This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/kDJ2PzoRjH6iJPNi025PKxEhi-s.roa File: kDJ2PzoRjH6iJPNi025PKxEhi-s.roa (raw, json) Hash identifier: yvo8fHjNZoJVnVdc67T8AdIPGU/AJSCIpuySCr331/4= Subject key identifier: 90:32:76:3F:3A:11:8C:7E:A2:24:F3:62:D3:6E:4F:2B:11:21:8B:EB Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8 Certificate serial: 019B7F13B080B3F970BCF7181B0D2961C0B7 Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/kDJ2PzoRjH6iJPNi025PKxEhi-s.roa Signing time: Fri 02 Jan 2026 14:19:15 +0000 ROA not before: Fri 02 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1273 IP address blocks: 212.248.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:b0:80:b3:f9:70:bc:f7:18:1b:0d:29:61:c0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8 Validity Not Before: Jan 2 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9032763f3a118c7ea224f362d36e4f2b11218beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:7a:a3:b0:5a:2d:61:92:cc:05:d5:be:c1: 82:d2:74:0c:f0:59:7a:3b:34:42:3d:bc:60:0f:07: aa:9a:e7:a8:65:90:5b:e0:20:79:3a:9c:30:8a:06: 07:43:48:17:ae:e4:3d:f3:ea:d1:15:9c:31:e5:8a: e4:21:e0:ad:cc:ee:ed:42:40:4c:b9:c7:1c:2a:14: 90:96:d4:8e:12:0a:d3:51:b8:4c:e5:66:01:b1:21: 74:9f:f6:3a:3f:03:02:cc:e1:22:83:49:29:cc:95: a6:88:a2:5b:f0:5b:a6:01:83:f9:37:8f:21:dd:f3: df:74:87:e1:0c:b7:e7:22:19:69:c3:76:09:e0:73: f4:e6:ff:30:87:d8:12:12:5d:3d:65:30:d5:35:6d: 56:36:ff:3c:c3:ef:66:94:96:06:b7:b6:ad:20:47: dc:fe:a5:5b:df:b1:ff:cb:d1:a2:38:8a:37:fe:d2: 8b:28:54:8e:c1:2f:bc:c1:ff:fa:88:ea:79:e7:63: cb:e9:69:94:45:84:c6:29:cd:c6:15:2c:64:f3:d6: ff:58:5f:1f:1e:0b:07:2f:e9:9a:3a:57:55:a2:70: b0:b7:1a:df:c5:a6:a6:97:2e:35:36:e0:e6:e0:e9: 27:f6:b2:64:a2:8a:c3:68:92:8f:72:d2:b2:99:02: fb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:32:76:3F:3A:11:8C:7E:A2:24:F3:62:D3:6E:4F:2B:11:21:8B:EB X509v3 Authority Key Identifier: keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/kDJ2PzoRjH6iJPNi025PKxEhi-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.248.192.0/18 Signature Algorithm: sha256WithRSAEncryption 96:00:67:17:02:05:a5:69:e2:a6:67:5a:82:b3:4e:00:b5:46: f6:f0:e0:40:1f:f0:55:16:cf:67:c3:0d:65:fb:1b:64:32:3e: af:a2:5b:b2:19:d9:ee:e2:1a:3e:a8:6a:41:5b:b5:c0:fc:93: eb:9a:fe:79:ad:c0:3f:e5:09:df:6a:91:6b:1c:09:aa:ca:cf: ff:e0:d2:02:02:ec:38:21:65:24:a9:02:44:dd:6e:cd:14:91: b4:19:f3:ca:37:91:b2:16:e8:fd:50:ba:cd:39:95:d2:6c:c0: fd:01:27:c3:fb:65:67:87:f2:ec:fe:25:10:fa:b0:2a:df:a9: 14:57:59:0b:89:9a:c8:27:4d:5b:03:7a:c7:af:94:3a:d5:fe: 0b:7f:9d:ea:78:c7:27:5c:d1:e5:9d:a5:d3:2a:20:44:75:89: d0:2f:3f:c2:c1:2f:18:dc:5b:5d:9b:74:f1:26:25:a6:0b:80: 20:ed:c7:c4:7a:63:c6:6c:2a:2b:59:eb:da:be:2a:1d:23:2a: 0d:d1:13:e6:69:54:19:f0:33:98:b9:e5:d6:ea:54:50:fb:49: 6c:88:53:ed:92:f5:06:b4:e2:f6:7e:e5:78:ba:8d:29:10:1c: cf:40:d2:76:bf:72:c4:72:64:c6:7d:94:11:b2:8b:40:d1:c9: 2a:73:4c:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E7CAs/lwvPcYGw0pYcC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZGEyMjVjYjdmMjk0MTZlNzUzNDY5NWZiZmIyMTc2MmZl ZTkzYzgwHhcNMjYwMTAyMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDMyNzYzZjNhMTE4YzdlYTIyNGYzNjJkMzZlNGYyYjExMjE4YmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8R6o7BaLWGSzAXVvsGC0nQM8Fl6 OzRCPbxgDweqmueoZZBb4CB5OpwwigYHQ0gXruQ98+rRFZwx5YrkIeCtzO7tQkBM ucccKhSQltSOEgrTUbhM5WYBsSF0n/Y6PwMCzOEig0kpzJWmiKJb8FumAYP5N48h 3fPfdIfhDLfnIhlpw3YJ4HP05v8wh9gSEl09ZTDVNW1WNv88w+9mlJYGt7atIEfc /qVb37H/y9GiOIo3/tKLKFSOwS+8wf/6iOp552PL6WmURYTGKc3GFSxk89b/WF8f HgsHL+maOldVonCwtxrfxaamly41NuDm4Okn9rJkoorDaJKPctKymQL7gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJAydj86EYx+oiTzYtNuTysRIYvrMB8GA1UdIwQY MBaAFBraIly38pQW51NGlfv7IXYv7pPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3RvaVhMZnlsQmJuVTBhVi1fc2hkaV91azhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lOWQ5Y2MtMjY2OC00MmZjLTgzMTUt NzUyNWQ0ZDQwOGI1LzEva0RKMlB6b1JqSDZpSlBOaTAyNVBLeEVoaS1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9lOWQ5Y2MtMjY2OC00MmZjLTgzMTUtNzUyNWQ0ZDQwOGI1 LzEvR3RvaVhMZnlsQmJuVTBhVi1fc2hkaV91azhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG1PjAMA0G CSqGSIb3DQEBCwUAA4IBAQCWAGcXAgWlaeKmZ1qCs04AtUb28OBAH/BVFs9nww1l +xtkMj6voluyGdnu4ho+qGpBW7XA/JPrmv55rcA/5QnfapFrHAmqys//4NICAuw4 IWUkqQJE3W7NFJG0GfPKN5GyFuj9ULrNOZXSbMD9ASfD+2Vnh/Ls/iUQ+rAq36kU V1kLiZrIJ01bA3rHr5Q61f4Lf53qeMcnXNHlnaXTKiBEdYnQLz/CwS8Y3Ftdm3Tx JiWmC4Ag7cfEemPGbCorWevaviodIyoN0RPmaVQZ8DOYueXW6lRQ+0lsiFPtkvUG tOL2fuV4uo0pEBzPQNJ2v3LEcmTGfZQRsotA0ckqc0xQ -----END CERTIFICATE-----Generated at Mon Jan 26 18:19:42 2026 by rpki-client