This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/K4LNuo7s7i0eTtGjSeFbNFyMYgE.roa File: K4LNuo7s7i0eTtGjSeFbNFyMYgE.roa (raw, json) Hash identifier: k3HXCNUgOFvzhNtn/d4j58a587hEBKkiYis+optmWpE= Subject key identifier: 2B:82:CD:BA:8E:EC:EE:2D:1E:4E:D1:A3:49:E1:5B:34:5C:8C:62:01 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E4283D830908D0E5D46D347B6E827 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/K4LNuo7s7i0eTtGjSeFbNFyMYgE.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212757 IP address blocks: 94.199.103.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:42:83:d8:30:90:8d:0e:5d:46:d3:47:b6:e8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b82cdba8eecee2d1e4ed1a349e15b345c8c6201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:84:7c:28:d2:b8:13:66:84:9c:c7:21:55: a9:eb:38:5e:b1:3b:6d:63:e3:aa:76:bb:13:e0:ff: ce:85:66:e9:e5:24:45:32:e5:aa:99:fa:fa:9b:59: 10:6d:85:03:98:c0:81:3a:8a:40:cc:62:b1:27:16: 8d:39:e4:8f:a5:4d:3c:7d:fa:63:2c:48:ed:9a:d5: 14:3e:59:c7:83:99:ba:0c:39:e5:ad:8c:22:d0:9a: 13:73:af:bc:c2:b8:fa:57:37:5b:7d:0d:a5:48:4e: 2e:f4:b6:95:23:e7:06:30:e9:67:59:5c:dc:ae:b1: 5d:12:de:7c:14:ba:0d:e4:dc:2b:7e:0d:fb:51:8b: 39:4c:52:2b:4e:9d:6c:40:d8:3c:ae:ee:73:2c:ae: ea:90:b8:cf:53:ee:0d:c2:1b:0e:c1:3e:5d:9f:39: 93:9d:d3:62:49:c1:6d:c0:b6:29:78:16:42:fa:ce: 0a:a3:c7:78:9a:02:aa:83:0d:2f:a9:dd:1e:3b:03: 4d:bf:86:a3:8a:bf:3b:2b:f3:93:f6:4e:97:42:8b: b4:73:ac:d7:1e:28:af:c2:56:37:d2:f9:c4:84:05: 85:f5:06:5f:d9:41:3f:e3:a3:91:60:54:dd:47:a8: 5b:10:48:57:f5:0e:bc:a2:01:69:e2:f6:c8:01:d5: 83:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:82:CD:BA:8E:EC:EE:2D:1E:4E:D1:A3:49:E1:5B:34:5C:8C:62:01 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/K4LNuo7s7i0eTtGjSeFbNFyMYgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.199.103.0/24 Signature Algorithm: sha256WithRSAEncryption 24:b8:c2:c8:50:02:e5:d7:62:52:ab:70:d9:d7:df:03:5e:56: b2:3f:e2:cc:d2:2b:f8:ec:c4:9e:07:6d:0d:25:84:7e:a9:4b: 42:af:9b:ad:fd:81:73:fb:14:c6:a1:ca:77:b5:9d:63:d2:c5: 65:9e:24:b3:a6:80:fe:9b:57:07:e6:ae:6c:dc:c3:aa:55:71: 0a:0d:65:cf:ad:22:a5:de:8a:ee:6b:8f:77:09:23:80:51:c7: 8a:a5:7f:15:80:2c:cf:05:38:0f:e2:49:22:6a:8a:ce:a5:49: 8c:c2:af:b1:af:38:49:18:2c:3b:e8:a5:b6:c9:3a:11:d8:b2: 59:71:d7:c8:2f:30:a8:b2:71:71:46:f9:b7:de:95:8c:44:54: 11:0b:1b:4b:6f:20:52:51:fb:60:94:f1:15:3a:69:26:a0:bd: ce:39:6d:f5:28:54:62:4c:77:19:50:c5:0c:eb:a1:27:3e:d7: 2f:03:cd:56:d8:92:14:c5:7f:c2:0c:2e:a0:e5:82:01:85:17: f7:24:0a:21:00:7e:40:d2:25:a6:7b:a2:8f:59:52:bb:0a:51: 81:62:67:69:7b:33:75:84:b7:de:66:db:3e:ea:b1:74:8f:d0: 91:bb:cb:b6:78:d2:87:3b:23:c7:1d:0b:f7:52:54:6c:9f:6d: 6e:df:fb:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fkKD2DCQjQ5dRtNHtugnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjgyY2RiYThlZWNlZTJkMWU0ZWQxYTM0OWUxNWIzNDVjOGM2MjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNWEfCjSuBNmhJzHIVWp6zhesTtt Y+OqdrsT4P/OhWbp5SRFMuWqmfr6m1kQbYUDmMCBOopAzGKxJxaNOeSPpU08ffpj LEjtmtUUPlnHg5m6DDnlrYwi0JoTc6+8wrj6VzdbfQ2lSE4u9LaVI+cGMOlnWVzc rrFdEt58FLoN5Nwrfg37UYs5TFIrTp1sQNg8ru5zLK7qkLjPU+4NwhsOwT5dnzmT ndNiScFtwLYpeBZC+s4Ko8d4mgKqgw0vqd0eOwNNv4ajir87K/OT9k6XQou0c6zX HiivwlY30vnEhAWF9QZf2UE/46ORYFTdR6hbEEhX9Q68ogFp4vbIAdWDIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCuCzbqO7O4tHk7Ro0nhWzRcjGIBMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvSzRMTnVvN3M3aTBlVHRHalNlRmJORnlNWWdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXsdnMA0G CSqGSIb3DQEBCwUAA4IBAQAkuMLIUALl12JSq3DZ198DXlayP+LM0iv47MSeB20N JYR+qUtCr5ut/YFz+xTGocp3tZ1j0sVlniSzpoD+m1cH5q5s3MOqVXEKDWXPrSKl 3orua493CSOAUceKpX8VgCzPBTgP4kkiaorOpUmMwq+xrzhJGCw76KW2yToR2LJZ cdfILzCosnFxRvm33pWMRFQRCxtLbyBSUftglPEVOmkmoL3OOW31KFRiTHcZUMUM 66EnPtcvA81W2JIUxX/CDC6g5YIBhRf3JAohAH5A0iWme6KPWVK7ClGBYmdpezN1 hLfeZts+6rF0j9CRu8u2eNKHOyPHHQv3UlRsn21u3/vA -----END CERTIFICATE-----Generated at Mon Jan 19 20:22:04 2026 by rpki-client