This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/kp3XcltFj2ImgK1gmThwB5Z5ALI.roa File: kp3XcltFj2ImgK1gmThwB5Z5ALI.roa (raw, json) Hash identifier: iZZ4tNwYuV01qlmFMVC72STH5TgwevyCIeA37xL2VKo= Subject key identifier: 92:9D:D7:72:5B:45:8F:62:26:80:AD:60:99:38:70:07:96:79:00:B2 Certificate issuer: /CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5 Certificate serial: 019B7A5A94AB129DA4F93DBC0E16C76F5AFA Authority key identifier: ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/kp3XcltFj2ImgK1gmThwB5Z5ALI.roa Signing time: Thu 01 Jan 2026 16:18:35 +0000 ROA not before: Thu 01 Jan 2026 16:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34798 IP address blocks: 193.19.120.0/23 maxlen: 32 193.22.104.0/23 maxlen: 32 2a0f:c640::/48 maxlen: 128 2a0f:c640:1::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:94:ab:12:9d:a4:f9:3d:bc:0e:16:c7:6f:5a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5 Validity Not Before: Jan 1 16:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=929dd7725b458f622680ad6099387007967900b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2d:1f:54:ee:bf:b4:8a:8f:64:77:fa:8c:21: 4a:c8:8f:cd:9b:bb:4d:d1:03:75:3f:f5:e0:1d:21: 62:78:a2:9b:c1:de:71:cd:0e:b6:3c:da:2f:02:d4: f0:fd:84:d0:e6:06:94:fc:c6:c7:9f:59:98:28:d6: 19:5d:dd:db:36:1e:93:c8:e4:c3:66:a1:0e:ea:88: 19:db:83:9e:1b:10:f7:2b:24:b5:55:39:1d:9e:91: 2e:7b:2a:cf:5e:b1:2b:03:37:ed:1d:8b:15:94:ec: f6:d8:66:2d:b8:9d:58:9b:14:a7:93:74:e8:bd:78: d3:40:89:73:ff:e4:11:22:94:82:cd:c8:be:e6:86: f7:0b:32:b2:fa:55:68:90:3b:4f:e7:99:de:53:95: 74:93:90:62:bf:a8:81:5c:b1:12:d5:3c:c4:9d:dd: 98:fc:75:da:20:0e:e3:74:0d:1b:fb:03:ff:e4:31: 26:e0:31:ef:80:eb:b0:97:f6:51:74:eb:68:09:94: b9:98:22:2c:60:56:be:9d:9b:20:ab:c7:99:37:0e: a4:8e:ee:89:08:ef:dd:05:fa:2d:b3:81:4f:f9:92: 16:73:a7:26:8d:92:fe:b2:e9:8f:15:34:0d:b0:e0: e4:47:f9:9a:8e:e5:3b:c9:e6:b4:34:65:29:9a:40: 09:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9D:D7:72:5B:45:8F:62:26:80:AD:60:99:38:70:07:96:79:00:B2 X509v3 Authority Key Identifier: keyid:ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/kp3XcltFj2ImgK1gmThwB5Z5ALI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.120.0/23 193.22.104.0/23 IPv6: 2a0f:c640::/47 Signature Algorithm: sha256WithRSAEncryption 7a:89:9a:97:a0:fa:7b:c7:ef:72:16:68:fe:dd:04:32:f6:54: 27:dd:e4:4f:51:68:97:a3:14:0d:71:38:a1:82:a4:bb:15:4c: 