This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/KspZGEs5E9kBto-BDRNBpwgMozk.roa File: KspZGEs5E9kBto-BDRNBpwgMozk.roa (raw, json) Hash identifier: fEFWOKz8D3otbrIF7eDSpQJCGfc9dNpOBoympwBaaIo= Subject key identifier: 2A:CA:59:18:4B:39:13:D9:01:B6:8F:81:0D:13:41:A7:08:0C:A3:39 Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7 Certificate serial: 019B7D5AB4F8311F8B9D710D36C87E984683 Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/KspZGEs5E9kBto-BDRNBpwgMozk.roa Signing time: Fri 02 Jan 2026 06:17:35 +0000 ROA not before: Fri 02 Jan 2026 06:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20649 IP address blocks: 46.36.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:b4:f8:31:1f:8b:9d:71:0d:36:c8:7e:98:46:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7 Validity Not Before: Jan 2 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2aca59184b3913d901b68f810d1341a7080ca339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:82:df:24:c1:ed:7b:85:1f:3f:9d:66:6f:87: e0:03:0f:09:16:18:c3:2a:b4:25:91:4a:f6:e6:f8: 6d:a9:56:bd:18:f8:07:49:69:95:e1:73:69:48:a1: ae:41:cd:b9:56:9b:7d:0a:cd:5f:89:97:a5:aa:94: fe:36:fb:44:e5:83:1a:4e:b0:91:20:05:ae:af:04: 3d:df:30:99:82:e7:9f:bc:1f:c6:55:cf:22:fd:65: e1:5a:89:da:2b:64:b9:ee:4b:1a:ba:01:dc:96:5e: 1c:74:47:a1:d7:5e:62:16:ea:17:f5:27:68:19:da: b3:f4:9b:3f:73:e9:d9:b9:58:2e:c3:99:5d:ea:a0: 75:19:b2:9e:8d:25:61:0f:57:42:46:ba:f1:ea:bc: 93:2a:7b:ad:8e:01:2e:ca:e2:94:46:94:45:b8:f9: 29:11:60:22:17:95:c1:20:4b:8a:19:f2:0e:e6:ef: d3:0e:04:1a:c9:2f:77:79:11:46:b1:69:85:9f:18: 1d:73:3d:e5:20:c2:ee:95:1b:c9:8f:20:0c:39:c2: 43:81:4f:9c:d7:d1:ea:ae:09:01:5b:1b:08:de:85: 5a:ce:44:00:07:7f:b6:bc:ab:75:82:60:8a:f2:29: 91:db:bf:e7:11:31:1d:93:07:9d:d7:5f:79:fe:8f: 14:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CA:59:18:4B:39:13:D9:01:B6:8F:81:0D:13:41:A7:08:0C:A3:39 X509v3 Authority Key Identifier: keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/KspZGEs5E9kBto-BDRNBpwgMozk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.200.0/24 Signature Algorithm: sha256WithRSAEncryption 47:df:6c:cb:d0:56:51:7c:3c:71:74:53:bf:0b:46:ee:c2:71: 78:83:31:6e:e7:1c:6c:26:08:e3:2a:36:9f:54:f6:a5:66:33: ed:d7:55:e1:26:c5:c6:1b:31:21:f1:08:fe:ee:41:42:c3:f7: 5b:15:6d:b8:dd:17:3c:1b:a4:64:e4:2d:a2:4c:dc:57:93:21: 7c:62:f4:ce:04:8c:a9:39:6b:d6:a0:8a:86:42:e0:80:3a:2a: 2e:32:2a:f2:85:74:95:3d:f1:45:59:e0:18:d6:af:1f:64:ad: 8d:74:f2:d9:72:1d:14:39:c8:dd:b5:3d:9c:79:34:f7:02:ab: ca:9b:e1:e1:3d:23:71:b3:29:b6:13:dc:fb:2a:c1:18:d3:1a: d9:9b:14:af:34:31:c5:75:fa:cc:be:0c:7a:80:e7:6c:0a:fa: 53:46:f1:26:79:e0:f1:e3:d2:e9:70:0b:9f:13:2f:3c:7c:77: 20:60:21:8b:8d:b6:c9:f5:fb:d6:b5:0c:50:53:c4:94:8c:3c: 78:6c:8d:c5:b5:9f:49:19:91:2a:aa:a5:7c:76:a2:52:02:6f: 26:8f:cf:cb:81:8c:57:2c:0f:74:65:18:84:d9:21:d3:5e:7a: 31:27:b5:79:79:83:ac:02:1a:bd:19:a8:b1:80:11:a9:a2:bd: 9d:6c:62:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WrT4MR+LnXENNsh+mEaDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMTU4YTBkYTAzMjY2ZGYxNDRjODlhN2I2ZTM1YTc2MWM0 OTk4ZjcwHhcNMjYwMTAyMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWNhNTkxODRiMzkxM2Q5MDFiNjhmODEwZDEzNDFhNzA4MGNhMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoLfJMHte4UfP51mb4fgAw8JFhjD KrQlkUr25vhtqVa9GPgHSWmV4XNpSKGuQc25Vpt9Cs1fiZelqpT+NvtE5YMaTrCR IAWurwQ93zCZguefvB/GVc8i/WXhWonaK2S57ksaugHcll4cdEeh115iFuoX9Sdo Gdqz9Js/c+nZuVguw5ld6qB1GbKejSVhD1dCRrrx6ryTKnutjgEuyuKURpRFuPkp EWAiF5XBIEuKGfIO5u/TDgQayS93eRFGsWmFnxgdcz3lIMLulRvJjyAMOcJDgU+c 19HqrgkBWxsI3oVazkQAB3+2vKt1gmCK8imR27/nETEdkwed1195/o8UrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCrKWRhLORPZAbaPgQ0TQacIDKM5MB8GA1UdIwQY MBaAFN0Vig2gMmbfFEyJp7bjWnYcSZj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAt ZThmMjBhYWRkZTk5LzEvS3NwWkdFczVFOWtCdG8tQkRSTkJwd2dNb3prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAtZThmMjBhYWRkZTk5 LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiTIMA0G CSqGSIb3DQEBCwUAA4IBAQBH32zL0FZRfDxxdFO/C0buwnF4gzFu5xxsJgjjKjaf VPalZjPt11XhJsXGGzEh8Qj+7kFCw/dbFW243Rc8G6Rk5C2iTNxXkyF8YvTOBIyp OWvWoIqGQuCAOiouMiryhXSVPfFFWeAY1q8fZK2NdPLZch0UOcjdtT2ceTT3AqvK m+HhPSNxsym2E9z7KsEY0xrZmxSvNDHFdfrMvgx6gOdsCvpTRvEmeeDx49LpcAuf Ey88fHcgYCGLjbbJ9fvWtQxQU8SUjDx4bI3FtZ9JGZEqqqV8dqJSAm8mj8/LgYxX LA90ZRiE2SHTXnoxJ7V5eYOsAhq9GaixgBGpor2dbGJ3 -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:20 2026 by rpki-client