This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/1K65w38M6qfSAhDPAumVfRtILbQ.roa File: 1K65w38M6qfSAhDPAumVfRtILbQ.roa (raw, json) Hash identifier: gO+r/hBjuB8Ccta4Lz/HE+KAZTAzDxZlP8+em5+Zihk= Subject key identifier: D4:AE:B9:C3:7F:0C:EA:A7:D2:02:10:CF:02:E9:95:7D:1B:48:2D:B4 Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Certificate serial: 019B7D5B4663805F34A6CA989C942F4DB3D9 Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/1K65w38M6qfSAhDPAumVfRtILbQ.roa Signing time: Fri 02 Jan 2026 06:18:12 +0000 ROA not before: Fri 02 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 158.173.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:46:63:80:5f:34:a6:ca:98:9c:94:2f:4d:b3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Validity Not Before: Jan 2 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4aeb9c37f0ceaa7d20210cf02e9957d1b482db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:56:0f:7e:d4:ad:eb:61:e5:5d:17:9a:84: 59:8a:2a:f4:39:3b:49:a4:9c:d4:5d:71:1c:0c:6d: a6:6b:3a:52:00:2b:d1:2c:95:a6:04:bf:44:eb:b5: 4c:38:07:8c:ee:ee:10:22:e8:a8:e9:20:3f:18:71: ba:ea:bb:dd:dd:46:57:1a:61:44:a8:67:f5:ed:5c: ee:35:77:90:21:cc:fe:55:5a:4a:9d:91:f4:02:1e: c1:5d:5e:00:02:94:41:d2:bd:ce:50:6d:1f:a3:e4: 6b:d1:48:6f:84:19:16:55:df:70:a7:b0:d2:94:5b: bd:52:a8:9e:ca:b2:2e:f7:09:23:16:9c:68:a7:96: 8c:91:b9:5a:8a:bb:83:3d:6c:58:8f:0b:d2:8b:73: 22:0d:2f:d3:f1:6f:a9:2a:e3:26:60:85:e4:72:21: fa:7d:a4:6e:64:11:71:f1:96:3d:73:96:7a:48:cf: 52:36:8c:42:f0:8a:47:8d:bf:bd:3b:10:fb:96:7e: 2a:5e:50:9b:8d:2f:0c:9e:34:03:c8:2f:c3:d4:01: d3:b3:d8:a3:cb:1f:60:66:a7:a0:fc:a5:ee:c0:f7: 7b:39:29:e4:7a:38:79:0d:b2:77:f0:54:67:71:f4: 0f:05:09:58:67:00:6d:77:2b:62:58:d3:76:79:92: de:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AE:B9:C3:7F:0C:EA:A7:D2:02:10:CF:02:E9:95:7D:1B:48:2D:B4 X509v3 Authority Key Identifier: keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/1K65w38M6qfSAhDPAumVfRtILbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.36.0/24 Signature Algorithm: sha256WithRSAEncryption 18:b3:62:a5:63:29:27:1a:a1:f5:d6:b9:24:e2:4d:94:a5:56: 9f:57:0a:a9:1c:31:27:98:a2:a5:4a:b5:85:25:d4:84:2b:32: 8d:ab:d2:1b:19:9c:ad:08:af:90:f0:de:db:69:46:b4:a5:db: ae:c3:17:d9:e4:19:52:34:e7:0a:66:e5:a0:10:5e:c4:cf:3a: 77:c8:de:a1:1c:82:3e:3d:fe:d0:16:ee:77:92:5b:b6:93:30: 84:c9:83:bc:93:9f:07:85:01:00:00:9b:dc:9f:32:3f:11:f9: 9b:9a:82:dc:d6:d4:a7:67:3d:fd:17:c3:d6:f9:63:d2:e8:a4: e6:72:e6:16:77:13:73:34:09:58:a4:da:89:8b:2b:08:40:24: 23:9c:76:e8:87:a3:8e:ca:f1:d5:b2:52:f2:76:b9:85:27:fd: d6:20:f5:a2:89:fb:ce:e8:aa:5f:38:3e:bf:ac:63:78:b3:3a: 55:be:41:08:02:25:ba:9b:c1:46:ce:51:3c:95:93:59:10:0a: c9:db:9b:be:01:2a:31:96:b8:0e:28:84:aa:bd:d3:8b:f1:09: 20:75:2a:08:27:e6:d7:b9:ed:1b:58:93:42:c6:ac:73:8a:3c: cd:d1:a4:02:ca:59:27:13:f7:52:3c:ca:68:1f:b8:ee:bc:50: 21:72:f7:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W0ZjgF80psqYnJQvTbPZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh NDA4MjMwHhcNMjYwMTAyMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGFlYjljMzdmMGNlYWE3ZDIwMjEwY2YwMmU5OTU3ZDFiNDgyZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC9WD37Ureth5V0XmoRZiir0OTtJ pJzUXXEcDG2mazpSACvRLJWmBL9E67VMOAeM7u4QIuio6SA/GHG66rvd3UZXGmFE qGf17VzuNXeQIcz+VVpKnZH0Ah7BXV4AApRB0r3OUG0fo+Rr0UhvhBkWVd9wp7DS lFu9UqieyrIu9wkjFpxop5aMkblairuDPWxYjwvSi3MiDS/T8W+pKuMmYIXkciH6 faRuZBFx8ZY9c5Z6SM9SNoxC8IpHjb+9OxD7ln4qXlCbjS8MnjQDyC/D1AHTs9ij yx9gZqeg/KXuwPd7OSnkejh5DbJ38FRncfQPBQlYZwBtdytiWNN2eZLexQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNSuucN/DOqn0gIQzwLplX0bSC20MB8GA1UdIwQY MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt ZDJjZDI2YjY5ZGYxLzEvMUs2NXczOE02cWZTQWhEUEF1bVZmUnRJTGJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnq0kMA0G CSqGSIb3DQEBCwUAA4IBAQAYs2KlYyknGqH11rkk4k2UpVafVwqpHDEnmKKlSrWF JdSEKzKNq9IbGZytCK+Q8N7baUa0pduuwxfZ5BlSNOcKZuWgEF7Ezzp3yN6hHII+ Pf7QFu53klu2kzCEyYO8k58HhQEAAJvcnzI/EfmbmoLc1tSnZz39F8PW+WPS6KTm cuYWdxNzNAlYpNqJiysIQCQjnHboh6OOyvHVslLydrmFJ/3WIPWiifvO6KpfOD6/ rGN4szpVvkEIAiW6m8FGzlE8lZNZEArJ25u+ASoxlrgOKISqvdOL8QkgdSoIJ+bX ue0bWJNCxqxzijzN0aQCylknE/dSPMpoH7juvFAhcvdz -----END CERTIFICATE-----Generated at Sun Jan 18 10:02:54 2026 by rpki-client