This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/kN3CKGYk23jQrOwQ6USFJSSUGSo.roa File: kN3CKGYk23jQrOwQ6USFJSSUGSo.roa (raw, json) Hash identifier: uwQr4Amla+dPIAoyBEwo7M2r1NunJ5/9MN/5rJVR5IM= Subject key identifier: 90:DD:C2:28:66:24:DB:78:D0:AC:EC:10:E9:44:85:25:24:94:19:2A Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A324143ECCDDA65A3E4A3D29ED9535 Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/kN3CKGYk23jQrOwQ6USFJSSUGSo.roa Signing time: Thu 01 Jan 2026 08:18:36 +0000 ROA not before: Thu 01 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142064 IP address blocks: 109.205.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:24:14:3e:cc:dd:a6:5a:3e:4a:3d:29:ed:95:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90ddc2286624db78d0acec10e94485252494192a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:50:52:ba:8b:46:d7:ef:ea:83:8d:23:90:6b: ff:18:1d:db:0b:ef:66:be:84:10:0f:f6:7f:0e:ca: e1:b3:4f:33:9a:6c:e1:ce:30:72:03:e5:75:82:48: 1a:ba:b6:ff:00:35:85:cc:64:fb:27:b9:f3:d1:99: 82:61:c6:cd:0b:16:53:9f:1e:34:6c:a6:c8:54:0d: 5a:92:cd:11:c1:8b:ac:e4:24:60:f2:e1:ca:75:69: 38:14:e4:35:9c:73:2c:20:f3:1f:ff:7e:26:ae:f6: 1d:00:80:10:cb:38:34:a1:16:80:00:ab:de:78:46: 60:d7:aa:23:42:5b:26:d4:43:fa:da:2f:94:65:ce: d3:92:de:b8:46:1f:75:da:49:de:84:86:5d:2f:78: ed:8d:9c:cd:df:ea:47:32:c2:47:80:a5:97:1d:6d: d6:d8:1a:86:a8:05:8a:3e:69:3d:cd:12:54:8c:df: 11:c1:66:c3:8a:08:dc:aa:9d:32:33:42:92:22:44: 74:45:14:f7:a6:33:89:34:71:c0:7e:a1:20:31:bb: a3:21:9d:13:9b:82:2f:21:49:de:ff:37:9f:ac:4d: 7e:8f:7d:c7:44:8e:cd:8e:fa:6f:84:2c:8a:60:9d: ac:77:13:a8:89:7e:e2:15:75:46:3e:63:58:b4:6d: e6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DD:C2:28:66:24:DB:78:D0:AC:EC:10:E9:44:85:25:24:94:19:2A X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/kN3CKGYk23jQrOwQ6USFJSSUGSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 Signature Algorithm: sha256WithRSAEncryption 90:82:f1:d0:0d:2d:53:56:f0:1b:21:fa:16:a1:54:9d:b2:46: 8b:6c:b7:db:66:26:14:fc:f8:77:27:c0:ac:6a:ae:1b:27:a1: 4f:22:e8:b7:c2:fa:17:45:3b:29:de:3b:d3:66:83:fb:08:91: b6:c9:61:4f:7e:1a:cc:77:02:c5:fe:7e:5d:09:c5:b2:58:b3: 35:dc:94:87:bd:4c:5d:12:56:f8:28:c6:82:9e:bc:85:9c:bd: 49:17:7e:5a:87:e8:29:bd:45:87:7f:4a:66:99:5b:ad:f4:32: 8e:3d:b5:31:21:ad:e5:76:5a:1a:1b:f0:b1:64:db:da:70:ed: 39:3f:b0:34:e6:a0:b9:8e:75:90:8e:a8:ba:f0:23:34:81:16: e2:eb:d8:5e:af:b6:a0:0a:7d:d9:a2:17:ff:c8:44:d2:d4:1d: 0c:71:d9:d1:a8:08:ac:a4:78:2d:57:b0:9b:03:be:43:a4:a9: 8c:9f:c9:00:50:c7:a7:06:76:b4:69:cc:00:fc:20:45:30:43: b7:64:f0:04:7e:25:fc:16:0a:fa:ed:1a:ea:6f:32:3c:75:20: 65:1c:3e:bc:1f:91:e3:8b:91:1e:14:ca:eb:b7:6a:ed:70:c6: cb:5a:be:9e:1c:9b:26:22:78:b1:ae:04:8d:26:68:a7:a1:7b: da:b9:7d:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oyQUPszdplo+Sj0p7ZU1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGRkYzIyODY2MjRkYjc4ZDBhY2VjMTBlOTQ0ODUyNTI0OTQxOTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FBSuotG1+/qg40jkGv/GB3bC+9m voQQD/Z/Dsrhs08zmmzhzjByA+V1gkgaurb/ADWFzGT7J7nz0ZmCYcbNCxZTnx40 bKbIVA1aks0RwYus5CRg8uHKdWk4FOQ1nHMsIPMf/34mrvYdAIAQyzg0oRaAAKve eEZg16ojQlsm1EP62i+UZc7Tkt64Rh912knehIZdL3jtjZzN3+pHMsJHgKWXHW3W 2BqGqAWKPmk9zRJUjN8RwWbDigjcqp0yM0KSIkR0RRT3pjOJNHHAfqEgMbujIZ0T m4IvIUne/zefrE1+j33HRI7NjvpvhCyKYJ2sdxOoiX7iFXVGPmNYtG3mQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJDdwihmJNt40KzsEOlEhSUklBkqMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEva04zQ0tHWWsyM2pRck93UTZVU0ZKU1NVR1NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc3BMA0G CSqGSIb3DQEBCwUAA4IBAQCQgvHQDS1TVvAbIfoWoVSdskaLbLfbZiYU/Ph3J8Cs aq4bJ6FPIui3wvoXRTsp3jvTZoP7CJG2yWFPfhrMdwLF/n5dCcWyWLM13JSHvUxd Elb4KMaCnryFnL1JF35ah+gpvUWHf0pmmVut9DKOPbUxIa3ldloaG/CxZNvacO05 P7A05qC5jnWQjqi68CM0gRbi69her7agCn3Zohf/yETS1B0McdnRqAispHgtV7Cb A75DpKmMn8kAUMenBna0acwA/CBFMEO3ZPAEfiX8Fgr67RrqbzI8dSBlHD68H5Hj i5EeFMrrt2rtcMbLWr6eHJsmInixrgSNJminoXvauX2V -----END CERTIFICATE-----Generated at Mon Jan 19 14:39:47 2026 by rpki-client