This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/_kQKugUbFDKzjAHcApu2141cq6c.roa File: _kQKugUbFDKzjAHcApu2141cq6c.roa (raw, json) Hash identifier: /1a50vxH9IeUabW9ZG6RdtEES2xJ9jyKfKc7dsU4ebc= Subject key identifier: FE:44:0A:BA:05:1B:14:32:B3:8C:01:DC:02:9B:B6:D7:8D:5C:AB:A7 Certificate issuer: /CN=6d64a867f45c48f2027b00b83c77796fbbbe0328 Certificate serial: 019B79ED3001F330B2591832361E0C41152F Authority key identifier: 6D:64:A8:67:F4:5C:48:F2:02:7B:00:B8:3C:77:79:6F:BB:BE:03:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWSoZ_RcSPICewC4PHd5b7u-Ayg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/_kQKugUbFDKzjAHcApu2141cq6c.roa Signing time: Thu 01 Jan 2026 14:19:05 +0000 ROA not before: Thu 01 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211312 IP address blocks: 193.238.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft rsync://rpki.ripe.net/repository/DEFAULT/bWSoZ_RcSPICewC4PHd5b7u-Ayg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:30:01:f3:30:b2:59:18:32:36:1e:0c:41:15:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d64a867f45c48f2027b00b83c77796fbbbe0328 Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe440aba051b1432b38c01dc029bb6d78d5caba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:8b:e1:68:fb:52:2e:55:28:22:b7:57:ca: 08:a7:4c:bb:65:b2:4b:e9:ba:2c:6f:7b:32:e6:2d: 4f:5c:ec:57:2c:30:49:45:64:d3:7a:91:4b:f8:00: 7c:45:cc:b5:04:41:4a:2e:ea:43:ed:71:ea:77:27: dc:90:54:16:7d:e5:3d:a8:9d:56:fb:33:09:b4:4f: 37:83:20:ef:eb:86:9b:a1:95:ae:a8:5d:23:2f:b2: a5:6f:ad:8a:39:d5:59:4f:21:5f:c6:11:fb:17:38: d2:a9:00:dc:cd:ef:85:6e:2d:9f:27:63:26:ab:5b: 26:35:bd:a7:2a:dd:28:87:63:ea:99:ca:2b:3b:f1: d3:67:c8:54:17:3f:54:87:5b:5c:45:b3:f0:b6:fa: 78:97:48:64:72:08:a7:df:51:6e:d3:05:15:81:dd: 1c:98:d6:32:b1:02:c0:5f:53:e2:a3:f3:36:f9:b9: 40:c9:54:11:ec:44:06:75:27:3d:2b:21:44:86:4f: 83:0c:58:c0:c0:48:f1:34:c8:4a:02:86:b0:ec:cb: 47:23:a1:c2:68:55:50:66:74:60:4a:fe:0f:8d:0c: c4:55:ab:24:41:63:7d:aa:6f:60:d7:ce:86:ee:86: 3e:c5:2a:68:2a:de:13:e1:f3:db:de:58:47:da:df: 93:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:44:0A:BA:05:1B:14:32:B3:8C:01:DC:02:9B:B6:D7:8D:5C:AB:A7 X509v3 Authority Key Identifier: keyid:6D:64:A8:67:F4:5C:48:F2:02:7B:00:B8:3C:77:79:6F:BB:BE:03:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWSoZ_RcSPICewC4PHd5b7u-Ayg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/_kQKugUbFDKzjAHcApu2141cq6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.238.172.0/24 Signature