This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/kJQetrV-a7PlueelK5ZilEbrbWM.roa File: kJQetrV-a7PlueelK5ZilEbrbWM.roa (raw, json) Hash identifier: 3ET1YZ9mSVr1pquKi0EboaaGsreV0ZtB2F3dmPlo6j8= Subject key identifier: 90:94:1E:B6:B5:7E:6B:B3:E5:B9:E7:A5:2B:96:62:94:46:EB:6D:63 Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Certificate serial: 019B9821519405CE043684976EB898713C75 Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/kJQetrV-a7PlueelK5ZilEbrbWM.roa Signing time: Wed 07 Jan 2026 11:04:38 +0000 ROA not before: Wed 07 Jan 2026 11:04:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 185.56.45.0/24 maxlen: 24 185.56.46.0/24 maxlen: 24 185.87.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:21:51:94:05:ce:04:36:84:97:6e:b8:98:71:3c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Validity Not Before: Jan 7 11:04:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90941eb6b57e6bb3e5b9e7a52b96629446eb6d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3c:c6:c1:41:57:66:7a:49:93:6a:d1:60:e3: 77:fd:ec:bc:4e:de:83:75:ee:c2:7e:80:6d:3e:30: 60:b2:a9:d0:d3:65:75:c8:dc:0f:f4:61:27:05:e2: a3:95:3d:8a:6b:a5:b4:36:fa:8e:29:8f:7e:cd:ed: 3f:08:c5:22:2c:34:ae:94:c5:3f:a2:e0:9f:e0:1e: 22:bd:9f:49:be:26:01:75:25:09:21:e6:db:56:4e: 50:5f:68:a7:9b:21:c6:d7:7a:70:41:0e:96:bb:3a: e9:cb:1f:94:3a:f3:a9:af:60:d8:db:f5:a7:4c:60: 69:fe:6d:a7:08:58:50:a4:5b:98:7a:f7:6d:23:ba: 07:2d:9d:4c:e2:71:87:20:ae:21:9a:20:cd:52:bc: 08:02:45:81:1b:95:0a:29:93:09:ca:2c:37:45:28: fa:51:b3:87:91:a3:c9:dd:af:53:37:d2:c9:c8:d1: e4:7e:50:3b:21:f6:0c:c9:03:0d:2e:4b:37:39:4e: 2f:dd:dd:33:7e:23:1c:a9:4d:34:31:14:05:e3:b5: bc:dd:66:62:fc:47:97:a9:a7:6d:6e:06:e4:65:e3: a7:43:1f:94:08:45:ae:bd:54:97:ac:b6:29:4e:32: 2b:d9:07:1d:4a:44:e1:74:2e:b0:30:3f:54:d2:c0: a3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:94:1E:B6:B5:7E:6B:B3:E5:B9:E7:A5:2B:96:62:94:46:EB:6D:63 X509v3 Authority Key Identifier: keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/kJQetrV-a7PlueelK5ZilEbrbWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.45.0-185.56.46.255 185.87.59.0/24 Signature Algorithm: sha256WithRSAEncryption 80:f0:0c:3f:94:13:db:b5:4e:4f:bc:85:73:8e:c2:c3:51:ed: c6:87:56:31:c1:94:e6:1a:71:eb:78:a8:3b:38:ca:c6:23:9d: 82:cd:85:86:65:da:37:a3:a1:bc:31:ea:7a:00:64:31:4b:7c: 66:be:a7:c5:81:2e:18:ea:82:59:ae:7c:2b:8f:90:19:58:e1: 17:2e:68:64:d9:98:6a:97:b2:70:4f:79:c4:09:02:c3:4f:a4: be:fb:d0:09:9e:74:49:20:a7:cc:fd:ea:3a:c2:4a:16:d7:18: b9:ab:37:d6:9f:07:8c:4d:86:0f:ac:29:80:2f:b8:53:9d:ef: 12:40:2c:6d:66:eb:c3:50:38:16:6f:59:5f:d8:08:29:80:ce: f1:96:1b:df:33:00:6b:36:6c:b9:9b:8b:f6:77:a2:0c:ea:a9: ac:24:3d:ff:b6:65:ea:76:1c:b8:9b:4c:07:da:53:ff:cc:13: e6:f5:0d:21:eb:91:d9:c3:15:6b:0c:7c:c7:ba:fb:ba:9c:8e: 55:de:9e:d5:66:7d:ee:d2:f4:44:ee:10:dd:ca:ab:40:8c:48: c1:76:cc:d2:f1:52:88:ac:f9:c9:f5:8c:61:59:c8:ab:34:44: 63:9c:e6:f4:b6:b0:1f:af:76:00:28:5c:54:5a:60:f3:ae:fa: c2:b7:bb:a2 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZuYIVGUBc4ENoSXbriYcTx1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx NGMzY2IwHhcNMjYwMTA3MTEwNDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDk0MWViNmI1N2U2YmIzZTViOWU3YTUyYjk2NjI5NDQ2ZWI2ZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTzGwUFXZnpJk2rRYON3/ey8Tt6D de7CfoBtPjBgsqnQ02V1yNwP9GEnBeKjlT2Ka6W0NvqOKY9+ze0/CMUiLDSulMU/ ouCf4B4ivZ9JviYBdSUJIebbVk5QX2inmyHG13pwQQ6Wuzrpyx+UOvOpr2DY2/Wn TGBp/m2nCFhQpFuYevdtI7oHLZ1M4nGHIK4hmiDNUrwIAkWBG5UKKZMJyiw3RSj6 UbOHkaPJ3a9TN9LJyNHkflA7IfYMyQMNLks3OU4v3d0zfiMcqU00MRQF47W83WZi /EeXqadtbgbkZeOnQx+UCEWuvVSXrLYpTjIr2QcdSkThdC6wMD9U0sCjjwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFJCUHra1fmuz5bnnpSuWYpRG621jMB8GA1UdIwQY MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt MWRkNmQyODFjODhhLzEva0pRZXRyVi1hN1BsdWVlbEs1WmlsRWJyYldNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAC5OC0D BAC5OC4DBAC5VzswDQYJKoZIhvcNAQELBQADggEBAIDwDD+UE9u1Tk+8hXOOwsNR 7caHVjHBlOYacet4qDs4ysYjnYLNhYZl2jejobwx6noAZDFLfGa+p8WBLhjqglmu fCuPkBlY4RcuaGTZmGqXsnBPecQJAsNPpL770AmedEkgp8z96jrCShbXGLmrN9af B4xNhg+sKYAvuFOd7xJALG1m68NQOBZvWV/YCCmAzvGWG98zAGs2bLmbi/Z3ogzq qawkPf+2Zep2HLibTAfaU//ME+b1DSHrkdnDFWsMfMe6+7qcjlXentVmfe7S9ETu EN3Kq0CMSMF2zNLxUois+cn1jGFZyKs0RGOc5vS2sB+vdgAoXFRaYPOu+sK3u6I= -----END CERTIFICATE-----Generated at Sun Jan 18 11:24:56 2026 by rpki-client