This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/kAV42zy5ItGrvvbv1krId_7HV5A.roa File: kAV42zy5ItGrvvbv1krId_7HV5A.roa (raw, json) Hash identifier: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc= Subject key identifier: 90:05:78:DB:3C:B9:22:D1:AB:BE:F6:EF:D6:4A:C8:77:FE:C7:57:90 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019B79111C5ED7CEA2BFAEEDC9F0F14AF5CD Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/kAV42zy5ItGrvvbv1krId_7HV5A.roa Signing time: Thu 01 Jan 2026 10:18:43 +0000 ROA not before: Thu 01 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 193.160.102.0/24 maxlen: 24 193.160.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1c:5e:d7:ce:a2:bf:ae:ed:c9:f0:f1:4a:f5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Jan 1 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=900578db3cb922d1abbef6efd64ac877fec75790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b6:8b:cc:ae:a0:4f:db:be:af:26:05:ac:23: fa:52:aa:a8:3d:d8:d0:c8:68:79:11:2d:0e:17:3a: 98:14:ec:bb:e3:4e:60:b0:c3:a2:c5:89:40:1b:cd: 74:78:a0:10:7b:0e:ed:48:19:29:0f:18:d7:3d:d6: a9:49:63:ca:ec:48:b6:8e:3f:af:ef:9d:81:aa:25: 7b:f3:81:b5:67:47:5c:00:ae:de:98:7d:07:41:a0: 74:d1:43:c7:b4:d7:b3:25:af:28:af:39:23:a7:e3: e9:ee:23:79:2b:94:4c:ad:86:50:23:26:af:52:bf: ff:5e:fd:3a:c0:8b:1a:ed:fd:db:eb:e6:50:a9:e5: 02:2b:1d:32:34:e8:1d:66:fb:9f:35:6d:52:b0:af: 24:12:b8:cb:f0:16:e7:45:0e:4b:0b:87:f8:68:2b: 15:3a:c7:8e:3e:36:6d:f7:aa:d2:70:87:a6:e7:8c: 33:35:5f:15:88:69:8f:88:06:27:2f:d2:52:bb:b6: 93:e6:a6:de:3e:64:02:6a:de:7f:32:5c:00:0d:5a: 82:6c:72:6d:fc:d6:ad:e8:1d:ea:9b:05:e3:8c:9a: 3a:a0:10:b9:1f:27:ad:e1:5e:31:77:cd:f4:5e:af: b7:05:c8:46:50:01:e0:d5:dd:7b:29:c8:cb:59:14: 68:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:05:78:DB:3C:B9:22:D1:AB:BE:F6:EF:D6:4A:C8:77:FE:C7:57:90 X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/kAV42zy5ItGrvvbv1krId_7HV5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.102.0/24 193.160.113.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:cf:9b:c8:1c:ef:58:cc:97:eb:4c:64:b7:e0:2f:1e:18:e7: a8:21:a4:ab:5e:5d:90:16:68:a5:b8:d3:13:1c:f3:34:cc:9b: 6a:de:a9:37:07:f9:94:52:22:25:82:6d:d7:5e:4f:1c:5d:a4: d0:c7:46:b2:c1:f0:6f:f0:8b:8e:b5:34:23:57:11:05:fe:fe: 3b:e2:82:cc:91:7e:7a:bc:93:ca:8a:f3:02:2d:f0:d5:d3:dc: 9e:10:d8:06:b8:c5:31:f3:ef:cf:18:e6:c1:72:c0:8a:4c:42: 75:8b:77:ec:59:98:5f:86:23:12:a7:5a:b9:8e:1a:b8:df:2f: c5:24:d2:ce:9c:cf:95:99:89:61:11:7c:4a:6d:ee:da:e0:d0: 7a:a6:15:65:95:05:f5:78:e5:0e:09:17:26:6b:9c:e2:cb:f9: 3e:6d:2a:37:8a:64:8d:3c:cf:e9:3b:26:aa:47:d8:9f:43:6d: 6c:e9:2d:b3:78:90:73:73:16:24:4c:25:1c:45:b1:5f:e3:3a: 97:91:47:98:42:b6:f1:82:f6:08:93:88:60:4f:2f:d4:16:db: 73:c5:e6:c6:84:15:3a:af:58:7b:10:23:3a:95:90:37:25:89: be:6c:d6:b8:fc:46:f0:84:53:8b:6d:c9:5a:7b:d6:10:f4:d2: 4d:98:b5:89 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ERxe186iv67tyfDxSvXNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjYwMTAxMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDA1NzhkYjNjYjkyMmQxYWJiZWY2ZWZkNjRhYzg3N2ZlYzc1NzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2raLzK6gT9u+ryYFrCP6UqqoPdjQ yGh5ES0OFzqYFOy7405gsMOixYlAG810eKAQew7tSBkpDxjXPdapSWPK7Ei2jj+v 752BqiV784G1Z0dcAK7emH0HQaB00UPHtNezJa8orzkjp+Pp7iN5K5RMrYZQIyav Ur//Xv06wIsa7f3b6+ZQqeUCKx0yNOgdZvufNW1SsK8kErjL8BbnRQ5LC4f4aCsV OseOPjZt96rScIem54wzNV8ViGmPiAYnL9JSu7aT5qbePmQCat5/MlwADVqCbHJt /Nat6B3qmwXjjJo6oBC5Hyet4V4xd830Xq+3BchGUAHg1d17KcjLWRRonQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJAFeNs8uSLRq77279ZKyHf+x1eQMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEva0FWNDJ6eTVJdEdydnZidjFrcklkXzdIVjVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwaBmAwQA waBxMA0GCSqGSIb3DQEBCwUAA4IBAQCez5vIHO9YzJfrTGS34C8eGOeoIaSrXl2Q FmiluNMTHPM0zJtq3qk3B/mUUiIlgm3XXk8cXaTQx0aywfBv8IuOtTQjVxEF/v47 4oLMkX56vJPKivMCLfDV09yeENgGuMUx8+/PGObBcsCKTEJ1i3fsWZhfhiMSp1q5 jhq43y/FJNLOnM+VmYlhEXxKbe7a4NB6phVllQX1eOUOCRcma5ziy/k+bSo3imSN PM/pOyaqR9ifQ21s6S2zeJBzcxYkTCUcRbFf4zqXkUeYQrbxgvYIk4hgTy/UFttz xebGhBU6r1h7ECM6lZA3JYm+bNa4/EbwhFOLbclae9YQ9NJNmLWJ -----END CERTIFICATE-----Generated at Thu Jan 8 12:58:20 2026 by rpki-client