This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/k4m5uF6d86bKxXryYJZgXjvW8I0.roa File: k4m5uF6d86bKxXryYJZgXjvW8I0.roa (raw, json) Hash identifier: H2jNyKD+HmfBkpz7JaRABFyLsbIlNp19F4CUBAdQu10= Subject key identifier: 93:89:B9:B8:5E:9D:F3:A6:CA:C5:7A:F2:60:96:60:5E:3B:D6:F0:8D Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019B783446E9AD67040A0F66EE8F292AEC6F Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/k4m5uF6d86bKxXryYJZgXjvW8I0.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216246 IP address blocks: 217.144.184.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:46:e9:ad:67:04:0a:0f:66:ee:8f:29:2a:ec:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9389b9b85e9df3a6cac57af26096605e3bd6f08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:6b:44:1a:54:86:54:26:f6:5c:84:b3:6a: b2:4f:2c:69:4a:87:f6:6f:64:96:50:ad:0e:3f:8c: ba:86:27:98:f2:f4:7e:23:3f:ad:a7:78:de:2e:a2: 10:52:a9:e1:e0:23:95:ab:ce:72:9f:ca:a6:9d:0b: 0b:2a:9b:d0:30:e8:37:c3:7c:81:12:c0:b2:cb:74: aa:e3:52:90:91:8e:4d:10:b0:77:f3:cc:a4:8c:28: 60:72:df:57:45:ea:bd:56:7a:5b:53:f3:13:d3:98: 2b:86:80:76:e7:6e:10:ec:28:73:67:04:44:ea:cd: 61:33:a1:b1:2d:90:b2:e9:2b:70:38:e9:6a:a3:2b: 6c:31:0c:0e:27:c0:77:d1:fe:5d:51:fe:9d:1c:4a: 89:cd:b2:a9:d7:41:c2:dd:19:a1:15:a5:21:89:6a: 19:13:98:ce:f7:f7:79:65:3d:80:db:d6:ab:99:3b: a0:3d:d4:06:f5:fb:9e:3c:7e:ae:7a:08:80:98:3b: 61:93:4f:1d:f2:6e:29:9e:78:0c:78:57:4a:11:b8: 5c:8c:ed:80:c8:05:85:54:48:16:7b:26:04:2e:04: 70:32:b5:bd:59:7e:b9:92:c6:25:0f:7c:85:70:14: 53:57:b5:ba:aa:02:46:2a:f7:24:fe:5d:e7:ed:e8: 92:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:89:B9:B8:5E:9D:F3:A6:CA:C5:7A:F2:60:96:60:5E:3B:D6:F0:8D X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/k4m5uF6d86bKxXryYJZgXjvW8I0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.144.184.0/24 Signature Algorithm: sha256WithRSAEncryption 18:76:da:74:42:5d:32:ce:d1:da:7a:78:20:e2:65:87:47:98: 15:4a:30:30:b5:eb:96:7d:a3:d2:e5:ed:79:07:4e:1d:1b:11: c1:48:8a:22:fb:8e:2a:b0:64:c4:9b:cb:9d:20:2f:5d:80:47: 93:db:7f:bc:20:bb:ef:f0:6d:7e:f9:8b:ad:de:44:62:46:56: 42:5c:85:52:2c:f0:93:6c:0a:e4:b4:20:0f:2e:98:99:9a:94: 45:ba:15:57:69:ef:e2:cf:73:28:67:6a:5d:b6:12:71:d0:fd: 68:03:6c:86:88:83:69:34:4e:cf:c2:da:38:14:94:8f:62:9a: 52:f4:e0:b4:c9:36:cf:89:51:8c:30:12:b6:a6:89:c8:85:e1: f2:b1:50:e9:81:98:49:21:22:00:52:20:df:9e:31:8f:84:6c: 61:09:ad:d6:fd:3c:f2:22:55:ca:16:cb:26:9f:ce:5d:53:14: f6:2e:09:43:e5:2f:7f:cb:31:8d:97:4e:1f:38:1d:2d:29:06: 6c:c6:4c:77:f0:cf:fe:c6:b0:f0:f1:5f:e0:74:1b:e1:66:57: 5d:51:9d:d3:47:93:92:17:0e:0e:60:fe:bc:e7:68:f3:07:a0: 23:3f:ee:d0:e4:29:8b:79:1d:89:38:66:81:34:28:d7:bf:2c: 13:88:5d:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEbprWcECg9m7o8pKuxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mzg5YjliODVlOWRmM2E2Y2FjNTdhZjI2MDk2NjA1ZTNiZDZmMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp9rRBpUhlQm9lyEs2qyTyxpSof2 b2SWUK0OP4y6hieY8vR+Iz+tp3jeLqIQUqnh4COVq85yn8qmnQsLKpvQMOg3w3yB EsCyy3Sq41KQkY5NELB388ykjChgct9XReq9VnpbU/MT05grhoB2524Q7ChzZwRE 6s1hM6GxLZCy6StwOOlqoytsMQwOJ8B30f5dUf6dHEqJzbKp10HC3RmhFaUhiWoZ E5jO9/d5ZT2A29armTugPdQG9fuePH6uegiAmDthk08d8m4pnngMeFdKEbhcjO2A yAWFVEgWeyYELgRwMrW9WX65ksYlD3yFcBRTV7W6qgJGKvck/l3n7eiSdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJOJubhenfOmysV68mCWYF471vCNMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvazRtNXVGNmQ4NmJLeFhyeVlKWmdYanZXOEkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZC4MA0G CSqGSIb3DQEBCwUAA4IBAQAYdtp0Ql0yztHaengg4mWHR5gVSjAwteuWfaPS5e15 B04dGxHBSIoi+44qsGTEm8udIC9dgEeT23+8ILvv8G1++Yut3kRiRlZCXIVSLPCT bArktCAPLpiZmpRFuhVXae/iz3MoZ2pdthJx0P1oA2yGiINpNE7Pwto4FJSPYppS 9OC0yTbPiVGMMBK2ponIheHysVDpgZhJISIAUiDfnjGPhGxhCa3W/TzyIlXKFssm n85dUxT2LglD5S9/yzGNl04fOB0tKQZsxkx38M/+xrDw8V/gdBvhZlddUZ3TR5OS Fw4OYP6852jzB6AjP+7Q5CmLeR2JOGaBNCjXvywTiF3O -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:49 2026 by rpki-client