This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/k2AIX1KhkVR8QX6RfFe5qHttdqU.roa File: k2AIX1KhkVR8QX6RfFe5qHttdqU.roa (raw, json) Hash identifier: UWM8ebCL3RjjcX2ODKusm4yE14l5/vm7I5bS2DDP+wI= Subject key identifier: 93:60:08:5F:52:A1:91:54:7C:41:7E:91:7C:57:B9:A8:7B:6D:76:A5 Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca Certificate serial: 019C2260B9388869F5B94C5004FBB5D483C3 Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/k2AIX1KhkVR8QX6RfFe5qHttdqU.roa Signing time: Tue 03 Feb 2026 07:21:30 +0000 ROA not before: Tue 03 Feb 2026 07:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208185 IP address blocks: 121.127.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 07:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:22:60:b9:38:88:69:f5:b9:4c:50:04:fb:b5:d4:83:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca Validity Not Before: Feb 3 07:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9360085f52a191547c417e917c57b9a87b6d76a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:6f:fc:a6:4c:3b:05:2c:8a:15:51:73:c7: 37:48:ce:9a:ae:ee:cf:9b:b2:f2:e7:e2:2b:11:a6: a4:42:bb:89:6b:f6:9c:84:0c:14:95:fb:9a:be:79: 56:a5:56:23:a4:3d:13:e3:ff:21:fd:56:b5:42:30: be:8d:76:65:94:b3:63:20:66:d0:67:d1:6e:d8:19: db:cb:ba:f3:b8:28:a5:c7:10:ee:00:8b:21:11:66: 22:7b:92:37:74:bd:16:d8:d9:42:f0:7b:d0:54:a2: 98:14:f1:16:7a:cb:cb:e4:0d:3d:f7:2c:06:52:37: 7c:73:56:56:b7:0b:52:89:0d:66:ad:9b:ce:79:13: 93:06:c6:5c:4a:5a:6d:28:66:b2:19:70:ae:3d:33: 93:fc:c1:de:f2:7f:9c:1c:b1:2d:17:71:68:01:38: 53:a8:8a:20:09:51:39:c7:4b:72:d9:88:52:50:b9: 97:5f:1f:42:e0:08:2e:eb:01:53:92:f3:f2:f7:24: 04:0c:4e:92:51:55:a8:71:0a:91:01:5f:14:ec:51: df:ab:31:3a:ee:0b:57:c4:0a:80:66:8d:72:97:2e: 99:35:f7:12:55:f9:3d:38:56:57:59:f9:1e:18:93: 90:bf:b5:ea:ae:a9:18:15:84:59:10:22:9b:c4:01: f5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:60:08:5F:52:A1:91:54:7C:41:7E:91:7C:57:B9:A8:7B:6D:76:A5 X509v3 Authority Key Identifier: keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/k2AIX1KhkVR8QX6RfFe5qHttdqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.127.36.0/24 Signature Algorithm: sha256WithRSAEncryption 06:74:80:30:a7:aa:32:12:9a:f5:12:ec:6f:d1:19:77:0c:a7: f2:4d:57:17:4e:27:58:1a:fe:92:57:f1:5c:96:82:da:ab:d1: bd:07:05:53:88:96:56:30:e3:4c:2c:d6:33:76:af:74:07:dc: be:41:14:c4:f3:53:f6:84:a8:ce:46:95:98:da:2c:04:a8:b8: 2d:2e:12:8c:e1:95:ae:7b:66:a0:1e:ad:cf:57:0c:df:67:5b: 8a:db:8e:ee:f8:fb:51:be:cb:29:f9:77:d8:90:fa:68:2a:31: 08:28:29:50:aa:fd:c8:b8:97:57:36:58:14:83:2b:be:81:31: c5:a1:ff:01:89:93:24:de:e9:ee:e6:82:f5:92:a6:c1:83:53: f1:ba:59:ad:65:0e:3f:0c:40:d4:00:3a:e9:4e:01:db:71:b4: b0:9f:d8:fa:e0:02:f5:06:be:77:c3:18:f4:6a:e6:f0:49:a2: ea:16:45:e5:28:02:d9:8c:85:f4:09:39:5f:21:a8:bf:79:16: 09:c9:a8:ec:13:2e:20:0f:67:66:4b:a2:f9:6d:df:9a:f4:79: e0:4a:98:1d:0c:c3:f7:fd:1c:b3:2d:e5:eb:6a:c3:a2:f0:36: 0e:61:31:35:47:ac:e5:67:fe:50:80:c0:a1:4e:94:4c:d2:10: 60:81:17:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwiYLk4iGn1uUxQBPu11IPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjkwNGFiMTQwNjZjN2E5ZmU2MWE1MjFkNTQ5MmEwZTUy OTY1Y2EwHhcNMjYwMjAzMDcyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzYwMDg1ZjUyYTE5MTU0N2M0MTdlOTE3YzU3YjlhODdiNmQ3NmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvclv/KZMOwUsihVRc8c3SM6aru7P m7Ly5+IrEaakQruJa/achAwUlfuavnlWpVYjpD0T4/8h/Va1QjC+jXZllLNjIGbQ Z9Fu2Bnby7rzuCilxxDuAIshEWYie5I3dL0W2NlC8HvQVKKYFPEWesvL5A099ywG Ujd8c1ZWtwtSiQ1mrZvOeROTBsZcSlptKGayGXCuPTOT/MHe8n+cHLEtF3FoAThT qIogCVE5x0ty2YhSULmXXx9C4Agu6wFTkvPy9yQEDE6SUVWocQqRAV8U7FHfqzE6 7gtXxAqAZo1yly6ZNfcSVfk9OFZXWfkeGJOQv7XqrqkYFYRZECKbxAH1KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJNgCF9SoZFUfEF+kXxXuah7bXalMB8GA1UdIwQY MBaAFH35BKsUBmx6n+YaUh1UkqDlKWXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYt M2I0NDVmMjlmNWI3LzEvazJBSVgxS2hrVlI4UVg2UmZGZTVxSHR0ZHFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYtM2I0NDVmMjlmNWI3 LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeX8kMA0G CSqGSIb3DQEBCwUAA4IBAQAGdIAwp6oyEpr1Euxv0Rl3DKfyTVcXTidYGv6SV/Fc loLaq9G9BwVTiJZWMONMLNYzdq90B9y+QRTE81P2hKjORpWY2iwEqLgtLhKM4ZWu e2agHq3PVwzfZ1uK247u+PtRvssp+XfYkPpoKjEIKClQqv3IuJdXNlgUgyu+gTHF of8BiZMk3unu5oL1kqbBg1PxulmtZQ4/DEDUADrpTgHbcbSwn9j64AL1Br53wxj0 aubwSaLqFkXlKALZjIX0CTlfIai/eRYJyajsEy4gD2dmS6L5bd+a9HngSpgdDMP3 /RyzLeXrasOi8DYOYTE1R6zlZ/5QgMChTpRM0hBggRfs -----END CERTIFICATE-----Generated at Tue Feb 3 12:40:59 2026 by rpki-client