This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/kP39bsnw_qJA-nAXWzwPudCCaSw.roa File: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (raw, json) Hash identifier: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc= Subject key identifier: 90:FD:FD:6E:C9:F0:FE:A2:40:FA:70:17:5B:3C:0F:B9:D0:82:69:2C Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019B7FF23B8353798322A9D5756DD9B3B9EE Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/kP39bsnw_qJA-nAXWzwPudCCaSw.roa Signing time: Fri 02 Jan 2026 18:22:19 +0000 ROA not before: Fri 02 Jan 2026 18:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 87.236.165.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 00:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:3b:83:53:79:83:22:a9:d5:75:6d:d9:b3:b9:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Jan 2 18:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90fdfd6ec9f0fea240fa70175b3c0fb9d082692c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a3:ba:88:59:95:06:66:d0:96:67:f8:9a:1c: f8:f9:1e:ea:71:00:39:0e:35:c0:8f:2b:d8:7b:7b: 1b:f3:2f:d0:fa:bb:1f:4f:2e:2b:17:06:d5:9f:92: ee:7b:6d:ad:a8:cc:4d:a4:d8:42:ea:77:c6:08:bb: 00:6a:98:fd:cf:d6:4b:5c:e5:6f:8f:c6:74:b4:7a: c0:f9:88:08:a6:cc:de:31:d0:16:b3:81:fd:fe:94: 3e:06:f2:66:78:59:ab:09:45:b4:75:85:5a:8a:11: a4:16:4d:63:7d:0f:f9:1d:65:dc:1e:da:1d:02:18: 25:4a:24:c3:3d:bf:48:2f:c5:bc:ff:a7:25:ee:d5: d3:d7:66:8b:1b:c2:50:0e:05:d4:b6:bf:66:73:fe: bb:94:d7:ff:9d:e2:12:f8:88:6e:db:a6:e8:79:b2: 07:29:38:3a:41:21:1d:9e:71:d0:1c:70:80:3b:81: ef:34:6b:e1:66:70:75:66:b1:b5:e9:76:2a:d5:8c: 24:61:7b:62:82:92:82:25:a5:b5:2a:a4:f3:37:1c: f9:ca:77:f2:e2:ec:e6:2b:a1:b5:f6:bc:67:9b:d2: f0:ac:3a:c9:20:9e:66:1a:69:f0:59:38:47:b3:85: a6:87:3e:17:23:61:68:93:09:a6:91:cc:6e:82:8d: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FD:FD:6E:C9:F0:FE:A2:40:FA:70:17:5B:3C:0F:B9:D0:82:69:2C X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/kP39bsnw_qJA-nAXWzwPudCCaSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.165.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:6d:11:21:2e:4e:d0:de:0a:94:22:f6:f9:e3:a5:6a:c6:49: 81:89:34:8a:17:bc:fa:2c:fa:14:fe:0a:b8:73:b1:1e:06:56: dd:88:6d:36:3d:7b:47:80:08:ab:4e:17:1f:ed:be:57:b8:cd: 6d:e2:48:81:3c:2b:fd:97:b3:8a:fe:d0:21:b2:ad:89:30:da: 65:b7:08:70:48:40:c6:4e:0d:ce:56:f8:7d:81:a2:4d:a9:7b: c3:9c:f6:05:15:7d:08:2b:83:0c:ca:d5:49:4e:70:1f:02:89: 92:b2:36:9b:fa:7d:61:85:bd:a0:5b:3d:0b:b8:f2:e4:2f:e7: aa:d3:ca:bc:94:07:85:b6:fa:f7:71:dc:84:d7:db:55:ae:df: 9c:2a:9b:d7:92:57:50:66:dd:f0:75:82:8d:41:2d:f5:39:8b: 38:8e:de:1c:57:dd:90:28:13:75:40:4d:73:4a:e2:96:c1:f8: 29:79:de:54:ba:35:a4:37:ff:a7:ae:a8:c2:69:9d:6d:ac:ef: 5c:a3:68:55:42:f3:c9:72:ac:ae:4c:68:28:aa:56:3c:f3:2e: be:0f:82:ba:41:66:97:4c:40:f3:9d:a9:c5:8f:54:58:d1:e2: 9b:c8:2f:78:85:ae:fa:66:ab:59:9e:bf:26:e5:75:a6:57:d4: f7:e2:14:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8juDU3mDIqnVdW3Zs7nuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwMTAyMTgyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGZkZmQ2ZWM5ZjBmZWEyNDBmYTcwMTc1YjNjMGZiOWQwODI2OTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraO6iFmVBmbQlmf4mhz4+R7qcQA5 DjXAjyvYe3sb8y/Q+rsfTy4rFwbVn5Lue22tqMxNpNhC6nfGCLsAapj9z9ZLXOVv j8Z0tHrA+YgIpszeMdAWs4H9/pQ+BvJmeFmrCUW0dYVaihGkFk1jfQ/5HWXcHtod AhglSiTDPb9IL8W8/6cl7tXT12aLG8JQDgXUtr9mc/67lNf/neIS+Ihu26boebIH KTg6QSEdnnHQHHCAO4HvNGvhZnB1ZrG16XYq1YwkYXtigpKCJaW1KqTzNxz5ynfy 4uzmK6G19rxnm9LwrDrJIJ5mGmnwWThHs4Wmhz4XI2Fokwmmkcxugo30VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJD9/W7J8P6iQPpwF1s8D7nQgmksMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEva1AzOWJzbndfcUpBLW5BWFd6d1B1ZENDYVN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+ylMA0G CSqGSIb3DQEBCwUAA4IBAQBebREhLk7Q3gqUIvb546VqxkmBiTSKF7z6LPoU/gq4 c7EeBlbdiG02PXtHgAirThcf7b5XuM1t4kiBPCv9l7OK/tAhsq2JMNpltwhwSEDG Tg3OVvh9gaJNqXvDnPYFFX0IK4MMytVJTnAfAomSsjab+n1hhb2gWz0LuPLkL+eq 08q8lAeFtvr3cdyE19tVrt+cKpvXkldQZt3wdYKNQS31OYs4jt4cV92QKBN1QE1z SuKWwfgped5UujWkN/+nrqjCaZ1trO9co2hVQvPJcqyuTGgoqlY88y6+D4K6QWaX TEDznanFj1RY0eKbyC94ha76ZqtZnr8m5XWmV9T34hTQ -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:27 2026 by rpki-client