This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/kpNVCSlHwURhf7x6UiWxpxcAX30.roa File: kpNVCSlHwURhf7x6UiWxpxcAX30.roa (raw, json) Hash identifier: WdvESeRKh8rygQe6tAdgbmFxHpWdou2thwP2A8GY4o8= Subject key identifier: 92:93:55:09:29:47:C1:44:61:7F:BC:7A:52:25:B1:A7:17:00:5F:7D Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7CB97ECC1FB7A38694DF064C95AF2 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/kpNVCSlHwURhf7x6UiWxpxcAX30.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35913 IP address blocks: 85.254.84.0/23 maxlen: 23 85.254.124.0/23 maxlen: 23 85.254.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:cb:97:ec:c1:fb:7a:38:69:4d:f0:64:c9:5a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=929355092947c144617fbc7a5225b1a717005f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:09:dd:bc:58:e2:98:0c:7e:72:1e:8c:71:f8: 62:6d:e2:51:c3:8c:a3:29:e6:e8:06:62:68:cb:ad: 2b:75:13:5c:f5:f8:66:c6:5e:8a:67:c0:f4:15:ce: 6f:16:34:5c:ae:d7:21:30:fb:b6:d7:1e:2f:6a:87: fa:fa:1a:d7:46:d0:a7:c5:39:b1:18:08:e6:25:d2: c2:ef:01:be:64:8f:db:d2:ef:af:a3:ce:41:e6:ff: f6:ca:15:5d:64:89:56:5b:32:eb:c5:d4:cb:ec:32: 2d:84:2d:e5:27:35:ce:0d:9f:af:83:70:47:76:60: e7:d8:ff:a3:be:65:ac:83:77:3d:72:83:88:e2:1a: 5b:d2:7a:d2:1c:f0:fc:9d:4b:6c:1f:0d:6b:e0:07: 54:00:2c:5d:5c:2c:03:24:52:8f:cb:41:4f:42:4f: d2:db:33:9a:09:62:ab:c9:17:31:ad:f8:90:01:ec: 85:e5:52:e2:1c:71:69:95:42:7b:72:4f:ce:88:3a: 91:d0:e6:5d:12:e2:ab:36:c5:6b:67:63:1e:eb:05: ff:f5:72:6b:8f:c7:cf:9e:4e:66:f2:d2:b8:37:df: 77:53:96:70:2f:09:46:c9:d1:0d:d6:dc:42:04:a4: b9:fd:8c:7d:ef:97:71:f5:d8:c2:ed:39:44:cc:57: d0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:93:55:09:29:47:C1:44:61:7F:BC:7A:52:25:B1:A7:17:00:5F:7D X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/kpNVCSlHwURhf7x6UiWxpxcAX30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.84.0/23 85.254.124.0/23 85.254.140.0/24 Signature Algorithm: sha256WithRSAEncryption 08:b1:e8:d4:a3:bd:3b:bb:d7:6b:de:90:6a:f5:a0:72:a8:1f: 42:b8:a0:8f:bf:95:b9:14:c5:de:a9:45:8a:7b:32:e9:d5:11: 14:af:ef:02:4d:d3:f0:41:00:aa:07:81:95:fa:ec:a9:cc:fc: e4:72:bc:cb:23:f3:e3:78:60:3a:2b:57:e6:03:c0:e8:ff:05: b5:2d:11:7c:e8:a0:11:6c:66:d2:96:75:cf:d2:3c:d6:64:73: e2:e1:c7:73:41:27:d6:63:92:f5:f1:50:bd:b7:ff:d2:63:a4: 8c:00:6b:2c:b2:79:eb:7a:a3:a9:ba:54:8e:23:07:81:5c:17: 40:7b:9f:cc:d0:74:5c:11:57:8d:ca:16:88:b5:8a:a2:23:b6: eb:bb:ff:da:9a:29:68:d5:f4:c2:eb:10:08:ee:30:14:ae:ea: b2:0b:9a:ad:71:56:c8:3f:de:5a:a8:ba:65:ce:f9:de:60:97: 40:0a:39:89:90:69:d5:22:61:5d:58:2c:31:0b:02:da:f6:a3: 14:06:14:d2:4d:d0:1f:ef:92:ab:37:40:20:23:29:85:35:6e: 50:99:05:32:3a:3c:82:39:8d:34:d1:46:44:2b:e0:a6:21:0e: a1:a6:84:b2:b5:ab:2e:8b:1f:2a:b9:46:74:ab:05:de:70:89: 9c:72:84:d3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6x8uX7MH7ejhpTfBkyVryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjkzNTUwOTI5NDdjMTQ0NjE3ZmJjN2E1MjI1YjFhNzE3MDA1ZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gndvFjimAx+ch6McfhibeJRw4yj KeboBmJoy60rdRNc9fhmxl6KZ8D0Fc5vFjRcrtchMPu21x4vaof6+hrXRtCnxTmx GAjmJdLC7wG+ZI/b0u+vo85B5v/2yhVdZIlWWzLrxdTL7DIthC3lJzXODZ+vg3BH dmDn2P+jvmWsg3c9coOI4hpb0nrSHPD8nUtsHw1r4AdUACxdXCwDJFKPy0FPQk/S 2zOaCWKryRcxrfiQAeyF5VLiHHFplUJ7ck/OiDqR0OZdEuKrNsVrZ2Me6wX/9XJr j8fPnk5m8tK4N993U5ZwLwlGydEN1txCBKS5/Yx975dx9djC7TlEzFfQeQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJKTVQkpR8FEYX+8elIlsacXAF99MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEva3BOVkNTbEh3VVJoZjd4NlVpV3hweGNBWDMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBVf5UAwQB Vf58AwQAVf6MMA0GCSqGSIb3DQEBCwUAA4IBAQAIsejUo707u9dr3pBq9aByqB9C uKCPv5W5FMXeqUWKezLp1REUr+8CTdPwQQCqB4GV+uypzPzkcrzLI/PjeGA6K1fm A8Do/wW1LRF86KARbGbSlnXP0jzWZHPi4cdzQSfWY5L18VC9t//SY6SMAGsssnnr eqOpulSOIweBXBdAe5/M0HRcEVeNyhaItYqiI7bru//amilo1fTC6xAI7jAUruqy C5qtcVbIP95aqLplzvneYJdACjmJkGnVImFdWCwxCwLa9qMUBhTSTdAf75KrN0Ag IymFNW5QmQUyOjyCOY000UZEK+CmIQ6hpoSytasuix8quUZ0qwXecImccoTT -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:07 2026 by rpki-client