This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/kjxWd4U66N2G3Y4Ss8NOkBU4rs4.roa File: kjxWd4U66N2G3Y4Ss8NOkBU4rs4.roa (raw, json) Hash identifier: Lh3WoxdQyHUINKZzWX43jjRHwq3dN4GxIBUo7levdrc= Subject key identifier: 92:3C:56:77:85:3A:E8:DD:86:DD:8E:12:B3:C3:4E:90:15:38:AE:CE Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Certificate serial: 019B7F15DDAE57482BA9A19B7AC14D70C9DE Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/kjxWd4U66N2G3Y4Ss8NOkBU4rs4.roa Signing time: Fri 02 Jan 2026 14:21:37 +0000 ROA not before: Fri 02 Jan 2026 14:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60721 IP address blocks: 195.211.117.0/24 maxlen: 24 195.211.118.0/24 maxlen: 24 195.211.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:dd:ae:57:48:2b:a9:a1:9b:7a:c1:4d:70:c9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Validity Not Before: Jan 2 14:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=923c5677853ae8dd86dd8e12b3c34e901538aece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:22:10:02:92:09:ca:ce:5d:e2:2c:d8:bd: a1:e0:01:c3:1e:30:e6:88:5b:7b:71:50:a0:82:16: 0d:81:df:a1:da:bc:1e:47:68:d8:15:89:69:4a:b9: 10:51:d4:2d:fa:5e:1f:a4:b7:1e:a0:19:4b:10:f6: c4:87:ba:ef:e1:da:a7:4e:bc:93:e2:56:c1:47:12: 02:00:8a:aa:ed:33:c0:05:85:53:6a:1b:79:91:12: 1c:28:f3:c4:be:fc:6d:e0:c7:80:6a:03:36:c1:26: bd:ac:f9:82:9a:41:f1:b2:3a:49:ac:da:4a:9e:ed: 05:1d:e7:8d:10:bc:4e:f1:b4:61:c7:21:c6:5d:79: f2:e1:cc:b5:25:95:39:e1:14:05:ac:e8:b9:67:fd: 57:0b:b9:67:93:52:f2:b2:d0:6b:64:b6:e2:7c:8e: 33:30:be:c7:53:c4:f8:aa:d7:05:34:6f:0d:67:0c: 6b:cf:31:10:c6:fb:2c:43:98:b5:5c:49:5a:b0:13: de:07:5e:33:5a:9d:aa:c8:74:a9:22:42:ff:f5:b1: 8a:fa:83:1f:3b:70:a6:eb:82:fe:7b:30:12:79:79: 3a:66:9d:9f:ea:2e:ee:71:a7:9a:0a:f8:60:52:24: 64:8e:85:0c:28:c9:18:3a:f9:2e:5c:52:3e:d5:cb: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3C:56:77:85:3A:E8:DD:86:DD:8E:12:B3:C3:4E:90:15:38:AE:CE X509v3 Authority Key Identifier: keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/kjxWd4U66N2G3Y4Ss8NOkBU4rs4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.211.117.0-195.211.119.255 Signature Algorithm: sha256WithRSAEncryption bb:50:36:50:50:f7:5c:e0:36:6d:07:87:83:d0:a2:90:fe:34: b5:f7:f3:62:74:a0:db:9c:f7:c9:5c:39:25:ba:89:30:75:78: d0:b4:71:54:7f:27:6b:ab:58:d7:e0:28:e6:a8:76:10:b2:a0: a7:e4:dc:5e:5f:bc:76:50:18:97:7d:ca:72:94:6f:e6:ce:e6: 88:87:29:ba:c4:5f:c0:9e:4b:d4:eb:c0:85:e4:7a:de:2e:71: 11:5a:45:d3:38:c4:39:3d:94:21:a2:87:c7:97:01:8a:31:3d: a9:ae:85:93:3f:64:2e:3c:cb:25:67:05:f3:78:1f:b9:c3:b2: 14:00:82:d7:d4:d0:b2:1e:1c:b3:ef:7d:4e:d3:73:af:a0:64: 19:37:db:8e:87:8d:be:a2:45:75:f6:f9:59:93:98:a1:c3:16: e9:78:9e:fb:f4:d5:3b:23:f9:08:5d:02:95:ee:81:a3:72:5a: 4e:2f:9b:6b:2d:57:5d:fa:f9:93:49:41:6d:89:5d:a4:2f:84: 73:60:c5:2e:54:b1:86:64:d9:cd:e9:61:ec:67:16:cf:93:a3: 93:8b:9f:b5:60:7e:6f:0f:5c:1f:43:f3:19:41:6e:b2:2d:73: 5f:44:58:78:54:4f:5d:04:00:7a:19:6b:ef:31:4d:66:4e:17: 74:71:3b:d7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/Fd2uV0grqaGbesFNcMneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx OTZhYTEwHhcNMjYwMTAyMTQyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjNjNTY3Nzg1M2FlOGRkODZkZDhlMTJiM2MzNGU5MDE1MzhhZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu20iEAKSCcrOXeIs2L2h4AHDHjDm iFt7cVCgghYNgd+h2rweR2jYFYlpSrkQUdQt+l4fpLceoBlLEPbEh7rv4dqnTryT 4lbBRxICAIqq7TPABYVTaht5kRIcKPPEvvxt4MeAagM2wSa9rPmCmkHxsjpJrNpK nu0FHeeNELxO8bRhxyHGXXny4cy1JZU54RQFrOi5Z/1XC7lnk1LystBrZLbifI4z ML7HU8T4qtcFNG8NZwxrzzEQxvssQ5i1XElasBPeB14zWp2qyHSpIkL/9bGK+oMf O3Cm64L+ezASeXk6Zp2f6i7ucaeaCvhgUiRkjoUMKMkYOvkuXFI+1cuLTQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJI8VneFOujdht2OErPDTpAVOK7OMB8GA1UdIwQY MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt ZGQ4NjI3NzRhMDkyLzEva2p4V2Q0VTY2TjJHM1k0U3M4Tk9rQlU0cnM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADD03UD BAPD03AwDQYJKoZIhvcNAQELBQADggEBALtQNlBQ91zgNm0Hh4PQopD+NLX382J0 oNuc98lcOSW6iTB1eNC0cVR/J2urWNfgKOaodhCyoKfk3F5fvHZQGJd9ynKUb+bO 5oiHKbrEX8CeS9TrwIXket4ucRFaRdM4xDk9lCGih8eXAYoxPamuhZM/ZC48yyVn BfN4H7nDshQAgtfU0LIeHLPvfU7Tc6+gZBk3246Hjb6iRXX2+VmTmKHDFul4nvv0 1Tsj+QhdApXugaNyWk4vm2stV136+ZNJQW2JXaQvhHNgxS5UsYZk2c3pYexnFs+T o5OLn7Vgfm8PXB9D8xlBbrItc19EWHhUT10EAHoZa+8xTWZOF3RxO9c= -----END CERTIFICATE-----Generated at Tue Jan 13 22:44:01 2026 by rpki-client