This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k8ziDUEMZh-xftWwsrhg5THkPeA.roa File: k8ziDUEMZh-xftWwsrhg5THkPeA.roa (raw, json) Hash identifier: fkvSElf3uZWQmB5WJjUaJ6mUe0YEhDHjBrqRRld+3/4= Subject key identifier: 93:CC:E2:0D:41:0C:66:1F:B1:7E:D5:B0:B2:B8:60:E5:31:E4:3D:E0 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F857896FA698994A4197CFB6CFBDF8C Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k8ziDUEMZh-xftWwsrhg5THkPeA.roa Signing time: Fri 02 Jan 2026 16:23:32 +0000 ROA not before: Fri 02 Jan 2026 16:23:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216127 IP address blocks: 195.58.38.0/24 maxlen: 24 195.58.39.0/24 maxlen: 24 195.133.64.0/24 maxlen: 24 195.133.65.0/24 maxlen: 24 212.193.4.0/24 maxlen: 24 212.193.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:78:96:fa:69:89:94:a4:19:7c:fb:6c:fb:df:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93cce20d410c661fb17ed5b0b2b860e531e43de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f7:2f:93:ab:3f:2e:91:8c:72:bf:32:ce:c2: bf:ce:a7:3b:f8:ac:33:a0:f3:4e:77:3f:5f:b3:37: a0:52:c0:21:c5:52:98:6d:3d:d1:2d:0b:6d:03:75: 49:cc:24:de:53:1d:fd:eb:bc:5d:5a:93:7b:af:b3: 87:43:3c:6c:20:ac:57:ec:08:b8:40:01:28:b5:1c: de:ab:04:9a:13:d8:38:ea:38:07:14:c5:26:f9:78: 61:c3:11:2d:71:03:09:d8:5a:0d:f5:b2:0f:1d:3d: 7b:12:ba:e7:9b:7c:89:45:c4:42:c8:29:8e:e1:10: 69:a8:44:7a:b5:d3:cd:77:ca:22:0f:c5:a0:46:db: de:37:0f:4c:c4:1c:53:74:ed:71:55:29:d6:c7:09: 18:37:01:f8:41:08:fe:3b:ea:f4:6a:ee:10:11:73: 46:9e:a7:df:21:23:b4:65:01:20:ad:66:9a:c2:a9: 0d:29:36:6e:de:ee:4a:96:62:8c:9e:90:d6:56:a8: 08:c7:d7:82:21:c1:4d:d2:2c:e9:62:52:07:e5:fa: ce:25:c3:fc:cd:8a:1b:66:6e:55:a4:6a:d2:75:ea: b0:67:49:f7:41:62:7b:c0:31:bc:e8:72:cd:fb:03: 29:3b:82:0d:a1:34:0e:ec:b4:43:fb:f0:2b:fd:8c: 0b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CC:E2:0D:41:0C:66:1F:B1:7E:D5:B0:B2:B8:60:E5:31:E4:3D:E0 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k8ziDUEMZh-xftWwsrhg5THkPeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.58.38.0/23 195.133.64.0/23 212.193.4.0/23 Signature Algorithm: sha256WithRSAEncryption 32:b1:78:f9:36:03:ff:96:d4:92:bd:2d:69:b5:91:7e:2d:1a: d9:33:69:bc:ef:64:2e:34:3e:98:04:0f:d8:64:6a:bf:54:cb: 63:5b:95:bc:bc:0a:7e:e8:9e:6e:18:a7:f6:dd:ff:51:69:88: 3e:27:fc:40:1f:02:25:ab:6a:6e:28:db:87:96:5d:df:96:b3: a3:04:d3:fe:c2:86:ab:9e:ca:98:b9:b0:18:cf:84:e1:e8:44: 2f:92:0a:28:b0:5e:3c:8a:39:c2:a9:0e:53:8f:40:d0:b7:7b: d1:e6:0a:00:28:85:9e:a3:d8:ef:7c:a0:e9:64:46:85:2b:83: 03:08:99:5e:c9:c4:0a:52:07:d1:05:1c:c1:42:e5:e4:0a:8c: 69:31:db:7c:20:53:e0:a5:cd:a9:85:aa:e8:97:46:59:81:9d: ce:b7:a1:a0:b4:c0:fb:10:6c:0f:da:c9:55:d3:80:27:bf:b7: 5c:94:f3:f0:a0:24:a7:21:bc:9b:fb:f1:b5:f0:8f:31:d1:24: f5:f2:24:2b:69:a0:9e:4e:63:a1:e9:10:84:3f:fd:65:22:eb: db:02:89:5c:f0:65:ff:01:b9:31:0a:7f:1a:aa:c1:39:c9:77: cf:9f:8d:6a:dd:f5:95:7b:59:2c:8f:38:6c:a5:dc:fe:e7:5d: fa:06:77:5e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hXiW+mmJlKQZfPts+9+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2NjZTIwZDQxMGM2NjFmYjE3ZWQ1YjBiMmI4NjBlNTMxZTQzZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fcvk6s/LpGMcr8yzsK/zqc7+Kwz oPNOdz9fszegUsAhxVKYbT3RLQttA3VJzCTeUx3967xdWpN7r7OHQzxsIKxX7Ai4 QAEotRzeqwSaE9g46jgHFMUm+XhhwxEtcQMJ2FoN9bIPHT17Errnm3yJRcRCyCmO 4RBpqER6tdPNd8oiD8WgRtveNw9MxBxTdO1xVSnWxwkYNwH4QQj+O+r0au4QEXNG nqffISO0ZQEgrWaawqkNKTZu3u5KlmKMnpDWVqgIx9eCIcFN0izpYlIH5frOJcP8 zYobZm5VpGrSdeqwZ0n3QWJ7wDG86HLN+wMpO4INoTQO7LRD+/Ar/YwL6wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJPM4g1BDGYfsX7VsLK4YOUx5D3gMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvazh6aURVRU1aaC14ZnRXd3NyaGc1VEhrUGVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwzomAwQB w4VAAwQB1MEEMA0GCSqGSIb3DQEBCwUAA4IBAQAysXj5NgP/ltSSvS1ptZF+LRrZ M2m872QuND6YBA/YZGq/VMtjW5W8vAp+6J5uGKf23f9RaYg+J/xAHwIlq2puKNuH ll3flrOjBNP+woarnsqYubAYz4Th6EQvkgoosF48ijnCqQ5Tj0DQt3vR5goAKIWe o9jvfKDpZEaFK4MDCJleycQKUgfRBRzBQuXkCoxpMdt8IFPgpc2pharol0ZZgZ3O t6GgtMD7EGwP2slV04Anv7dclPPwoCSnIbyb+/G18I8x0ST18iQraaCeTmOh6RCE P/1lIuvbAolc8GX/AbkxCn8aqsE5yXfPn41q3fWVe1ksjzhspdz+5136Bnde -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:53 2026 by rpki-client