This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kJCia8JUBL5bQkm9XezZAYvzdfY.roa File: kJCia8JUBL5bQkm9XezZAYvzdfY.roa (raw, json) Hash identifier: FXcpE9fgfC9DO0HRZ4OMcHWnAvUPDzsb5nn/kQSgzKI= Subject key identifier: 90:90:A2:6B:C2:54:04:BE:5B:42:49:BD:5D:EC:D9:01:8B:F3:75:F6 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A316237A847505BB3A2E328AB6B2B1 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kJCia8JUBL5bQkm9XezZAYvzdfY.roa Signing time: Thu 01 Jan 2026 08:18:32 +0000 ROA not before: Thu 01 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133495 IP address blocks: 45.9.157.0/24 maxlen: 24 45.90.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:16:23:7a:84:75:05:bb:3a:2e:32:8a:b6:b2:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9090a26bc25404be5b4249bd5decd9018bf375f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:77:73:4c:14:7b:80:93:fd:5c:f0:1a:28:17: ea:59:76:38:1d:1b:d5:a4:f4:eb:35:33:35:37:24: 08:5e:d0:7e:27:5a:ba:f5:ea:bd:3f:0e:e6:9b:8c: 68:26:f0:49:9d:19:95:d7:a1:02:8e:c7:09:43:67: 50:a5:1a:61:1e:fc:aa:77:80:68:df:16:b3:70:76: 5a:1e:84:9b:31:7c:37:d7:4f:65:ea:14:b3:a1:2e: 05:8c:6b:9c:96:cd:5a:d0:58:e4:c8:eb:42:3c:25: a2:12:b8:34:0c:a7:32:80:00:f7:0a:ae:1b:d6:07: 2d:70:d9:8a:4a:40:c0:fe:d1:a5:aa:93:e1:bd:b5: d4:e2:ac:dc:09:6d:7a:99:26:d9:b1:66:54:02:8b: 45:89:4e:40:ea:e5:ea:ca:99:fd:c2:2c:b0:79:05: e9:8a:58:7d:be:50:a6:22:99:f9:d4:fd:93:65:fa: cb:6b:67:e4:c0:57:5a:7c:27:f0:d4:39:8d:e2:5f: 97:ab:c4:75:ae:25:55:1e:df:66:e6:72:60:c7:31: 90:a0:cb:75:8f:59:61:02:d2:a8:d1:23:a8:09:c0: ac:fc:50:fd:8f:97:e7:8c:04:48:76:22:1a:9c:57: c6:40:56:27:81:c4:75:31:f3:22:3c:da:1f:ed:8b: 52:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:90:A2:6B:C2:54:04:BE:5B:42:49:BD:5D:EC:D9:01:8B:F3:75:F6 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kJCia8JUBL5bQkm9XezZAYvzdfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.157.0/24 45.90.89.0/24 Signature Algorithm: sha256WithRSAEncryption 39:6a:e7:9f:cf:fa:17:cc:01:6a:76:3b:7a:5f:cb:dd:3b:74: 84:29:15:50:2c:b5:af:99:82:dd:8c:53:55:30:11:ca:b5:1b: 7b:42:4a:2b:55:2e:85:71:fe:02:be:76:56:72:23:79:29:88: 70:f0:0e:49:aa:c4:d8:34:46:87:a5:65:c3:1d:ee:0e:f8:ec: 6e:6b:93:38:eb:88:30:66:63:05:44:da:e7:5e:20:92:2e:af: d6:31:bf:c4:0d:54:0f:76:dd:fa:07:62:9d:4b:b1:bf:96:7b: 01:7d:8e:4f:6b:ca:59:36:d1:cc:8c:d0:5a:ca:67:66:8d:63: e3:d3:cf:6f:22:f4:03:39:d8:d5:2b:3d:b1:e7:4e:b1:eb:28: 87:18:9c:4b:f1:51:ad:6c:c2:c2:93:b0:32:df:41:c3:80:37: 5d:2b:f1:1d:d0:51:67:e1:1f:d3:4a:86:c1:03:3b:89:f2:d8: aa:65:d9:ad:33:70:34:3d:44:dc:f7:8a:59:04:1a:3b:ea:7c: 3f:ad:30:04:b3:a8:29:f0:6a:b8:76:ea:e1:d5:f2:a3:8a:6a: 02:b7:58:41:c4:64:9e:97:25:3c:98:a9:02:91:1a:d5:ff:c4: 1f:fc:68:a2:34:71:7b:06:80:e9:2a:c5:11:86:8a:39:86:29: 1e:c8:f7:4f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oxYjeoR1Bbs6LjKKtrKxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDkwYTI2YmMyNTQwNGJlNWI0MjQ5YmQ1ZGVjZDkwMThiZjM3NWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3dzTBR7gJP9XPAaKBfqWXY4HRvV pPTrNTM1NyQIXtB+J1q69eq9Pw7mm4xoJvBJnRmV16ECjscJQ2dQpRphHvyqd4Bo 3xazcHZaHoSbMXw3109l6hSzoS4FjGucls1a0FjkyOtCPCWiErg0DKcygAD3Cq4b 1gctcNmKSkDA/tGlqpPhvbXU4qzcCW16mSbZsWZUAotFiU5A6uXqypn9wiyweQXp ilh9vlCmIpn51P2TZfrLa2fkwFdafCfw1DmN4l+Xq8R1riVVHt9m5nJgxzGQoMt1 j1lhAtKo0SOoCcCs/FD9j5fnjARIdiIanFfGQFYngcR1MfMiPNof7YtSNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJCQomvCVAS+W0JJvV3s2QGL83X2MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEva0pDaWE4SlVCTDViUWttOVhlelpBWXZ6ZGZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQmdAwQA LVpZMA0GCSqGSIb3DQEBCwUAA4IBAQA5auefz/oXzAFqdjt6X8vdO3SEKRVQLLWv mYLdjFNVMBHKtRt7QkorVS6Fcf4CvnZWciN5KYhw8A5JqsTYNEaHpWXDHe4O+Oxu a5M464gwZmMFRNrnXiCSLq/WMb/EDVQPdt36B2KdS7G/lnsBfY5Pa8pZNtHMjNBa ymdmjWPj089vIvQDOdjVKz2x506x6yiHGJxL8VGtbMLCk7Ay30HDgDddK/Ed0FFn 4R/TSobBAzuJ8tiqZdmtM3A0PUTc94pZBBo76nw/rTAEs6gp8Gq4durh1fKjimoC t1hBxGSelyU8mKkCkRrV/8Qf/GiiNHF7BoDpKsURhoo5hikeyPdP -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:20 2026 by rpki-client