This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/kFJ-IQZSRQ9ulg6m188pLOPXJdM.roa File: kFJ-IQZSRQ9ulg6m188pLOPXJdM.roa (raw, json) Hash identifier: A3M65uYiRZs1CPARDbR201KZLmUVYHbbX761l4xfrpU= Subject key identifier: 90:52:7E:21:06:52:45:0F:6E:96:0E:A6:D7:CF:29:2C:E3:D7:25:D3 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B3570F820B5F1563BA605E726A31654 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/kFJ-IQZSRQ9ulg6m188pLOPXJdM.roa Signing time: Thu 01 Jan 2026 20:17:38 +0000 ROA not before: Thu 01 Jan 2026 20:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42790 IP address blocks: 81.181.131.0/24 maxlen: 24 193.231.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:70:f8:20:b5:f1:56:3b:a6:05:e7:26:a3:16:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90527e210652450f6e960ea6d7cf292ce3d725d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:63:54:41:57:15:8f:ae:39:a4:16:44:4d:4b: 45:8e:08:57:49:4b:27:dc:4f:54:86:11:98:76:0a: ff:61:52:d3:36:15:5f:b9:22:3a:9c:b5:e2:b2:ca: 36:c3:d1:8f:a1:35:22:22:61:90:3c:3b:81:b5:4a: b1:c3:4c:9c:06:f4:8a:94:96:bc:b7:95:b5:41:11: 26:c1:65:d9:e6:b6:67:0a:62:65:f0:92:e3:ee:93: ba:15:1c:08:43:32:64:1d:13:65:5e:2e:49:4d:2e: f9:a3:f7:e9:74:85:f8:0e:cf:b4:2b:8b:8e:d0:61: 8d:74:11:ed:08:5b:59:fb:d4:d3:74:f5:af:f6:b6: bb:9d:5c:b2:69:d4:9d:eb:92:ea:a7:92:b1:76:ee: cd:e9:f1:dd:66:f7:a1:8c:e0:aa:ea:4f:5d:d1:90: 6d:c0:b1:56:70:c9:67:5b:4a:b3:8d:18:6f:e5:8c: 6f:b8:71:5e:71:1f:a0:56:22:36:ff:bd:3a:bb:d8: 34:d9:cc:45:75:08:1f:9f:3e:df:df:e6:3a:28:cf: 19:81:91:6c:43:4e:38:07:47:09:e5:e0:d7:c3:d1: 1a:ac:2d:dd:e2:89:80:00:f6:89:1e:b9:12:b2:44: dd:70:12:b2:2d:41:4b:1e:7b:4b:55:a3:13:8e:49: 7c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:52:7E:21:06:52:45:0F:6E:96:0E:A6:D7:CF:29:2C:E3:D7:25:D3 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/kFJ-IQZSRQ9ulg6m188pLOPXJdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.181.131.0/24 193.231.197.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:be:44:7e:79:08:ef:0f:d5:eb:38:d6:f5:ba:02:cf:ac:cc: 36:dc:e4:d8:25:4d:5b:75:e5:1e:c6:66:cb:8a:51:0a:c4:7f: 3e:ea:ce:98:b2:ad:69:f0:40:00:92:46:80:39:31:24:69:59: 3e:9d:93:3e:89:38:03:31:75:2d:fc:38:7d:a1:1c:76:f6:55: d1:c1:4d:25:17:3e:1f:1f:1c:34:87:f6:7b:36:8c:60:0a:e4: 4f:dc:15:8b:71:52:0d:b0:cd:d6:47:cb:da:0c:30:58:24:f4: b1:37:23:cd:18:10:86:82:8b:12:8b:55:e2:07:04:94:23:c2: 66:8b:30:69:29:d8:ea:55:7b:c5:e2:69:04:ba:cf:37:3f:90: 3b:82:1b:3d:42:36:d8:38:f1:b6:96:ef:c4:30:3d:32:bd:fe: 4c:c5:16:c4:ed:36:7e:87:c7:05:62:38:42:9f:6a:28:2a:5d: f8:6f:d4:59:17:73:6e:e1:e0:0d:6e:a1:05:97:ff:33:73:c0: 35:69:88:7e:48:5f:40:07:e4:42:de:d6:09:82:53:70:d6:26: 3a:b8:a9:d6:3a:93:e9:14:53:c7:a8:30:73:d7:bc:f8:9b:0e: 80:ed:4b:18:46:5a:49:5f:98:0f:cf:3a:48:47:7d:58:e7:b2: 73:7c:13:c7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NXD4ILXxVjumBecmoxZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDUyN2UyMTA2NTI0NTBmNmU5NjBlYTZkN2NmMjkyY2UzZDcyNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGNUQVcVj645pBZETUtFjghXSUsn 3E9UhhGYdgr/YVLTNhVfuSI6nLXisso2w9GPoTUiImGQPDuBtUqxw0ycBvSKlJa8 t5W1QREmwWXZ5rZnCmJl8JLj7pO6FRwIQzJkHRNlXi5JTS75o/fpdIX4Ds+0K4uO 0GGNdBHtCFtZ+9TTdPWv9ra7nVyyadSd65Lqp5Kxdu7N6fHdZvehjOCq6k9d0ZBt wLFWcMlnW0qzjRhv5YxvuHFecR+gViI2/706u9g02cxFdQgfnz7f3+Y6KM8ZgZFs Q044B0cJ5eDXw9EarC3d4omAAPaJHrkSskTdcBKyLUFLHntLVaMTjkl8WwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJBSfiEGUkUPbpYOptfPKSzj1yXTMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEva0ZKLUlRWlNSUTl1bGc2bTE4OHBMT1BYSmRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUbWDAwQA wefFMA0GCSqGSIb3DQEBCwUAA4IBAQBtvkR+eQjvD9XrONb1ugLPrMw23OTYJU1b deUexmbLilEKxH8+6s6Ysq1p8EAAkkaAOTEkaVk+nZM+iTgDMXUt/Dh9oRx29lXR wU0lFz4fHxw0h/Z7NoxgCuRP3BWLcVINsM3WR8vaDDBYJPSxNyPNGBCGgosSi1Xi BwSUI8JmizBpKdjqVXvF4mkEus83P5A7ghs9QjbYOPG2lu/EMD0yvf5MxRbE7TZ+ h8cFYjhCn2ooKl34b9RZF3Nu4eANbqEFl/8zc8A1aYh+SF9AB+RC3tYJglNw1iY6 uKnWOpPpFFPHqDBz17z4mw6A7UsYRlpJX5gPzzpIR31Y57JzfBPH -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:51 2026 by rpki-client