This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/KZXfDjuE-PvJiBRVRI6B8WHyooo.roa File: KZXfDjuE-PvJiBRVRI6B8WHyooo.roa (raw, json) Hash identifier: OMT2qoqGQOn2tlDcwwNCQQxD6FlT7A94fPogcjgcLoY= Subject key identifier: 29:95:DF:0E:3B:84:F8:FB:C9:88:14:55:44:8E:81:F1:61:F2:A2:8A Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019B7758989BE945E2D8F3F69843718CA40E Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/KZXfDjuE-PvJiBRVRI6B8WHyooo.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207083 IP address blocks: 193.142.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:98:9b:e9:45:e2:d8:f3:f6:98:43:71:8c:a4:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2995df0e3b84f8fbc9881455448e81f161f2a28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:08:01:d0:9c:86:7c:e6:cf:72:82:c2:fd: 5f:d5:38:0c:b4:5d:48:52:c7:ac:12:14:c7:f0:6a: 4e:cb:fa:bc:11:b5:1a:75:1d:62:26:a9:29:02:2c: c7:43:99:8f:63:f7:c9:09:77:e7:f9:8c:aa:d6:ca: 22:df:17:fa:94:4c:c8:c3:2e:f8:b6:1f:1e:25:5c: f3:bf:6e:34:5e:d7:f8:34:35:95:2f:3e:19:bf:d1: d8:ec:e1:2d:12:b3:49:8d:c8:27:86:61:42:9a:0f: a7:c9:bf:8b:a3:06:ff:dc:a0:a4:d0:98:fc:6d:73: cd:37:66:e5:0e:ff:49:86:ca:00:fc:89:9e:c6:9e: f9:26:c9:67:5b:7b:ef:fe:71:2c:9b:27:03:31:3d: 34:56:a5:46:f6:a9:63:fd:9f:66:59:6a:3d:2f:4e: 78:64:94:7e:5a:3a:3d:ff:b5:f3:e9:6c:b5:94:89: 3b:6d:38:a6:99:ed:ba:77:22:96:ad:28:b3:b4:8a: cd:bc:96:88:c5:d6:60:80:6e:b2:b0:be:c8:17:5c: 08:20:72:a3:f8:d0:0b:06:c4:2c:f4:6f:41:6e:69: 9d:84:b1:b4:e7:f2:e3:14:9f:19:4f:51:af:42:a2: 17:1d:3d:a9:fd:05:02:85:f3:c6:73:c4:ee:69:13: d9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:95:DF:0E:3B:84:F8:FB:C9:88:14:55:44:8E:81:F1:61:F2:A2:8A X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/KZXfDjuE-PvJiBRVRI6B8WHyooo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.146.0/24 Signature Algorithm: sha256WithRSAEncryption c1:28:c1:59:d1:37:72:94:33:52:f8:ef:76:b2:98:04:76:c6: f8:a8:03:dc:24:a6:9f:20:9a:74:75:f6:28:ea:6b:d0:97:e6: 97:c0:3c:58:60:60:26:79:f8:94:61:23:93:ef:24:db:46:9e: db:d2:7a:b5:ad:ff:55:71:5d:d2:2f:c1:23:da:bc:cf:05:f4: de:ec:d2:21:1a:46:a7:8e:e6:8e:4b:cd:97:8a:29:3b:06:31: 2c:fc:94:69:73:97:75:2b:ce:b8:be:8a:d4:f9:32:e6:13:a5: 86:8c:c5:d8:56:3a:44:ee:c5:5a:6d:65:7e:36:43:64:4e:ed: ad:e1:9e:0e:2d:d9:46:89:89:0b:07:04:71:8d:e7:17:36:5a: 8f:dd:8e:4b:c0:aa:c3:ef:59:f5:02:71:9f:4a:c9:e3:36:7c: 8c:29:a1:e5:6e:80:86:ec:59:3e:b7:df:f8:9c:5e:d3:57:5d: a1:a6:79:1a:2c:bf:58:9d:d9:f0:c7:9c:26:61:cb:3d:9d:05: 4c:f5:58:52:16:d5:65:4b:32:6a:f5:3a:df:ff:74:2c:a8:9e: 9b:af:48:c0:80:86:26:25:fd:b1:d9:a7:eb:76:a5:8f:72:29: 41:33:1d:35:4c:86:d9:5a:12:25:f4:cf:c9:f7:c5:45:84:84: a7:da:d0:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJib6UXi2PP2mENxjKQOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTk1ZGYwZTNiODRmOGZiYzk4ODE0NTU0NDhlODFmMTYxZjJhMjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupAIAdCchnzmz3KCwv1f1TgMtF1I UsesEhTH8GpOy/q8EbUadR1iJqkpAizHQ5mPY/fJCXfn+Yyq1soi3xf6lEzIwy74 th8eJVzzv240Xtf4NDWVLz4Zv9HY7OEtErNJjcgnhmFCmg+nyb+Lowb/3KCk0Jj8 bXPNN2blDv9JhsoA/Imexp75JslnW3vv/nEsmycDMT00VqVG9qlj/Z9mWWo9L054 ZJR+Wjo9/7Xz6Wy1lIk7bTimme26dyKWrSiztIrNvJaIxdZggG6ysL7IF1wIIHKj +NALBsQs9G9BbmmdhLG05/LjFJ8ZT1GvQqIXHT2p/QUChfPGc8TuaRPZ4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCmV3w47hPj7yYgUVUSOgfFh8qKKMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvS1pYZkRqdUUtUHZKaUJSVlJJNkI4V0h5b29vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY6SMA0G CSqGSIb3DQEBCwUAA4IBAQDBKMFZ0TdylDNS+O92spgEdsb4qAPcJKafIJp0dfYo 6mvQl+aXwDxYYGAmefiUYSOT7yTbRp7b0nq1rf9VcV3SL8Ej2rzPBfTe7NIhGkan juaOS82Xiik7BjEs/JRpc5d1K864vorU+TLmE6WGjMXYVjpE7sVabWV+NkNkTu2t 4Z4OLdlGiYkLBwRxjecXNlqP3Y5LwKrD71n1AnGfSsnjNnyMKaHlboCG7Fk+t9/4 nF7TV12hpnkaLL9Yndnwx5wmYcs9nQVM9VhSFtVlSzJq9Trf/3QsqJ6br0jAgIYm Jf2x2afrdqWPcilBMx01TIbZWhIl9M/J98VFhISn2tAx -----END CERTIFICATE-----Generated at Wed Jan 21 03:32:12 2026 by rpki-client