This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/ckvWEpZk8GRhPrKIFVzhYtX4HLo.roa File: ckvWEpZk8GRhPrKIFVzhYtX4HLo.roa (raw, json) Hash identifier: XvnymWdIgJUBdvk4Eput5qhCNQkwhBx2JHcRbIziQ24= Subject key identifier: 72:4B:D6:12:96:64:F0:64:61:3E:B2:88:15:5C:E1:62:D5:F8:1C:BA Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019B78A375AB6AD7254136ECC6698CE37E52 Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/ckvWEpZk8GRhPrKIFVzhYtX4HLo.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6220 IP address blocks: 83.111.3.0/24 maxlen: 24 83.111.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:75:ab:6a:d7:25:41:36:ec:c6:69:8c:e3:7e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=724bd6129664f064613eb288155ce162d5f81cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:f5:dd:53:1c:33:6a:4f:fe:f0:f1:ae:e1: 3b:ee:b1:90:3e:b1:2f:8d:f6:56:36:a7:dd:7b:e1: ae:97:5f:f5:8a:78:59:1c:b5:fb:dc:b6:b8:7b:6c: 0e:bd:d4:6c:8e:9a:d2:c6:8f:db:79:cd:2b:7d:70: f2:43:10:36:4a:53:88:f9:51:af:80:95:46:e0:44: 0e:d9:08:bb:e3:04:3c:4f:7e:06:22:d8:5d:8a:11: b6:bd:1d:a3:f8:d2:2f:5d:0a:a8:c9:a1:d4:71:74: d9:28:45:68:18:59:dc:12:73:fb:49:c6:db:87:54: 11:34:da:d1:74:12:7d:35:59:c3:5f:5c:0a:59:74: 9c:8c:bb:a7:0b:d3:27:e1:22:62:b4:65:5e:d3:4e: ef:9a:53:d8:30:f2:74:fb:c5:50:cb:6d:88:da:f9: 21:93:c0:c1:b9:2d:ec:0d:d7:99:6b:5f:b0:7f:ea: 23:06:bf:e8:82:97:e6:c3:70:cc:0d:51:86:71:c3: 38:23:4b:e5:4c:68:d2:50:4e:f1:0d:d1:f8:55:8e: 58:ee:f6:a5:e6:35:7f:82:d6:ef:65:b4:8a:7e:c4: 33:63:1b:96:bd:54:64:d6:9e:86:85:be:93:7e:97: a5:3d:e2:1c:f9:65:34:e7:e6:9b:f8:c3:de:a1:55: 5a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4B:D6:12:96:64:F0:64:61:3E:B2:88:15:5C:E1:62:D5:F8:1C:BA X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/ckvWEpZk8GRhPrKIFVzhYtX4HLo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.111.3.0-83.111.4.255 Signature Algorithm: sha256WithRSAEncryption 12:c4:09:6b:0d:d7:5b:df:68:c5:29:c1:08:90:55:71:f8:d0: aa:ac:f1:1d:6e:cf:b1:a4:bc:76:22:fa:7c:12:e0:b1:b6:ce: 75:5c:d5:63:87:cd:db:f4:b2:77:01:fb:70:17:4d:10:1b:43: ba:83:7b:e5:ff:99:ac:30:5d:6f:fb:b0:67:cb:ae:fd:cc:4e: 82:45:3f:99:00:10:73:bf:58:45:50:a4:58:11:28:5d:b3:99: da:f8:1a:61:30:d0:02:ee:45:83:28:5c:ae:67:ba:5e:18:ca: ad:de:bf:f3:a7:07:5e:8b:b0:1b:33:05:d6:9f:95:75:d0:a1: cb:1c:f7:e0:ea:58:7a:24:a7:eb:bd:b8:9b:a7:e0:43:29:62: 65:72:1a:6b:e2:2f:d3:a8:ee:e4:c9:8b:16:e2:0d:df:cd:75: eb:f6:6a:a5:41:cf:c1:f7:0f:b1:5e:63:c1:89:2b:08:a8:ed: c1:f7:59:ef:88:82:e1:2c:81:c2:bb:4f:bf:4f:97:d4:86:f4: 80:86:06:14:1a:a2:e7:ef:13:5a:fb:87:6f:9a:9e:3a:64:0d: 11:8e:dd:45:95:0e:cd:5a:28:4c:0c:12:c5:c8:d1:79:c3:fa: 3f:ce:a8:fd:54:d1:e7:fd:af:d2:48:61:5b:80:7e:8d:09:00: d9:64:27:ea -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4o3WratclQTbsxmmM435SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjRiZDYxMjk2NjRmMDY0NjEzZWIyODgxNTVjZTE2MmQ1ZjgxY2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuon13VMcM2pP/vDxruE77rGQPrEv jfZWNqfde+Gul1/1inhZHLX73La4e2wOvdRsjprSxo/bec0rfXDyQxA2SlOI+VGv gJVG4EQO2Qi74wQ8T34GIthdihG2vR2j+NIvXQqoyaHUcXTZKEVoGFncEnP7Scbb h1QRNNrRdBJ9NVnDX1wKWXScjLunC9Mn4SJitGVe007vmlPYMPJ0+8VQy22I2vkh k8DBuS3sDdeZa1+wf+ojBr/ogpfmw3DMDVGGccM4I0vlTGjSUE7xDdH4VY5Y7val 5jV/gtbvZbSKfsQzYxuWvVRk1p6Ghb6TfpelPeIc+WU05+ab+MPeoVVa+QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHJL1hKWZPBkYT6yiBVc4WLV+By6MB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvY2t2V0VwWms4R1JoUHJLSUZWemhZdFg0SExvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABTbwMD BABTbwQwDQYJKoZIhvcNAQELBQADggEBABLECWsN11vfaMUpwQiQVXH40Kqs8R1u z7GkvHYi+nwS4LG2znVc1WOHzdv0sncB+3AXTRAbQ7qDe+X/mawwXW/7sGfLrv3M ToJFP5kAEHO/WEVQpFgRKF2zmdr4GmEw0ALuRYMoXK5nul4Yyq3ev/OnB16LsBsz BdaflXXQocsc9+DqWHokp+u9uJun4EMpYmVyGmviL9Oo7uTJixbiDd/Ndev2aqVB z8H3D7FeY8GJKwio7cH3We+IguEsgcK7T79Pl9SG9ICGBhQaoufvE1r7h2+anjpk DRGO3UWVDs1aKEwMEsXI0XnD+j/OqP1U0ef9r9JIYVuAfo0JANlkJ+o= -----END CERTIFICATE-----Generated at Tue Jan 20 14:37:58 2026 by rpki-client