This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kfQgitceqkdgH5K9PoWxQ0GgiMs.roa File: kfQgitceqkdgH5K9PoWxQ0GgiMs.roa (raw, json) Hash identifier: zCz/y6zhyVM1eTQNHsLoMIv1YHKr6ml0vl3BhS9qDDw= Subject key identifier: 91:F4:20:8A:D7:1E:AA:47:60:1F:92:BD:3E:85:B1:43:41:A0:88:CB Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A33E7AD95591AB6EC2CE6FF1F3E777 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kfQgitceqkdgH5K9PoWxQ0GgiMs.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211674 IP address blocks: 193.37.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3e:7a:d9:55:91:ab:6e:c2:ce:6f:f1:f3:e7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91f4208ad71eaa47601f92bd3e85b14341a088cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:91:6d:5d:5b:ef:ee:14:c8:8d:c1:11:47:97: bc:63:00:23:01:45:33:4c:7f:f0:1c:b1:50:a2:f2: b0:a2:65:51:58:33:27:54:c8:dc:cc:e7:9a:ce:5f: dd:bd:62:58:9e:9e:dd:bf:a7:0a:7f:b9:7f:74:ac: 00:d1:59:16:e2:d5:aa:0b:6f:2a:fe:ad:67:6c:6e: 39:01:38:84:e4:5e:57:16:41:6a:af:2b:c2:49:cb: e2:40:cb:dd:03:97:7a:9b:d9:60:3a:0a:fe:73:e2: 4c:c4:6a:df:45:94:7e:fd:cf:2e:57:90:5a:be:ae: c6:e5:0e:4f:b7:7f:ea:d8:3e:fa:31:71:63:c9:68: a6:c7:eb:32:d9:15:bd:3d:06:9a:ac:ab:84:06:33: 27:fb:ab:d7:14:c1:22:81:d1:a9:d4:2e:eb:fe:94: a5:6a:56:b3:3d:aa:6f:37:ab:39:00:d1:f2:b1:b9: c7:91:9a:3d:42:5b:16:74:ac:7d:db:b6:2d:1d:28: 86:b9:e3:86:4a:c5:89:db:82:6f:fd:1f:7b:7a:78: 5d:01:e1:6a:84:dd:5c:45:b5:56:34:52:84:42:22: 79:cb:8a:7b:ec:f6:fa:92:e2:ae:6a:a0:c3:cb:3f: 9d:91:f4:1c:4a:7d:88:ac:3a:bf:f8:9e:88:7a:c5: 8f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F4:20:8A:D7:1E:AA:47:60:1F:92:BD:3E:85:B1:43:41:A0:88:CB X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kfQgitceqkdgH5K9PoWxQ0GgiMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.40.0/24 Signature Algorithm: sha256WithRSAEncryption 81:63:7d:20:46:7c:35:a7:d7:25:56:4e:64:c4:b4:f9:1a:d3: 7f:33:9d:99:ec:ce:03:f4:5a:2a:e4:27:bd:c2:5a:30:ee:e0: 3a:f5:ed:2a:28:20:67:3c:33:98:73:69:0f:af:9f:85:72:f5: 5e:a2:43:f3:8d:a6:c5:4e:b5:74:5c:c3:a9:06:98:b3:3c:a5: 88:61:e0:9b:cc:a5:7c:9b:17:a6:f7:6e:c5:66:11:5a:40:4f: 6a:54:a6:1f:e8:e6:0c:f8:31:b9:c6:33:d1:0e:bb:1f:7e:bf: a2:c0:d4:a3:23:5b:72:44:82:3a:e4:1e:2f:59:d8:15:50:3e: c6:c0:7d:b0:24:04:22:e3:a0:8f:e7:ed:f7:25:ca:e2:e7:32: b3:b2:cf:82:05:0a:2d:bb:49:d0:b4:29:fd:d0:ce:be:c4:d2: ee:af:d4:fa:9d:4b:da:4c:e3:20:43:86:b7:31:c2:f3:64:9c: cf:aa:0e:48:36:6f:9e:79:65:9e:33:37:53:62:0e:33:f2:4a: b0:1e:f3:81:6e:e9:d9:a3:19:18:8e:e9:1b:4b:a7:4c:ba:73: 97:74:e4:0d:ba:59:4f:05:20:ce:e2:02:cd:15:58:03:a9:a3: bf:e5:1d:a4:71:39:ba:3d:fe:db:28:c5:e7:82:5f:7b:16:7b: 71:a6:d8:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oz562VWRq27Czm/x8+d3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWY0MjA4YWQ3MWVhYTQ3NjAxZjkyYmQzZTg1YjE0MzQxYTA4OGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZFtXVvv7hTIjcERR5e8YwAjAUUz TH/wHLFQovKwomVRWDMnVMjczOeazl/dvWJYnp7dv6cKf7l/dKwA0VkW4tWqC28q /q1nbG45ATiE5F5XFkFqryvCScviQMvdA5d6m9lgOgr+c+JMxGrfRZR+/c8uV5Ba vq7G5Q5Pt3/q2D76MXFjyWimx+sy2RW9PQaarKuEBjMn+6vXFMEigdGp1C7r/pSl alazPapvN6s5ANHysbnHkZo9QlsWdKx927YtHSiGueOGSsWJ24Jv/R97enhdAeFq hN1cRbVWNFKEQiJ5y4p77Pb6kuKuaqDDyz+dkfQcSn2IrDq/+J6IesWP+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJH0IIrXHqpHYB+SvT6FsUNBoIjLMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEva2ZRZ2l0Y2Vxa2RnSDVLOVBvV3hRMEdnaU1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSUoMA0G CSqGSIb3DQEBCwUAA4IBAQCBY30gRnw1p9clVk5kxLT5GtN/M52Z7M4D9Foq5Ce9 wlow7uA69e0qKCBnPDOYc2kPr5+FcvVeokPzjabFTrV0XMOpBpizPKWIYeCbzKV8 mxem927FZhFaQE9qVKYf6OYM+DG5xjPRDrsffr+iwNSjI1tyRII65B4vWdgVUD7G wH2wJAQi46CP5+33Jcri5zKzss+CBQotu0nQtCn90M6+xNLur9T6nUvaTOMgQ4a3 McLzZJzPqg5INm+eeWWeMzdTYg4z8kqwHvOBbunZoxkYjukbS6dMunOXdOQNullP BSDO4gLNFVgDqaO/5R2kcTm6Pf7bKMXngl97Fntxptj+ -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:07 2026 by rpki-client