This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/KO1c-cYNNAqMCPq-wcceOmqVK6w.roa File: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (raw, json) Hash identifier: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc= Subject key identifier: 28:ED:5C:F9:C6:0D:34:0A:8C:08:FA:BE:C1:C7:1E:3A:6A:95:2B:AC Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019B7EA5918C75A52D78F2148A9F15E88CBD Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/KO1c-cYNNAqMCPq-wcceOmqVK6w.roa Signing time: Fri 02 Jan 2026 12:18:58 +0000 ROA not before: Fri 02 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42708 IP address blocks: 37.252.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:91:8c:75:a5:2d:78:f2:14:8a:9f:15:e8:8c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Jan 2 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28ed5cf9c60d340a8c08fabec1c71e3a6a952bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:18:6d:92:06:39:f9:d0:6f:3d:4b:ce:0f:f0: 41:dc:11:54:b7:de:79:a6:07:4d:5b:e7:21:bb:76: 10:1b:e4:91:f5:93:48:07:c7:f3:94:c5:34:24:35: 9b:da:62:d7:1e:ae:57:fa:5e:7c:4c:2d:76:d9:c0: e0:84:36:e7:09:c2:c4:72:51:f5:07:3d:99:f1:8a: a1:a1:c7:f8:88:1c:24:13:d1:1e:79:06:a8:ae:a8: 57:36:8e:94:69:dd:17:53:57:eb:95:cf:03:50:b3: 9e:09:a1:4b:77:93:b7:f9:6e:cd:d5:6e:a0:d9:9a: a0:84:cd:6d:ab:01:dc:cf:f6:c1:b1:0f:2b:3c:ff: ab:c8:5b:6a:ba:83:33:13:9d:c4:4e:9e:1e:6f:0f: bd:a0:53:57:cd:37:27:91:91:0b:df:17:d4:2a:9d: 04:d0:14:82:6b:ed:ff:40:0e:bf:ac:53:a2:dc:8a: bf:2e:89:68:94:fa:31:68:d8:ac:b8:99:0f:85:42: 56:57:05:b7:4d:13:8d:55:6a:7b:0c:f8:1e:1d:3d: 35:eb:a6:b1:c0:80:08:68:6e:10:75:71:48:66:bc: 03:a4:b7:4d:ee:fd:2d:a1:1c:df:1e:2f:f2:48:46: 7e:42:92:be:6f:f8:80:8b:c7:66:9f:7b:27:ea:0f: b9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:ED:5C:F9:C6:0D:34:0A:8C:08:FA:BE:C1:C7:1E:3A:6A:95:2B:AC X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/KO1c-cYNNAqMCPq-wcceOmqVK6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.8.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:db:6c:ef:9b:03:9d:4a:d7:c1:67:c2:b3:6b:30:ee:b6:62: f8:40:fa:fa:85:a3:fe:84:42:38:1e:59:4e:75:d0:ea:99:cc: 70:91:08:64:ec:e1:27:1d:5e:a3:97:7c:dc:7d:9f:3b:98:12: e2:84:73:0e:9b:d0:ae:4d:07:aa:50:6c:6a:5b:00:22:33:df: 87:7e:94:73:61:d3:5a:14:31:1e:16:f6:1f:16:10:f6:a3:7e: 4b:ee:bb:3b:8a:b8:06:01:01:8b:ef:a2:93:a6:bb:f4:b4:83: d2:0c:3a:87:7d:e0:28:9c:81:8c:e1:bd:b2:16:f9:84:6e:99: df:f6:6c:e0:a3:46:06:b4:1b:03:44:ae:46:98:53:3f:4b:de: b2:1a:65:c6:c7:52:ca:9c:01:25:a6:87:a9:e2:e0:0d:be:f4: 24:94:7e:92:5d:d1:cf:95:4e:96:b1:24:c3:07:06:5b:5c:54: 01:09:35:8b:11:e3:83:a6:c4:32:b5:fd:17:94:7f:7e:b8:75: 7a:ef:40:8b:48:4e:15:ff:4a:31:b7:43:2b:a1:71:54:26:5e: a6:52:cc:da:b1:b0:5b:32:6b:3a:fa:55:11:56:41:b4:06:ae: b4:91:bd:e8:ae:06:10:fa:b3:a2:63:4c:4a:95:da:1a:76:2c: b3:3e:92:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pZGMdaUtePIUip8V6Iy9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjYwMTAyMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGVkNWNmOWM2MGQzNDBhOGMwOGZhYmVjMWM3MWUzYTZhOTUyYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRhtkgY5+dBvPUvOD/BB3BFUt955 pgdNW+chu3YQG+SR9ZNIB8fzlMU0JDWb2mLXHq5X+l58TC122cDghDbnCcLEclH1 Bz2Z8Yqhocf4iBwkE9EeeQaorqhXNo6Uad0XU1frlc8DULOeCaFLd5O3+W7N1W6g 2ZqghM1tqwHcz/bBsQ8rPP+ryFtquoMzE53ETp4ebw+9oFNXzTcnkZEL3xfUKp0E 0BSCa+3/QA6/rFOi3Iq/LololPoxaNisuJkPhUJWVwW3TRONVWp7DPgeHT0166ax wIAIaG4QdXFIZrwDpLdN7v0toRzfHi/ySEZ+QpK+b/iAi8dmn3sn6g+5rwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCjtXPnGDTQKjAj6vsHHHjpqlSusMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvS08xYy1jWU5OQXFNQ1BxLXdjY2VPbXFWSzZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJfwIMA0G CSqGSIb3DQEBCwUAA4IBAQAv22zvmwOdStfBZ8KzazDutmL4QPr6haP+hEI4HllO ddDqmcxwkQhk7OEnHV6jl3zcfZ87mBLihHMOm9CuTQeqUGxqWwAiM9+HfpRzYdNa FDEeFvYfFhD2o35L7rs7irgGAQGL76KTprv0tIPSDDqHfeAonIGM4b2yFvmEbpnf 9mzgo0YGtBsDRK5GmFM/S96yGmXGx1LKnAElpoep4uANvvQklH6SXdHPlU6WsSTD BwZbXFQBCTWLEeODpsQytf0XlH9+uHV670CLSE4V/0oxt0MroXFUJl6mUszasbBb Mms6+lURVkG0Bq60kb3orgYQ+rOiY0xKldoadiyzPpKk -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:00 2026 by rpki-client