This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/kJb9kHaVVEHdc57e6w-WcTjZiw0.roa File: kJb9kHaVVEHdc57e6w-WcTjZiw0.roa (raw, json) Hash identifier: E4hikz9mATtttURQm7LmMIm85kv9dYrRSxkVIOGIigA= Subject key identifier: 90:96:FD:90:76:95:54:41:DD:73:9E:DE:EB:0F:96:71:38:D9:8B:0D Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EDAE741CE45F7707EBD5E2B0143CB Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/kJb9kHaVVEHdc57e6w-WcTjZiw0.roa Signing time: Thu 01 Jan 2026 12:18:35 +0000 ROA not before: Thu 01 Jan 2026 12:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209736 IP address blocks: 78.83.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:da:e7:41:ce:45:f7:70:7e:bd:5e:2b:01:43:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9096fd9076955441dd739edeeb0f967138d98b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:8f:d6:7e:95:b9:ce:bd:fb:99:b7:29:d3: 1e:4a:62:52:64:54:a5:f7:14:15:45:8b:62:14:8e: 57:01:f2:c4:7e:09:8a:f9:84:cb:01:ae:1b:db:83: ed:be:a0:4e:fc:7d:ad:d5:44:b0:e2:85:66:af:f0: 3d:da:3c:2c:df:9f:b3:9c:01:ce:25:2f:1d:ea:7c: 4a:08:4a:0f:c2:49:72:2f:25:76:1a:bc:9a:6b:23: d3:81:4c:35:d3:bc:df:5a:59:c4:4d:5e:a3:a0:90: f7:70:db:8f:5d:a1:8f:aa:32:48:71:e7:8f:f3:d3: c8:21:61:44:e6:08:30:25:52:ec:61:2c:0f:30:39: 03:7e:ea:8a:18:67:ec:c0:da:92:d8:6d:13:f9:77: b9:df:c4:97:42:a6:66:45:86:ac:e6:dc:63:01:30: 3e:1b:ad:75:ea:a5:2f:9c:86:90:af:80:e6:3f:1f: ef:2b:8f:ea:35:d6:12:72:e8:9e:f8:cb:e3:65:7d: 60:59:07:dc:df:45:72:d8:ee:67:22:46:f9:03:2a: 9d:ff:9c:73:35:9c:87:d1:11:c3:c0:41:3f:ee:ff: e3:e9:5a:fc:be:1b:87:96:7d:07:7f:0e:e7:49:0c: ae:55:a4:4c:20:93:82:4a:f0:e8:1e:6a:75:cd:4e: 57:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:96:FD:90:76:95:54:41:DD:73:9E:DE:EB:0F:96:71:38:D9:8B:0D X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/kJb9kHaVVEHdc57e6w-WcTjZiw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.83.140.0/24 Signature Algorithm: sha256WithRSAEncryption 88:af:20:52:16:2d:1d:0a:dd:89:f0:58:f2:41:e0:97:8d:e5: f8:20:7e:7f:84:cc:82:69:35:13:5b:dc:3b:81:0c:c1:12:10: 9b:58:2a:ce:44:86:b5:61:3e:ce:b0:d9:76:60:ba:9f:85:0c: 65:53:35:6f:ae:24:9b:4d:31:dc:a6:30:6c:0f:81:45:f4:62: 36:99:e6:f2:ad:3c:c6:33:03:7a:f2:67:28:e4:cb:82:0d:95: 77:3d:c9:11:35:dc:56:83:4e:01:4d:91:56:30:86:bf:35:cc: 64:88:a9:7d:b1:19:f5:a2:4f:09:d0:a3:dd:67:66:79:e6:59: 6b:df:50:18:6d:63:a0:8c:cb:e9:0b:43:89:f2:bf:ed:63:b9: 18:62:47:fe:90:46:ca:07:53:b7:6d:a6:59:75:c5:31:4e:1f: 48:5d:96:36:69:69:40:83:23:2a:02:85:a7:a8:0e:99:0a:f5: 6c:a6:93:cb:b6:4f:e4:4b:70:3e:e8:e7:53:e9:9a:5f:d0:b0: 31:8d:86:ca:ae:38:a5:c8:2a:1e:58:aa:ac:ef:9a:c6:9e:50: 91:47:dc:28:3e:4b:e0:e0:d7:8d:5d:40:14:c2:49:fd:23:ff: 27:4f:c9:27:cb:56:ec:09:c9:17:8d:10:15:ee:9a:7b:a9:47: 8c:7e:f8:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftrnQc5F93B+vV4rAUPLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDk2ZmQ5MDc2OTU1NDQxZGQ3MzllZGVlYjBmOTY3MTM4ZDk4YjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlCP1n6Vuc69+5m3KdMeSmJSZFSl 9xQVRYtiFI5XAfLEfgmK+YTLAa4b24PtvqBO/H2t1USw4oVmr/A92jws35+znAHO JS8d6nxKCEoPwklyLyV2GryaayPTgUw107zfWlnETV6joJD3cNuPXaGPqjJIceeP 89PIIWFE5ggwJVLsYSwPMDkDfuqKGGfswNqS2G0T+Xe538SXQqZmRYas5txjATA+ G6116qUvnIaQr4DmPx/vK4/qNdYScuie+MvjZX1gWQfc30Vy2O5nIkb5Ayqd/5xz NZyH0RHDwEE/7v/j6Vr8vhuHln0Hfw7nSQyuVaRMIJOCSvDoHmp1zU5X2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJCW/ZB2lVRB3XOe3usPlnE42YsNMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEva0piOWtIYVZWRUhkYzU3ZTZ3LVdjVGpaaXcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATlOMMA0G CSqGSIb3DQEBCwUAA4IBAQCIryBSFi0dCt2J8FjyQeCXjeX4IH5/hMyCaTUTW9w7 gQzBEhCbWCrORIa1YT7OsNl2YLqfhQxlUzVvriSbTTHcpjBsD4FF9GI2mebyrTzG MwN68mco5MuCDZV3PckRNdxWg04BTZFWMIa/NcxkiKl9sRn1ok8J0KPdZ2Z55llr 31AYbWOgjMvpC0OJ8r/tY7kYYkf+kEbKB1O3baZZdcUxTh9IXZY2aWlAgyMqAoWn qA6ZCvVsppPLtk/kS3A+6OdT6Zpf0LAxjYbKrjilyCoeWKqs75rGnlCRR9woPkvg 4NeNXUAUwkn9I/8nT8kny1bsCckXjRAV7pp7qUeMfvjx -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:23 2026 by rpki-client