This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/k73lr23Ko0PUHecaVAD5eNt0BdE.roa File: k73lr23Ko0PUHecaVAD5eNt0BdE.roa (raw, json) Hash identifier: jDoZdxTL2XsTO4CsJMxRLFBk8jCh5yCbT9WYypON6kI= Subject key identifier: 93:BD:E5:AF:6D:CA:A3:43:D4:1D:E7:1A:54:00:F9:78:DB:74:05:D1 Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36 Certificate serial: 019B7DC9AA8A00424F9A2307F805B06A0195 Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/k73lr23Ko0PUHecaVAD5eNt0BdE.roa Signing time: Fri 02 Jan 2026 08:18:46 +0000 ROA not before: Fri 02 Jan 2026 08:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42521 IP address blocks: 37.230.201.0/24 maxlen: 24 212.86.99.0/24 maxlen: 24 2a13:b200::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:aa:8a:00:42:4f:9a:23:07:f8:05:b0:6a:01:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36 Validity Not Before: Jan 2 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93bde5af6dcaa343d41de71a5400f978db7405d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:29:53:16:df:19:6d:2f:1c:5d:c1:c2:c0:00: ee:3b:f5:84:ef:0c:2a:f5:2e:f0:c9:0e:e0:e7:22: 32:10:e8:68:fe:e0:09:58:db:87:24:86:a8:8b:d5: dc:5d:4d:46:b2:de:5a:31:fc:aa:0f:87:c8:f3:9f: 21:59:cb:56:3f:62:c5:74:92:62:fd:b7:b5:77:75: b0:72:b7:38:3b:52:fc:9f:8d:72:8e:a2:35:f3:db: 55:65:df:72:b7:8e:dd:07:c0:b1:c8:79:0a:8e:5f: c3:f1:b4:58:22:e1:fe:5e:b9:72:e7:80:45:d1:ca: b7:9e:0c:c9:d6:19:1f:99:74:ed:d3:f4:89:4d:55: de:01:6d:ef:3c:b0:f1:f8:cd:d4:55:8a:24:3b:8b: 50:d1:e5:e5:5c:1f:ee:12:70:18:5a:db:e8:30:70: bc:17:21:10:36:78:b0:89:0e:6b:d6:7e:9f:67:68: 2e:c0:44:96:f5:d4:53:55:ea:bd:62:8b:f6:74:fd: 18:80:11:dd:47:cb:5b:4d:39:cf:bc:9f:38:da:b2: 0c:b8:57:74:6c:3d:c5:5a:b0:bf:4a:b0:26:9f:33: c7:3a:59:bd:4a:a8:1e:ae:78:ce:be:cc:04:9e:d5: a4:05:22:cf:87:ed:d0:0d:b7:2b:30:85:e2:26:cf: 7a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BD:E5:AF:6D:CA:A3:43:D4:1D:E7:1A:54:00:F9:78:DB:74:05:D1 X509v3 Authority Key Identifier: keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/k73lr23Ko0PUHecaVAD5eNt0BdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.201.0/24 212.86.99.0/24 IPv6: 2a13:b200::/29 Signature Algorithm: sha256WithRSAEncryption 17:3f:f9:c2:78:fc:c5:a7:b0:22:2b:19:31:b8:be:78:15:8b: 04:d4:3d:3c:ca:0d:3c:c7:e1:85:3e:ac:d3:e1:5d:58:d4:f2: 4b:97:b6:0e:f2:37:d2:c0:75:7b:4d:b8:4c:a3:0c:be:c8:24: d7:3d:c2:74:d5:6c:d7:69:b6:37:32:8c:c5:63:7d:aa:10:07: ae:f6:0c:44:43:5c:d1:98:39:77:53:7f:ac:b3:19:60:52:8b: d9:9f:fc:42:0f:d7:5e:cf:b6:bf:83:bb:94:62:b9:8a:5c:5e: cf:fd:bb:53:0d:6e:52:9a:36:bd:7d:c7:e0:62:5e:c7:73:ed: f6:71:7c:46:b1:d5:a0:1b:81:bd:6f:fe:ad:25:bd:08:d1:26: 79:fd:31:a6:31:80:d6:03:0b:51:14:4e:8f:b7:b3:45:74:40: d8:d2:85:76:ff:9b:2a:6c:19:9b:5a:d4:22:03:04:4b:69:dd: f9:de:45:50:b2:bd:c9:59:76:42:90:cc:0b:ae:80:37:ca:d3: bb:10:d3:df:7b:f3:91:c9:45:6b:a7:7f:e9:01:ef:8e:92:9d: 97:d9:db:f8:07:94:4f:32:33:a8:a8:33:38:8c:a6:38:e5:23: 35:4d:e8:23:dd:8e:26:92:b4:b8:73:af:b4:be:9c:84:f3:7a: f7:e1:23:b1 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9yaqKAEJPmiMH+AWwagGVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGUyNWUxN2E1MTY5NjkyM2E1YzAyOTY2Nzg3NDA5YWFj OWFhMzYwHhcNMjYwMTAyMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2JkZTVhZjZkY2FhMzQzZDQxZGU3MWE1NDAwZjk3OGRiNzQwNWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqylTFt8ZbS8cXcHCwADuO/WE7wwq 9S7wyQ7g5yIyEOho/uAJWNuHJIaoi9XcXU1Gst5aMfyqD4fI858hWctWP2LFdJJi /be1d3Wwcrc4O1L8n41yjqI189tVZd9yt47dB8CxyHkKjl/D8bRYIuH+Xrly54BF 0cq3ngzJ1hkfmXTt0/SJTVXeAW3vPLDx+M3UVYokO4tQ0eXlXB/uEnAYWtvoMHC8 FyEQNniwiQ5r1n6fZ2guwESW9dRTVeq9Yov2dP0YgBHdR8tbTTnPvJ842rIMuFd0 bD3FWrC/SrAmnzPHOlm9SqgernjOvswEntWkBSLPh+3QDbcrMIXiJs96tQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJO95a9tyqND1B3nGlQA+XjbdAXRMB8GA1UdIwQY MBaAFNwOJeF6UWlpI6XAKWZ4dAmqyao2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yY2M0NmMtOGM1MS00MzMwLWI2MjMt MTgzNWNjOGExZDlkLzEvazczbHIyM0tvMFBVSGVjYVZBRDVlTnQwQmRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8yY2M0NmMtOGM1MS00MzMwLWI2MjMtMTgzNWNjOGExZDlk LzEvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAJebJAwQA 1FZjMA0EAgACMAcDBQMqE7IAMA0GCSqGSIb3DQEBCwUAA4IBAQAXP/nCePzFp7Ai KxkxuL54FYsE1D08yg08x+GFPqzT4V1Y1PJLl7YO8jfSwHV7TbhMowy+yCTXPcJ0 1WzXabY3MozFY32qEAeu9gxEQ1zRmDl3U3+ssxlgUovZn/xCD9dez7a/g7uUYrmK XF7P/btTDW5Smja9fcfgYl7Hc+32cXxGsdWgG4G9b/6tJb0I0SZ5/TGmMYDWAwtR FE6Pt7NFdEDY0oV2/5sqbBmbWtQiAwRLad353kVQsr3JWXZCkMwLroA3ytO7ENPf e/ORyUVrp3/pAe+Okp2X2dv4B5RPMjOoqDM4jKY45SM1Tegj3Y4mkrS4c6+0vpyE 83r34SOx -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:25 2026 by rpki-client