This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/k-0ai5LmPbShGWzhq7tl3QEV5xg.roa File: k-0ai5LmPbShGWzhq7tl3QEV5xg.roa (raw, json) Hash identifier: lX1a4+6IcJDs034Yg/uu30HJfCoVoIaGwoVAFeOpt4E= Subject key identifier: 93:ED:1A:8B:92:E6:3D:B4:A1:19:6C:E1:AB:BB:65:DD:01:15:E7:18 Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb Certificate serial: 019B79ED49F9DA298F4E1DCBD7237E3AA577 Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/k-0ai5LmPbShGWzhq7tl3QEV5xg.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 194.125.232.0/22 maxlen: 24 194.125.232.0/24 maxlen: 24 194.125.233.0/24 maxlen: 24 194.125.234.0/24 maxlen: 24 194.125.235.0/24 maxlen: 24 194.242.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:49:f9:da:29:8f:4e:1d:cb:d7:23:7e:3a:a5:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93ed1a8b92e63db4a1196ce1abbb65dd0115e718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:41:24:fb:9f:18:47:3b:68:56:5a:db:3f:0a: 38:95:d3:79:18:da:f3:b7:41:a4:ca:b9:2a:83:ba: d1:4a:9e:71:d6:89:f5:2a:6b:55:a6:94:b4:e3:40: be:88:10:da:21:d5:2d:ae:6a:1e:d6:1a:d7:b6:dc: f6:c4:8e:f2:4a:40:be:7e:af:9d:7c:a7:b0:84:62: 63:c9:3a:35:e9:6e:98:e5:2f:de:3c:c4:ed:41:a6: d0:da:40:21:36:11:db:bd:2e:5b:61:85:76:ae:a1: 5c:61:90:db:c0:9f:76:ce:3a:81:9a:79:77:b9:b6: 83:3e:3d:6b:bd:c5:60:40:0a:0c:fb:a0:8b:1a:88: 4b:69:90:c8:29:12:69:c7:f7:4a:b0:a2:e6:db:0a: e1:d2:8d:c4:a6:06:20:c9:14:8d:35:30:c4:ae:3c: c3:2c:1d:b8:57:df:d1:ab:29:d6:cd:00:63:02:2c: 7a:30:2d:14:74:03:54:1b:d4:20:94:93:96:c3:33: b0:4b:bc:54:cf:1e:2a:d6:fe:78:e3:b8:10:f6:35: 00:ac:71:26:f7:69:f0:e3:b1:01:0e:87:af:ea:69: d7:34:c0:7c:a3:34:fc:e6:77:4e:43:1c:23:8d:fe: 77:91:43:94:a9:5a:16:6c:bd:d8:55:c9:fe:44:d0: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:ED:1A:8B:92:E6:3D:B4:A1:19:6C:E1:AB:BB:65:DD:01:15:E7:18 X509v3 Authority Key Identifier: keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/k-0ai5LmPbShGWzhq7tl3QEV5xg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.125.232.0/22 194.242.32.0/24 Signature Algorithm: sha256WithRSAEncryption 60:3a:78:f7:7b:37:12:32:8a:ef:f9:d5:c9:05:1a:37:7e:21: 75:11:5c:e5:bc:2b:fc:31:c1:11:f6:ec:1e:61:cc:76:b1:b5: cb:ab:03:91:77:90:2a:7c:41:5d:43:1e:03:3d:86:7c:ee:cb: 70:f3:16:32:79:18:76:af:14:04:f2:70:2e:08:23:77:58:40: 1c:f1:53:e6:0c:15:06:4b:01:e5:17:71:43:cd:86:e7:18:15: a6:d6:aa:0f:da:d7:8e:ab:cd:c0:5f:14:c1:67:8b:3e:f0:ed: 70:de:53:75:b4:d3:f9:ef:15:c4:09:a7:4f:19:73:59:3e:68: a7:0a:ea:54:b7:bd:3b:91:87:cf:d0:05:ad:26:f4:e9:8f:86: 58:7a:28:fc:6f:c0:e1:ad:b8:db:3f:b1:9d:8d:5c:b7:e4:4f: 25:f2:10:3c:6e:42:2a:a4:e5:08:bc:94:51:c9:84:21:7a:68: b9:27:72:a4:3f:d6:d7:ec:96:a2:fd:19:0c:0a:3c:52:e5:14: d6:64:4e:cb:f9:96:c8:d4:90:02:aa:91:65:bb:b4:ab:ce:57: 7d:7c:f5:66:be:df:17:89:eb:35:cf:4c:8f:df:37:5e:60:84: 93:09:15:04:f1:a3:f8:55:8e:b0:9f:a4:57:75:24:46:40:9a: 05:4e:24:41 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57Un52imPTh3L1yN+OqV3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OWE2Yjk3NWVhZmQyY2U1MTQ2ODcyMzgxNDM1NWY1NmM1 NWJhZmIwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2VkMWE4YjkyZTYzZGI0YTExOTZjZTFhYmJiNjVkZDAxMTVlNzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokEk+58YRztoVlrbPwo4ldN5GNrz t0Gkyrkqg7rRSp5x1on1KmtVppS040C+iBDaIdUtrmoe1hrXttz2xI7ySkC+fq+d fKewhGJjyTo16W6Y5S/ePMTtQabQ2kAhNhHbvS5bYYV2rqFcYZDbwJ92zjqBmnl3 ubaDPj1rvcVgQAoM+6CLGohLaZDIKRJpx/dKsKLm2wrh0o3EpgYgyRSNNTDErjzD LB24V9/RqynWzQBjAix6MC0UdANUG9QglJOWwzOwS7xUzx4q1v5447gQ9jUArHEm 92nw47EBDoev6mnXNMB8ozT85ndOQxwjjf53kUOUqVoWbL3YVcn+RNAUuwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJPtGouS5j20oRls4au7Zd0BFecYMB8GA1UdIwQY MBaAFGWaa5der9LOUUaHI4FDVfVsVbr7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQt ZWZmM2NkY2JkMDBhLzEvay0wYWk1TG1QYlNoR1d6aHE3dGwzUUVWNXhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQtZWZmM2NkY2JkMDBh LzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwn3oAwQA wvIgMA0GCSqGSIb3DQEBCwUAA4IBAQBgOnj3ezcSMorv+dXJBRo3fiF1EVzlvCv8 McER9uweYcx2sbXLqwORd5AqfEFdQx4DPYZ87stw8xYyeRh2rxQE8nAuCCN3WEAc 8VPmDBUGSwHlF3FDzYbnGBWm1qoP2teOq83AXxTBZ4s+8O1w3lN1tNP57xXECadP GXNZPminCupUt707kYfP0AWtJvTpj4ZYeij8b8DhrbjbP7GdjVy35E8l8hA8bkIq pOUIvJRRyYQhemi5J3KkP9bX7Jai/RkMCjxS5RTWZE7L+ZbI1JACqpFlu7Srzld9 fPVmvt8Xies1z0yP3zdeYISTCRUE8aP4VY6wn6RXdSRGQJoFTiRB -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:11 2026 by rpki-client