49:51:b9:f5:29:9f:4b:4b:7e:f5:eb:73:d5:54:d4:c9:2a:ec: 15:c8:a4:8e:7f:e2:d7:d2:5c:95:a9:6d:72:1b:79:ef:3d:86: 91:51:01:9e:ae:03:f4:a2:71:e7:08:16:87:6a:ea:50:8b:9b: 41:bc:0d:2f:62:fe:1f:5e:3e:4f:f8:a8:3e:34:bf:a7:ad:01: 46:0d:2b:96:41:3f:94:c0:3f:7f:b4:b3:4d:fb:1b:30:05:d4: fd:b6:27:6f:5b:1d:69:8c:22:f3:42:1f:08:a5:48:1d:c5:3f: 72:e0:36:45:92:08:1c:fb:4e:1f:0b:4c:04:7a:4b:f0:31:43: 9d:de:d3:19:0c:3b:5c:48:81:c8:11:98:7c:24:36:d5:ec:f9: c4:48:48:04:28:20:e2:6d:13:4b:f9:67:d2:12:56:90:5b:c2: 96:39:35:e6:72:80:eb:3c:d5:24:0a:79:7f:ce:c7:55:d0:4b: 28:d3:1f:d1:bc:2f:aa:a0:ac:7a:f4:57:0e:d1:b0:2f:1a:ec: b4:fb:f3:a8:ae:18:95:9d:58:eb:23:f3:10:5d:6f:48:37:1a: a3:1a:b3:9e -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6WpSrEp2k+T28DhbHb1r6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNDU3Zjk2OWMwZmVjMzViOTI2ZDBmNzJhNDdkZDQ0Yjhi MzAwZjUwHhcNMjYwMTAxMTYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjlkZDc3MjViNDU4ZjYyMjY4MGFkNjA5OTM4NzAwNzk2NzkwMGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi0fVO6/tIqPZHf6jCFKyI/Nm7tN 0QN1P/XgHSFieKKbwd5xzQ62PNovAtTw/YTQ5gaU/MbHn1mYKNYZXd3bNh6TyOTD ZqEO6ogZ24OeGxD3KyS1VTkdnpEueyrPXrErAzftHYsVlOz22GYtuJ1YmxSnk3To vXjTQIlz/+QRIpSCzci+5ob3CzKy+lVokDtP55neU5V0k5Biv6iBXLES1TzEnd2Y /HXaIA7jdA0b+wP/5DEm4DHvgOuwl/ZRdOtoCZS5mCIsYFa+nZsgq8eZNw6kju6J CO/dBfots4FP+ZIWc6cmjZL+sumPFTQNsODkR/majuU7yea0NGUpmkAJ5QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJKd13JbRY9iJoCtYJk4cAeWeQCyMB8GA1UdIwQY MBaAFO1Ff5acD+w1uSbQ9ypH3US4swD1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1VWX2xwd1A3RFc1SnREM0trZmRSTGl6QVBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85MjY4YmYtMjVlOS00YzM4LWJhZjct ZTQ3ZWJlZTJjMDIwLzEva3AzWGNsdEZqMkltZ0sxZ21UaHdCNVo1QUxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS85MjY4YmYtMjVlOS00YzM4LWJhZjctZTQ3ZWJlZTJjMDIw LzEvN1VWX2xwd1A3RFc1SnREM0trZmRSTGl6QVBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBwRN4AwQB wRZoMA8EAgACMAkDBwEqD8ZAAAAwDQYJKoZIhvcNAQELBQADggEBAHqJmpeg+nvH 73IWaP7dBDL2VCfd5E9RaJejFA1xOKGCpLsVTElRufUpn0tLfvXrc9VU1Mkq7BXI pI5/4tfSXJWpbXIbee89hpFRAZ6uA/SicecIFodq6lCLm0G8DS9i/h9ePk/4qD40 v6etAUYNK5ZBP5TAP3+0s037GzAF1P22J29bHWmMIvNCHwilSB3FP3LgNkWSCBz7 Th8LTAR6S/AxQ53e0xkMO1xIgcgRmHwkNtXs+cRISAQoIOJtE0v5Z9ISVpBbwpY5 NeZygOs81SQKeX/Ox1XQSyjTH9G8L6qgrHr0Vw7RsC8a7LT786iuGJWdWOsj8xBd b0g3GqMas54= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:29 2026 by rpki-client