This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/kXzdv5NDHX9hP9QVVItLLJ5Es_U.roa File: kXzdv5NDHX9hP9QVVItLLJ5Es_U.roa (raw, json) Hash identifier: sWrAMNrOGscR0Q40YPFFtGru6P1WmVLu/wZzYM7VUrI= Subject key identifier: 91:7C:DD:BF:93:43:1D:7F:61:3F:D4:15:54:8B:4B:2C:9E:44:B3:F5 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7DB83FA5BD2A99AC9E968677BC32E Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/kXzdv5NDHX9hP9QVVItLLJ5Es_U.roa Signing time: Thu 01 Jan 2026 18:17:56 +0000 ROA not before: Thu 01 Jan 2026 18:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202555 IP address blocks: 217.69.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:db:83:fa:5b:d2:a9:9a:c9:e9:68:67:7b:c3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=917cddbf93431d7f613fd415548b4b2c9e44b3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a5:a1:49:04:18:22:57:8b:d7:b4:4f:28:02: f4:c0:38:c0:11:12:3b:b7:78:81:f4:fc:6d:99:17: a2:9a:bd:fa:6b:57:53:ee:83:a6:c3:1b:39:44:c9: 23:ff:84:24:5d:e3:1f:91:76:6f:d3:ee:9a:bd:b3: c8:da:4f:9d:76:94:30:e2:f5:88:fb:52:ed:e2:9a: 7f:46:f0:a8:d1:28:75:d8:52:bc:af:1d:77:89:dc: 8c:f6:59:07:d5:03:f1:30:7c:d8:a6:c0:32:ed:7b: 15:07:0d:db:79:48:9b:94:74:63:04:58:71:46:19: a1:ea:97:70:3a:92:1b:bc:0d:1d:7e:d2:64:18:b5: ec:87:fd:c5:f8:5a:22:a4:5c:15:f7:a7:9c:72:93: 56:47:e5:75:bc:86:de:1e:fb:87:68:a4:79:3a:79: 6e:11:bd:d8:fd:88:7a:11:c4:de:a6:a8:10:fb:2f: 77:4f:c0:cb:1a:78:e4:a7:bf:2e:63:c4:52:6d:b0: 5e:9a:8d:c3:a7:7c:16:82:76:45:88:b0:1c:ad:b1: aa:1c:57:f9:16:90:f4:49:ca:8a:7d:af:e1:e8:b9: 99:8c:5f:b6:79:f4:96:a1:c2:61:e3:11:8a:7f:da: bf:68:be:0b:d1:89:c4:1a:24:98:8b:9d:b8:6a:7d: f4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7C:DD:BF:93:43:1D:7F:61:3F:D4:15:54:8B:4B:2C:9E:44:B3:F5 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/kXzdv5NDHX9hP9QVVItLLJ5Es_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.69.113.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:a2:d8:42:e1:10:10:a4:df:f5:e1:79:f2:af:59:4f:fa:c6: 7b:86:ab:f6:31:a2:e1:28:2b:13:22:9e:26:f1:af:4b:97:45: b3:76:06:23:3c:1f:48:7a:0b:36:3d:7f:a2:7a:86:81:9b:a6: 69:1d:2e:d4:92:22:c7:d8:db:a1:25:fb:0b:55:ff:46:26:86: 37:fa:ce:aa:1c:ce:82:61:cc:bf:e5:5a:73:b1:50:08:5f:d5: 85:de:cd:e6:84:b2:e1:a0:8b:26:29:31:a1:bd:bf:ce:f2:a5: b0:90:a1:70:79:b7:db:82:67:b4:fe:b6:e2:ae:c7:da:d4:21: f4:9c:46:fc:71:b4:14:8f:ef:ff:22:9c:f4:1b:d7:79:be:b8: de:90:6d:1b:be:d6:e8:fc:10:3c:c6:39:36:8c:66:79:03:73: 0f:b4:b6:ae:31:00:34:13:8a:17:e2:ce:cd:64:2e:1a:cb:1a: 67:90:2a:0a:ee:fc:ba:84:63:d4:c3:6c:51:e6:da:36:1e:9d: 8f:4b:cb:8c:4a:45:0f:f0:b9:d9:e4:3f:aa:33:a6:f9:b1:cf: 91:fc:bd:9b:6b:25:51:38:7e:2d:08:3e:70:9b:a4:ca:7f:3b: 60:e7:89:b4:08:10:13:d7:de:c6:ad:42:ad:bb:bf:b3:e7:a6: 14:4e:d3:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9uD+lvSqZrJ6Whne8MuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTdjZGRiZjkzNDMxZDdmNjEzZmQ0MTU1NDhiNGIyYzllNDRiM2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qWhSQQYIleL17RPKAL0wDjAERI7 t3iB9PxtmReimr36a1dT7oOmwxs5RMkj/4QkXeMfkXZv0+6avbPI2k+ddpQw4vWI +1Lt4pp/RvCo0Sh12FK8rx13idyM9lkH1QPxMHzYpsAy7XsVBw3beUiblHRjBFhx Rhmh6pdwOpIbvA0dftJkGLXsh/3F+FoipFwV96eccpNWR+V1vIbeHvuHaKR5Onlu Eb3Y/Yh6EcTepqgQ+y93T8DLGnjkp78uY8RSbbBemo3Dp3wWgnZFiLAcrbGqHFf5 FpD0ScqKfa/h6LmZjF+2efSWocJh4xGKf9q/aL4L0YnEGiSYi524an30rwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJF83b+TQx1/YT/UFVSLSyyeRLP1MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEva1h6ZHY1TkRIWDloUDlRVlZJdExMSjVFc19VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UVxMA0G CSqGSIb3DQEBCwUAA4IBAQCeothC4RAQpN/14Xnyr1lP+sZ7hqv2MaLhKCsTIp4m 8a9Ll0WzdgYjPB9Iegs2PX+ieoaBm6ZpHS7UkiLH2NuhJfsLVf9GJoY3+s6qHM6C Ycy/5VpzsVAIX9WF3s3mhLLhoIsmKTGhvb/O8qWwkKFwebfbgme0/rbirsfa1CH0 nEb8cbQUj+//Ipz0G9d5vrjekG0bvtbo/BA8xjk2jGZ5A3MPtLauMQA0E4oX4s7N ZC4ayxpnkCoK7vy6hGPUw2xR5to2Hp2PS8uMSkUP8LnZ5D+qM6b5sc+R/L2bayVR OH4tCD5wm6TKfztg54m0CBAT197GrUKtu7+z56YUTtPY -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:44 2026 by rpki-client