This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/rKe-qU86sx7z_-wI2lykyZb70MI.roa File: rKe-qU86sx7z_-wI2lykyZb70MI.roa (raw, json) Hash identifier: VQ9NSMubDnrlXOxOJ6bt8ANdIsUd6R8dQJQbwjAypQo= Subject key identifier: AC:A7:BE:A9:4F:3A:B3:1E:F3:FF:EC:08:DA:5C:A4:C9:96:FB:D0:C2 Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1 Certificate serial: 019B7D5B0FD0DA139138597C78FF57500B58 Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/rKe-qU86sx7z_-wI2lykyZb70MI.roa Signing time: Fri 02 Jan 2026 06:17:58 +0000 ROA not before: Fri 02 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202614 IP address blocks: 193.238.45.0/24 maxlen: 24 193.238.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:0f:d0:da:13:91:38:59:7c:78:ff:57:50:0b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1 Validity Not Before: Jan 2 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aca7bea94f3ab31ef3ffec08da5ca4c996fbd0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:de:c5:9c:06:5e:a0:bc:66:06:f4:91:ab:9f: ad:f0:4b:e3:14:7a:f1:87:b1:ff:bf:8b:ed:59:96: f1:47:c0:08:fe:37:f8:55:43:8f:1e:ef:f6:34:02: 55:49:7e:16:bc:2c:d6:75:8c:bb:12:d7:23:39:91: 22:bb:8a:2d:ec:f8:36:d8:cd:44:e6:9e:9f:b2:35: 70:b9:23:12:ee:97:c3:41:b4:0d:1e:6e:6c:e2:96: f5:fa:3c:d3:33:d5:f7:df:5a:64:ea:f8:d7:5d:f6: 81:e7:18:44:5d:10:b8:5b:15:2e:16:2f:bb:e9:b8: c4:bb:2a:0d:08:c5:f3:6a:39:48:8d:78:a7:02:7b: e7:44:4c:67:ce:bd:b3:ef:46:dc:cc:8a:02:8b:b4: dd:f7:8e:2f:5a:8c:bf:51:53:f4:0a:a9:97:a8:28: 52:6a:8a:31:73:c8:d6:5f:48:80:72:a2:6d:98:8d: 79:8c:44:8a:ef:63:ab:4f:e6:e2:21:1e:6b:4e:a5: bc:46:6b:79:1a:f0:58:ac:25:7c:06:8a:f1:84:58: 69:c4:f0:d2:f7:35:36:ef:23:38:c6:ba:87:27:38: d5:44:30:21:d1:05:b5:19:13:37:af:db:5a:69:bb: 6d:c8:c1:f8:63:26:74:62:d1:88:f2:5e:f4:ae:c6: 4f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A7:BE:A9:4F:3A:B3:1E:F3:FF:EC:08:DA:5C:A4:C9:96:FB:D0:C2 X509v3 Authority Key Identifier: keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/rKe-qU86sx7z_-wI2lykyZb70MI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.238.45.0/24 193.238.47.0/24 Signature Algorithm: sha256WithRSAEncryption 74:e0:40:b5:66:4e:ca:84:68:aa:ef:de:be:65:92:d4:16:43: ab:96:33:d3:23:69:95:76:23:87:77:c0:f3:86:59:6a:76:94: 3b:0b:00:48:18:59:f7:d7:c1:4d:df:d2:7f:c4:fe:7b:b6:14: 11:1e:2a:2e:12:2d:d3:13:7d:fd:c3:49:a2:cc:b7:e4:4f:ec: 82:20:c5:13:27:1b:83:10:b1:e1:9b:68:02:b1:1b:87:fe:98: f4:05:33:04:21:9e:2a:04:74:09:84:04:23:2a:69:60:b8:75: 3f:25:1e:52:a2:e6:d5:54:20:dc:82:b6:70:1d:b9:22:f6:ef: 1d:f0:e2:4c:a9:d0:0f:9a:f4:20:72:d4:00:e8:2e:95:1f:e3: 0f:0c:1a:19:93:e2:fd:16:8f:19:4d:a6:b1:7e:b2:20:e7:50: 68:74:7f:84:7d:36:e9:10:32:56:09:f3:ed:f2:fd:74:fe:16: d5:22:2f:11:fb:c5:2c:bc:be:62:82:b0:1c:e7:c4:75:44:49: 9e:6f:1e:03:92:d0:9e:15:2f:e2:f8:e1:5f:a9:03:37:9a:fc: 2f:cf:08:5f:9e:38:01:d5:d2:98:75:b2:0d:23:b7:e9:78:a3: f8:23:10:e3:ed:71:01:69:f5:67:44:a2:48:3e:b4:d9:0f:ef: 4c:4e:34:f9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9Ww/Q2hOROFl8eP9XUAtYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTIxM2RmOTczMjk1NTZkNjA4YjE1MGYwM2M0ZWU3NWZi ZDk4YzEwHhcNMjYwMTAyMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2E3YmVhOTRmM2FiMzFlZjNmZmVjMDhkYTVjYTRjOTk2ZmJkMGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN7FnAZeoLxmBvSRq5+t8EvjFHrx h7H/v4vtWZbxR8AI/jf4VUOPHu/2NAJVSX4WvCzWdYy7EtcjOZEiu4ot7Pg22M1E 5p6fsjVwuSMS7pfDQbQNHm5s4pb1+jzTM9X331pk6vjXXfaB5xhEXRC4WxUuFi+7 6bjEuyoNCMXzajlIjXinAnvnRExnzr2z70bczIoCi7Td944vWoy/UVP0CqmXqChS aooxc8jWX0iAcqJtmI15jESK72OrT+biIR5rTqW8Rmt5GvBYrCV8BorxhFhpxPDS 9zU27yM4xrqHJzjVRDAh0QW1GRM3r9taabttyMH4YyZ0YtGI8l70rsZPfQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKynvqlPOrMe8//sCNpcpMmW+9DCMB8GA1UdIwQY MBaAFLhSE9+XMpVW1gixUPA8TudfvZjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZDgwOTgtN2ZlMC00MjJmLTkyZTkt MWZiMWU5Yzg2YjUzLzEvcktlLXFVODZzeDd6Xy13STJseWt5WmI3ME1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9kZDgwOTgtN2ZlMC00MjJmLTkyZTktMWZiMWU5Yzg2YjUz LzEvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwe4tAwQA we4vMA0GCSqGSIb3DQEBCwUAA4IBAQB04EC1Zk7KhGiq796+ZZLUFkOrljPTI2mV diOHd8DzhllqdpQ7CwBIGFn318FN39J/xP57thQRHiouEi3TE339w0mizLfkT+yC IMUTJxuDELHhm2gCsRuH/pj0BTMEIZ4qBHQJhAQjKmlguHU/JR5SoubVVCDcgrZw Hbki9u8d8OJMqdAPmvQgctQA6C6VH+MPDBoZk+L9Fo8ZTaaxfrIg51BodH+EfTbp EDJWCfPt8v10/hbVIi8R+8UsvL5igrAc58R1REmebx4DktCeFS/i+OFfqQM3mvwv zwhfnjgB1dKYdbINI7fpeKP4IxDj7XEBafVnRKJIPrTZD+9MTjT5 -----END CERTIFICATE-----Generated at Tue Jan 27 07:14:19 2026 by rpki-client