This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Kk5RA7UquuogIpz9LtDtPMQl4jg.roa File: Kk5RA7UquuogIpz9LtDtPMQl4jg.roa (raw, json) Hash identifier: 7cfudN1UEmIWNa3A3inUjDUXkjknQMQXi+h+uhAZMvE= Subject key identifier: 2A:4E:51:03:B5:2A:BA:EA:20:22:9C:FD:2E:D0:ED:3C:C4:25:E2:38 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5AA17D3DDAAC15219800FD1BA08414 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Kk5RA7UquuogIpz9LtDtPMQl4jg.roa Signing time: Fri 02 Jan 2026 06:17:30 +0000 ROA not before: Fri 02 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210474 IP address blocks: 213.176.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:a1:7d:3d:da:ac:15:21:98:00:fd:1b:a0:84:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a4e5103b52abaea20229cfd2ed0ed3cc425e238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:19:f1:0a:26:ba:ab:c3:34:60:ec:3c:93:b4: 8d:24:7b:3a:44:fa:84:9d:c7:82:27:2d:1a:6a:65: af:bb:e2:1b:a9:03:8f:87:7f:a5:8e:45:e1:a7:44: ac:c4:90:f3:81:74:a8:5f:2d:ed:30:0e:15:e6:7c: a3:23:5f:9e:49:be:e3:dc:d1:d7:cd:b7:0a:5d:c7: bb:82:d0:14:b8:83:08:67:3a:aa:d0:c1:23:3c:68: 98:9a:8d:2a:b5:af:c2:bd:35:63:dd:30:1a:47:f8: 2a:1b:72:3a:3b:13:23:01:7f:aa:9e:d8:10:e6:60: 57:ab:b9:fa:19:5e:32:aa:f2:85:64:31:da:70:9d: ef:45:81:21:48:e2:83:16:2e:8f:61:d1:88:3e:d7: dd:22:19:ac:38:81:85:6e:94:80:29:8d:2d:16:7d: 4e:42:07:12:8a:9a:ab:59:ef:5d:d0:44:77:ac:51: 1c:c9:15:4b:18:1a:1e:b6:25:cc:57:c1:c8:de:98: bd:f1:71:69:56:32:1d:68:a5:9b:57:4d:e8:6c:b5: 51:64:b4:29:a6:11:f8:54:5d:77:ca:bf:ea:fc:fd: f8:9c:b6:d3:02:03:58:e7:5b:fa:48:4d:44:d9:08: c2:cc:ec:f6:a6:81:18:e0:af:01:94:8b:e5:2e:cd: 5d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4E:51:03:B5:2A:BA:EA:20:22:9C:FD:2E:D0:ED:3C:C4:25:E2:38 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Kk5RA7UquuogIpz9LtDtPMQl4jg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.176.120.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:f7:25:ea:99:5a:3f:15:a3:ba:94:f5:1a:de:33:ee:48:dd: a8:3c:24:ce:78:bf:61:d3:f8:54:14:ef:23:c6:22:9a:6d:f0: 70:63:bc:32:23:e4:37:6b:04:21:f4:8a:8e:72:bb:40:d4:f4: 99:26:47:50:65:92:84:c6:0e:06:56:97:2f:ae:a9:cd:ea:c3: d6:86:ce:a4:b3:91:72:31:98:b0:82:01:28:ff:ca:b8:4f:03: 6d:8c:a3:4c:16:05:b1:f5:80:60:9a:68:02:37:2b:24:b2:37: 16:a5:37:59:64:51:7d:38:21:b6:5b:e9:a5:87:13:ca:60:71: aa:b4:d9:ac:ff:25:48:49:0d:50:00:77:59:c2:53:bd:a7:8a: 10:84:72:cb:9f:8e:dc:e5:2b:c5:e9:4c:1f:e9:ff:80:8b:67: 7c:3a:f1:6a:28:7d:75:1b:84:bb:b3:d7:10:be:be:c6:48:89: 97:11:3f:93:55:c0:8a:5f:6a:89:33:95:58:a0:cb:8d:c2:1d: 68:4f:80:34:94:c4:f8:08:1c:85:6c:1c:2a:86:f1:f6:46:18: 0e:85:c3:05:95:9e:97:37:c5:0d:39:b5:2c:e8:a6:04:25:90: 9c:42:c3:61:83:3b:98:bf:8b:b9:db:10:6b:85:a6:ea:6e:b2: dd:c8:ef:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WqF9PdqsFSGYAP0boIQUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTRlNTEwM2I1MmFiYWVhMjAyMjljZmQyZWQwZWQzY2M0MjVlMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhnxCia6q8M0YOw8k7SNJHs6RPqE nceCJy0aamWvu+IbqQOPh3+ljkXhp0SsxJDzgXSoXy3tMA4V5nyjI1+eSb7j3NHX zbcKXce7gtAUuIMIZzqq0MEjPGiYmo0qta/CvTVj3TAaR/gqG3I6OxMjAX+qntgQ 5mBXq7n6GV4yqvKFZDHacJ3vRYEhSOKDFi6PYdGIPtfdIhmsOIGFbpSAKY0tFn1O QgcSipqrWe9d0ER3rFEcyRVLGBoetiXMV8HI3pi98XFpVjIdaKWbV03obLVRZLQp phH4VF13yr/q/P34nLbTAgNY51v6SE1E2QjCzOz2poEY4K8BlIvlLs1dHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCpOUQO1KrrqICKc/S7Q7TzEJeI4MB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvS2s1UkE3VXF1dW9nSXB6OUx0RHRQTVFsNGpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bB4MA0G CSqGSIb3DQEBCwUAA4IBAQB79yXqmVo/FaO6lPUa3jPuSN2oPCTOeL9h0/hUFO8j xiKabfBwY7wyI+Q3awQh9IqOcrtA1PSZJkdQZZKExg4GVpcvrqnN6sPWhs6ks5Fy MZiwggEo/8q4TwNtjKNMFgWx9YBgmmgCNysksjcWpTdZZFF9OCG2W+mlhxPKYHGq tNms/yVISQ1QAHdZwlO9p4oQhHLLn47c5SvF6Uwf6f+Ai2d8OvFqKH11G4S7s9cQ vr7GSImXET+TVcCKX2qJM5VYoMuNwh1oT4A0lMT4CByFbBwqhvH2RhgOhcMFlZ6X N8UNObUs6KYEJZCcQsNhgzuYv4u52xBrhabqbrLdyO8/ -----END CERTIFICATE-----Generated at Wed Jan 21 10:50:00 2026 by rpki-client