This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/KeZ7jbJ1X3Ug4_1QvX-4fZA-Rqw.roa File: KeZ7jbJ1X3Ug4_1QvX-4fZA-Rqw.roa (raw, json) Hash identifier: 96SqqD88uPLCa31Bhukv0msK/WlBJTNzYnyvevXhJAs= Subject key identifier: 29:E6:7B:8D:B2:75:5F:75:20:E3:FD:50:BD:7F:B8:7D:90:3E:46:AC Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F839FE76E8B633E2A067B82880F9E95 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/KeZ7jbJ1X3Ug4_1QvX-4fZA-Rqw.roa Signing time: Fri 02 Jan 2026 16:21:31 +0000 ROA not before: Fri 02 Jan 2026 16:21:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56627 IP address blocks: 37.230.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:9f:e7:6e:8b:63:3e:2a:06:7b:82:88:0f:9e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29e67b8db2755f7520e3fd50bd7fb87d903e46ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:f1:d5:c7:b6:b5:15:32:c3:8b:05:da:a3: 8c:63:fe:ad:18:2a:45:90:4e:77:69:4f:85:d5:5e: 5a:9f:50:1f:f9:63:2e:64:ea:b8:1c:34:cc:ad:e5: cc:79:e2:7e:82:2d:bb:f8:2a:d4:ce:86:b8:43:dd: 35:3c:9c:8e:90:c6:26:8a:d7:38:c6:8a:b5:2f:fe: 0c:45:75:ab:21:dd:9e:ef:f7:90:be:da:fa:86:76: 53:67:e2:36:a4:3c:1b:9d:62:f3:fa:22:32:39:00: c4:11:1f:28:87:9b:80:f5:08:fc:76:b9:e5:85:58: f3:ef:46:71:db:d9:83:18:4f:7e:87:b9:6b:dc:dd: 1c:1b:eb:3c:f8:40:6b:c5:bf:88:41:d0:4c:a4:1f: 18:84:2f:0e:17:af:88:37:c0:fd:76:d8:12:c0:be: 89:1d:97:62:80:f2:1f:b2:31:56:38:7e:51:78:f3: 4b:66:fa:46:29:6b:70:b1:08:75:23:e6:03:3b:73: 3f:9f:76:7e:85:36:43:51:91:7a:5e:ba:52:2c:22: b3:1d:09:e7:a0:3f:64:d0:7f:70:23:24:36:49:f6: 45:20:41:dd:51:d9:28:59:95:b2:a1:80:5b:bd:d8: 18:d4:00:7a:6d:c7:95:5d:6b:7f:00:24:78:71:ea: f7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E6:7B:8D:B2:75:5F:75:20:E3:FD:50:BD:7F:B8:7D:90:3E:46:AC X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/KeZ7jbJ1X3Ug4_1QvX-4fZA-Rqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.249.0/24 Signature Algorithm: sha256WithRSAEncryption 38:c5:dc:4f:c5:eb:fc:3f:fb:44:21:65:51:e4:98:29:eb:ec: 7b:95:90:11:17:fc:08:c9:9f:10:be:0f:04:86:b9:c9:2a:3b: ee:46:fb:4a:c2:96:fc:44:5d:34:fd:44:a4:9f:29:3d:f2:14: b0:e5:19:fa:7c:5b:42:37:57:25:78:95:0d:d2:62:bc:4e:d1: 71:83:e6:a2:f5:db:73:18:f9:54:d4:d0:b5:6b:e1:70:85:02: 38:29:db:8a:0f:1f:10:98:b4:99:15:28:c8:c7:02:ea:40:ea: 03:9b:4d:06:9c:ea:9f:f7:98:03:01:c6:3f:43:f1:4f:f0:ef: 31:68:2d:7b:09:47:93:6b:f0:e5:13:03:ac:89:41:ec:58:24: 7e:b9:ee:05:ec:15:7b:15:73:c6:0c:18:53:26:33:1b:23:f2: 5a:2e:cf:26:53:07:7a:a0:e4:f7:3e:62:e3:c1:df:e6:81:6b: 39:09:0a:0b:2c:7a:26:da:19:ab:11:a1:f5:d8:31:87:d2:c5: fd:af:ae:68:00:16:78:1f:57:b5:f7:0e:e9:6c:81:57:b7:a5: d1:19:08:eb:6f:0b:e4:66:3c:fe:eb:09:15:eb:6f:3c:5c:e4: 2c:1f:1b:c1:63:cc:f8:f3:e9:7d:d2:ce:0c:52:93:d5:6b:04: 2b:91:71:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g5/nbotjPioGe4KID56VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWU2N2I4ZGIyNzU1Zjc1MjBlM2ZkNTBiZDdmYjg3ZDkwM2U0NmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvbx1ce2tRUyw4sF2qOMY/6tGCpF kE53aU+F1V5an1Af+WMuZOq4HDTMreXMeeJ+gi27+CrUzoa4Q901PJyOkMYmitc4 xoq1L/4MRXWrId2e7/eQvtr6hnZTZ+I2pDwbnWLz+iIyOQDEER8oh5uA9Qj8drnl hVjz70Zx29mDGE9+h7lr3N0cG+s8+EBrxb+IQdBMpB8YhC8OF6+IN8D9dtgSwL6J HZdigPIfsjFWOH5RePNLZvpGKWtwsQh1I+YDO3M/n3Z+hTZDUZF6XrpSLCKzHQnn oD9k0H9wIyQ2SfZFIEHdUdkoWZWyoYBbvdgY1AB6bceVXWt/ACR4cer3gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCnme42ydV91IOP9UL1/uH2QPkasMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvS2VaN2piSjFYM1VnNF8xUXZYLTRmWkEtUnF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeb5MA0G CSqGSIb3DQEBCwUAA4IBAQA4xdxPxev8P/tEIWVR5Jgp6+x7lZARF/wIyZ8Qvg8E hrnJKjvuRvtKwpb8RF00/USknyk98hSw5Rn6fFtCN1cleJUN0mK8TtFxg+ai9dtz GPlU1NC1a+FwhQI4KduKDx8QmLSZFSjIxwLqQOoDm00GnOqf95gDAcY/Q/FP8O8x aC17CUeTa/DlEwOsiUHsWCR+ue4F7BV7FXPGDBhTJjMbI/JaLs8mUwd6oOT3PmLj wd/mgWs5CQoLLHom2hmrEaH12DGH0sX9r65oABZ4H1e19w7pbIFXt6XRGQjrbwvk Zjz+6wkV6288XOQsHxvBY8z48+l90s4MUpPVawQrkXGx -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:22 2026 by rpki-client