This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/kjrIZIW45KaOyNR8g_TQidHhKxQ.roa File: kjrIZIW45KaOyNR8g_TQidHhKxQ.roa (raw, json) Hash identifier: azT5mOJbUfFEST0Ir7ouylIomcyXSpCUxWYnorkrsXI= Subject key identifier: 92:3A:C8:64:85:B8:E4:A6:8E:C8:D4:7C:83:F4:D0:89:D1:E1:2B:14 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019B7E38936592C60BB28B1F3753940EE5F6 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/kjrIZIW45KaOyNR8g_TQidHhKxQ.roa Signing time: Fri 02 Jan 2026 10:19:55 +0000 ROA not before: Fri 02 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 193.108.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:93:65:92:c6:0b:b2:8b:1f:37:53:94:0e:e5:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=923ac86485b8e4a68ec8d47c83f4d089d1e12b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:82:2b:a1:1e:a7:e8:20:d6:6f:f4:1f:9a:ab: 84:9c:21:4c:2f:06:46:d2:3c:48:c5:bd:8d:00:e6: c7:1c:16:b5:66:e7:e4:aa:e9:9a:39:37:cd:06:fe: b1:9b:f2:15:7e:39:6d:81:82:72:e3:24:c8:ab:52: f2:04:fd:39:48:de:0e:fc:2f:c9:1b:f7:9c:a8:a7: 00:78:a3:9d:25:5c:6c:5b:2e:a1:e1:71:28:08:f8: dc:b8:36:3c:9f:30:b3:06:59:2c:7b:1a:11:27:03: 70:97:c5:5b:ff:78:3a:e9:53:d7:84:5b:75:44:49: fa:13:84:46:b8:6d:b1:09:dd:33:af:04:f1:6a:57: 20:55:8a:13:f5:a5:dd:a4:ea:6e:61:b3:bd:f5:27: 74:b6:ea:8f:cb:52:23:fc:41:90:31:67:de:bb:0d: 66:30:f5:cb:bb:16:81:3d:c6:8f:3c:cc:6d:0c:f6: ed:74:90:7d:ac:76:dc:da:d1:01:d2:10:56:37:0f: 39:ef:e8:53:9f:f8:3e:06:07:36:e9:59:c2:5b:46: 3f:95:1b:92:f1:b3:5f:b5:e8:d6:2b:f2:db:58:1a: 80:76:cb:cc:77:93:d9:41:57:f5:d4:ee:ad:bd:4b: 73:77:de:a3:cf:75:ba:ab:ca:38:67:49:e6:0c:6c: e2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3A:C8:64:85:B8:E4:A6:8E:C8:D4:7C:83:F4:D0:89:D1:E1:2B:14 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/kjrIZIW45KaOyNR8g_TQidHhKxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.105.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:70:b8:40:9e:d6:e2:34:06:8d:f0:25:31:f0:22:71:36:b4: 2a:ff:54:fa:d4:b1:16:3d:b5:10:4f:df:80:16:6e:d4:43:65: 93:04:63:28:db:d7:a5:2f:63:7e:86:4e:dc:07:0b:a8:1a:01: 2b:3c:2c:e5:78:21:a7:e8:b6:1f:2e:1f:45:b1:5d:94:e2:55: ae:17:58:a0:3c:15:e8:66:52:d3:7a:84:06:e2:44:0f:11:bf: 70:d2:88:f4:78:4e:05:90:be:77:f7:86:de:c6:8d:6e:3d:08: 83:7c:af:29:a3:aa:53:86:8f:57:22:28:36:98:78:cc:a4:00: 28:48:67:d9:9d:c2:e1:26:90:d2:d1:e8:b8:51:45:65:f6:2f: fa:fd:75:a1:f4:9f:10:8a:28:71:55:12:9c:85:f7:cd:1e:45: 2a:d9:d0:b9:1e:9e:a3:3c:13:cd:f5:12:1b:20:f6:ea:79:e7: 51:91:97:99:38:06:5b:39:cd:16:80:78:6c:dc:c0:c9:6e:ea: fb:85:c7:e2:da:c3:d6:66:99:31:db:e4:6a:29:2a:53:86:67: 09:3e:24:70:76:92:13:05:e0:77:44:f4:ac:3f:4b:ba:a6:71: 9d:e2:21:ab:3e:a4:e1:ac:fc:e8:d6:4c:49:ba:3a:30:c2:df: 79:f6:6d:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJNlksYLsosfN1OUDuX2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjNhYzg2NDg1YjhlNGE2OGVjOGQ0N2M4M2Y0ZDA4OWQxZTEyYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYIroR6n6CDWb/QfmquEnCFMLwZG 0jxIxb2NAObHHBa1ZufkqumaOTfNBv6xm/IVfjltgYJy4yTIq1LyBP05SN4O/C/J G/ecqKcAeKOdJVxsWy6h4XEoCPjcuDY8nzCzBlksexoRJwNwl8Vb/3g66VPXhFt1 REn6E4RGuG2xCd0zrwTxalcgVYoT9aXdpOpuYbO99Sd0tuqPy1Ij/EGQMWfeuw1m MPXLuxaBPcaPPMxtDPbtdJB9rHbc2tEB0hBWNw857+hTn/g+Bgc26VnCW0Y/lRuS 8bNftejWK/LbWBqAdsvMd5PZQVf11O6tvUtzd96jz3W6q8o4Z0nmDGziFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJI6yGSFuOSmjsjUfIP00InR4SsUMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEva2pySVpJVzQ1S2FPeU5SOGdfVFFpZEhoS3hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWxpMA0G CSqGSIb3DQEBCwUAA4IBAQAecLhAntbiNAaN8CUx8CJxNrQq/1T61LEWPbUQT9+A Fm7UQ2WTBGMo29elL2N+hk7cBwuoGgErPCzleCGn6LYfLh9FsV2U4lWuF1igPBXo ZlLTeoQG4kQPEb9w0oj0eE4FkL5394bexo1uPQiDfK8po6pTho9XIig2mHjMpAAo SGfZncLhJpDS0ei4UUVl9i/6/XWh9J8QiihxVRKchffNHkUq2dC5Hp6jPBPN9RIb IPbqeedRkZeZOAZbOc0WgHhs3MDJbur7hcfi2sPWZpkx2+RqKSpThmcJPiRwdpIT BeB3RPSsP0u6pnGd4iGrPqThrPzo1kxJujowwt959m0F -----END CERTIFICATE-----Generated at Thu Jan 8 12:56:56 2026 by rpki-client