94:a1:0a:e6:bb:e7:f6:2a:b1:53:3b:8d:7f:2f: e7:91:fb:2e:35:75:8e:54:76:6c:05:de:36:32:7f: 41:63:e1:26:46:b2:1c:a7:e5:d4:cc:b6:e3:53:f9: 13:f0:dc:50:97:60:5d:30:1e:52:60:bc:cc:03:91: 45:7f:40:05:8d:58:c5:1c:4a:c2:1b:8b:d5:6e:03: 48:09:60:35:5c:5f:54:e6:ce:ce:b5:fb:98:87:65: 00:8f:8b:3b:a5:91:85:f3:45:35:f4:b7:9f:a0:4c: 8e:35:10:11:ec:8b:b8:48:4d:5d:a4:1d:ed:2f:94: fd:9b:fe:4c:5a:9c:a4:36:ef:cd:58:c0:88:4f:1d: be:e2:24:c3:b4:83:54:a3:86:57:cd:0d:3c:5c:c2: 14:40:e6:03:4b:28:5f:48:3c:d3:88:0c:be:90:0f: 6c:70:94:09:0d:48:1b:cc:bc:5d:b6:9a:a1:7a:30: 68:11:6c:de:64:a7:66:6b:01:56:8e:19:30:9d:66: 5e:33:87:5a:51:1e:42:1d:04:25:f3:a2:78:94:7e: f5:c8:dd:20:7a:c3:96:f0:92:af:1d:0a:52:cf:44: ba:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:45:C4:F2:16:0C:D3:6D:1B:86:5C:D1:37:CB:01:FA:F9:52:8C:C5 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/kUXE8hYM020bhlzRN8sB-vlSjMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.117.0/24 193.34.232.0/24 Signature Algorithm: sha256WithRSAEncryption 45:57:fe:2c:2e:a1:6e:25:a6:9b:25:bc:83:b6:44:4c:d0:cd: 9f:b2:52:83:c3:37:b7:ba:27:4a:dc:58:ee:8d:5b:12:af:3e: b8:69:6b:b0:0b:f9:fa:33:9f:e7:3f:8f:80:f9:93:25:34:71: 85:77:a9:4a:af:ac:a0:3a:61:8c:05:e3:fb:d1:04:cf:1c:4f: 82:af:57:5e:6b:04:fe:07:81:8d:44:82:9f:2c:23:10:ea:49: aa:b0:5d:ef:cd:22:92:37:f4:a5:b4:f6:20:7e:c5:53:9e:28: 1b:0a:bd:87:07:b6:94:fc:0e:1b:c2:b7:b5:af:81:b9:4a:bc: 59:a6:1c:e1:47:df:44:ae:bc:fe:b2:e1:bd:93:19:d4:c5:ff: 3c:62:9b:e6:4e:e9:1c:3e:aa:c8:33:a0:82:e9:c4:58:5c:b2: 99:7f:72:47:3f:41:48:0f:ab:7e:61:d9:e9:62:26:5e:1b:f4: ff:07:b9:fe:a0:00:dd:90:be:9b:6c:06:a9:32:a4:e6:0f:61: 84:40:56:e3:fd:d6:bc:5c:88:6e:da:bf:b4:de:03:c9:71:82: bf:63:7c:af:d8:31:7b:0e:29:b4:d2:b9:bd:5b:1f:7f:f2:9e: 4f:2d:2a:ad:6c:60:b5:f8:0f:40:3e:86:18:0c:7f:4e:85:91: 78:93:56:be -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pBZBIyoNxFs2ZDknnDvoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTQ1YzRmMjE2MGNkMzZkMWI4NjVjZDEzN2NiMDFmYWY5NTI4Y2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutd+SFDIurmPKZ+kbGYBenSF1U3U 4AkEdfApB4MflKEK5rvn9iqxUzuNfy/nkfsuNXWOVHZsBd42Mn9BY+EmRrIcp+XU zLbjU/kT8NxQl2BdMB5SYLzMA5FFf0AFjVjFHErCG4vVbgNICWA1XF9U5s7OtfuY h2UAj4s7pZGF80U19LefoEyONRAR7Iu4SE1dpB3tL5T9m/5MWpykNu/NWMCITx2+ 4iTDtINUo4ZXzQ08XMIUQOYDSyhfSDzTiAy+kA9scJQJDUgbzLxdtpqhejBoEWze ZKdmawFWjhkwnWZeM4daUR5CHQQl86J4lH71yN0gesOW8JKvHQpSz0S60wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJFFxPIWDNNtG4Zc0TfLAfr5UozFMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEva1VYRThoWU0wMjBiaGx6Uk44c0ItdmxTak1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABfx1AwQA wSLoMA0GCSqGSIb3DQEBCwUAA4IBAQBFV/4sLqFuJaabJbyDtkRM0M2fslKDwze3 uidK3FjujVsSrz64aWuwC/n6M5/nP4+A+ZMlNHGFd6lKr6ygOmGMBeP70QTPHE+C r1deawT+B4GNRIKfLCMQ6kmqsF3vzSKSN/SltPYgfsVTnigbCr2HB7aU/A4bwre1 r4G5SrxZphzhR99Errz+suG9kxnUxf88YpvmTukcPqrIM6CC6cRYXLKZf3JHP0FI D6t+YdnpYiZeG/T/B7n+oADdkL6bbAapMqTmD2GEQFbj/da8XIhu2r+03gPJcYK/ Y3yv2DF7Dim00rm9Wx9/8p5PLSqtbGC1+A9APoYYDH9OhZF4k1a+ -----END CERTIFICATE-----Generated at Fri Jan 16 01:26:53 2026 by rpki-client