This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/KJ32RrCVAy4PyqYtI55Q1n1tyzU.roa File: KJ32RrCVAy4PyqYtI55Q1n1tyzU.roa (raw, json) Hash identifier: LCB31ML0gf7+olaDPAC46q6pMd69LDFTi6lr8UwROW4= Subject key identifier: 28:9D:F6:46:B0:95:03:2E:0F:CA:A6:2D:23:9E:50:D6:7D:6D:CB:35 Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f Certificate serial: 019B7B365F00E7BF67CA1C57204492E28682 Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/KJ32RrCVAy4PyqYtI55Q1n1tyzU.roa Signing time: Thu 01 Jan 2026 20:18:39 +0000 ROA not before: Thu 01 Jan 2026 20:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62739 IP address blocks: 185.32.193.0/24 maxlen: 24 185.32.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5f:00:e7:bf:67:ca:1c:57:20:44:92:e2:86:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f Validity Not Before: Jan 1 20:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=289df646b095032e0fcaa62d239e50d67d6dcb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f6:8f:47:7b:96:e6:eb:07:c7:f3:2e:08:f0: 88:5f:04:a2:2a:68:6a:0e:ca:a3:e7:62:b2:fa:48: a8:8a:09:13:fe:a9:56:97:97:04:3c:4a:6e:0d:97: c3:0b:a1:fd:84:94:f3:d1:c5:c9:26:9b:2a:86:71: 87:35:a2:75:57:36:4e:eb:60:b9:47:20:50:51:ac: 9b:55:7c:c3:85:18:29:21:43:37:d4:f4:27:56:03: 17:20:68:a0:d7:66:23:d2:3b:8f:bf:03:ba:46:5d: 03:1f:90:93:38:18:16:1c:24:48:9c:3a:3a:5b:85: 6d:68:b0:1c:13:1f:32:29:87:30:b4:27:bd:31:c1: ae:f6:e4:27:80:c6:bc:76:3b:c1:b0:8f:ab:55:40: b8:02:30:b2:8f:96:2f:41:18:e2:8b:2d:aa:fd:ab: 6f:3a:ae:e3:cf:ea:d6:ee:96:75:5e:ea:a2:a2:72: a8:b2:6e:ea:a8:ec:e8:78:f9:af:7c:1b:29:5d:77: 51:50:77:b1:e4:d7:0b:a1:86:50:55:30:70:62:9f: c2:f1:a8:8d:ae:e6:43:2c:b5:f4:d7:67:64:a9:f9: a7:f0:53:c0:b7:5f:22:d2:e3:33:30:7b:08:61:e7: 73:aa:7e:8a:69:c4:42:a4:70:28:ee:0b:db:83:d8: 44:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9D:F6:46:B0:95:03:2E:0F:CA:A6:2D:23:9E:50:D6:7D:6D:CB:35 X509v3 Authority Key Identifier: keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/KJ32RrCVAy4PyqYtI55Q1n1tyzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.193.0-185.32.194.255 Signature Algorithm: sha256WithRSAEncryption 47:24:64:c7:ef:8d:35:d2:6f:a8:d2:b7:c1:8b:ad:6f:39:0a: 66:97:74:d9:28:b6:ab:f9:4f:56:ae:1b:35:e9:db:47:ca:ea: 4b:d4:1a:71:f4:67:28:10:97:d3:9b:9c:66:3a:1e:5d:57:d0: aa:14:7d:6f:85:10:fd:9d:29:a5:30:1c:e8:83:d6:d8:55:bb: bc:64:c6:17:27:0b:9e:c7:b4:f6:13:28:e0:28:53:23:eb:18: 0a:f2:60:30:11:f6:3f:da:f0:b3:5f:42:81:12:aa:6f:19:46: bd:91:2a:85:de:a4:03:13:4c:02:a8:53:bd:22:7e:7f:a8:16: a3:46:14:ad:3d:ae:93:ce:4f:84:1f:a5:f9:69:c5:d9:55:89: f9:db:c9:1c:c3:6a:9e:33:7e:85:cd:b3:60:ad:9f:95:34:9b: c7:08:bd:7a:ca:23:0d:62:74:c2:7b:dd:4d:4b:f8:3d:e6:88: b0:4a:dc:96:87:93:43:6d:e4:14:bf:18:5f:16:1c:47:61:91: 36:80:f3:0e:82:f4:26:66:61:d0:b7:5d:c2:e3:6b:84:de:53: a7:84:51:87:8c:9d:a4:3f:30:b3:5e:9c:77:e1:38:c4:93:cf: da:29:16:82:63:c5:31:21:6e:82:ef:1f:af:91:19:98:d8:7c: 42:f1:2e:00 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7Nl8A579nyhxXIESS4oaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NmQ5YTk1YmFjZTE5Nzg1YzQwNjQ3NjYzZjMxZDkwNTYy NjFjMmYwHhcNMjYwMTAxMjAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODlkZjY0NmIwOTUwMzJlMGZjYWE2MmQyMzllNTBkNjdkNmRjYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/aPR3uW5usHx/MuCPCIXwSiKmhq Dsqj52Ky+kioigkT/qlWl5cEPEpuDZfDC6H9hJTz0cXJJpsqhnGHNaJ1VzZO62C5 RyBQUaybVXzDhRgpIUM31PQnVgMXIGig12Yj0juPvwO6Rl0DH5CTOBgWHCRInDo6 W4VtaLAcEx8yKYcwtCe9McGu9uQngMa8djvBsI+rVUC4AjCyj5YvQRjiiy2q/atv Oq7jz+rW7pZ1XuqionKosm7qqOzoePmvfBspXXdRUHex5NcLoYZQVTBwYp/C8aiN ruZDLLX012dkqfmn8FPAt18i0uMzMHsIYedzqn6KacRCpHAo7gvbg9hEiQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCid9kawlQMuD8qmLSOeUNZ9bcs1MB8GA1UdIwQY MBaAFDVtmpW6zhl4XEBkdmPzHZBWJhwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlcyYWxick9HWGhjUUdSMllfTWRrRlltSEM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kZDljOTAtMzFhOS00OTk1LTlkYTMt NGVmZGU2ZWIzMmQ0LzEvS0ozMlJyQ1ZBeTRQeXFZdEk1NVExbjF0eXpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kZDljOTAtMzFhOS00OTk1LTlkYTMtNGVmZGU2ZWIzMmQ0 LzEvTlcyYWxick9HWGhjUUdSMllfTWRrRlltSEM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5IMED BAC5IMIwDQYJKoZIhvcNAQELBQADggEBAEckZMfvjTXSb6jSt8GLrW85CmaXdNko tqv5T1auGzXp20fK6kvUGnH0ZygQl9ObnGY6Hl1X0KoUfW+FEP2dKaUwHOiD1thV u7xkxhcnC57HtPYTKOAoUyPrGAryYDAR9j/a8LNfQoESqm8ZRr2RKoXepAMTTAKo U70ifn+oFqNGFK09rpPOT4QfpflpxdlVifnbyRzDap4zfoXNs2Ctn5U0m8cIvXrK Iw1idMJ73U1L+D3miLBK3JaHk0Nt5BS/GF8WHEdhkTaA8w6C9CZmYdC3XcLja4Te U6eEUYeMnaQ/MLNenHfhOMSTz9opFoJjxTEhboLvH6+RGZjYfELxLgA= -----END CERTIFICATE-----Generated at Sat Jan 10 21:40:29 2026 by rpki-client