This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/KsLpYaplYWekI62QRi3E0G61Ms4.roa File: KsLpYaplYWekI62QRi3E0G61Ms4.roa (raw, json) Hash identifier: PFuTGnOnXeAK/sML2FBSdaIxc5MVu6TA5GmDr9dlzjs= Subject key identifier: 2A:C2:E9:61:AA:65:61:67:A4:23:AD:90:46:2D:C4:D0:6E:B5:32:CE Certificate issuer: /CN=2467603623143bd1bc7a8fc9d8e79d9559611860 Certificate serial: 019B7E375B9B2A8F5D1D371070EA62E753D6 Authority key identifier: 24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/KsLpYaplYWekI62QRi3E0G61Ms4.roa Signing time: Fri 02 Jan 2026 10:18:35 +0000 ROA not before: Fri 02 Jan 2026 10:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28686 IP address blocks: 194.147.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:5b:9b:2a:8f:5d:1d:37:10:70:ea:62:e7:53:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2467603623143bd1bc7a8fc9d8e79d9559611860 Validity Not Before: Jan 2 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ac2e961aa656167a423ad90462dc4d06eb532ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:be:16:8e:1e:35:2c:a8:ea:c0:8e:6d:09: 4a:08:76:ea:38:dd:37:39:dd:b5:d1:28:2c:d8:0f: 74:08:7f:63:8d:58:cd:6a:a0:c6:ed:55:a3:30:6b: 7b:37:4f:22:55:a5:31:5a:51:eb:b1:e4:04:38:74: 62:b7:aa:57:de:ee:c3:3c:ba:9e:f1:a1:65:d0:68: c1:67:27:59:a8:cf:cd:41:24:4e:a9:c9:2d:53:56: e0:aa:22:7a:f0:a3:18:cb:40:7e:fb:69:fe:b8:f2: e9:2a:ae:a1:23:0d:6e:d5:b1:6e:98:a2:81:59:48: 7a:f5:a1:a1:71:8e:db:87:43:f4:3d:5f:38:f0:ec: ac:a3:d2:5d:fe:41:16:b6:fb:0b:bb:d2:9d:63:c7: da:b0:58:38:b7:47:b5:a8:c5:eb:3b:a6:0e:3a:5a: 11:f2:78:f5:75:94:2b:79:42:f6:fe:d2:a2:5d:33: fe:f7:42:de:af:b5:a3:22:4e:14:15:9c:4c:76:e5: 37:64:f3:57:12:f9:e4:da:4d:22:13:bf:11:fc:4d: f7:ef:64:4c:d2:cf:f5:62:55:9e:ee:43:a4:cb:0e: e3:4f:a8:18:c2:81:bd:e3:e7:13:e9:01:aa:ab:65: 12:04:95:d6:18:55:c1:0f:e9:d5:66:39:e0:f9:c1: 68:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C2:E9:61:AA:65:61:67:A4:23:AD:90:46:2D:C4:D0:6E:B5:32:CE X509v3 Authority Key Identifier: keyid:24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/KsLpYaplYWekI62QRi3E0G61Ms4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.192.0/22 Signature Algorithm: sha256WithRSAEncryption 16:a1:c0:49:fb:e7:70:ca:58:c0:30:56:07:ac:8a:43:ad:a3: 57:ce:00:76:e5:8a:99:cb:0e:2e:86:27:b5:69:dc:7f:f6:9c: fc:5c:07:40:5d:fd:e2:a6:87:07:a4:49:96:cd:96:b8:2a:8c: a6:0a:70:49:97:7b:bd:85:c7:88:6b:12:01:2b:60:9e:65:02: d9:5c:73:34:9c:fb:5f:88:ac:e3:d6:98:09:bd:7e:92:23:ac: b1:29:14:a2:39:23:ae:ce:c5:7c:00:04:63:92:a9:78:fe:f0: c9:cf:58:78:d0:d4:36:a1:57:f1:aa:41:42:b3:ac:52:c3:fc: 87:51:77:6f:ff:53:5e:60:7d:8f:c8:82:52:75:c8:9a:77:07: 74:97:97:9e:c0:a4:e5:fd:4e:7c:02:e3:4f:b9:77:aa:ae:10: 13:1f:66:a4:63:70:65:43:88:45:7a:ab:97:ad:96:9e:5c:e3: 71:2d:62:8b:f6:a6:10:eb:98:50:b2:88:f3:30:54:b6:08:ed: fa:17:03:b5:a5:25:5a:26:1c:1f:71:e3:8d:4a:a7:ce:1c:df: 47:55:e1:1c:79:aa:f5:2e:6a:90:ca:f3:bb:30:7b:ab:b5:21: 29:a3:d9:ff:1e:dd:cb:6d:8c:54:90:98:7c:8a:96:2d:84:c6: 51:9d:fd:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N1ubKo9dHTcQcOpi51PWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Njc2MDM2MjMxNDNiZDFiYzdhOGZjOWQ4ZTc5ZDk1NTk2 MTE4NjAwHhcNMjYwMTAyMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWMyZTk2MWFhNjU2MTY3YTQyM2FkOTA0NjJkYzRkMDZlYjUzMmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugG+Fo4eNSyo6sCObQlKCHbqON03 Od210Sgs2A90CH9jjVjNaqDG7VWjMGt7N08iVaUxWlHrseQEOHRit6pX3u7DPLqe 8aFl0GjBZydZqM/NQSROqcktU1bgqiJ68KMYy0B++2n+uPLpKq6hIw1u1bFumKKB WUh69aGhcY7bh0P0PV848Oyso9Jd/kEWtvsLu9KdY8fasFg4t0e1qMXrO6YOOloR 8nj1dZQreUL2/tKiXTP+90Ler7WjIk4UFZxMduU3ZPNXEvnk2k0iE78R/E3372RM 0s/1YlWe7kOkyw7jT6gYwoG94+cT6QGqq2USBJXWGFXBD+nVZjng+cFoKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCrC6WGqZWFnpCOtkEYtxNButTLOMB8GA1UdIwQY MBaAFCRnYDYjFDvRvHqPydjnnZVZYRhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZGU0NGItZjJjMC00MWU0LWIxNDEt ZmI0NjQyZDJkOWE2LzEvS3NMcFlhcGxZV2VrSTYyUVJpM0UwRzYxTXM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZGU0NGItZjJjMC00MWU0LWIxNDEtZmI0NjQyZDJkOWE2 LzEvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwpPAMA0G CSqGSIb3DQEBCwUAA4IBAQAWocBJ++dwyljAMFYHrIpDraNXzgB25YqZyw4uhie1 adx/9pz8XAdAXf3ipocHpEmWzZa4KoymCnBJl3u9hceIaxIBK2CeZQLZXHM0nPtf iKzj1pgJvX6SI6yxKRSiOSOuzsV8AARjkql4/vDJz1h40NQ2oVfxqkFCs6xSw/yH UXdv/1NeYH2PyIJSdciadwd0l5eewKTl/U58AuNPuXeqrhATH2akY3BlQ4hFequX rZaeXONxLWKL9qYQ65hQsojzMFS2CO36FwO1pSVaJhwfceONSqfOHN9HVeEcear1 LmqQyvO7MHurtSEpo9n/Ht3LbYxUkJh8ipYthMZRnf0o -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:26 2026 by rpki-client