This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kQ0K1M49cWfhEKlKsueyfUlTLs0.roa File: kQ0K1M49cWfhEKlKsueyfUlTLs0.roa (raw, json) Hash identifier: Qp3SoybPkWjMRAlAYX3b89nORJCmsIpL6BAI5NWsqto= Subject key identifier: 91:0D:0A:D4:CE:3D:71:67:E1:10:A9:4A:B2:E7:B2:7D:49:53:2E:CD Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8573A77C0A0440A451A90110AF6C03 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kQ0K1M49cWfhEKlKsueyfUlTLs0.roa Signing time: Fri 02 Jan 2026 16:23:30 +0000 ROA not before: Fri 02 Jan 2026 16:23:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214822 IP address blocks: 193.124.121.0/24 maxlen: 24 194.87.9.0/24 maxlen: 24 194.87.168.0/24 maxlen: 24 195.133.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:73:a7:7c:0a:04:40:a4:51:a9:01:10:af:6c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=910d0ad4ce3d7167e110a94ab2e7b27d49532ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:04:a2:bc:c4:0d:86:dc:1d:b8:40:70:a1:ea: 9b:b0:e2:27:30:5b:de:df:8f:43:4e:dd:dd:48:be: 0c:aa:a8:16:a0:4e:1e:c6:8d:80:0a:7e:4a:63:8e: c9:3a:fc:9e:ad:67:a5:07:f3:db:1e:bf:dd:c6:b9: 07:b8:d9:62:77:d1:73:2b:42:f5:f0:94:18:60:2b: f5:9e:ca:8a:0c:3f:bb:93:2b:56:29:10:c6:d1:ee: 29:80:63:c4:01:ee:5b:52:0f:90:83:76:87:7b:e0: 57:17:5b:b2:d4:c6:ec:93:33:83:ff:49:4a:b7:5e: 54:50:e4:e0:57:51:0d:fa:de:8d:3b:2c:8f:1c:aa: d1:a7:f1:81:dc:42:16:5c:9d:54:01:e6:72:f6:64: 69:cc:72:a9:88:c4:63:71:51:57:c0:6a:54:1c:7b: 76:8f:83:87:a8:89:e5:6a:76:ec:27:77:8e:17:9c: a5:e9:58:72:51:85:6f:da:9b:fb:49:3e:6a:45:50: 82:17:95:e8:a2:d9:0a:ba:69:48:1e:a4:1f:bd:cb: 1c:ee:06:58:f6:8e:09:0b:38:2b:01:95:96:c1:a7: a5:37:45:f8:9c:79:08:fd:4d:a7:57:63:7e:bd:b1: bd:1c:97:12:3e:6b:34:40:e9:d2:04:fb:a5:6d:54: ec:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0D:0A:D4:CE:3D:71:67:E1:10:A9:4A:B2:E7:B2:7D:49:53:2E:CD X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kQ0K1M49cWfhEKlKsueyfUlTLs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.124.121.0/24 194.87.9.0/24 194.87.168.0/24 195.133.31.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:93:17:9a:f4:7a:c9:cf:ff:b4:15:f6:39:5d:a4:d8:5a:51: 21:73:ee:d5:98:41:42:8e:23:5b:b0:a4:41:b4:c9:b4:1b:74: ca:fb:68:b7:24:cf:3c:66:98:f2:64:ef:58:49:9f:ea:8c:dc: ba:4d:81:b6:2f:56:66:d9:4a:18:db:7c:69:92:01:d8:fc:3c: d6:c0:a8:d8:92:46:34:c4:e4:fa:a6:a1:13:5c:ce:d6:7a:35: 78:ab:10:f7:84:72:cd:d2:92:15:ae:0d:0c:00:22:de:20:b2: c9:40:a0:81:6a:2e:12:8e:41:41:9c:6a:d5:89:3b:0b:bc:44: c6:9e:e7:25:30:7b:d5:2d:74:a6:27:4f:e2:4a:79:c3:69:e4: fe:50:09:c4:43:8d:ab:df:7b:3e:a6:b2:39:52:7a:2b:c2:d6: c8:9b:94:dd:d8:81:1d:28:f1:58:a4:ea:50:91:c7:a8:6d:ee: d1:82:79:8e:cd:1c:7d:5e:ad:9b:de:0c:1d:da:95:39:41:50: 73:99:c1:a2:e2:b5:e5:f7:a7:99:8b:8c:90:df:af:d1:01:54: e6:10:1a:f2:3c:26:b8:04:d0:60:07:09:c6:19:d0:9c:03:76: 8a:ca:37:2d:3d:62:56:8e:68:f7:22:33:d1:46:f7:94:c6:e0: 78:34:a3:6d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hXOnfAoEQKRRqQEQr2wDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTBkMGFkNGNlM2Q3MTY3ZTExMGE5NGFiMmU3YjI3ZDQ5NTMyZWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wSivMQNhtwduEBwoeqbsOInMFve 349DTt3dSL4MqqgWoE4exo2ACn5KY47JOvyerWelB/PbHr/dxrkHuNlid9FzK0L1 8JQYYCv1nsqKDD+7kytWKRDG0e4pgGPEAe5bUg+Qg3aHe+BXF1uy1MbskzOD/0lK t15UUOTgV1EN+t6NOyyPHKrRp/GB3EIWXJ1UAeZy9mRpzHKpiMRjcVFXwGpUHHt2 j4OHqInlanbsJ3eOF5yl6VhyUYVv2pv7ST5qRVCCF5XootkKumlIHqQfvcsc7gZY 9o4JCzgrAZWWwaelN0X4nHkI/U2nV2N+vbG9HJcSPms0QOnSBPulbVTsiwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJENCtTOPXFn4RCpSrLnsn1JUy7NMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEva1EwSzFNNDljV2ZoRUtsS3N1ZXlmVWxUTHMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwXx5AwQA wlcJAwQAwleoAwQAw4UfMA0GCSqGSIb3DQEBCwUAA4IBAQANkxea9HrJz/+0FfY5 XaTYWlEhc+7VmEFCjiNbsKRBtMm0G3TK+2i3JM88ZpjyZO9YSZ/qjNy6TYG2L1Zm 2UoY23xpkgHY/DzWwKjYkkY0xOT6pqETXM7WejV4qxD3hHLN0pIVrg0MACLeILLJ QKCBai4SjkFBnGrViTsLvETGnuclMHvVLXSmJ0/iSnnDaeT+UAnEQ42r33s+prI5 UnorwtbIm5Td2IEdKPFYpOpQkceobe7RgnmOzRx9Xq2b3gwd2pU5QVBzmcGi4rXl 96eZi4yQ36/RAVTmEBryPCa4BNBgBwnGGdCcA3aKyjctPWJWjmj3IjPRRveUxuB4 NKNt -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:03 2026 by rpki-client