This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/kJQjUgrsTkI9sNO65hRDTSRGiT8.roa File: kJQjUgrsTkI9sNO65hRDTSRGiT8.roa (raw, json) Hash identifier: lI+jSO9Op8f4ZB2mDkA1WTwA0uM7OvPByGs3tSZRjRg= Subject key identifier: 90:94:23:52:0A:EC:4E:42:3D:B0:D3:BA:E6:14:43:4D:24:46:89:3F Certificate issuer: /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15 Certificate serial: 019B7EA72231A13DA21A98E0C5BE6A9CF325 Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/kJQjUgrsTkI9sNO65hRDTSRGiT8.roa Signing time: Fri 02 Jan 2026 12:20:40 +0000 ROA not before: Fri 02 Jan 2026 12:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34564 IP address blocks: 194.126.228.0/24 maxlen: 24 2001:67c:2310::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:22:31:a1:3d:a2:1a:98:e0:c5:be:6a:9c:f3:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15 Validity Not Before: Jan 2 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=909423520aec4e423db0d3bae614434d2446893f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ee:d3:ea:71:d3:6e:0d:ea:b7:73:55:76:03: e8:6c:71:b0:c5:21:80:fb:d7:3e:bb:d6:08:b0:2b: 3b:00:8e:2b:1b:43:7b:77:13:a8:64:06:a3:40:83: c8:79:cf:84:dd:5a:0b:48:eb:66:39:9d:45:20:8a: e4:07:30:dc:af:5f:22:f1:31:9f:07:a0:2a:54:9d: ca:21:bd:06:9f:4a:5b:50:fa:af:15:f6:da:78:b9: 38:a7:b1:ee:68:3e:1d:d3:4c:62:bf:ff:8c:1d:7e: 62:49:f0:19:2e:f5:0f:92:3c:65:d5:ab:3b:07:79: d7:31:54:dc:c5:c7:77:73:b6:f7:15:0b:4b:4c:4c: 81:e3:39:de:6f:0d:2d:e0:b2:d2:4f:0d:3c:25:a2: 4e:46:c5:79:4f:f3:87:b8:a5:c2:36:36:45:4e:94: ec:5a:c3:14:3a:63:b7:c3:47:5b:98:ca:72:50:a3: 86:cd:f5:05:f8:73:96:97:e7:57:26:dd:25:92:53: 44:82:84:b8:05:22:ab:6d:df:f3:e9:64:b8:0b:32: 92:a0:29:43:07:f9:d4:d1:68:17:92:18:80:1c:34: c4:2e:95:49:87:4e:3b:0c:cd:ba:f7:aa:7a:82:d1: f4:cd:b8:b7:da:a1:b6:9e:fd:d1:9f:02:46:5c:fe: f4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:94:23:52:0A:EC:4E:42:3D:B0:D3:BA:E6:14:43:4D:24:46:89:3F X509v3 Authority Key Identifier: keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/kJQjUgrsTkI9sNO65hRDTSRGiT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.228.0/24 IPv6: 2001:67c:2310::/48 Signature Algorithm: sha256WithRSAEncryption 64:52:8b:09:70:7e:29:13:eb:38:d5:c7:36:61:fe:ae:66:60: d2:ca:3d:a3:20:3a:24:6e:5a:0a:a4:e3:85:3a:58:e0:04:ab: 5d:4e:58:11:a4:93:62:96:12:12:e9:7e:d8:05:38:18:9d:44: a9:1d:97:5d:58:83:d3:7c:64:7a:11:69:aa:55:da:66:1c:dc: c4:6e:09:27:6a:48:1f:d7:2e:86:06:24:d5:7e:81:db:d6:bc: cc:17:f3:22:89:14:eb:22:a5:ab:3e:5a:89:8b:b3:dd:39:74: d0:95:d2:32:78:12:f2:90:e2:a9:ac:80:34:d6:4d:c9:22:5d: 27:7b:77:14:f5:d2:70:2f:f1:96:94:6d:b6:96:10:e7:03:8f: 19:82:3b:4e:2b:31:a2:d8:a0:ba:ce:91:cc:75:14:91:99:ca: 08:1f:ad:02:83:cd:ef:f7:f4:02:8f:3e:81:53:09:50:3b:10: 8d:b9:5e:41:c7:e3:a3:55:9a:d5:4d:29:69:cd:b5:c5:fa:01: 33:43:aa:06:ed:fe:9b:cb:99:7e:60:41:91:13:cf:d4:bc:21: fe:5f:54:4f:10:55:d2:93:f9:a4:92:74:91:ce:de:c9:92:af: f0:9f:30:9f:d4:be:33:b5:58:72:a9:c1:d7:7b:8a:00:1f:96: c7:22:b7:fc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pyIxoT2iGpjgxb5qnPMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2N2MxMTQ1ZDE4NTU0Njk4ZWRkOTlkN2NkMTk5Y2QzYzAy YjJhMTUwHhcNMjYwMTAyMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDk0MjM1MjBhZWM0ZTQyM2RiMGQzYmFlNjE0NDM0ZDI0NDY4OTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9e7T6nHTbg3qt3NVdgPobHGwxSGA +9c+u9YIsCs7AI4rG0N7dxOoZAajQIPIec+E3VoLSOtmOZ1FIIrkBzDcr18i8TGf B6AqVJ3KIb0Gn0pbUPqvFfbaeLk4p7HuaD4d00xiv/+MHX5iSfAZLvUPkjxl1as7 B3nXMVTcxcd3c7b3FQtLTEyB4znebw0t4LLSTw08JaJORsV5T/OHuKXCNjZFTpTs WsMUOmO3w0dbmMpyUKOGzfUF+HOWl+dXJt0lklNEgoS4BSKrbd/z6WS4CzKSoClD B/nU0WgXkhiAHDTELpVJh047DM2696p6gtH0zbi32qG2nv3RnwJGXP70swIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJCUI1IK7E5CPbDTuuYUQ00kRok/MB8GA1UdIwQY MBaAFOZ8EUXRhVRpjt2Z180ZnNPAKyoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW53UlJkR0ZWR21PM1puWHpSbWMwOEFyS2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lNjJlMGMtMjVlYi00Yzk1LTgwMDIt ODdmMWNmNzNhNDNhLzEva0pRalVncnNUa0k5c05PNjVoUkRUU1JHaVQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lNjJlMGMtMjVlYi00Yzk1LTgwMDItODdmMWNmNzNhNDNh LzEvNW53UlJkR0ZWR21PM1puWHpSbWMwOEFyS2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwn7kMA8E AgACMAkDBwAgAQZ8IxAwDQYJKoZIhvcNAQELBQADggEBAGRSiwlwfikT6zjVxzZh /q5mYNLKPaMgOiRuWgqk44U6WOAEq11OWBGkk2KWEhLpftgFOBidRKkdl11Yg9N8 ZHoRaapV2mYc3MRuCSdqSB/XLoYGJNV+gdvWvMwX8yKJFOsipas+WomLs905dNCV 0jJ4EvKQ4qmsgDTWTckiXSd7dxT10nAv8ZaUbbaWEOcDjxmCO04rMaLYoLrOkcx1 FJGZyggfrQKDze/39AKPPoFTCVA7EI25XkHH46NVmtVNKWnNtcX6ATNDqgbt/pvL mX5gQZETz9S8If5fVE8QVdKT+aSSdJHO3smSr/CfMJ/UvjO1WHKpwdd7igAflsci t/w= -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:44 2026 by rpki-client