This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/_kKh1SIW-Zu-hrLTEq1pbc-XAUA.roa File: _kKh1SIW-Zu-hrLTEq1pbc-XAUA.roa (raw, json) Hash identifier: SexbsCEi+yARHDIbAfK05XC5sAMvM+DyaRl106OI1Io= Subject key identifier: FE:42:A1:D5:22:16:F9:9B:BE:86:B2:D3:12:AD:69:6D:CF:97:01:40 Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Certificate serial: 019B791085F1BCFDE4B5E5D2453C4C373B5B Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/_kKh1SIW-Zu-hrLTEq1pbc-XAUA.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63440 IP address blocks: 213.198.94.144/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:85:f1:bc:fd:e4:b5:e5:d2:45:3c:4c:37:3b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe42a1d52216f99bbe86b2d312ad696dcf970140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:88:9c:dc:10:ba:ba:b0:e5:85:34:b1:31:5f: c8:5f:19:d4:54:16:c9:d8:90:19:81:e8:a1:46:5a: de:07:6a:44:cb:38:d3:54:1b:85:96:fd:0f:e3:a5: 5e:ab:b3:bf:60:87:48:ea:6b:4c:30:4c:ed:79:f6: 0b:8e:92:ee:e6:d8:a1:d6:3e:45:5e:61:d0:c1:29: 11:76:a8:61:9a:a3:23:6e:51:de:03:2d:1d:30:fa: f1:20:e1:fa:27:72:89:c5:5b:59:fe:83:3b:c9:e1: c8:6d:99:51:6f:95:2f:68:29:51:ea:f1:b2:7d:30: 32:e0:c0:53:1e:ae:a1:65:af:e7:8f:f5:cc:96:bd: 56:5b:21:71:50:e7:40:65:b7:7e:72:94:aa:44:5b: ea:8d:e6:c8:01:51:ec:80:fb:eb:d2:62:64:b9:46: 35:bb:24:6d:fd:32:e7:0d:7e:73:dd:24:98:1b:9a: 66:c1:20:63:b0:94:36:56:73:e4:65:92:7e:96:07: 33:b6:c9:cd:6f:fa:79:76:dc:3d:b6:9a:25:69:3f: 3b:a5:ea:a7:41:7b:23:b6:b0:9a:db:44:03:16:c8: 9d:75:ff:ff:cf:8f:34:4d:5c:00:2c:48:82:79:98: d7:a7:26:3c:9c:c0:5f:fd:f0:78:2e:3c:97:c3:bf: 8b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:42:A1:D5:22:16:F9:9B:BE:86:B2:D3:12:AD:69:6D:CF:97:01:40 X509v3 Authority Key Identifier: keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/_kKh1SIW-Zu-hrLTEq1pbc-XAUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.198.94.144/30 Signature Algorithm: sha256WithRSAEncryption 5e:0a:d3:d5:db:0d:b3:8d:d5:e7:63:11:96:93:e0:4f:26:e7: cc:5f:d6:d2:e5:dd:1d:54:ba:6d:63:58:65:38:96:c8:95:3a: a4:0b:93:da:29:81:e4:bf:74:41:c3:01:60:78:99:5e:bd:4c: 0c:d7:1d:28:de:4b:a2:99:6a:ea:03:54:9e:6b:cc:a4:64:e1: c2:fe:1d:b9:23:3e:e6:cd:7d:49:36:3d:8d:01:93:f1:d8:45: 80:fa:f2:fd:20:76:8b:85:e4:aa:89:0d:42:23:e7:ea:5f:e5: 25:88:7e:2a:c7:1e:68:76:49:f5:46:a2:a8:0a:73:49:f2:a4: 77:ff:3b:fd:ac:e6:db:3f:4c:12:69:21:f6:3f:1d:f3:fe:58: 0d:0d:f7:e1:57:79:19:29:f7:25:bc:21:8f:d4:99:5e:e4:f1: 5c:2c:ab:8d:f5:94:7c:fe:c5:a1:ab:7d:5b:ff:66:c2:c0:f8: b6:fa:87:23:6c:ef:09:ba:2c:30:5d:27:7b:92:5e:c0:da:fe: ac:bc:0f:81:42:dd:32:cf:34:bd:9f:6c:6c:b7:b9:07:e5:ea: 2a:10:88:dd:3f:90:e7:31:bf:d1:87:9b:e2:4b:68:2b:00:39: 7f:53:18:14:d9:b8:6a:9e:fa:f7:17:1b:be:2f:f4:75:e0:17: d6:64:75:7c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EIXxvP3kteXSRTxMNztbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4 ZDIyZmQwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTQyYTFkNTIyMTZmOTliYmU4NmIyZDMxMmFkNjk2ZGNmOTcwMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYic3BC6urDlhTSxMV/IXxnUVBbJ 2JAZgeihRlreB2pEyzjTVBuFlv0P46Veq7O/YIdI6mtMMEztefYLjpLu5tih1j5F XmHQwSkRdqhhmqMjblHeAy0dMPrxIOH6J3KJxVtZ/oM7yeHIbZlRb5UvaClR6vGy fTAy4MBTHq6hZa/nj/XMlr1WWyFxUOdAZbd+cpSqRFvqjebIAVHsgPvr0mJkuUY1 uyRt/TLnDX5z3SSYG5pmwSBjsJQ2VnPkZZJ+lgcztsnNb/p5dtw9tpolaT87peqn QXsjtrCa20QDFsiddf//z480TVwALEiCeZjXpyY8nMBf/fB4LjyXw7+L1QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFP5CodUiFvmbvoay0xKtaW3PlwFAMB8GA1UdIwQY MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt NzgwYTI1Y2QwZGQ5LzEvX2tLaDFTSVctWnUtaHJMVEVxMXBiYy1YQVVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5 LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUC1cZekDAN BgkqhkiG9w0BAQsFAAOCAQEAXgrT1dsNs43V52MRlpPgTybnzF/W0uXdHVS6bWNY ZTiWyJU6pAuT2imB5L90QcMBYHiZXr1MDNcdKN5Loplq6gNUnmvMpGThwv4duSM+ 5s19STY9jQGT8dhFgPry/SB2i4XkqokNQiPn6l/lJYh+KsceaHZJ9UaiqApzSfKk d/87/azm2z9MEmkh9j8d8/5YDQ334Vd5GSn3Jbwhj9SZXuTxXCyrjfWUfP7Foat9 W/9mwsD4tvqHI2zvCbosMF0ne5JewNr+rLwPgULdMs80vZ9sbLe5B+XqKhCI3T+Q 5zG/0Yeb4ktoKwA5f1MYFNm4ap769xcbvi/0deAX1mR1fA== -----END CERTIFICATE-----Generated at Mon Jan 12 12:27:28 2026 by rpki-client