This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/Kuamlf0SJKI-PWFPoz3C6in1jGI.roa File: Kuamlf0SJKI-PWFPoz3C6in1jGI.roa (raw, json) Hash identifier: W1juLnVZXFxvmAjMn2DB1U04vvF55AkBRyl1Tp1+qak= Subject key identifier: 2A:E6:A6:95:FD:12:24:A2:3E:3D:61:4F:A3:3D:C2:EA:29:F5:8C:62 Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19 Certificate serial: 019B7A5B820972025E3BC76E50FBD535C118 Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/Kuamlf0SJKI-PWFPoz3C6in1jGI.roa Signing time: Thu 01 Jan 2026 16:19:35 +0000 ROA not before: Thu 01 Jan 2026 16:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 5.42.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:82:09:72:02:5e:3b:c7:6e:50:fb:d5:35:c1:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19 Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ae6a695fd1224a23e3d614fa33dc2ea29f58c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:41:d7:d1:aa:3e:64:53:fb:be:a2:7c:75: 55:40:d7:29:f6:ba:f2:bc:2d:89:7c:ec:5f:63:98: c7:05:54:fd:76:af:b3:e3:90:58:b1:d0:f7:88:39: 13:56:90:46:5b:ac:6e:32:9c:76:08:7f:3c:01:f2: 8f:7e:f9:01:82:ce:08:42:74:a0:f6:12:27:23:e5: cd:2a:49:03:34:26:6f:0d:e4:06:a8:38:71:52:a7: 0f:ea:3f:b1:f2:68:e7:58:03:1f:c8:05:aa:48:29: 23:b8:d1:5c:35:a0:1b:8d:23:c8:09:83:d7:c9:aa: d4:28:25:4c:4d:21:aa:92:bf:52:d3:28:35:52:89: a9:42:14:69:7b:a5:22:1c:e5:a6:7f:b0:09:8b:f0: d6:57:fd:fc:b8:9b:01:1a:47:83:42:f7:f6:67:91: 17:9a:4a:b5:81:47:cd:7f:95:95:0a:e5:f2:35:2c: 8c:14:0f:95:d7:9e:08:8c:a5:68:ea:3f:94:55:42: 3c:8c:8d:6e:34:e4:98:f2:e7:00:74:a6:96:b5:05: cf:3c:25:85:fc:5e:55:4a:da:c2:17:db:b4:ae:23: d0:3a:6b:3e:c0:2d:6a:a9:e6:2c:65:4f:ae:df:fc: e9:f7:b6:51:17:66:96:d4:8f:a3:da:d8:ca:47:a6: bc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E6:A6:95:FD:12:24:A2:3E:3D:61:4F:A3:3D:C2:EA:29:F5:8C:62 X509v3 Authority Key Identifier: keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/Kuamlf0SJKI-PWFPoz3C6in1jGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.96.0/19 Signature Algorithm: sha256WithRSAEncryption 04:d7:39:c5:de:0b:5f:c8:07:33:b1:66:3f:df:a2:c8:a1:57: 82:17:cf:05:93:38:80:12:ba:16:66:d4:d2:f1:a7:4f:16:85: 7f:49:23:0f:d4:99:4b:be:d1:e7:e2:35:ea:3d:97:25:57:67: 39:5d:e6:b2:dc:14:dd:ca:06:de:ae:99:58:40:ff:e3:ec:45: d9:3f:c3:30:1f:d5:4c:17:50:ac:4e:c2:28:5d:c8:76:f3:cf: 67:31:31:71:9b:3d:27:9c:f5:1c:c1:b2:d3:5f:bb:b0:38:b0: 6d:c4:7b:db:8d:1c:97:1a:87:83:af:4c:e4:6d:52:61:19:3a: f8:cc:75:f6:2a:17:48:42:f9:c0:11:a8:dc:ab:97:0e:c9:11: 7e:d2:8d:d5:82:85:ca:ea:2c:5e:7f:ad:4b:59:59:90:29:af: a3:ad:35:55:fb:bb:53:7d:91:8c:23:ad:c4:ec:cd:ab:0a:67: dc:67:ab:56:e7:c6:f9:7f:14:f4:38:dc:05:72:09:0b:1f:21: 6f:4f:25:b1:9e:66:13:70:68:cd:7a:19:b8:d0:70:9e:1b:49: 71:3f:b1:95:48:74:af:7b:82:2c:44:b5:52:cd:0d:49:c2:e5: 05:88:ea:29:80:ec:90:31:cd:8b:26:07:6f:30:fc:ec:67:c3: ca:57:d6:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4IJcgJeO8duUPvVNcEYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZWE2NjBkZGI2MTAwZTdkMzJlNWQzNjY4OWE3NzdjYTlj YWZhMTkwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWU2YTY5NWZkMTIyNGEyM2UzZDYxNGZhMzNkYzJlYTI5ZjU4YzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3ZB19GqPmRT+76ifHVVQNcp9rry vC2JfOxfY5jHBVT9dq+z45BYsdD3iDkTVpBGW6xuMpx2CH88AfKPfvkBgs4IQnSg 9hInI+XNKkkDNCZvDeQGqDhxUqcP6j+x8mjnWAMfyAWqSCkjuNFcNaAbjSPICYPX yarUKCVMTSGqkr9S0yg1UompQhRpe6UiHOWmf7AJi/DWV/38uJsBGkeDQvf2Z5EX mkq1gUfNf5WVCuXyNSyMFA+V154IjKVo6j+UVUI8jI1uNOSY8ucAdKaWtQXPPCWF /F5VStrCF9u0riPQOms+wC1qqeYsZU+u3/zp97ZRF2aW1I+j2tjKR6a8fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCrmppX9EiSiPj1hT6M9wuop9YxiMB8GA1UdIwQY MBaAFKTqZg3bYQDn0y5dNmiad3ypyvoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9wbURkdGhBT2ZUTGwwMmFKcDNmS25LLWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lMjBhYTAtMzM4ZS00ZjMzLTg2ZWEt NmY2MjJmZDE4ZDMwLzEvS3VhbWxmMFNKS0ktUFdGUG96M0M2aW4xakdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lMjBhYTAtMzM4ZS00ZjMzLTg2ZWEtNmY2MjJmZDE4ZDMw LzEvcE9wbURkdGhBT2ZUTGwwMmFKcDNmS25LLWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFBSpgMA0G CSqGSIb3DQEBCwUAA4IBAQAE1znF3gtfyAczsWY/36LIoVeCF88FkziAEroWZtTS 8adPFoV/SSMP1JlLvtHn4jXqPZclV2c5Xeay3BTdygberplYQP/j7EXZP8MwH9VM F1CsTsIoXch2889nMTFxmz0nnPUcwbLTX7uwOLBtxHvbjRyXGoeDr0zkbVJhGTr4 zHX2KhdIQvnAEajcq5cOyRF+0o3VgoXK6ixef61LWVmQKa+jrTVV+7tTfZGMI63E 7M2rCmfcZ6tW58b5fxT0ONwFcgkLHyFvTyWxnmYTcGjNehm40HCeG0lxP7GVSHSv e4IsRLVSzQ1JwuUFiOopgOyQMc2LJgdvMPzsZ8PKV9aw -----END CERTIFICATE-----Generated at Wed Jan 21 11:13:56 2026 by rpki-client