This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/k71425zZrgvZnNmix7lRrfFGz8M.roa File: k71425zZrgvZnNmix7lRrfFGz8M.roa (raw, json) Hash identifier: PiD2EpNiloJo/j8uv2nAjNLT1tlEQH/8b4eKQtnzMqI= Subject key identifier: 93:BD:78:DB:9C:D9:AE:0B:D9:9C:D9:A2:C7:B9:51:AD:F1:46:CF:C3 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 019B7D5C917C46AA9E9AD47206858E49B0C2 Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/k71425zZrgvZnNmix7lRrfFGz8M.roa Signing time: Fri 02 Jan 2026 06:19:37 +0000 ROA not before: Fri 02 Jan 2026 06:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207240 IP address blocks: 171.25.177.0/24 maxlen: 24 193.104.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:91:7c:46:aa:9e:9a:d4:72:06:85:8e:49:b0:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Jan 2 06:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93bd78db9cd9ae0bd99cd9a2c7b951adf146cfc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:3b:dc:7e:93:a8:09:b1:7c:8b:dc:c8:a4: 6f:1b:5c:33:c8:6b:13:6f:7f:c6:07:16:c8:e4:84: 58:dc:f4:9c:cd:15:42:fe:a6:ec:4d:eb:7c:fd:2e: 27:12:ea:12:54:90:ef:1d:22:88:b9:b7:36:6e:88: 5c:ea:bf:9b:2f:df:a3:e0:f9:46:04:0e:44:93:6c: d8:73:0e:55:55:55:87:c2:3b:87:45:4c:de:62:75: 97:51:60:cd:00:8d:50:8b:29:10:29:37:02:30:56: 5a:22:e8:89:65:6b:d8:08:df:5d:1f:b3:18:af:58: 90:30:66:b9:c3:35:b2:ef:4a:7b:63:c1:5c:4f:0d: 39:1b:d9:60:3e:88:2b:cd:33:15:c8:b9:ae:73:3c: 2d:e6:7b:1f:68:d0:7c:a5:ec:e4:b9:52:37:4b:c4: c7:be:eb:d2:9e:18:44:c2:57:11:15:fc:11:cb:ea: 8d:3b:6a:32:2d:39:c2:e4:5c:54:40:27:41:22:0d: 94:b1:63:d9:55:ef:85:41:46:d7:24:3b:09:2e:76: 49:99:fd:ce:be:d8:99:28:89:f8:27:67:97:06:9d: 26:28:fa:bd:94:86:a1:44:16:9f:05:fb:1e:ef:1c: c7:4e:d0:07:e5:12:33:18:5f:91:c3:fe:73:2d:d2: 2c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BD:78:DB:9C:D9:AE:0B:D9:9C:D9:A2:C7:B9:51:AD:F1:46:CF:C3 X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/k71425zZrgvZnNmix7lRrfFGz8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.25.177.0/24 193.104.64.0/24 Signature Algorithm: sha256WithRSAEncryption 60:9b:19:91:97:70:a3:46:6f:ec:6b:42:72:68:62:e7:dc:08: be:53:c8:38:ba:81:73:cb:a8:e8:9c:e4:ad:5e:36:d6:02:0c: 73:28:ca:b1:4f:3f:76:ef:16:6f:61:7f:73:f7:63:e3:ff:09: 63:51:a4:80:49:30:91:fa:15:63:4f:55:61:dd:36:fc:e5:25: 7b:a2:c2:3f:e9:5c:8d:72:a5:04:6a:26:40:b6:9d:ef:68:6d: f0:ec:c4:cc:af:45:16:c7:ce:56:ba:30:65:be:46:ce:3d:89: 02:2a:bd:49:ca:e2:ab:cf:e7:c2:a7:2f:63:c9:6a:3d:ba:44: c8:40:b6:de:84:c9:10:8e:29:e7:a7:87:93:72:17:ae:15:db: ff:9f:4f:c2:42:34:29:ad:17:7e:69:67:20:01:f4:51:a2:2e: 69:db:4a:fa:d8:48:5e:12:62:aa:32:a2:28:90:27:f7:ed:46: fe:e8:b1:00:99:e6:7d:de:d5:2a:2c:c6:e1:ce:b5:0d:85:03: 82:93:f7:fa:70:f2:26:71:f7:2b:31:c3:b7:a4:c6:5d:42:ae: a5:5b:96:d2:2d:25:95:2c:a8:e4:e6:80:19:56:5b:7a:a1:15: d5:9e:09:a7:30:d5:8a:33:3b:fa:b0:ae:01:4e:ad:1c:a7:d9: a9:5c:93:58 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XJF8RqqemtRyBoWOSbDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjYwMTAyMDYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2JkNzhkYjljZDlhZTBiZDk5Y2Q5YTJjN2I5NTFhZGYxNDZjZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviQ73H6TqAmxfIvcyKRvG1wzyGsT b3/GBxbI5IRY3PSczRVC/qbsTet8/S4nEuoSVJDvHSKIubc2bohc6r+bL9+j4PlG BA5Ek2zYcw5VVVWHwjuHRUzeYnWXUWDNAI1QiykQKTcCMFZaIuiJZWvYCN9dH7MY r1iQMGa5wzWy70p7Y8FcTw05G9lgPogrzTMVyLmuczwt5nsfaNB8pezkuVI3S8TH vuvSnhhEwlcRFfwRy+qNO2oyLTnC5FxUQCdBIg2UsWPZVe+FQUbXJDsJLnZJmf3O vtiZKIn4J2eXBp0mKPq9lIahRBafBfse7xzHTtAH5RIzGF+Rw/5zLdIs7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJO9eNuc2a4L2ZzZose5Ua3xRs/DMB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvazcxNDI1elpyZ3Zabk5taXg3bFJyZkZHejhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAqxmxAwQA wWhAMA0GCSqGSIb3DQEBCwUAA4IBAQBgmxmRl3CjRm/sa0JyaGLn3Ai+U8g4uoFz y6jonOStXjbWAgxzKMqxTz927xZvYX9z92Pj/wljUaSASTCR+hVjT1Vh3Tb85SV7 osI/6VyNcqUEaiZAtp3vaG3w7MTMr0UWx85WujBlvkbOPYkCKr1JyuKrz+fCpy9j yWo9ukTIQLbehMkQjinnp4eTcheuFdv/n0/CQjQprRd+aWcgAfRRoi5p20r62Ehe EmKqMqIokCf37Ub+6LEAmeZ93tUqLMbhzrUNhQOCk/f6cPImcfcrMcO3pMZdQq6l W5bSLSWVLKjk5oAZVlt6oRXVngmnMNWKMzv6sK4BTq0cp9mpXJNY -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:41 2026 by rpki-client