This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/KrzOKl1qlDpYWxV-juWfSYeX7Gg.roa File: KrzOKl1qlDpYWxV-juWfSYeX7Gg.roa (raw, json) Hash identifier: sm+bvfJZr3b8QZ7AAJ4wrF+UsO9vk0OydT19C79k6CE= Subject key identifier: 2A:BC:CE:2A:5D:6A:94:3A:58:5B:15:7E:8E:E5:9F:49:87:97:EC:68 Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5 Certificate serial: 019B7D5C2048C8E3C5D5A060CAFFA17D5E41 Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/KrzOKl1qlDpYWxV-juWfSYeX7Gg.roa Signing time: Fri 02 Jan 2026 06:19:08 +0000 ROA not before: Fri 02 Jan 2026 06:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 194.32.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:20:48:c8:e3:c5:d5:a0:60:ca:ff:a1:7d:5e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5 Validity Not Before: Jan 2 06:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2abcce2a5d6a943a585b157e8ee59f498797ec68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ee:96:7c:37:d9:ca:60:c1:13:6a:91:09:f5: f6:4d:14:e6:57:00:69:fd:c1:e9:40:81:7b:b4:a9: 16:80:d2:78:da:cd:b1:5c:6a:33:a2:31:2f:07:cb: 2f:11:72:64:f8:ca:22:30:c4:e4:91:50:87:47:32: d1:33:28:74:d7:5c:02:3e:e0:4f:56:7c:a0:5e:fb: 99:1d:53:da:49:b7:2e:6a:46:3f:fb:64:85:06:ea: 62:7a:40:af:19:db:bb:2b:ba:ad:56:d4:80:a0:90: fe:b8:86:ac:14:40:c4:56:df:df:86:7b:cd:5a:07: 4a:94:b6:a4:d3:a7:bf:bd:51:6b:df:44:7d:83:53: 67:5e:4d:ea:a5:5f:e6:4a:da:b3:b3:55:9b:e8:1a: 6a:a5:07:43:b5:54:f4:a2:56:a1:66:39:cd:e3:4c: 00:f6:3c:79:54:94:cb:ec:94:0b:8e:e9:1f:7c:00: 7e:7b:9a:23:b3:ce:c6:0f:e2:3f:54:a9:7d:72:83: 2b:3b:f1:ee:fb:1c:70:54:8d:ea:d2:09:3f:38:ef: df:db:0a:d9:3b:5a:c6:ec:cf:41:9d:46:fc:0d:7f: 13:94:be:48:e1:9a:78:20:34:b1:ba:e8:3f:21:00: d3:9f:36:f5:d1:c7:96:7e:0a:f2:16:4c:d3:6b:ae: 5f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BC:CE:2A:5D:6A:94:3A:58:5B:15:7E:8E:E5:9F:49:87:97:EC:68 X509v3 Authority Key Identifier: keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/KrzOKl1qlDpYWxV-juWfSYeX7Gg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.164.0/24 Signature Algorithm: sha256WithRSAEncryption 20:74:22:b4:a9:68:01:ba:29:54:c5:56:b3:c6:1b:34:0a:04: a6:e1:01:19:ec:00:bb:b0:d3:38:1b:9d:0c:e8:02:42:37:1a: d4:dc:23:6e:a5:bf:77:ff:fa:e0:92:4b:16:42:aa:13:a1:16: ba:b0:85:80:45:e3:09:24:c6:ac:c4:6f:0f:35:ce:78:9f:d0: d6:9f:19:ee:15:88:fd:56:14:0e:ea:86:e2:a6:ab:6d:4c:47: d8:18:2b:49:13:da:09:e1:92:69:fb:df:00:6d:85:23:32:b6: 1e:94:c9:32:23:f5:04:f8:75:f3:ec:70:48:72:2e:86:44:99: 16:6a:78:93:e8:19:6b:12:d6:9b:64:b8:e5:79:19:93:51:a0: 3f:7e:8e:41:ed:04:e6:d2:59:a0:ae:64:e8:9c:14:79:72:1d: fb:ae:c6:56:f2:a7:24:a5:c5:7a:b7:9e:e4:53:cc:42:a9:30: 03:6c:06:08:e2:b0:0c:87:ff:1a:16:f4:eb:54:2c:8d:f0:64: c7:ed:71:87:ee:93:44:64:35:00:29:fe:cc:25:48:7a:64:76: 1d:7e:41:d8:c6:a7:a0:e6:f6:a8:3a:09:ba:69:4d:ca:5a:1d: 90:0b:ec:3a:99:0a:e5:4e:21:fd:b1:48:3f:d1:d9:98:1c:fc: d8:f3:dc:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XCBIyOPF1aBgyv+hfV5BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZmExYTBhODhiYmI1NGIzZjgyZmMyNTk3ZDI1MmFmZjc2 MTNiYzUwHhcNMjYwMTAyMDYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWJjY2UyYTVkNmE5NDNhNTg1YjE1N2U4ZWU1OWY0OTg3OTdlYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3e6WfDfZymDBE2qRCfX2TRTmVwBp /cHpQIF7tKkWgNJ42s2xXGozojEvB8svEXJk+MoiMMTkkVCHRzLRMyh011wCPuBP VnygXvuZHVPaSbcuakY/+2SFBupiekCvGdu7K7qtVtSAoJD+uIasFEDEVt/fhnvN WgdKlLak06e/vVFr30R9g1NnXk3qpV/mStqzs1Wb6BpqpQdDtVT0olahZjnN40wA 9jx5VJTL7JQLjukffAB+e5ojs87GD+I/VKl9coMrO/Hu+xxwVI3q0gk/OO/f2wrZ O1rG7M9BnUb8DX8TlL5I4Zp4IDSxuug/IQDTnzb10ceWfgryFkzTa65fewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCq8zipdapQ6WFsVfo7ln0mHl+xoMB8GA1UdIwQY MBaAFOP6GgqIu7VLP4L8JZfSUq/3YTvFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUt NDY4M2JmZWQwMDM4LzEvS3J6T0tsMXFsRHBZV3hWLWp1V2ZTWWVYN0dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUtNDY4M2JmZWQwMDM4 LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiCkMA0G CSqGSIb3DQEBCwUAA4IBAQAgdCK0qWgBuilUxVazxhs0CgSm4QEZ7AC7sNM4G50M 6AJCNxrU3CNupb93//rgkksWQqoToRa6sIWAReMJJMasxG8PNc54n9DWnxnuFYj9 VhQO6obipqttTEfYGCtJE9oJ4ZJp+98AbYUjMrYelMkyI/UE+HXz7HBIci6GRJkW aniT6BlrEtabZLjleRmTUaA/fo5B7QTm0lmgrmTonBR5ch37rsZW8qckpcV6t57k U8xCqTADbAYI4rAMh/8aFvTrVCyN8GTH7XGH7pNEZDUAKf7MJUh6ZHYdfkHYxqeg 5vaoOgm6aU3KWh2QC+w6mQrlTiH9sUg/0dmYHPzY89xD -----END CERTIFICATE-----Generated at Tue Jan 20 00:56:45 2026 by rpki-client