This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/K9V0pBJMxjQPv91xTP0Kh2UeFvc.roa File: K9V0pBJMxjQPv91xTP0Kh2UeFvc.roa (raw, json) Hash identifier: BFDPDbmJPLOCYexzkcBoZllev8YkC0o5ma6JusF+wZY= Subject key identifier: 2B:D5:74:A4:12:4C:C6:34:0F:BF:DD:71:4C:FD:0A:87:65:1E:16:F7 Certificate issuer: /CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3 Certificate serial: 019B7EA54D74AC4E51B4FF31FACC6810E102 Authority key identifier: D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/K9V0pBJMxjQPv91xTP0Kh2UeFvc.roa Signing time: Fri 02 Jan 2026 12:18:41 +0000 ROA not before: Fri 02 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57236 IP address blocks: 193.42.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:4d:74:ac:4e:51:b4:ff:31:fa:cc:68:10:e1:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3 Validity Not Before: Jan 2 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bd574a4124cc6340fbfdd714cfd0a87651e16f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:10:d6:93:89:1e:8d:7e:ae:d4:fe:bf:bb:29: 21:f3:48:93:7e:09:54:56:6e:97:70:8a:42:3a:3a: 3d:80:0a:b0:ab:1a:9f:52:0f:74:ef:13:6c:da:73: 0a:1e:cb:9b:db:d2:63:7b:96:47:ec:8d:d9:f1:c0: f3:42:29:35:19:9c:ff:8b:28:8e:1b:7e:a8:ca:c5: 30:51:5d:cb:ea:89:1a:bc:f8:12:79:2b:d8:8a:12: bb:c7:12:0a:8f:1d:b1:02:07:63:d3:1a:a0:23:64: c9:df:b1:53:98:47:50:28:ca:3a:f2:94:d6:74:df: 9d:a8:86:de:ab:f9:fa:ae:51:67:80:0a:4c:5e:cf: 78:14:ef:0d:dc:4e:a2:ba:34:9e:83:da:59:e5:36: 84:d9:56:1a:22:08:83:b4:d2:8f:08:d6:74:f0:98: 88:63:35:3c:08:4c:25:9f:df:cc:8c:e9:00:7b:aa: 29:79:c8:51:3a:86:e1:46:49:6c:35:79:cc:af:0c: d7:df:c4:e4:2c:c1:b7:7f:15:49:8c:f0:34:fd:bf: 34:7e:c8:3c:82:48:21:db:bb:d7:43:06:b9:58:39: f4:3e:ac:c2:3c:10:a0:ed:ce:6d:32:b7:55:bd:7b: 96:02:84:36:90:cd:fd:b3:d1:28:46:c7:4d:c1:00: 58:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D5:74:A4:12:4C:C6:34:0F:BF:DD:71:4C:FD:0A:87:65:1E:16:F7 X509v3 Authority Key Identifier: keyid:D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/K9V0pBJMxjQPv91xTP0Kh2UeFvc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.4.0/22 Signature Algorithm: sha256WithRSAEncryption a5:6b:55:4f:99:b5:4e:51:4c:ef:f2:dc:85:8c:f9:01:34:72: 0e:27:6c:28:df:19:24:e2:ed:74:2f:71:33:a2:b9:56:13:b8: 84:c9:48:ec:d5:63:1b:58:a5:cd:b9:e7:a5:e5:5e:bf:61:4c: 9c:ae:57:21:65:5c:d9:11:be:de:8a:19:19:5d:f7:b0:3a:56: b7:39:5b:63:2d:1c:94:f3:7d:32:d7:f8:98:50:c7:c8:24:ba: 16:db:48:1b:c7:75:b3:62:25:f0:50:8e:3b:30:9c:4b:aa:49: 76:37:7a:22:6c:bf:a4:02:f3:7e:5e:b8:34:1d:38:c8:01:27: dd:d1:0c:a2:97:94:8b:fc:61:59:39:6f:73:65:6a:9d:52:c5: 2d:02:a9:ab:4b:17:d6:71:ac:99:d0:84:e2:36:a6:bb:f6:d0: 18:a1:78:d6:0a:28:b3:23:65:af:61:bb:d8:1f:48:74:a4:ce: 7e:f8:a0:71:31:c7:22:11:b1:a4:4e:6f:f2:b7:ca:77:e5:f7: 21:01:0a:46:77:32:3a:70:4a:91:38:b4:25:5c:cf:64:30:f5: ff:5d:d1:da:7d:ec:79:66:ca:da:3c:0c:df:52:7a:c1:23:44: 6a:dc:a6:22:4f:a2:64:1d:de:23:43:af:4f:91:90:72:f3:71: 6c:c3:6f:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pU10rE5RtP8x+sxoEOECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyM2M1OTI1NTkxOWJkZDlhYjAzYmRlMWM1Yzc4ODA2MmM0 Yjk5ZjMwHhcNMjYwMTAyMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmQ1NzRhNDEyNGNjNjM0MGZiZmRkNzE0Y2ZkMGE4NzY1MWUxNmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RDWk4kejX6u1P6/uykh80iTfglU Vm6XcIpCOjo9gAqwqxqfUg907xNs2nMKHsub29Jje5ZH7I3Z8cDzQik1GZz/iyiO G36oysUwUV3L6okavPgSeSvYihK7xxIKjx2xAgdj0xqgI2TJ37FTmEdQKMo68pTW dN+dqIbeq/n6rlFngApMXs94FO8N3E6iujSeg9pZ5TaE2VYaIgiDtNKPCNZ08JiI YzU8CEwln9/MjOkAe6opechROobhRklsNXnMrwzX38TkLMG3fxVJjPA0/b80fsg8 gkgh27vXQwa5WDn0PqzCPBCg7c5tMrdVvXuWAoQ2kM39s9EoRsdNwQBYwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCvVdKQSTMY0D7/dcUz9CodlHhb3MB8GA1UdIwQY MBaAFNI8WSVZGb3ZqwO94cXHiAYsS5nzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGp4WkpWa1p2ZG1yQTczaHhjZUlCaXhMbWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZmMzZjYtNmExYS00Y2RjLWExNDct ZGE4YjJkNTc2YmYxLzEvSzlWMHBCSk14alFQdjkxeFRQMEtoMlVlRnZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZmMzZjYtNmExYS00Y2RjLWExNDctZGE4YjJkNTc2YmYx LzEvMGp4WkpWa1p2ZG1yQTczaHhjZUlCaXhMbWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSoEMA0G CSqGSIb3DQEBCwUAA4IBAQCla1VPmbVOUUzv8tyFjPkBNHIOJ2wo3xkk4u10L3Ez orlWE7iEyUjs1WMbWKXNueel5V6/YUycrlchZVzZEb7eihkZXfewOla3OVtjLRyU 830y1/iYUMfIJLoW20gbx3WzYiXwUI47MJxLqkl2N3oibL+kAvN+Xrg0HTjIASfd 0Qyil5SL/GFZOW9zZWqdUsUtAqmrSxfWcayZ0ITiNqa79tAYoXjWCiizI2WvYbvY H0h0pM5++KBxMcciEbGkTm/yt8p35fchAQpGdzI6cEqROLQlXM9kMPX/XdHafex5 ZsraPAzfUnrBI0Rq3KYiT6JkHd4jQ69PkZBy83Fsw29T -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:25 2026 by rpki-client