This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/kkPGy3M1-5xu9OIRpXmU25SAI2Y.roa File: kkPGy3M1-5xu9OIRpXmU25SAI2Y.roa (raw, json) Hash identifier: cyrjAwqc3oU6K0wTg1ctpzSIWyDuDU/OKlnASWiAbYg= Subject key identifier: 92:43:C6:CB:73:35:FB:9C:6E:F4:E2:11:A5:79:94:DB:94:80:23:66 Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb Certificate serial: 019B7F820E2B87765D4CE6E31704F645AC67 Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/kkPGy3M1-5xu9OIRpXmU25SAI2Y.roa Signing time: Fri 02 Jan 2026 16:19:48 +0000 ROA not before: Fri 02 Jan 2026 16:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203011 IP address blocks: 80.75.209.0/24 maxlen: 24 193.28.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:0e:2b:87:76:5d:4c:e6:e3:17:04:f6:45:ac:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb Validity Not Before: Jan 2 16:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9243c6cb7335fb9c6ef4e211a57994db94802366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:43:18:3f:99:5c:80:30:29:92:32:2a:e6:a2: 80:62:58:f8:db:c6:39:07:ad:6c:ee:47:0a:15:d3: 7d:2a:c8:71:aa:23:ee:8a:05:8b:22:9e:f0:47:7e: c0:01:29:a9:24:2c:c4:6e:09:10:b7:b4:4a:07:48: 93:a9:1c:68:1b:2d:ba:1d:62:c0:d1:e3:be:9e:61: a4:b7:62:d5:97:5f:cf:e2:9d:ba:63:53:06:e5:b1: 90:7c:d9:60:47:21:40:fb:d2:a9:3b:be:9a:d8:95: f9:be:6c:bd:22:94:74:5f:93:9a:a4:74:e2:16:8e: 3e:da:b7:c5:a9:0f:cd:0f:4b:6b:25:2d:7b:98:5b: 08:13:b1:f3:f8:16:b3:5f:ec:7c:da:40:43:84:59: 39:78:13:dd:92:f0:1d:42:9b:f1:4d:2c:d1:11:c8: 56:87:48:e9:c9:dc:3f:4d:0f:c6:b2:3a:46:c0:a2: 93:43:86:a9:fb:91:fa:0d:4c:cf:db:c8:6f:29:ec: f0:9e:f4:96:9c:0e:ba:e5:a3:a2:cc:92:74:6a:d2: 8b:32:a8:2b:17:ce:43:2f:4b:c7:f3:7c:ae:29:9d: 52:f0:9d:2f:76:ee:09:06:d9:43:60:0d:f7:a9:e4: 00:17:ec:4a:3f:a8:92:b6:53:79:23:08:b5:cb:d6: db:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:43:C6:CB:73:35:FB:9C:6E:F4:E2:11:A5:79:94:DB:94:80:23:66 X509v3 Authority Key Identifier: keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/kkPGy3M1-5xu9OIRpXmU25SAI2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.75.209.0/24 193.28.176.0/24 Signature Algorithm: sha256WithRSAEncryption 91:21:12:91:db:92:cd:25:c5:90:35:7a:5d:d4:51:52:24:98: ef:47:83:7d:aa:b8:2e:a4:a3:4b:1c:2b:a8:7e:eb:06:6c:0b: 4b:db:d3:00:1a:ff:b7:75:ea:32:a9:72:5a:21:f8:72:d2:ac: 22:aa:0d:20:8a:e1:9a:8b:79:f2:c9:c3:84:01:60:82:54:67: 53:2f:57:91:ab:89:ae:66:f8:ca:e3:8d:7b:e1:5b:43:9b:ba: 50:62:db:35:b6:07:42:39:c6:90:e2:ee:a3:20:c8:2b:62:4b: e8:66:bf:8d:bf:bb:93:32:33:e5:ea:a4:05:1a:e0:e0:7f:33: 19:9d:28:9a:80:c7:8f:b7:c8:30:72:74:6c:e5:cc:c4:4c:37: c3:47:65:a2:fa:05:09:d6:a5:35:43:0e:bd:ef:54:01:2c:b9: 1d:4f:c0:9e:12:76:a8:41:dd:77:7d:0b:9d:4e:2f:ef:5e:f6: 3f:b8:90:be:80:41:0a:a2:8f:3e:21:e2:b8:92:24:86:20:d1: c5:f2:09:ca:3b:37:15:b6:9e:a2:1d:aa:4d:b2:5f:e8:47:ae: 64:eb:cf:e4:53:22:40:0a:ea:04:3c:5a:c7:78:ef:7d:ee:47: 9c:94:e1:56:61:74:b0:cb:07:43:8e:36:8e:49:03:d2:e7:d7: cc:af:d1:02 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gg4rh3ZdTObjFwT2RaxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MDQ0YTlkMTBhMTllNmIxYWNlZGFjOWZmNzc4ZDRmNDA5 MDY4Y2IwHhcNMjYwMTAyMTYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjQzYzZjYjczMzVmYjljNmVmNGUyMTFhNTc5OTRkYjk0ODAyMzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20MYP5lcgDApkjIq5qKAYlj428Y5 B61s7kcKFdN9KshxqiPuigWLIp7wR37AASmpJCzEbgkQt7RKB0iTqRxoGy26HWLA 0eO+nmGkt2LVl1/P4p26Y1MG5bGQfNlgRyFA+9KpO76a2JX5vmy9IpR0X5OapHTi Fo4+2rfFqQ/ND0trJS17mFsIE7Hz+BazX+x82kBDhFk5eBPdkvAdQpvxTSzREchW h0jpydw/TQ/GsjpGwKKTQ4ap+5H6DUzP28hvKezwnvSWnA665aOizJJ0atKLMqgr F85DL0vH83yuKZ1S8J0vdu4JBtlDYA33qeQAF+xKP6iStlN5Iwi1y9bbSwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJJDxstzNfucbvTiEaV5lNuUgCNmMB8GA1UdIwQY MBaAFOQESp0QoZ5rGs7ayf93jU9AkGjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZThiNWQtZWU5OC00N2ZiLWEzODkt MDNmYTdhOWMzNzFlLzEva2tQR3kzTTEtNXh1OU9JUnBYbVUyNVNBSTJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wZThiNWQtZWU5OC00N2ZiLWEzODktMDNmYTdhOWMzNzFl LzEvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEvRAwQA wRywMA0GCSqGSIb3DQEBCwUAA4IBAQCRIRKR25LNJcWQNXpd1FFSJJjvR4N9qrgu pKNLHCuofusGbAtL29MAGv+3deoyqXJaIfhy0qwiqg0giuGai3nyycOEAWCCVGdT L1eRq4muZvjK44174VtDm7pQYts1tgdCOcaQ4u6jIMgrYkvoZr+Nv7uTMjPl6qQF GuDgfzMZnSiagMePt8gwcnRs5czETDfDR2Wi+gUJ1qU1Qw6971QBLLkdT8CeEnao Qd13fQudTi/vXvY/uJC+gEEKoo8+IeK4kiSGINHF8gnKOzcVtp6iHapNsl/oR65k 68/kUyJACuoEPFrHeO997keclOFWYXSwywdDjjaOSQPS59fMr9EC -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:26 2026 by rpki-client