This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/KxdXGi5kcEn5H88zDpyHu4yTUP4.roa File: KxdXGi5kcEn5H88zDpyHu4yTUP4.roa (raw, json) Hash identifier: g2zgjQYEDaw+gCMtY6CEjRcaWyHbxg7L3jawkUTKink= Subject key identifier: 2B:17:57:1A:2E:64:70:49:F9:1F:CF:33:0E:9C:87:BB:8C:93:50:FE Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B3563340573FF4F2B203424733E5309 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/KxdXGi5kcEn5H88zDpyHu4yTUP4.roa Signing time: Thu 01 Jan 2026 20:17:34 +0000 ROA not before: Thu 01 Jan 2026 20:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28727 IP address blocks: 80.96.153.0/24 maxlen: 24 80.96.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:63:34:05:73:ff:4f:2b:20:34:24:73:3e:53:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b17571a2e647049f91fcf330e9c87bb8c9350fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7c:78:18:95:e1:c4:e3:9a:55:1a:f4:8b:c4: b0:42:61:ab:ee:6e:2b:d4:46:76:2a:88:c0:63:66: e5:df:e6:50:21:2b:51:ba:83:ed:4a:56:e4:27:29: 42:43:6d:c8:b7:2d:63:f3:1b:4f:4d:76:86:3e:19: d6:45:35:ad:09:6a:ea:7a:a2:95:d4:8e:06:81:c9: 60:23:82:c7:ab:42:0c:8b:a2:81:a0:8d:17:17:22: 15:23:e6:f1:03:d2:f4:d8:24:b1:63:c3:28:bd:6d: 7f:c2:18:f5:0e:f8:8b:e6:ea:18:d5:7c:78:2f:e8: 1d:7a:89:8f:e8:92:48:3e:c3:0c:06:85:45:f3:f8: 49:b0:f3:46:f2:d6:16:3d:88:a5:8f:a0:d1:a4:09: a7:b7:08:f5:7d:3b:d4:e3:1d:25:ff:ff:01:86:03: 0d:ee:75:c3:42:f7:e5:bc:04:91:9d:21:74:e3:e0: 63:6b:f1:99:a1:15:d7:30:89:ce:19:86:93:ac:40: 91:c4:29:d6:3b:6d:5f:ce:64:5c:df:fe:c5:e7:7c: 02:f6:2e:f3:5b:23:67:03:b9:e3:3b:c1:0e:a8:6e: a7:86:a6:38:bc:af:93:c8:d6:7f:75:eb:d4:01:a3: 67:e4:d2:b1:f7:dd:6e:8a:a6:bc:d1:b9:68:25:3c: 7d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:17:57:1A:2E:64:70:49:F9:1F:CF:33:0E:9C:87:BB:8C:93:50:FE X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/KxdXGi5kcEn5H88zDpyHu4yTUP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.96.153.0/24 80.96.175.0/24 Signature Algorithm: sha256WithRSAEncryption 74:3f:ff:b9:c4:b6:c4:33:2f:8a:e0:1d:86:7a:57:e4:1b:9d: 57:8d:f3:a9:61:7d:aa:01:d2:59:21:61:52:f6:1d:aa:25:8f: 69:ef:fa:61:f2:68:96:1e:45:62:7c:8d:5f:ba:39:c7:8d:90: f9:39:b3:f4:ff:b2:6b:f1:28:d9:10:12:a6:24:be:d5:98:29: ba:05:65:a0:22:7f:83:3b:63:b7:53:05:73:91:39:98:d8:d5: a0:ca:d3:5f:49:c6:d2:fb:e5:5f:b3:5d:be:b1:c1:9e:6f:23: 88:f2:e9:55:41:ed:a9:19:9f:c6:a1:40:6e:19:ea:64:fd:0b: 9f:f3:42:f7:25:c2:d1:d1:ba:f6:d1:a6:a5:30:d4:f0:09:77: 1d:35:43:75:4c:f3:cb:05:44:4c:9d:28:3f:7e:26:c5:f9:16: 39:1c:d9:28:22:62:bf:85:bc:51:36:bc:6e:58:31:8f:6f:fc: 1a:ec:ed:f4:00:57:76:f1:01:42:08:8c:df:57:87:a8:a7:9c: 9f:93:27:70:ab:22:76:4b:a5:3b:f5:aa:7c:02:6f:b3:5c:f1: f8:f1:e3:fd:fb:36:8e:86:ba:60:36:4e:f9:79:4e:33:12:67: 1c:02:04:11:c0:86:5e:5b:29:e3:32:77:41:bf:9a:8b:90:cc: 0d:2c:b2:71 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NWM0BXP/TysgNCRzPlMJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjE3NTcxYTJlNjQ3MDQ5ZjkxZmNmMzMwZTljODdiYjhjOTM1MGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXx4GJXhxOOaVRr0i8SwQmGr7m4r 1EZ2KojAY2bl3+ZQIStRuoPtSlbkJylCQ23Ity1j8xtPTXaGPhnWRTWtCWrqeqKV 1I4GgclgI4LHq0IMi6KBoI0XFyIVI+bxA9L02CSxY8MovW1/whj1DviL5uoY1Xx4 L+gdeomP6JJIPsMMBoVF8/hJsPNG8tYWPYilj6DRpAmntwj1fTvU4x0l//8BhgMN 7nXDQvflvASRnSF04+Bja/GZoRXXMInOGYaTrECRxCnWO21fzmRc3/7F53wC9i7z WyNnA7njO8EOqG6nhqY4vK+TyNZ/devUAaNn5NKx991uiqa80bloJTx9AQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCsXVxouZHBJ+R/PMw6ch7uMk1D+MB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvS3hkWEdpNWtjRW41SDg4ekRweUh1NHlUVVA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUGCZAwQA UGCvMA0GCSqGSIb3DQEBCwUAA4IBAQB0P/+5xLbEMy+K4B2GelfkG51XjfOpYX2q AdJZIWFS9h2qJY9p7/ph8miWHkVifI1fujnHjZD5ObP0/7Jr8SjZEBKmJL7VmCm6 BWWgIn+DO2O3UwVzkTmY2NWgytNfScbS++Vfs12+scGebyOI8ulVQe2pGZ/GoUBu Gepk/Quf80L3JcLR0br20aalMNTwCXcdNUN1TPPLBURMnSg/fibF+RY5HNkoImK/ hbxRNrxuWDGPb/wa7O30AFd28QFCCIzfV4eop5yfkydwqyJ2S6U79ap8Am+zXPH4 8eP9+zaOhrpgNk75eU4zEmccAgQRwIZeWynjMndBv5qLkMwNLLJx -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:04 2026 by rpki-client