This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/k_G1ZFjYUPyK2QRfmzTUpmsw2pI.roa File: k_G1ZFjYUPyK2QRfmzTUpmsw2pI.roa (raw, json) Hash identifier: uVOKy0IsUQzC+AmA38qUj8H8RAvlkN0eTQJ2zY0TLiQ= Subject key identifier: 93:F1:B5:64:58:D8:50:FC:8A:D9:04:5F:9B:34:D4:A6:6B:30:DA:92 Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0 Certificate serial: 019B7AC87255D0D446E7B6027E6D4B1BAF6C Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/k_G1ZFjYUPyK2QRfmzTUpmsw2pI.roa Signing time: Thu 01 Jan 2026 18:18:35 +0000 ROA not before: Thu 01 Jan 2026 18:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.13.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:72:55:d0:d4:46:e7:b6:02:7e:6d:4b:1b:af:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0 Validity Not Before: Jan 1 18:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93f1b56458d850fc8ad9045f9b34d4a66b30da92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:72:a9:69:86:8e:06:52:c1:a8:c2:09:72: 30:38:df:7a:9c:f7:7d:44:50:51:b5:d1:f6:56:1b: 2d:fb:f8:6d:1b:56:ab:d9:75:f5:21:c7:1d:9c:4d: 3d:8a:e9:07:4c:2d:da:6b:e3:b0:42:aa:70:d8:04: 9e:ac:f2:50:d4:c2:f7:87:1c:83:9f:68:26:1b:4d: 05:54:f7:8c:07:32:b0:77:c8:b2:35:1c:84:c8:fe: ed:0c:85:9e:af:bc:93:50:b7:66:b5:c1:e6:2f:b3: 74:b4:5d:9a:e4:a0:74:5a:c4:ea:ac:56:20:54:13: 47:16:a0:ac:68:c6:db:4f:7f:10:d8:c5:9c:8d:3d: 28:06:28:a4:de:e1:1b:60:eb:12:eb:e6:49:80:89: 8c:ee:a9:c1:85:b1:a7:53:7d:6f:f7:f5:b4:5d:d1: 48:ec:6c:46:7b:d2:ce:e8:50:ef:dd:89:e5:7d:24: a2:dd:11:07:95:2e:80:f6:a3:75:ad:fe:a9:d3:9a: b1:9c:92:aa:6e:10:ca:06:da:01:bd:43:5d:16:0e: fd:cd:9a:c0:15:8a:26:7a:22:79:bb:cd:f7:dd:b8: 16:bb:35:4f:9d:9c:b2:b7:80:82:c0:87:aa:3c:54: 00:f3:be:c5:9b:44:6d:b1:b6:02:ac:31:47:ec:0c: ff:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F1:B5:64:58:D8:50:FC:8A:D9:04:5F:9B:34:D4:A6:6B:30:DA:92 X509v3 Authority Key Identifier: keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/k_G1ZFjYUPyK2QRfmzTUpmsw2pI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.13.14.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:43:ae:4d:27:8c:44:1c:9c:8d:6e:30:ed:53:70:f2:0e:b4: d3:ef:56:90:99:6b:22:5f:92:13:2f:6c:1e:9e:cb:88:8c:70: 61:e4:79:19:63:31:6f:cb:f5:cf:6e:1c:99:89:5d:8d:2c:d8: 26:5b:e8:36:cd:c4:2f:d0:9f:f9:bd:ab:35:38:55:f8:2b:44: 9f:a4:bf:0e:94:9b:50:35:18:88:c3:ac:46:9a:d5:4c:52:76: 72:1c:4f:cd:74:f5:b2:02:f9:e9:44:43:33:d6:88:d1:90:ed: f8:f4:0e:64:a4:67:97:28:9f:97:66:55:28:61:f8:3f:6f:8e: 06:33:81:5e:68:66:89:81:23:86:39:d4:5d:58:8a:0c:bc:02: 19:04:2b:17:4c:f8:dc:9c:ef:b0:d0:a0:3a:ac:cd:2e:e4:32: bb:5a:80:12:56:32:97:26:49:2d:07:4f:fb:b2:6e:60:17:0b: 4a:5c:c1:28:69:d8:94:7c:eb:df:9a:19:56:7f:6c:4a:bf:96: 58:dc:79:e6:fa:7d:83:4f:4e:75:79:97:8c:4d:23:b6:de:54: 23:48:e0:a1:b7:7f:32:7f:61:26:86:2a:f7:cf:f8:a8:a8:88: 2b:a5:bc:0d:02:28:b6:28:06:76:46:a8:9f:37:85:33:a5:c5: 0b:e6:1e:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yHJV0NRG57YCfm1LG69sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMDNhMWY4YzMzNGZkYmY0Yjc4ZGVmMGM1OTJmZjA0OTBk ZGY0YjAwHhcNMjYwMTAxMTgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2YxYjU2NDU4ZDg1MGZjOGFkOTA0NWY5YjM0ZDRhNjZiMzBkYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1ZyqWmGjgZSwajCCXIwON96nPd9 RFBRtdH2Vhst+/htG1ar2XX1IccdnE09iukHTC3aa+OwQqpw2ASerPJQ1ML3hxyD n2gmG00FVPeMBzKwd8iyNRyEyP7tDIWer7yTULdmtcHmL7N0tF2a5KB0WsTqrFYg VBNHFqCsaMbbT38Q2MWcjT0oBiik3uEbYOsS6+ZJgImM7qnBhbGnU31v9/W0XdFI 7GxGe9LO6FDv3YnlfSSi3REHlS6A9qN1rf6p05qxnJKqbhDKBtoBvUNdFg79zZrA FYomeiJ5u8333bgWuzVPnZyyt4CCwIeqPFQA877Fm0RtsbYCrDFH7Az//wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJPxtWRY2FD8itkEX5s01KZrMNqSMB8GA1UdIwQY MBaAFH8DofjDNP2/S3je8MWS/wSQ3fSwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8zZmUxYTAtYzZmZC00YmM0LWFhZTEt OWVlMDA2OTQyYjRiLzEva19HMVpGallVUHlLMlFSZm16VFVwbXN3MnBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8zZmUxYTAtYzZmZC00YmM0LWFhZTEtOWVlMDA2OTQyYjRi LzEvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ0OMA0G CSqGSIb3DQEBCwUAA4IBAQAtQ65NJ4xEHJyNbjDtU3DyDrTT71aQmWsiX5ITL2we nsuIjHBh5HkZYzFvy/XPbhyZiV2NLNgmW+g2zcQv0J/5vas1OFX4K0SfpL8OlJtQ NRiIw6xGmtVMUnZyHE/NdPWyAvnpREMz1ojRkO349A5kpGeXKJ+XZlUoYfg/b44G M4FeaGaJgSOGOdRdWIoMvAIZBCsXTPjcnO+w0KA6rM0u5DK7WoASVjKXJkktB0/7 sm5gFwtKXMEoadiUfOvfmhlWf2xKv5ZY3Hnm+n2DT051eZeMTSO23lQjSOCht38y f2Emhir3z/ioqIgrpbwNAii2KAZ2RqifN4UzpcUL5h4G -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:59 2026 by rpki-client