This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/K35Qk63t7ia59ZiyjBPd0aONq6w.roa File: K35Qk63t7ia59ZiyjBPd0aONq6w.roa (raw, json) Hash identifier: RSMZMIxkJ+qSFhNJD5N1wDzv0Dfcy2i+GoGDC38UiF4= Subject key identifier: 2B:7E:50:93:AD:ED:EE:26:B9:F5:98:B2:8C:13:DD:D1:A3:8D:AB:AC Certificate issuer: /CN=5df40ee7489e95c57f104271919da268bc513f9b Certificate serial: 019B7A5B1128CF447A1A7CC36FDD46FA4D43 Authority key identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/K35Qk63t7ia59ZiyjBPd0aONq6w.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207673 IP address blocks: 194.76.58.0/23 maxlen: 23 194.76.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:11:28:cf:44:7a:1a:7c:c3:6f:dd:46:fa:4d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df40ee7489e95c57f104271919da268bc513f9b Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b7e5093adedee26b9f598b28c13ddd1a38dabac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:64:6e:0c:dc:dd:22:c6:2a:0f:6f:de:63:14: 64:16:6d:9a:ad:5b:01:5d:af:2e:78:0b:e5:49:86: 16:92:5e:9d:ed:33:69:61:7c:8c:81:e2:e0:d7:fc: 86:8c:55:d2:88:12:92:f5:63:7d:32:05:cd:51:30: c3:a4:90:b4:cf:11:ea:b7:4d:2d:51:31:00:6f:fe: 18:9d:c8:39:8f:ea:88:d5:1d:31:fd:48:56:a9:c6: 5d:9c:a3:2a:74:41:55:1b:9f:72:2d:70:68:1f:a5: 92:df:1c:e3:0b:bf:aa:b1:a1:9b:9f:3d:0e:8b:46: fa:fd:07:f6:1d:30:31:a0:39:c5:28:34:7b:b1:5a: a2:7e:e6:f2:05:d2:14:84:31:9d:cb:1e:15:f7:2e: 84:bc:bb:9c:4d:27:78:25:9b:40:e2:fb:43:5d:43: bb:3e:62:71:83:b0:8c:18:7b:3c:7c:26:23:f8:f1: c7:96:19:7e:d9:66:04:ae:7e:1d:0b:a6:93:13:1a: 84:bb:61:cc:31:b4:8e:a5:e7:8f:c5:4a:d1:ff:01: ea:30:a6:b1:6a:c7:ee:76:8a:8e:db:94:0c:bc:a5: 51:2a:40:42:5f:51:41:15:d8:0f:50:0d:2a:7a:38: 4a:ab:9c:df:86:2b:d6:ac:8e:20:99:1b:30:f3:18: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7E:50:93:AD:ED:EE:26:B9:F5:98:B2:8C:13:DD:D1:A3:8D:AB:AC X509v3 Authority Key Identifier: keyid:5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/K35Qk63t7ia59ZiyjBPd0aONq6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.58.0/23 194.76.104.0/23 Signature Algorithm: sha256WithRSAEncryption 64:c0:fa:c3:b0:61:37:47:a8:b1:6e:9c:c6:22:d8:e5:67:7c: 87:9e:30:2a:d9:9a:cf:1e:69:46:84:22:99:f8:a7:a1:dc:b7: 97:d6:24:0d:df:be:04:01:80:2a:35:fe:53:9a:c9:1b:c1:8f: 12:06:42:28:55:cd:31:aa:01:95:86:a0:5f:25:7c:df:96:d3: 20:c8:cd:71:c8:eb:4b:99:a9:e3:e5:56:47:6e:95:9a:13:60: 0c:39:da:dd:55:72:b6:fb:1c:ae:f5:9e:bb:0d:c9:19:7a:74: 32:3b:0e:43:24:2b:9f:6a:c4:fb:7b:f9:92:6f:22:b5:7c:0d: 4f:2a:ea:e0:0f:73:4b:58:4a:4f:10:fd:28:92:25:93:96:75: fc:43:33:dc:b2:83:b8:1e:e0:91:13:0e:d2:18:cb:1c:c4:e3: ce:46:fd:6c:0f:9c:e3:12:45:f1:b2:7c:0b:19:b6:64:33:89: 44:88:ed:02:0d:fb:ef:13:a7:43:3f:1e:19:2b:30:70:89:e4: f1:45:66:28:5a:13:a0:6f:18:33:75:5b:22:18:4e:52:9b:4f: 26:67:7c:26:4d:1a:54:2e:88:a9:55:5e:54:b9:69:43:0d:16: 77:db:f1:c0:6a:01:28:34:4c:21:05:4d:ce:32:c3:bd:fb:8f: 7d:4b:19:4e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WxEoz0R6GnzDb91G+k1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZjQwZWU3NDg5ZTk1YzU3ZjEwNDI3MTkxOWRhMjY4YmM1 MTNmOWIwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjdlNTA5M2FkZWRlZTI2YjlmNTk4YjI4YzEzZGRkMWEzOGRhYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWRuDNzdIsYqD2/eYxRkFm2arVsB Xa8ueAvlSYYWkl6d7TNpYXyMgeLg1/yGjFXSiBKS9WN9MgXNUTDDpJC0zxHqt00t UTEAb/4Yncg5j+qI1R0x/UhWqcZdnKMqdEFVG59yLXBoH6WS3xzjC7+qsaGbnz0O i0b6/Qf2HTAxoDnFKDR7sVqifubyBdIUhDGdyx4V9y6EvLucTSd4JZtA4vtDXUO7 PmJxg7CMGHs8fCYj+PHHlhl+2WYErn4dC6aTExqEu2HMMbSOpeePxUrR/wHqMKax asfudoqO25QMvKVRKkBCX1FBFdgPUA0qejhKq5zfhivWrI4gmRsw8xhtQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCt+UJOt7e4mufWYsowT3dGjjausMB8GA1UdIwQY MBaAFF30DudInpXFfxBCcZGdomi8UT+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZRTzUwaWVsY1ZfRUVKeGtaMmlhTHhSUDVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hN2U4NTAtMDBiZS00ZGMyLThjNDEt Mzg2NmI5NWY0ODVmLzEvSzM1UWs2M3Q3aWE1OVppeWpCUGQwYU9OcTZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9hN2U4NTAtMDBiZS00ZGMyLThjNDEtMzg2NmI5NWY0ODVm LzEvWGZRTzUwaWVsY1ZfRUVKeGtaMmlhTHhSUDVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwkw6AwQB wkxoMA0GCSqGSIb3DQEBCwUAA4IBAQBkwPrDsGE3R6ixbpzGItjlZ3yHnjAq2ZrP HmlGhCKZ+Keh3LeX1iQN374EAYAqNf5TmskbwY8SBkIoVc0xqgGVhqBfJXzfltMg yM1xyOtLmanj5VZHbpWaE2AMOdrdVXK2+xyu9Z67DckZenQyOw5DJCufasT7e/mS byK1fA1PKurgD3NLWEpPEP0okiWTlnX8QzPcsoO4HuCREw7SGMscxOPORv1sD5zj EkXxsnwLGbZkM4lEiO0CDfvvE6dDPx4ZKzBwieTxRWYoWhOgbxgzdVsiGE5Sm08m Z3wmTRpULoipVV5UuWlDDRZ32/HAagEoNEwhBU3OMsO9+499SxlO -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:23 2026 by rpki-client