This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/kkBbL5GQCXbcPIlpra9BISH413A.roa File: kkBbL5GQCXbcPIlpra9BISH413A.roa (raw, json) Hash identifier: vCdkmwPxJu59m+M9IjhfPHDw9m/ikpb4ndaI0+l1XvI= Subject key identifier: 92:40:5B:2F:91:90:09:76:DC:3C:89:69:AD:AF:41:21:21:F8:D7:70 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38A1E803BF9927B0EE12FEDE58147B Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/kkBbL5GQCXbcPIlpra9BISH413A.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 195.178.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a1:e8:03:bf:99:27:b0:ee:12:fe:de:58:14:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92405b2f91900976dc3c8969adaf412121f8d770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f0:04:46:22:c3:61:38:83:83:44:48:71:0b: a7:ab:9a:6b:5d:02:3e:a8:03:af:7f:27:8e:5c:16: 8a:c2:75:81:0f:11:ee:c6:2b:ca:93:d1:cb:da:d4: 99:b2:cb:ff:0c:3e:5d:a9:e6:a3:04:e1:25:6d:1a: 41:e2:8a:51:0c:9e:69:94:22:f7:b0:6e:32:98:e8: 3d:ed:38:09:24:7f:32:5a:01:65:3c:bd:a7:66:02: ab:60:f3:bc:c3:8d:e2:7e:b3:b5:e3:87:d8:cb:b9: 30:00:40:bc:8c:d4:89:b2:83:13:78:e6:e9:9e:7f: 6d:3c:37:4d:22:01:2f:08:e6:5d:74:cd:ed:90:e2: a9:ba:1d:b4:5f:66:6a:b1:98:cd:e7:43:97:88:87: 1b:82:0e:ad:00:b8:cb:bc:63:21:68:18:26:a0:9f: c2:01:bb:43:b8:48:38:9c:95:2c:a1:6c:1e:7d:85: 83:e5:7a:48:f3:db:79:ba:f9:20:c9:8d:4f:93:d5: 72:02:d7:f5:c0:67:fc:48:99:22:f6:40:af:02:10: 1e:d7:cf:ea:fb:21:49:c5:5f:65:25:20:7c:fb:de: 96:b1:20:79:84:30:16:9c:81:89:23:e1:05:75:70: ad:87:88:69:54:45:de:00:2b:fb:5c:c8:4e:b9:7f: c2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:40:5B:2F:91:90:09:76:DC:3C:89:69:AD:AF:41:21:21:F8:D7:70 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/kkBbL5GQCXbcPIlpra9BISH413A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.142.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:8e:e8:ff:d4:9a:d5:55:62:6d:6d:a4:bd:53:8e:df:b3:d6: 14:5c:b7:45:08:54:5d:4a:06:6f:8f:2b:74:26:7e:6f:7e:aa: 5b:8b:e8:78:a0:70:4c:ed:f1:fc:21:cc:35:48:e0:6c:d3:c7: ce:bb:5b:d1:cf:85:e4:34:02:95:4c:18:c9:1e:ea:55:46:db: e4:9e:d5:e2:0f:06:34:b5:ab:ef:f0:9d:66:4f:13:ed:29:30: 53:bf:f3:be:07:a6:a6:39:e1:dd:73:03:f6:6b:cc:ac:f9:07: d5:67:8d:9a:77:69:83:af:bb:a0:99:fa:f8:9c:80:9a:0a:16: da:78:39:61:07:63:84:af:8b:e3:c3:2b:20:59:84:0f:f6:b0: 01:0b:84:3c:30:6f:d7:d6:33:9a:3e:69:75:cc:cc:cc:d3:19: 79:fc:e5:58:d1:ad:f1:11:e9:ed:b0:b0:df:05:83:44:1a:d4: a7:3d:73:f6:ce:e1:85:b6:65:24:ae:d1:05:66:a9:6a:05:39: b6:e9:49:34:e5:82:75:9f:4c:93:f5:83:9e:81:6c:3b:af:f1: cb:43:fc:3a:e2:b0:57:eb:66:6e:fd:98:22:0f:e5:91:9c:bc: f9:0e:b2:70:b3:9b:32:a8:71:95:dc:ea:d6:cc:78:3a:8d:d9: 45:0c:6a:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKHoA7+ZJ7DuEv7eWBR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjQwNWIyZjkxOTAwOTc2ZGMzYzg5NjlhZGFmNDEyMTIxZjhkNzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfAERiLDYTiDg0RIcQunq5prXQI+ qAOvfyeOXBaKwnWBDxHuxivKk9HL2tSZssv/DD5dqeajBOElbRpB4opRDJ5plCL3 sG4ymOg97TgJJH8yWgFlPL2nZgKrYPO8w43ifrO144fYy7kwAEC8jNSJsoMTeObp nn9tPDdNIgEvCOZddM3tkOKpuh20X2ZqsZjN50OXiIcbgg6tALjLvGMhaBgmoJ/C AbtDuEg4nJUsoWwefYWD5XpI89t5uvkgyY1Pk9VyAtf1wGf8SJki9kCvAhAe18/q +yFJxV9lJSB8+96WsSB5hDAWnIGJI+EFdXCth4hpVEXeACv7XMhOuX/CbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJJAWy+RkAl23DyJaa2vQSEh+NdwMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEva2tCYkw1R1FDWGJjUElscHJhOUJJU0g0MTNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7KOMA0G CSqGSIb3DQEBCwUAA4IBAQB/juj/1JrVVWJtbaS9U47fs9YUXLdFCFRdSgZvjyt0 Jn5vfqpbi+h4oHBM7fH8Icw1SOBs08fOu1vRz4XkNAKVTBjJHupVRtvkntXiDwY0 tavv8J1mTxPtKTBTv/O+B6amOeHdcwP2a8ys+QfVZ42ad2mDr7ugmfr4nICaChba eDlhB2OEr4vjwysgWYQP9rABC4Q8MG/X1jOaPml1zMzM0xl5/OVY0a3xEentsLDf BYNEGtSnPXP2zuGFtmUkrtEFZqlqBTm26Uk05YJ1n0yT9YOegWw7r/HLQ/w64rBX 62Zu/ZgiD+WRnLz5DrJws5syqHGV3OrWzHg6jdlFDGr9 -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:13 2026 by rpki-client