This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/kCuzYnjuJSos_4xewJQ4QZPV__s.roa File: kCuzYnjuJSos_4xewJQ4QZPV__s.roa (raw, json) Hash identifier: BbaU5ecdKj6Nvp3jMc81RoTaOQlNPb3RTOxlDM9jXOs= Subject key identifier: 90:2B:B3:62:78:EE:25:2A:2C:FF:8C:5E:C0:94:38:41:93:D5:FF:FB Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B7911539F4D1CFF887AF3539DBED20C9C Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/kCuzYnjuJSos_4xewJQ4QZPV__s.roa Signing time: Thu 01 Jan 2026 10:18:57 +0000 ROA not before: Thu 01 Jan 2026 10:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211922 IP address blocks: 64.137.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:53:9f:4d:1c:ff:88:7a:f3:53:9d:be:d2:0c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=902bb36278ee252a2cff8c5ec094384193d5fffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:28:df:9d:bb:50:bd:78:bd:e5:b1:de:ca: 81:9f:2b:de:9e:e2:f3:03:25:07:ee:0b:f3:4e:74: af:aa:df:09:16:d5:5e:0c:60:06:d9:ad:41:54:27: 37:fa:fc:49:7e:d7:9f:6d:72:c0:6c:4b:52:b1:b9: 4c:b2:f5:35:79:15:a2:d9:eb:c0:62:5b:7b:62:97: 41:f1:70:8b:c1:5c:e3:97:7e:29:3f:7b:b9:20:f3: 42:8c:42:9e:05:b3:92:5a:a6:d9:5e:a6:6a:5c:d3: 6e:70:32:28:9b:2f:1e:1e:b7:9c:58:c6:96:34:9b: 31:3f:05:b9:d0:39:ea:3f:19:23:b4:39:4b:96:0d: 2b:b3:0f:f3:65:fe:0e:45:b7:6e:ca:da:30:21:96: df:10:78:82:20:61:8d:44:0a:60:0b:c1:bc:b6:7a: d8:17:c6:e8:4f:3d:e1:b5:6d:80:15:3b:80:f5:37: f6:31:49:b9:e5:f2:ff:88:ed:b0:a2:76:e7:78:86: 1d:73:33:09:b8:e9:d8:89:29:27:23:79:7d:e7:f2: 77:39:1b:cf:86:ba:b0:4c:c8:c7:b9:1b:81:a0:de: 92:8d:7d:7c:6a:ee:d9:5b:79:14:dc:77:0c:f0:a0: ac:de:d7:7a:b1:af:34:cc:7d:6a:c8:0b:fb:cd:03: fa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2B:B3:62:78:EE:25:2A:2C:FF:8C:5E:C0:94:38:41:93:D5:FF:FB X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/kCuzYnjuJSos_4xewJQ4QZPV__s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.137.110.0/24 Signature Algorithm: sha256WithRSAEncryption 83:84:b6:97:d7:35:0d:19:d8:f8:1a:d8:a6:33:d4:82:57:60: 07:08:2f:d4:f9:8a:16:90:d4:7c:b8:49:1c:8c:a2:e5:f3:f0: 2f:fa:40:16:8b:1c:f9:5b:38:e5:2a:a7:83:27:e9:92:ab:c9: 83:cc:7c:a0:9d:c5:5a:49:09:78:05:b3:a2:c5:48:aa:a8:47: 70:91:31:1b:c8:b0:66:13:b0:9b:4e:9b:5c:24:9b:87:8e:2f: 89:ae:c4:d4:91:28:2e:77:1d:7d:0f:ef:7e:23:34:2b:9a:23: 0a:e2:4f:e3:23:c7:74:a9:2f:96:e5:46:90:a0:08:f7:c9:39: 00:59:63:b9:53:19:c1:45:64:f2:77:af:42:81:b8:aa:e1:5b: d9:e8:bf:2b:31:5d:30:76:71:c2:cf:64:e5:d6:43:77:12:4b: 4c:95:83:f3:3b:ac:2e:46:75:d5:2d:86:d1:7f:bb:5b:1f:60: 93:ab:a8:0e:b0:27:0b:f6:d8:3b:b4:b2:9a:d6:bb:09:2d:9d: 33:36:bb:ff:63:52:c9:23:2c:3a:55:8a:df:48:a3:ad:41:c7: 80:84:a9:e2:d7:3e:48:8e:9b:5f:85:a6:43:65:fb:5b:92:49: 97:be:f4:b4:c3:a7:71:68:dd:90:f9:ac:c0:3f:7c:29:a7:06: a8:42:8f:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EVOfTRz/iHrzU52+0gycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDJiYjM2Mjc4ZWUyNTJhMmNmZjhjNWVjMDk0Mzg0MTkzZDVmZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgAo3527UL14veWx3sqBnyvenuLz AyUH7gvzTnSvqt8JFtVeDGAG2a1BVCc3+vxJftefbXLAbEtSsblMsvU1eRWi2evA Ylt7YpdB8XCLwVzjl34pP3u5IPNCjEKeBbOSWqbZXqZqXNNucDIomy8eHrecWMaW NJsxPwW50DnqPxkjtDlLlg0rsw/zZf4ORbduytowIZbfEHiCIGGNRApgC8G8tnrY F8boTz3htW2AFTuA9Tf2MUm55fL/iO2wonbneIYdczMJuOnYiSknI3l95/J3ORvP hrqwTMjHuRuBoN6SjX18au7ZW3kU3HcM8KCs3td6sa80zH1qyAv7zQP6dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJArs2J47iUqLP+MXsCUOEGT1f/7MB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEva0N1elluanVKU29zXzR4ZXdKUTRRWlBWX19zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIluMA0G CSqGSIb3DQEBCwUAA4IBAQCDhLaX1zUNGdj4GtimM9SCV2AHCC/U+YoWkNR8uEkc jKLl8/Av+kAWixz5WzjlKqeDJ+mSq8mDzHygncVaSQl4BbOixUiqqEdwkTEbyLBm E7CbTptcJJuHji+JrsTUkSgudx19D+9+IzQrmiMK4k/jI8d0qS+W5UaQoAj3yTkA WWO5UxnBRWTyd69Cgbiq4VvZ6L8rMV0wdnHCz2Tl1kN3EktMlYPzO6wuRnXVLYbR f7tbH2CTq6gOsCcL9tg7tLKa1rsJLZ0zNrv/Y1LJIyw6VYrfSKOtQceAhKni1z5I jptfhaZDZftbkkmXvvS0w6dxaN2Q+azAP3wppwaoQo9N -----END CERTIFICATE-----Generated at Fri Jan 2 02:37:37 2026 by rpki-client