This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/kEe6Bn-Wm8OU0BMeJ1sgg9otE2g.roa File: kEe6Bn-Wm8OU0BMeJ1sgg9otE2g.roa (raw, json) Hash identifier: uUTvD8lHdMsxga0kjra2N6+gIRpOiRjAnp6etvYJekA= Subject key identifier: 90:47:BA:06:7F:96:9B:C3:94:D0:13:1E:27:5B:20:83:DA:2D:13:68 Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24 Certificate serial: 019B77C67A9A7C72F827F4550AD294F40F37 Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/kEe6Bn-Wm8OU0BMeJ1sgg9otE2g.roa Signing time: Thu 01 Jan 2026 04:17:34 +0000 ROA not before: Thu 01 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8368 IP address blocks: 176.125.224.0/22 maxlen: 24 194.32.168.0/22 maxlen: 24 195.28.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7a:9a:7c:72:f8:27:f4:55:0a:d2:94:f4:0f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24 Validity Not Before: Jan 1 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9047ba067f969bc394d0131e275b2083da2d1368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:f6:01:67:22:03:1a:40:e7:72:25:aa:07: b7:f0:40:cc:09:aa:b2:3f:3e:1b:21:44:a4:79:17: 99:80:54:e3:e8:4e:07:bf:2e:bd:be:71:4e:e1:4f: 03:de:7b:8e:9f:9f:29:5e:7b:e8:42:de:d5:61:22: 99:1d:01:d2:bd:db:4f:d8:93:8e:ab:3c:74:54:db: 5c:e1:9b:90:b5:36:33:bf:00:c3:ca:be:ff:25:bf: 43:44:d1:13:bc:57:0e:54:57:b4:48:96:9f:ba:1a: c6:3a:66:5a:b5:fc:a2:d1:58:7d:5d:d0:fc:69:57: 45:d8:22:9a:20:1c:d6:79:89:a6:83:a9:3d:29:6e: 56:f5:7f:91:74:ba:7e:35:be:db:9a:ec:0b:72:ab: 0d:c8:15:e8:c2:7f:b9:1d:88:84:d5:85:d7:95:45: eb:2b:81:20:72:05:c2:20:ca:b3:43:00:3d:82:de: dd:77:c4:df:7c:2e:e6:ce:6f:91:fe:53:d9:e3:14: 91:db:32:0a:47:ec:46:83:dd:f0:55:21:d7:bd:c1: ee:67:93:2d:d4:60:17:46:f3:37:09:63:66:5e:98: 30:d3:b5:69:ab:9f:5d:1d:1b:25:f3:be:3e:ce:6c: 76:a5:ae:a1:21:e0:82:52:2d:8a:30:83:d3:f1:51: bf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:47:BA:06:7F:96:9B:C3:94:D0:13:1E:27:5B:20:83:DA:2D:13:68 X509v3 Authority Key Identifier: keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/kEe6Bn-Wm8OU0BMeJ1sgg9otE2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.125.224.0/22 194.32.168.0/22 195.28.203.0/24 Signature Algorithm: sha256WithRSAEncryption b9:73:e1:c1:7e:56:9d:ce:ab:1e:12:e7:2e:4b:27:7b:da:3e: ea:56:45:bd:fd:ab:79:d8:71:39:71:bc:58:54:90:18:8c:9d: 95:9d:ff:57:63:ff:bd:dc:fd:68:be:29:29:2e:fb:69:87:ea: 29:e3:0a:be:79:e7:28:9a:aa:8b:2f:6e:f5:4b:5c:89:04:29: cc:83:5c:30:e9:b1:d3:b7:41:c4:cb:79:09:db:ff:bc:b4:57: 57:32:60:88:59:80:6f:ed:3c:76:eb:44:f0:cf:6c:4f:8e:41: d8:af:e7:9c:11:25:2d:0e:48:ce:c6:1b:81:3c:a4:9b:7d:6f: f0:5b:54:8b:56:78:a9:0d:d3:5a:ad:cd:c1:27:73:83:10:3f: d2:2d:70:ec:25:26:f6:8b:9a:02:ee:ae:7e:7e:fe:24:10:af: 8e:6c:63:c3:42:ed:ed:71:b6:ae:04:2f:9b:d9:ad:ed:d6:da: 22:01:1e:ef:4b:7d:f9:67:46:d3:d1:58:5f:8d:c7:6e:56:2d: a6:ae:6c:7a:64:78:85:f3:56:6c:70:68:ec:71:24:5b:4e:38: 56:02:84:f5:34:b8:1a:c5:b6:71:13:c5:42:cc:5e:37:46:6a: 0e:0b:21:cb:39:e7:49:b9:ff:1e:f0:f8:3a:7a:79:0c:85:3b: 54:90:21:d4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xnqafHL4J/RVCtKU9A83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjAyNjYzZGU4NTJjNzA2MGZkZWEwMjk4YjQ5MGQ1ZWRj YzBmMjQwHhcNMjYwMTAxMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDQ3YmEwNjdmOTY5YmMzOTRkMDEzMWUyNzViMjA4M2RhMmQxMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4P2AWciAxpA53Ilqge38EDMCaqy Pz4bIUSkeReZgFTj6E4Hvy69vnFO4U8D3nuOn58pXnvoQt7VYSKZHQHSvdtP2JOO qzx0VNtc4ZuQtTYzvwDDyr7/Jb9DRNETvFcOVFe0SJafuhrGOmZatfyi0Vh9XdD8 aVdF2CKaIBzWeYmmg6k9KW5W9X+RdLp+Nb7bmuwLcqsNyBXown+5HYiE1YXXlUXr K4EgcgXCIMqzQwA9gt7dd8TffC7mzm+R/lPZ4xSR2zIKR+xGg93wVSHXvcHuZ5Mt 1GAXRvM3CWNmXpgw07Vpq59dHRsl874+zmx2pa6hIeCCUi2KMIPT8VG/RQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJBHugZ/lpvDlNATHidbIIPaLRNoMB8GA1UdIwQY MBaAFAwgJmPehSxwYP3qApi0kNXtzA8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENBbVk5NkZMSEJnX2VvQ21MU1ExZTNNRHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wOTEwZTYtYzA3NC00MGQwLWI3ODkt YTE3ODA0NDM5ODk1LzEva0VlNkJuLVdtOE9VMEJNZUoxc2dnOW90RTJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wOTEwZTYtYzA3NC00MGQwLWI3ODktYTE3ODA0NDM5ODk1 LzEvRENBbVk5NkZMSEJnX2VvQ21MU1ExZTNNRHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCsH3gAwQC wiCoAwQAwxzLMA0GCSqGSIb3DQEBCwUAA4IBAQC5c+HBfladzqseEucuSyd72j7q VkW9/at52HE5cbxYVJAYjJ2Vnf9XY/+93P1ovikpLvtph+op4wq+eecomqqLL271 S1yJBCnMg1ww6bHTt0HEy3kJ2/+8tFdXMmCIWYBv7Tx260Twz2xPjkHYr+ecESUt DkjOxhuBPKSbfW/wW1SLVnipDdNarc3BJ3ODED/SLXDsJSb2i5oC7q5+fv4kEK+O bGPDQu3tcbauBC+b2a3t1toiAR7vS335Z0bT0VhfjcduVi2mrmx6ZHiF81ZscGjs cSRbTjhWAoT1NLgaxbZxE8VCzF43RmoOCyHLOedJuf8e8Pg6enkMhTtUkCHU -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:25 2026 by rpki-client