Algorithm: sha256WithRSAEncryption 88:59:ad:a7:79:dc:2c:87:6c:6f:aa:7f:3d:0e:e0:c0:28:b2: a8:7b:91:09:0d:57:6c:d9:e7:42:e5:29:4d:93:23:cb:7a:a8: a3:36:f0:5a:a2:db:43:0d:90:4f:c0:1d:43:c2:12:fa:e3:1c: 5e:1c:cd:69:44:cb:d0:31:c0:60:a1:ea:6f:f7:70:39:72:69: 4b:78:0b:4d:47:09:51:c7:12:aa:87:80:cd:2e:a3:12:8d:89: 93:16:e2:c5:f7:c1:47:a0:02:7b:46:84:b1:04:25:b9:8d:ee: 93:bf:85:ac:4f:8f:52:51:b6:d4:6c:b9:91:6c:b0:e2:8e:1f: 21:e2:e2:0f:b8:b3:bb:b7:3b:17:23:3a:80:b2:97:93:bb:7e: 76:49:9f:f1:65:10:19:29:b7:db:fa:2d:97:42:45:30:5e:a7: 20:71:c3:96:0a:14:52:df:18:fc:fe:18:64:55:34:ce:25:08: 11:46:ac:ef:da:09:33:d1:99:8d:42:43:73:ae:4b:86:8c:20: 6a:b0:c1:38:58:c6:b5:ce:3a:0f:09:5a:6d:71:b7:f6:e4:f7: c3:ff:c5:d9:2a:2b:26:1f:70:82:bd:e9:4e:e4:51:e3:e9:77: af:3f:5f:44:f7:0d:25:0b:e2:3f:e7:3f:95:e0:16:fd:14:79: 91:b0:74:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TAB8zCyWRgyNh4MQRUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjRhODY3ZjQ1YzQ4ZjIwMjdiMDBiODNjNzc3OTZmYmJi ZTAzMjgwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTQ0MGFiYTA1MWIxNDMyYjM4YzAxZGMwMjliYjZkNzhkNWNhYmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkGL4Wj7Ui5VKCK3V8oIp0y7ZbJL 6bosb3sy5i1PXOxXLDBJRWTTepFL+AB8Rcy1BEFKLupD7XHqdyfckFQWfeU9qJ1W +zMJtE83gyDv64aboZWuqF0jL7Klb62KOdVZTyFfxhH7FzjSqQDcze+Fbi2fJ2Mm q1smNb2nKt0oh2PqmcorO/HTZ8hUFz9Uh1tcRbPwtvp4l0hkcgin31Fu0wUVgd0c mNYysQLAX1Pio/M2+blAyVQR7EQGdSc9KyFEhk+DDFjAwEjxNMhKAoaw7MtHI6HC aFVQZnRgSv4PjQzEVaskQWN9qm9g186G7oY+xSpoKt4T4fPb3lhH2t+TAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP5ECroFGxQys4wB3AKbtteNXKunMB8GA1UdIwQY MBaAFG1kqGf0XEjyAnsAuDx3eW+7vgMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYldTb1pfUmNTUElDZXdDNFBIZDViN3UtQXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8wZjlkMzctZmI1Ny00OGNmLTgzOWUt YjA2MjNlYTdmYjAxLzEvX2tRS3VnVWJGREt6akFIY0FwdTIxNDFjcTZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8wZjlkMzctZmI1Ny00OGNmLTgzOWUtYjA2MjNlYTdmYjAx LzEvYldTb1pfUmNTUElDZXdDNFBIZDViN3UtQXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwe6sMA0G CSqGSIb3DQEBCwUAA4IBAQCIWa2nedwsh2xvqn89DuDAKLKoe5EJDVds2edC5SlN kyPLeqijNvBaottDDZBPwB1DwhL64xxeHM1pRMvQMcBgoepv93A5cmlLeAtNRwlR xxKqh4DNLqMSjYmTFuLF98FHoAJ7RoSxBCW5je6Tv4WsT49SUbbUbLmRbLDijh8h 4uIPuLO7tzsXIzqAspeTu352SZ/xZRAZKbfb+i2XQkUwXqcgccOWChRS3xj8/hhk VTTOJQgRRqzv2gkz0ZmNQkNzrkuGjCBqsME4WMa1zjoPCVptcbf25PfD/8XZKism H3CCvelO5FHj6XevP19E9w0lC+I/5z+V4Bb9FHmRsHSC -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:03 2026 by rpki-client