This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/kJniZJ6iZYXidYzcJA4ZBySrhb4.roa File: kJniZJ6iZYXidYzcJA4ZBySrhb4.roa (raw, json) Hash identifier: IPJtJpbvrKU2IYcfqcSW/SQBNcuNJehfDhscEcl6bto= Subject key identifier: 90:99:E2:64:9E:A2:65:85:E2:75:8C:DC:24:0E:19:07:24:AB:85:BE Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2 Certificate serial: 019B7F13A3A1D2847000074DE7B92599D313 Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/kJniZJ6iZYXidYzcJA4ZBySrhb4.roa Signing time: Fri 02 Jan 2026 14:19:12 +0000 ROA not before: Fri 02 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39834 IP address blocks: 79.173.0.0/18 maxlen: 18 2a02:f740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:a3:a1:d2:84:70:00:07:4d:e7:b9:25:99:d3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2 Validity Not Before: Jan 2 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9099e2649ea26585e2758cdc240e190724ab85be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:00:00:9f:39:9a:69:2d:76:c3:92:29:29: 3b:e5:83:3d:83:c3:81:a8:ee:bf:cd:b7:4b:d6:66: b1:6e:7c:66:c8:c3:10:8c:36:06:af:e7:fa:af:b5: 01:6c:e1:aa:45:f9:26:1d:8f:c8:c6:3e:30:15:73: 93:d6:a8:1d:4f:11:63:0e:2c:33:20:94:71:37:05: 3b:7a:a4:d9:92:3e:48:d9:07:55:96:fa:fd:5a:c3: 53:28:b4:e7:af:3c:b3:88:e3:19:52:68:0e:12:b8: ee:ea:00:96:14:e2:eb:49:d9:c5:ec:7b:3f:83:82: 89:88:08:e6:e3:01:37:f2:1b:53:c2:89:75:92:0b: 6e:3d:4e:dd:b6:ef:3e:9f:a8:d1:c3:18:7e:64:a5: f1:9b:d2:71:db:12:ce:3e:bb:c6:3d:7d:78:75:f4: 4c:26:e1:a2:3b:df:05:4f:f9:70:32:91:55:09:27: d0:03:e6:6b:51:67:23:1d:1f:84:b5:e0:48:43:bb: 59:36:32:8c:bf:14:9f:bd:d7:6d:08:28:f8:6e:c7: 61:2c:db:ce:d9:cb:35:0c:32:da:d6:ee:e2:b2:81: d1:2a:89:b4:e8:64:59:13:ff:cb:f3:b8:1c:fc:fc: ac:69:00:63:b7:80:da:47:36:55:9f:a8:bb:c0:e4: 9b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:99:E2:64:9E:A2:65:85:E2:75:8C:DC:24:0E:19:07:24:AB:85:BE X509v3 Authority Key Identifier: keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/kJniZJ6iZYXidYzcJA4ZBySrhb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.173.0.0/18 IPv6: 2a02:f740::/29 Signature Algorithm: sha256WithRSAEncryption 41:a0:10:5a:7e:52:cb:90:5c:f7:f7:d1:1c:38:9c:83:ee:d3: 08:1a:3a:5c:6c:5c:0e:13:5f:ee:97:3c:07:ac:36:3b:d7:2c: b2:91:aa:07:e7:ef:2a:0c:3f:3f:56:34:2c:b5:ca:bc:24:6d: 0c:80:3d:4b:5a:96:84:31:ec:49:89:29:a9:c5:25:fe:a8:d8: 38:54:90:34:d0:b1:e7:5e:0b:09:1f:d8:cf:44:a9:00:6f:11: ed:5f:f9:19:5e:8b:24:75:de:98:c3:60:f8:2c:9d:fb:c8:d5: 6b:02:b1:e6:c0:21:7d:fd:fe:9a:53:1b:cb:08:9f:85:e5:dc: 12:f0:09:21:b6:4b:de:f8:4e:5d:b1:8d:fa:47:56:71:c2:20: 49:8f:a3:c3:8b:c3:27:dc:bb:28:aa:d8:9b:08:d3:83:14:a9: 46:78:2a:99:f4:08:fe:2b:9e:bd:8d:3a:6b:69:86:4c:f7:22: b2:ee:5e:26:68:69:3e:bf:1e:34:6d:05:39:e8:05:4c:ad:e8: 73:dc:a7:bb:0d:2d:64:b7:f0:92:2e:eb:e8:4b:2c:d1:04:39: d2:c1:e4:d8:4f:20:b1:fa:e9:87:c2:b1:1e:d7:7c:e1:4f:47: 50:6a:ef:d8:1b:47:b8:ee:42:84:28:ae:28:4b:ea:9b:47:59: ea:aa:18:2e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/E6Oh0oRwAAdN57klmdMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NDEyNjJhY2Q2MmM5MGU2ODA4MWE2Zjc3NzM3NWRmMmMz NzEzYzIwHhcNMjYwMTAyMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDk5ZTI2NDllYTI2NTg1ZTI3NThjZGMyNDBlMTkwNzI0YWI4NWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7oAAJ85mmktdsOSKSk75YM9g8OB qO6/zbdL1maxbnxmyMMQjDYGr+f6r7UBbOGqRfkmHY/Ixj4wFXOT1qgdTxFjDiwz IJRxNwU7eqTZkj5I2QdVlvr9WsNTKLTnrzyziOMZUmgOErju6gCWFOLrSdnF7Hs/ g4KJiAjm4wE38htTwol1kgtuPU7dtu8+n6jRwxh+ZKXxm9Jx2xLOPrvGPX14dfRM JuGiO98FT/lwMpFVCSfQA+ZrUWcjHR+EteBIQ7tZNjKMvxSfvddtCCj4bsdhLNvO 2cs1DDLa1u7isoHRKom06GRZE//L87gc/PysaQBjt4DaRzZVn6i7wOSbyQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJCZ4mSeomWF4nWM3CQOGQckq4W+MB8GA1UdIwQY MBaAFChBJirNYskOaAgab3dzdd8sNxPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMzIyNzYtMjVkYy00YzMwLThhN2It OTVhMzNlMTJhM2FkLzEva0puaVpKNmlaWVhpZFl6Y0pBNFpCeVNyaGI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8wMzIyNzYtMjVkYy00YzMwLThhN2ItOTVhMzNlMTJhM2Fk LzEvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGT60AMA0E AgACMAcDBQMqAvdAMA0GCSqGSIb3DQEBCwUAA4IBAQBBoBBaflLLkFz399EcOJyD 7tMIGjpcbFwOE1/ulzwHrDY71yyykaoH5+8qDD8/VjQstcq8JG0MgD1LWpaEMexJ iSmpxSX+qNg4VJA00LHnXgsJH9jPRKkAbxHtX/kZXoskdd6Yw2D4LJ37yNVrArHm wCF9/f6aUxvLCJ+F5dwS8Akhtkve+E5dsY36R1ZxwiBJj6PDi8Mn3LsoqtibCNOD FKlGeCqZ9Aj+K569jTpraYZM9yKy7l4maGk+vx40bQU56AVMrehz3Ke7DS1kt/CS LuvoSyzRBDnSweTYTyCx+umHwrEe13zhT0dQau/YG0e47kKEKK4oS+qbR1nqqhgu -----END CERTIFICATE-----Generated at Mon Feb 9 22:58:10 2026 by rpki-client