This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KflMDj_9LVL-MSu_Zk0bFJHbubA.roa File: KflMDj_9LVL-MSu_Zk0bFJHbubA.roa (raw, json) Hash identifier: EWyT/AYIAZwRNohov8GZ5TLUcdGBQBXA2oZdYfgncSc= Subject key identifier: 29:F9:4C:0E:3F:FD:2D:52:FE:31:2B:BF:66:4D:1B:14:91:DB:B9:B0 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12FCC3FC031A2009EC6B0A9601AC5F Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KflMDj_9LVL-MSu_Zk0bFJHbubA.roa Signing time: Fri 02 Jan 2026 00:19:37 +0000 ROA not before: Fri 02 Jan 2026 00:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212353 IP address blocks: 94.103.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:fc:c3:fc:03:1a:20:09:ec:6b:0a:96:01:ac:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29f94c0e3ffd2d52fe312bbf664d1b1491dbb9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:ff:4f:4e:8c:ca:8f:7f:36:af:38:fd:82: f1:07:94:75:83:72:94:85:4c:c4:9f:05:6f:72:1c: ff:9a:ce:c9:3e:7b:4c:3e:b2:9f:a7:48:fc:a9:4d: 35:84:a8:9f:0b:be:ad:3a:08:f8:95:a4:e7:12:bd: 46:20:f0:77:f7:59:c1:14:af:f3:dc:59:78:d8:cb: 9e:bb:4a:7d:23:ff:31:85:8e:f4:a2:9f:ad:c3:ba: e8:a5:c5:49:90:53:59:02:95:b8:40:23:be:ac:e9: 78:47:a0:3e:5b:62:60:79:bd:87:60:4a:60:a7:15: 32:9f:4e:24:46:a1:64:fc:70:7b:f4:d4:1a:da:de: ab:17:2a:6f:0f:fc:9f:f8:12:67:e1:c7:fc:6e:04: 6b:33:f4:ec:28:84:83:b1:e8:7e:72:6c:b4:0c:70: 73:1b:b3:ec:aa:9c:08:4e:51:45:8a:02:8a:78:be: a1:87:95:8e:e0:8b:97:a3:cd:22:5b:c7:b0:6e:8a: 35:1c:f7:f5:6d:eb:d8:29:22:48:de:9e:8a:95:aa: 07:ac:f8:49:36:65:fe:c3:8c:37:80:ab:9e:b9:46: ed:10:ec:d5:ad:af:1d:85:ea:67:22:1d:91:ab:2e: e5:13:7b:ff:3c:ba:4a:c1:80:a9:9d:f6:c2:1e:93: 2e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F9:4C:0E:3F:FD:2D:52:FE:31:2B:BF:66:4D:1B:14:91:DB:B9:B0 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KflMDj_9LVL-MSu_Zk0bFJHbubA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.103.166.0/24 Signature Algorithm: sha256WithRSAEncryption a6:3a:91:c5:74:32:b1:e5:cd:0e:5b:3a:66:f3:bc:2f:55:df: 38:2c:00:3c:84:7c:30:4c:59:29:59:8d:a0:df:73:6a:a8:40: 7c:93:b2:e3:55:83:41:16:c7:1c:9d:e3:e8:bf:84:1f:3c:e1: f0:03:b8:47:bb:47:fb:bd:93:2a:c7:d0:ba:ce:29:a2:d8:70: a4:65:1b:ab:96:ef:48:0e:5d:c5:9b:36:48:69:27:1d:ab:40: 3d:f1:a7:a7:c3:e4:48:66:91:77:59:c8:52:eb:eb:7e:9f:8e: bb:75:db:c2:b0:c3:d4:cc:35:36:16:8a:52:38:42:2d:05:20: 3f:46:46:28:d2:af:7c:80:2d:f3:e9:22:ea:9b:36:39:c6:75: 5b:44:a2:55:42:f0:f4:c3:74:2f:8d:41:48:da:c7:f1:ef:4f: a3:63:8f:7a:9d:76:d7:97:9c:2e:08:4b:97:27:40:7e:b2:3d: e0:41:fb:80:0c:c2:99:c7:ba:56:d3:34:d1:24:8f:1f:89:f1: 63:d7:cb:74:22:57:94:61:b3:84:aa:98:9a:d9:b2:de:f9:5b: ba:44:a0:9f:69:e9:bb:a8:3c:7a:a0:41:28:e4:f5:63:27:db: 3a:9c:a4:0e:06:fa:b9:45:89:91:d0:ee:3e:1f:56:0d:7f:1c: 78:ed:92:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EvzD/AMaIAnsawqWAaxfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWY5NGMwZTNmZmQyZDUyZmUzMTJiYmY2NjRkMWIxNDkxZGJiOWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupH/T06Myo9/Nq84/YLxB5R1g3KU hUzEnwVvchz/ms7JPntMPrKfp0j8qU01hKifC76tOgj4laTnEr1GIPB391nBFK/z 3Fl42Mueu0p9I/8xhY70op+tw7ropcVJkFNZApW4QCO+rOl4R6A+W2Jgeb2HYEpg pxUyn04kRqFk/HB79NQa2t6rFypvD/yf+BJn4cf8bgRrM/TsKISDseh+cmy0DHBz G7PsqpwITlFFigKKeL6hh5WO4IuXo80iW8ewboo1HPf1bevYKSJI3p6KlaoHrPhJ NmX+w4w3gKueuUbtEOzVra8dhepnIh2Rqy7lE3v/PLpKwYCpnfbCHpMuxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCn5TA4//S1S/jErv2ZNGxSR27mwMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvS2ZsTURqXzlMVkwtTVN1X1prMGJGSkhidWJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXmemMA0G CSqGSIb3DQEBCwUAA4IBAQCmOpHFdDKx5c0OWzpm87wvVd84LAA8hHwwTFkpWY2g 33NqqEB8k7LjVYNBFsccnePov4QfPOHwA7hHu0f7vZMqx9C6zimi2HCkZRurlu9I Dl3FmzZIaScdq0A98aenw+RIZpF3WchS6+t+n467ddvCsMPUzDU2FopSOEItBSA/ RkYo0q98gC3z6SLqmzY5xnVbRKJVQvD0w3QvjUFI2sfx70+jY496nXbXl5wuCEuX J0B+sj3gQfuADMKZx7pW0zTRJI8fifFj18t0IleUYbOEqpia2bLe+Vu6RKCfaem7 qDx6oEEo5PVjJ9s6nKQOBvq5RYmR0O4+H1YNfxx47ZIL -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:26 2026 by rpki-client