This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/1-kYVKomYqjL01cbaEPOlMsEWOVY.roa File: 1-kYVKomYqjL01cbaEPOlMsEWOVY.roa (raw, json) Hash identifier: oUQ10g8uHJDmhHl7WNNwDwZSnYMcTHr2vmmz1SCpm+8= Subject key identifier: FA:46:15:2A:89:98:AA:32:F4:D5:C6:DA:10:F3:A5:32:C1:16:39:56 Certificate issuer: /CN=20f81274f66bde89f12c243d09a9edc3e5b1e229 Certificate serial: 019B7B36D613A369ED46691195177C099728 Authority key identifier: 20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/1-kYVKomYqjL01cbaEPOlMsEWOVY.roa Signing time: Thu 01 Jan 2026 20:19:09 +0000 ROA not before: Thu 01 Jan 2026 20:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207568 IP address blocks: 2.57.222.0/23 maxlen: 23 2a09:d9c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d6:13:a3:69:ed:46:69:11:95:17:7c:09:97:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f81274f66bde89f12c243d09a9edc3e5b1e229 Validity Not Before: Jan 1 20:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa46152a8998aa32f4d5c6da10f3a532c1163956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:08:75:a6:da:94:fd:f1:f8:36:1c:14:f1:04: 12:94:2d:28:e4:d0:20:c6:7f:fa:f1:7d:39:89:ba: 9d:14:91:da:16:e7:ff:dc:d8:73:73:c7:07:15:1a: 8f:fd:10:7d:13:f2:8a:47:a6:fa:3f:03:19:5b:db: 0b:aa:ba:53:4e:b5:9a:03:9f:ee:57:e6:f0:dd:9a: 15:3d:9b:c6:0e:59:55:52:d0:61:c0:e3:d1:34:1e: ff:68:2f:81:63:b9:26:d4:f0:0a:64:4f:9d:38:d9: 6d:25:5b:91:fa:4d:c9:d9:07:51:5c:59:46:14:a7: d7:93:4f:eb:32:37:f5:c4:c2:ae:01:26:47:70:cb: cf:36:49:c3:e6:02:97:01:39:d0:ee:04:b2:1d:6e: 96:f4:7d:d3:c6:37:ca:8c:f6:8b:ef:90:65:2c:b2: 4d:d6:b6:6a:90:b6:3b:60:6e:72:10:98:3e:5b:f7: 0a:4c:f6:fc:69:a4:a4:b3:92:33:16:57:05:68:d9: 46:33:1b:2f:15:5c:36:cd:cf:26:16:7a:62:16:40: 0c:8b:34:1a:61:26:07:4c:c0:9e:06:d7:8d:3f:3a: 45:54:9d:1f:d8:0a:fa:40:24:8e:ff:cb:1b:e6:22: a3:ad:a4:b9:3b:c1:67:d2:0f:7b:6b:e3:38:85:c5: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:46:15:2A:89:98:AA:32:F4:D5:C6:DA:10:F3:A5:32:C1:16:39:56 X509v3 Authority Key Identifier: keyid:20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/1-kYVKomYqjL01cbaEPOlMsEWOVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.222.0/23 IPv6: 2a09:d9c0::/32 Signature Algorithm: sha256WithRSAEncryption 13:b5:29:c5:0d:ca:d8:a5:05:c6:63:d6:86:d9:9a:56:28:cd: c2:b7:4d:0e:96:ae:98:01:d6:16:95:10:58:d8:ad:cb:cd:17: 28:d5:3c:ef:f6:0b:40:b8:2a:26:77:02:25:77:f0:e4:06:6e: e4:be:75:8e:10:db:c6:9c:a3:1a:92:4d:b5:ad:1a:67:ed:72: ec:a7:86:56:e2:c9:ce:48:c2:69:47:21:7b:88:82:e3:a1:32: 0c:2b:c1:da:41:61:37:b0:fe:5c:25:09:ab:3a:82:3d:03:0e: 43:a8:ad:39:45:57:de:88:b8:c9:07:67:05:fd:fb:2f:fe:4c: f2:12:02:f4:f7:3d:6a:d1:e6:7d:e4:74:81:40:dd:61:ed:e5: 2d:cb:8c:f6:fd:9e:79:dc:1c:f1:82:23:da:d6:98:4d:47:19: ee:5a:3d:d0:3a:b1:ea:58:5a:45:81:d1:15:e6:be:08:d8:3d: 8e:ff:c0:17:a5:3e:fb:de:87:81:16:c4:bc:8c:db:7f:da:e3: c8:eb:a0:47:a6:45:bf:68:6b:ca:83:e9:c9:f8:88:a0:90:5d: 5d:66:5c:6d:6b:f0:30:a6:1f:67:55:00:d4:67:80:27:7c:62: bc:b8:d9:49:b4:87:1f:37:f2:d4:c6:cc:02:f9:cb:42:e2:be: 84:6d:19:40 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt7NtYTo2ntRmkRlRd8CZcoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZjgxMjc0ZjY2YmRlODlmMTJjMjQzZDA5YTllZGMzZTVi MWUyMjkwHhcNMjYwMTAxMjAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTQ2MTUyYTg5OThhYTMyZjRkNWM2ZGExMGYzYTUzMmMxMTYzOTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wh1ptqU/fH4NhwU8QQSlC0o5NAg xn/68X05ibqdFJHaFuf/3Nhzc8cHFRqP/RB9E/KKR6b6PwMZW9sLqrpTTrWaA5/u V+bw3ZoVPZvGDllVUtBhwOPRNB7/aC+BY7km1PAKZE+dONltJVuR+k3J2QdRXFlG FKfXk0/rMjf1xMKuASZHcMvPNknD5gKXATnQ7gSyHW6W9H3TxjfKjPaL75BlLLJN 1rZqkLY7YG5yEJg+W/cKTPb8aaSks5IzFlcFaNlGMxsvFVw2zc8mFnpiFkAMizQa YSYHTMCeBteNPzpFVJ0f2Ar6QCSO/8sb5iKjraS5O8Fn0g97a+M4hcX4NQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPpGFSqJmKoy9NXG2hDzpTLBFjlWMB8GA1UdIwQY MBaAFCD4EnT2a96J8SwkPQmp7cPlseIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zZWY5NmUtZjhhNi00ZjliLTliYzct ZmUyNmU4OTlkZWI4LzEvMS1rWVZLb21ZcWpMMDFjYmFFUE9sTXNFV09WWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWIvM2VmOTZlLWY4YTYtNGY5Yi05YmM3LWZlMjZlODk5ZGVi OC8xL0lQZ1NkUFpyM29ueExDUTlDYW50dy1XeDRpay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAQI53jAN BAIAAjAHAwUAKgnZwDANBgkqhkiG9w0BAQsFAAOCAQEAE7UpxQ3K2KUFxmPWhtma VijNwrdNDpaumAHWFpUQWNity80XKNU87/YLQLgqJncCJXfw5AZu5L51jhDbxpyj GpJNta0aZ+1y7KeGVuLJzkjCaUche4iC46EyDCvB2kFhN7D+XCUJqzqCPQMOQ6it OUVX3oi4yQdnBf37L/5M8hIC9Pc9atHmfeR0gUDdYe3lLcuM9v2eedwc8YIj2taY TUcZ7lo90Dqx6lhaRYHRFea+CNg9jv/AF6U++96HgRbEvIzbf9rjyOugR6ZFv2hr yoPpyfiIoJBdXWZcbWvwMKYfZ1UA1GeAJ3xivLjZSbSHHzfy1MbMAvnLQuK+hG0Z QA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:23 2026 by rpki-client