This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa File: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (raw, json) Hash identifier: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ= Subject key identifier: D4:A8:1F:0B:E8:71:3A:2A:39:5B:E6:7D:4A:08:3A:DC:DB:79:AE:46 Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019B76EB84DB622F6204FD6F2CB1ACF1E45E Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa Signing time: Thu 01 Jan 2026 00:18:24 +0000 ROA not before: Thu 01 Jan 2026 00:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51174 IP address blocks: 82.222.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:84:db:62:2f:62:04:fd:6f:2c:b1:ac:f1:e4:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jan 1 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4a81f0be8713a2a395be67d4a083adcdb79ae46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6e:39:ab:a5:a6:69:a4:12:ac:d7:80:d9:e2: f5:a5:23:f4:cf:57:c8:2e:ea:a9:24:71:db:5e:4e: 33:73:70:59:d7:ac:b7:bf:f4:96:52:47:b5:8e:0c: 23:55:b8:0f:cf:dd:7d:8e:83:93:97:eb:ff:f8:50: f3:05:36:ba:46:1f:f2:87:6d:7d:93:3c:40:ee:ed: 63:66:15:ab:3d:e0:60:ff:25:c5:88:7f:17:23:65: 3a:05:ca:50:60:8d:05:d3:75:8e:15:4a:cf:3b:c2: 99:6f:d2:c9:c5:70:6e:48:3d:f1:a5:94:67:1f:ce: 6c:16:5a:94:5b:3e:fc:ae:fd:dc:51:3c:dd:82:8e: 58:03:c7:b4:17:ef:d7:46:fd:ed:c2:04:99:c3:2e: a8:8f:59:82:40:87:12:c9:31:d9:3b:1a:c6:d8:3e: 20:85:99:82:de:f4:a1:9f:eb:98:db:ef:cc:03:71: e1:9f:b3:2a:a8:6e:42:b7:1c:7d:ce:8e:1e:c9:64: 97:e8:cc:d8:73:24:e7:38:25:e1:7a:68:2b:57:4c: cc:cf:6c:37:00:32:62:86:28:64:3c:53:b5:b2:d4: f1:37:82:f3:59:50:a7:ba:47:36:6f:dd:ea:61:95: d7:2b:e5:08:8d:82:3f:1a:1e:48:b2:f3:74:24:d8: 41:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A8:1F:0B:E8:71:3A:2A:39:5B:E6:7D:4A:08:3A:DC:DB:79:AE:46 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.222.128.0/24 Signature Algorithm: sha256WithRSAEncryption 31:4b:40:fa:af:20:ad:ec:84:a8:d6:27:99:c1:22:05:57:82: 83:e1:85:87:31:83:52:73:ae:ec:97:03:96:06:b1:dc:dd:87: 6d:f4:ce:62:25:3f:54:82:98:be:d1:30:5d:b4:66:cd:7b:ac: 37:70:24:78:76:5c:43:57:4a:ed:54:76:fd:5f:63:d0:ff:5d: b1:ca:5a:94:e5:a3:a9:76:12:3d:85:46:a8:8a:61:46:58:a6: 68:db:76:73:89:dd:3a:7a:f5:7c:87:38:e4:0b:78:d1:1e:93: 57:a5:16:b1:9a:52:38:65:cb:9a:ab:fb:4f:e3:71:91:ff:78: 78:fd:00:ce:d6:c2:e8:0e:9c:b9:9a:76:6c:f0:20:25:86:98: 6b:b8:59:90:5d:57:9a:63:bb:70:b8:c6:9e:e4:e9:f4:c4:75: ae:b8:f0:2a:a5:e6:c7:47:2d:44:89:07:03:09:e4:b8:e5:a4: af:30:af:07:5f:89:e3:10:ba:ad:cf:10:05:02:ce:06:0a:d2: 8c:77:f6:64:32:89:50:c0:30:8b:db:be:04:d7:05:0f:d2:f0: 58:7d:a1:c5:d4:76:2b:0e:7e:48:42:bc:cc:d9:97:7a:eb:a0: ca:a8:36:45:3e:49:69:9a:ce:98:7e:ba:ff:c8:a5:4b:7c:f9: 18:b7:80:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264TbYi9iBP1vLLGs8eReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGE4MWYwYmU4NzEzYTJhMzk1YmU2N2Q0YTA4M2FkY2RiNzlhZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW45q6WmaaQSrNeA2eL1pSP0z1fI LuqpJHHbXk4zc3BZ16y3v/SWUke1jgwjVbgPz919joOTl+v/+FDzBTa6Rh/yh219 kzxA7u1jZhWrPeBg/yXFiH8XI2U6BcpQYI0F03WOFUrPO8KZb9LJxXBuSD3xpZRn H85sFlqUWz78rv3cUTzdgo5YA8e0F+/XRv3twgSZwy6oj1mCQIcSyTHZOxrG2D4g hZmC3vShn+uY2+/MA3Hhn7MqqG5Ctxx9zo4eyWSX6MzYcyTnOCXhemgrV0zMz2w3 ADJihihkPFO1stTxN4LzWVCnukc2b93qYZXXK+UIjYI/Gh5IsvN0JNhB2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNSoHwvocToqOVvmfUoIOtzbea5GMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvMUtnZkMtaHhPaW81Vy1aOVNnZzYzTnQ1cmtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUt6AMA0G CSqGSIb3DQEBCwUAA4IBAQAxS0D6ryCt7ISo1ieZwSIFV4KD4YWHMYNSc67slwOW BrHc3Ydt9M5iJT9Ugpi+0TBdtGbNe6w3cCR4dlxDV0rtVHb9X2PQ/12xylqU5aOp dhI9hUaoimFGWKZo23Zzid06evV8hzjkC3jRHpNXpRaxmlI4Zcuaq/tP43GR/3h4 /QDO1sLoDpy5mnZs8CAlhphruFmQXVeaY7twuMae5On0xHWuuPAqpebHRy1EiQcD CeS45aSvMK8HX4njELqtzxAFAs4GCtKMd/ZkMolQwDCL274E1wUP0vBYfaHF1HYr Dn5IQrzM2Zd666DKqDZFPklpms6Yfrr/yKVLfPkYt4Bc -----END CERTIFICATE-----Generated at Mon Jan 26 02:13:39 2026 by rpki-client