This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/kXw_F87vDYBM8LWj0kizss8a-Yc.roa File: kXw_F87vDYBM8LWj0kizss8a-Yc.roa (raw, json) Hash identifier: 14DcTz8/BNnOXOqnb9wBGiZL6rOUzYIXPVXxKDQ+Oag= Subject key identifier: 91:7C:3F:17:CE:EF:0D:80:4C:F0:B5:A3:D2:48:B3:B2:CF:1A:F9:87 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B7F1600845D0EA6D3EF57DC8167CE5C61 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/kXw_F87vDYBM8LWj0kizss8a-Yc.roa Signing time: Fri 02 Jan 2026 14:21:46 +0000 ROA not before: Fri 02 Jan 2026 14:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13527 IP address blocks: 92.62.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:00:84:5d:0e:a6:d3:ef:57:dc:81:67:ce:5c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 2 14:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=917c3f17ceef0d804cf0b5a3d248b3b2cf1af987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:39:70:28:d6:e9:78:dc:43:9b:b9:c8:bd: 74:ce:26:13:21:02:82:61:7e:f0:73:63:5c:20:88: e3:b5:16:1c:91:2f:17:c4:24:90:d4:15:01:23:9b: 50:13:05:60:78:99:41:49:ed:00:d1:bd:bf:4d:17: 8d:1d:88:ae:c5:b0:ee:b0:6a:cc:e4:f3:f6:ac:8d: 31:b8:80:1b:e7:30:d8:79:c6:b3:69:db:4d:c7:82: e5:54:07:0a:10:94:59:40:93:74:b5:4c:a8:d6:c7: 2e:fe:20:f7:33:5a:1d:48:fc:27:4b:c8:e2:57:f1: 1d:b8:f0:30:8c:ac:55:4f:41:8b:2e:3b:6d:32:0e: 81:15:d0:e6:e0:fd:bf:5f:68:41:96:1e:43:c6:3f: 0d:73:d6:b7:b2:3b:b5:01:4d:fc:cf:08:9e:dd:7a: 7a:d6:47:bf:cb:98:c0:6a:94:37:59:5b:d1:30:62: 03:8d:9e:b6:08:77:1b:ef:c1:37:d8:b8:2d:74:ab: b8:94:96:a2:41:8a:d5:e6:cd:c5:dc:c4:a1:fc:c5: d1:ab:c5:cd:56:15:85:18:c6:36:c8:1c:90:20:d0: b9:ff:c2:8b:52:4e:ad:f2:53:2c:7a:98:78:67:f8: dd:a9:8c:03:70:15:a6:67:a3:f6:d2:8f:d3:c5:b3: 9e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7C:3F:17:CE:EF:0D:80:4C:F0:B5:A3:D2:48:B3:B2:CF:1A:F9:87 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/kXw_F87vDYBM8LWj0kizss8a-Yc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.254.0/24 Signature Algorithm: sha256WithRSAEncryption 43:b3:bf:56:e5:32:a6:92:de:07:da:97:84:b6:aa:5d:3b:49: 72:82:69:17:f3:26:7b:00:36:a9:e2:94:87:d4:64:84:ea:09: 0e:7a:52:c6:85:26:b2:40:05:3e:ed:37:4c:c9:2b:4b:a4:fc: ee:0d:ad:09:49:6e:00:55:7a:6f:e0:c4:c3:a2:49:c2:4a:32: 0f:8c:d8:94:c9:a9:9f:4b:ae:da:37:97:37:28:c5:43:24:67: 47:11:66:c3:23:dc:8d:98:f2:ca:c3:b9:87:6d:6a:7b:7f:7e: 24:cc:19:89:82:f2:5d:16:4b:8b:e1:59:bd:31:7e:d7:ec:ad: d6:dd:2e:0e:51:5e:d5:8c:b9:bd:cc:49:7a:15:37:13:e6:39: 58:ab:05:a4:c8:46:02:b3:79:f3:d9:25:0c:48:eb:94:36:1f: 26:63:da:b4:74:29:1f:8e:55:c3:1c:9c:a8:31:81:45:b2:71: b4:04:c4:43:d4:15:66:2a:04:0c:cf:c5:dc:63:ae:ef:a5:38: a2:69:4d:94:f3:3c:47:bf:8d:db:8a:c1:b2:37:02:bb:53:41: 70:d6:51:05:43:f2:95:1c:55:35:57:c9:6e:98:c8:84:2b:37: 37:5f:5a:84:78:90:29:1f:12:30:62:14:08:b8:60:17:58:68: b3:ac:5b:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FgCEXQ6m0+9X3IFnzlxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTAyMTQyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTdjM2YxN2NlZWYwZDgwNGNmMGI1YTNkMjQ4YjNiMmNmMWFmOTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySc5cCjW6XjcQ5u5yL10ziYTIQKC YX7wc2NcIIjjtRYckS8XxCSQ1BUBI5tQEwVgeJlBSe0A0b2/TReNHYiuxbDusGrM 5PP2rI0xuIAb5zDYecazadtNx4LlVAcKEJRZQJN0tUyo1scu/iD3M1odSPwnS8ji V/EduPAwjKxVT0GLLjttMg6BFdDm4P2/X2hBlh5Dxj8Nc9a3sju1AU38zwie3Xp6 1ke/y5jAapQ3WVvRMGIDjZ62CHcb78E32LgtdKu4lJaiQYrV5s3F3MSh/MXRq8XN VhWFGMY2yByQINC5/8KLUk6t8lMseph4Z/jdqYwDcBWmZ6P20o/TxbOeYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJF8PxfO7w2ATPC1o9JIs7LPGvmHMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEva1h3X0Y4N3ZEWUJNOExXajBraXpzczhhLVljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD7+MA0G CSqGSIb3DQEBCwUAA4IBAQBDs79W5TKmkt4H2peEtqpdO0lygmkX8yZ7ADap4pSH 1GSE6gkOelLGhSayQAU+7TdMyStLpPzuDa0JSW4AVXpv4MTDoknCSjIPjNiUyamf S67aN5c3KMVDJGdHEWbDI9yNmPLKw7mHbWp7f34kzBmJgvJdFkuL4Vm9MX7X7K3W 3S4OUV7VjLm9zEl6FTcT5jlYqwWkyEYCs3nz2SUMSOuUNh8mY9q0dCkfjlXDHJyo MYFFsnG0BMRD1BVmKgQMz8XcY67vpTiiaU2U8zxHv43bisGyNwK7U0Fw1lEFQ/KV HFU1V8lumMiEKzc3X1qEeJApHxIwYhQIuGAXWGizrFub -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:11 2026 by rpki-client