This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Ku0mjmxusSrMXfgvlmL_Kh5j0kI.roa File: Ku0mjmxusSrMXfgvlmL_Kh5j0kI.roa (raw, json) Hash identifier: zSTvo+JocKBb5Nbg9XIvSqJL+1z6V1E34a4hrkcK8t0= Subject key identifier: 2A:ED:26:8E:6C:6E:B1:2A:CC:5D:F8:2F:96:62:FF:2A:1E:63:D2:42 Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E3805BDEFCF1C3310C2DF0F2EA51499 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Ku0mjmxusSrMXfgvlmL_Kh5j0kI.roa Signing time: Fri 02 Jan 2026 10:19:19 +0000 ROA not before: Fri 02 Jan 2026 10:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41745 IP address blocks: 130.49.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:05:bd:ef:cf:1c:33:10:c2:df:0f:2e:a5:14:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2aed268e6c6eb12acc5df82f9662ff2a1e63d242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:44:7d:ff:8a:d2:f2:cc:6c:c5:50:93:fe:f6: 02:b0:6a:86:d8:28:a9:c9:07:34:1b:35:95:40:c9: ad:07:01:17:80:79:33:9a:9d:72:35:12:97:0f:e9: ea:4d:27:03:63:77:c9:13:93:95:3e:ee:3a:ce:89: 84:cb:30:9a:c5:f2:26:3b:5e:5e:da:12:78:fb:58: 26:bc:00:a7:24:38:f6:b9:3b:f8:02:e4:29:d1:c1: 49:92:19:5c:e2:4c:f5:81:de:46:94:49:fc:29:ff: 95:91:9e:df:d6:f9:33:03:a0:cb:a8:00:73:70:9e: 46:a3:38:29:66:6f:58:44:6c:8f:4c:3a:4e:72:07: 95:86:65:92:67:69:dd:84:4a:95:33:36:29:d2:f3: 4c:b0:2a:c8:55:58:dc:07:de:8c:8f:9f:6e:83:c1: 79:26:19:2e:da:68:db:c2:98:4a:3b:89:29:2e:26: c2:ed:e3:68:d5:24:46:89:9d:4a:73:64:67:27:ac: e6:fc:5f:9a:b4:5d:c6:ee:17:0b:fb:a8:e3:df:6c: 23:08:40:41:c2:32:5c:f5:4b:5a:31:3c:70:3d:8b: 1d:ac:0c:4e:54:ff:da:ea:ef:9f:eb:29:4d:4d:56: 76:d1:8f:2c:ce:ff:7d:cc:79:cf:e3:93:9a:e9:b4: 12:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:ED:26:8E:6C:6E:B1:2A:CC:5D:F8:2F:96:62:FF:2A:1E:63:D2:42 X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Ku0mjmxusSrMXfgvlmL_Kh5j0kI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.49.176.0/22 Signature Algorithm: sha256WithRSAEncryption 31:58:ee:af:3e:cf:c2:bc:f9:c3:9f:06:b8:80:44:3a:94:63: 80:d5:02:79:2c:69:80:11:45:ef:83:72:1f:28:70:9c:1c:33: b4:19:6e:ff:a5:32:02:0d:11:31:0b:04:db:50:5e:3b:78:24: 76:4d:b8:60:58:8f:75:42:c6:ca:01:c3:29:1e:3c:6b:1e:9e: 84:82:8c:d0:46:44:9b:fa:ea:b4:a3:4b:6b:8e:8b:e0:34:5c: 6c:ac:67:62:9d:85:4e:39:f3:90:f0:96:e0:99:08:68:70:fc: ed:46:8f:59:ec:32:bd:7d:65:58:50:84:0c:01:06:0e:ab:0c: 56:0d:77:f6:80:2a:fd:b2:56:91:ca:8e:71:e2:2a:d2:42:85: a7:69:f8:9d:9c:f1:f4:49:f8:e0:cb:5d:8e:eb:e9:82:1f:09: c4:75:41:2f:db:70:1c:fd:5b:d2:90:41:19:c5:0a:de:9a:fe: 6e:c0:03:49:11:22:30:31:cb:b1:c1:9a:f3:2b:fd:3e:2f:10: 45:0a:19:ec:2b:ab:0b:2e:4f:35:b4:ec:d1:9d:53:b3:11:7e: 00:d7:3d:7b:52:6b:95:4c:8a:4c:62:87:b7:08:11:5a:30:9c: 3f:13:78:2b:78:d9:aa:90:21:dd:39:33:16:8e:38:c2:7d:70: 49:64:a3:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OAW9788cMxDC3w8upRSZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWVkMjY4ZTZjNmViMTJhY2M1ZGY4MmY5NjYyZmYyYTFlNjNkMjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokR9/4rS8sxsxVCT/vYCsGqG2Cip yQc0GzWVQMmtBwEXgHkzmp1yNRKXD+nqTScDY3fJE5OVPu46zomEyzCaxfImO15e 2hJ4+1gmvACnJDj2uTv4AuQp0cFJkhlc4kz1gd5GlEn8Kf+VkZ7f1vkzA6DLqABz cJ5GozgpZm9YRGyPTDpOcgeVhmWSZ2ndhEqVMzYp0vNMsCrIVVjcB96Mj59ug8F5 Jhku2mjbwphKO4kpLibC7eNo1SRGiZ1Kc2RnJ6zm/F+atF3G7hcL+6jj32wjCEBB wjJc9UtaMTxwPYsdrAxOVP/a6u+f6ylNTVZ20Y8szv99zHnP45Oa6bQS3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCrtJo5sbrEqzF34L5Zi/yoeY9JCMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvS3UwbWpteHVzU3JNWGZndmxtTF9LaDVqMGtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgjGwMA0G CSqGSIb3DQEBCwUAA4IBAQAxWO6vPs/CvPnDnwa4gEQ6lGOA1QJ5LGmAEUXvg3If KHCcHDO0GW7/pTICDRExCwTbUF47eCR2TbhgWI91QsbKAcMpHjxrHp6EgozQRkSb +uq0o0trjovgNFxsrGdinYVOOfOQ8JbgmQhocPztRo9Z7DK9fWVYUIQMAQYOqwxW DXf2gCr9slaRyo5x4irSQoWnafidnPH0Sfjgy12O6+mCHwnEdUEv23Ac/VvSkEEZ xQremv5uwANJESIwMcuxwZrzK/0+LxBFChnsK6sLLk81tOzRnVOzEX4A1z17UmuV TIpMYoe3CBFaMJw/E3greNmqkCHdOTMWjjjCfXBJZKOi -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:17 2026 by rpki-client