This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/kV7AwnkXYKEJUo_QQveMLFjR1Q0.roa File: kV7AwnkXYKEJUo_QQveMLFjR1Q0.roa (raw, json) Hash identifier: SX4oJ6iuf50pvLJFbaFInsRNowHDyi5Eu+2bcodIAMI= Subject key identifier: 91:5E:C0:C2:79:17:60:A1:09:52:8F:D0:42:F7:8C:2C:58:D1:D5:0D Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866 Certificate serial: 019B7911036D3793C965373370CB17E90B3A Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/kV7AwnkXYKEJUo_QQveMLFjR1Q0.roa Signing time: Thu 01 Jan 2026 10:18:36 +0000 ROA not before: Thu 01 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208842 IP address blocks: 91.209.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:03:6d:37:93:c9:65:37:33:70:cb:17:e9:0b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866 Validity Not Before: Jan 1 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=915ec0c2791760a109528fd042f78c2c58d1d50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ae:ea:2f:c7:6d:94:50:1b:4b:2e:a9:e5:1e: b5:9f:53:1e:45:68:ad:3a:89:10:f6:e4:e9:0f:04: 2e:b2:3a:36:fc:ea:51:aa:4b:f1:23:ee:a5:b0:54: 0a:df:31:77:ed:7f:ee:60:63:65:82:14:4c:c6:47: 23:4d:8f:3d:be:f8:cc:bd:e7:1e:a6:04:9f:f7:52: 87:cf:13:f7:48:09:75:92:1b:a5:0c:0c:ae:ca:b5: 7c:17:66:ac:7e:78:79:0b:13:6e:36:e6:58:04:f8: 78:b4:02:64:78:cf:f5:b3:94:78:ff:98:05:77:2c: 99:c7:b0:81:29:42:bf:f9:ac:4d:90:90:5d:29:8f: be:67:f7:49:2d:11:02:78:23:a6:7d:93:45:61:44: 23:e3:7d:df:54:e1:ad:a9:b4:c7:ed:bf:4c:bf:24: 8d:a0:b0:88:e5:d0:82:64:e2:70:0d:c4:38:7d:0c: 5e:33:9e:69:2c:9c:21:10:f6:0e:55:bc:0f:05:5f: 40:f2:1c:b4:6a:e0:cd:fd:7b:76:53:95:f0:18:91: 73:7c:12:b9:3b:42:1b:e7:a6:5e:40:5b:fc:b9:04: 4c:99:03:4b:5a:9e:40:55:14:9a:ee:f7:67:f0:15: 20:91:89:fe:4d:fa:85:2e:5f:97:06:5e:4a:27:5d: 6a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5E:C0:C2:79:17:60:A1:09:52:8F:D0:42:F7:8C:2C:58:D1:D5:0D X509v3 Authority Key Identifier: keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/kV7AwnkXYKEJUo_QQveMLFjR1Q0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.4.0/24 Signature Algorithm: sha256WithRSAEncryption 29:3a:3f:e2:58:e7:51:c3:b6:5f:4f:9e:da:a1:0f:87:2a:bd: 6f:b0:6b:fd:b4:54:0f:64:88:2e:ab:0b:ca:d7:ab:12:15:37: 66:ca:52:a2:d0:e7:94:af:d0:7f:3d:2b:ca:10:36:50:4d:ca: fd:05:28:8f:1e:6a:6b:45:d0:41:8c:ad:a1:08:88:90:da:5e: 6d:ce:4b:70:c7:0a:b2:c4:4a:6c:ff:5b:e7:c3:8b:a7:fb:1b: e2:fd:a3:b5:bc:c5:9e:df:aa:2d:51:37:ad:3d:17:c9:04:f1: 2f:70:9d:7a:86:05:d2:a3:5e:61:44:57:20:e8:57:9a:b2:77: 58:f7:7c:6f:ee:1a:c5:d5:66:5d:26:48:94:3d:83:63:56:e7: fb:84:d1:0e:de:40:f7:52:f4:68:c9:32:18:40:d3:b0:44:f5: cd:27:c2:89:fa:2c:de:82:9a:69:15:cc:72:97:49:e0:16:29: 66:ae:b9:cf:f5:72:a7:72:13:3c:de:60:59:73:d7:46:db:b2: 4e:7f:23:fc:c2:6a:45:bd:a1:3d:23:4b:d2:37:25:9b:c3:9e: 8c:78:91:e0:ee:03:87:d0:e9:5c:1c:54:c6:a2:33:9c:fe:b4: 9e:1f:e3:dd:52:62:b6:4f:bd:7a:0f:74:20:fc:48:cc:e1:0b: 61:95:ec:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EQNtN5PJZTczcMsX6Qs6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMTAyODE1ZDI3ZTY1MTE3NDZkNGEzZTlmZDEzNTljZDk4 MmE4NjYwHhcNMjYwMTAxMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTVlYzBjMjc5MTc2MGExMDk1MjhmZDA0MmY3OGMyYzU4ZDFkNTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK7qL8dtlFAbSy6p5R61n1MeRWit OokQ9uTpDwQusjo2/OpRqkvxI+6lsFQK3zF37X/uYGNlghRMxkcjTY89vvjMvece pgSf91KHzxP3SAl1khulDAyuyrV8F2asfnh5CxNuNuZYBPh4tAJkeM/1s5R4/5gF dyyZx7CBKUK/+axNkJBdKY++Z/dJLRECeCOmfZNFYUQj433fVOGtqbTH7b9MvySN oLCI5dCCZOJwDcQ4fQxeM55pLJwhEPYOVbwPBV9A8hy0auDN/Xt2U5XwGJFzfBK5 O0Ib56ZeQFv8uQRMmQNLWp5AVRSa7vdn8BUgkYn+TfqFLl+XBl5KJ11qTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJFewMJ5F2ChCVKP0EL3jCxY0dUNMB8GA1UdIwQY MBaAFC8QKBXSfmURdG1KPp/RNZzZgqhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMzNmOWEtOWJjMy00MzBkLWJiN2Mt NWVjNzk0YjBlNjljLzEva1Y3QXdua1hZS0VKVW9fUVF2ZU1MRmpSMVEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hMzNmOWEtOWJjMy00MzBkLWJiN2MtNWVjNzk0YjBlNjlj LzEvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9EEMA0G CSqGSIb3DQEBCwUAA4IBAQApOj/iWOdRw7ZfT57aoQ+HKr1vsGv9tFQPZIguqwvK 16sSFTdmylKi0OeUr9B/PSvKEDZQTcr9BSiPHmprRdBBjK2hCIiQ2l5tzktwxwqy xEps/1vnw4un+xvi/aO1vMWe36otUTetPRfJBPEvcJ16hgXSo15hRFcg6FeasndY 93xv7hrF1WZdJkiUPYNjVuf7hNEO3kD3UvRoyTIYQNOwRPXNJ8KJ+izegpppFcxy l0ngFilmrrnP9XKnchM83mBZc9dG27JOfyP8wmpFvaE9I0vSNyWbw56MeJHg7gOH 0OlcHFTGojOc/rSeH+PdUmK2T716D3Qg/EjM4QthlexH -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:20 2026 by rpki-client