This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/kRCAFZBrRoONasIbXU7cwNRHK_w.roa File: kRCAFZBrRoONasIbXU7cwNRHK_w.roa (raw, json) Hash identifier: FRFbyFJqSQc0W6om6W1H1sQ3Wt2tS+CaPxjLXjaHs5w= Subject key identifier: 91:10:80:15:90:6B:46:83:8D:6A:C2:1B:5D:4E:DC:C0:D4:47:2B:FC Certificate issuer: /CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504 Certificate serial: 019B7E386C1EF3EADEAABDD60767E4840C6E Authority key identifier: B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/kRCAFZBrRoONasIbXU7cwNRHK_w.roa Signing time: Fri 02 Jan 2026 10:19:45 +0000 ROA not before: Fri 02 Jan 2026 10:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196822 IP address blocks: 188.116.64.0/18 maxlen: 18 2a09:4dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6c:1e:f3:ea:de:aa:bd:d6:07:67:e4:84:0c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504 Validity Not Before: Jan 2 10:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91108015906b46838d6ac21b5d4edcc0d4472bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:8e:6f:0c:89:14:fc:8a:1b:90:e4:c8:5d: c2:9d:af:38:4d:06:15:d5:75:e8:08:92:dd:18:a9: 85:30:6c:ec:c5:62:34:94:76:d7:35:ce:9a:1f:d3: eb:e7:17:70:18:22:24:b7:45:0e:20:f6:d6:08:61: 44:51:53:87:d9:09:00:e9:4b:5a:0e:d2:11:ab:b1: a5:6c:2e:1b:50:7d:ab:ab:68:df:fd:d2:af:36:56: be:91:3b:b2:8d:4d:37:98:8f:93:86:25:c7:cc:ab: 9f:4c:38:6e:bb:ef:de:b0:bf:1e:32:ae:92:71:d2: b1:c8:14:e5:bb:8b:e8:12:af:ed:8c:0c:3c:7f:46: 74:09:bf:54:76:0b:dc:02:fa:19:31:0e:dc:53:f3: 6c:a2:c7:49:ad:9e:e2:71:e5:b9:21:cc:5e:56:82: ed:71:95:ac:f5:ee:a9:d0:fc:02:5f:9a:d3:a9:bb: 51:d9:d2:db:90:17:a8:1b:c3:9b:54:ba:a4:2c:2d: 8e:39:44:0d:ca:b4:00:b1:45:a1:7c:43:3b:51:c1: c6:57:f7:c6:a3:06:b3:af:10:7e:2c:fc:7a:30:0e: 7d:65:c7:c7:fa:49:0c:75:ab:c4:e7:75:73:1d:d3: 52:f1:98:40:86:8e:d6:8b:9f:1e:f8:3b:d1:28:38: 55:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:10:80:15:90:6B:46:83:8D:6A:C2:1B:5D:4E:DC:C0:D4:47:2B:FC X509v3 Authority Key Identifier: keyid:B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/kRCAFZBrRoONasIbXU7cwNRHK_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.116.64.0/18 IPv6: 2a09:4dc0::/32 Signature Algorithm: sha256WithRSAEncryption b5:0e:23:27:5f:ae:90:0d:34:52:bb:53:38:79:c0:b4:b1:9b: 09:16:f7:45:b1:b6:c9:cf:4b:8a:fd:5a:63:ae:53:f5:04:8f: a0:84:1e:ed:f9:b2:ae:52:71:a2:26:7d:73:fc:e9:7f:b1:8e: 0f:b1:57:a2:7d:26:9b:73:1f:c7:0a:eb:2f:7a:ce:b4:85:41: a5:22:08:ed:3c:fd:e1:3a:9b:0a:c3:e2:94:f8:34:54:dc:80: 23:bc:d7:3d:03:ec:57:76:89:89:b2:ac:ed:41:2a:c4:9e:22: 38:75:0a:95:eb:be:0c:f5:87:84:bb:f6:0c:3f:34:b2:17:bf: c9:80:0a:16:e4:85:fe:cc:50:a8:6d:e4:e4:68:df:f2:95:4e: c1:dc:ff:ce:44:12:e3:21:6a:fc:e6:b5:d0:6c:b7:8c:9e:9f: 09:d3:8e:23:ea:c4:ca:1f:b3:55:83:9b:a0:a7:05:59:b1:7e: c3:e7:97:0d:26:42:5d:c3:fd:7e:3d:76:b5:dc:b2:bc:2f:af: 1b:96:1c:6f:0b:e7:09:53:9b:af:7b:f0:37:1f:4a:8a:8c:db: 07:59:d3:0b:59:cb:6e:c7:11:72:5c:76:45:3e:c6:f6:02:72: c4:de:05:b3:8b:6d:09:c9:d7:65:27:b8:fb:98:69:aa:6f:76: 63:67:ba:2a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OGwe8+reqr3WB2fkhAxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMmIxZjc2ZThjMmJhNDkyOGFjMjgwYjI3YWE4NGQ1OTY3 YTM1MDQwHhcNMjYwMTAyMTAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTEwODAxNTkwNmI0NjgzOGQ2YWMyMWI1ZDRlZGNjMGQ0NDcyYmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQeObwyJFPyKG5DkyF3Cna84TQYV 1XXoCJLdGKmFMGzsxWI0lHbXNc6aH9Pr5xdwGCIkt0UOIPbWCGFEUVOH2QkA6Uta DtIRq7GlbC4bUH2rq2jf/dKvNla+kTuyjU03mI+ThiXHzKufTDhuu+/esL8eMq6S cdKxyBTlu4voEq/tjAw8f0Z0Cb9UdgvcAvoZMQ7cU/NsosdJrZ7iceW5IcxeVoLt cZWs9e6p0PwCX5rTqbtR2dLbkBeoG8ObVLqkLC2OOUQNyrQAsUWhfEM7UcHGV/fG owazrxB+LPx6MA59ZcfH+kkMdavE53VzHdNS8ZhAho7Wi58e+DvRKDhVrwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJEQgBWQa0aDjWrCG11O3MDURyv8MB8GA1UdIwQY MBaAFLArH3bowrpJKKwoCyeqhNWWejUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NzZmR1akN1a2tvckNnTEo2cUUxWlo2TlFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wOGNkNDYtMTAxOS00ZjdkLTg2N2It Mjk3ZTAzMDY2ZjdkLzEva1JDQUZaQnJSb09OYXNJYlhVN2N3TlJIS193LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8wOGNkNDYtMTAxOS00ZjdkLTg2N2ItMjk3ZTAzMDY2Zjdk LzEvc0NzZmR1akN1a2tvckNnTEo2cUUxWlo2TlFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGvHRAMA0E AgACMAcDBQAqCU3AMA0GCSqGSIb3DQEBCwUAA4IBAQC1DiMnX66QDTRSu1M4ecC0 sZsJFvdFsbbJz0uK/VpjrlP1BI+ghB7t+bKuUnGiJn1z/Ol/sY4PsVeifSabcx/H Cusves60hUGlIgjtPP3hOpsKw+KU+DRU3IAjvNc9A+xXdomJsqztQSrEniI4dQqV 674M9YeEu/YMPzSyF7/JgAoW5IX+zFCobeTkaN/ylU7B3P/ORBLjIWr85rXQbLeM np8J044j6sTKH7NVg5ugpwVZsX7D55cNJkJdw/1+PXa13LK8L68blhxvC+cJU5uv e/A3H0qKjNsHWdMLWctuxxFyXHZFPsb2AnLE3gWzi20JyddlJ7j7mGmqb3ZjZ7oq -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:36 2026 by rpki-client