This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/KpjA2jvqaepBr4qMgH_FLnOvUpY.roa File: KpjA2jvqaepBr4qMgH_FLnOvUpY.roa (raw, json) Hash identifier: 3T2JI262oLvvByt402oLx92LlE+Er4fLReaVEchBAic= Subject key identifier: 2A:98:C0:DA:3B:EA:69:EA:41:AF:8A:8C:80:7F:C5:2E:73:AF:52:96 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF170F2FD1007BFC4D9C54AB791AFB1 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/KpjA2jvqaepBr4qMgH_FLnOvUpY.roa Signing time: Fri 02 Jan 2026 18:21:27 +0000 ROA not before: Fri 02 Jan 2026 18:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215152 IP address blocks: 91.109.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:70:f2:fd:10:07:bf:c4:d9:c5:4a:b7:91:af:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a98c0da3bea69ea41af8a8c807fc52e73af5296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:fc:be:b8:ea:41:ac:2e:7f:8c:66:ca:d5: 57:05:34:50:ed:5f:4f:8d:c8:25:51:96:f5:04:93: 31:06:70:b3:df:0e:18:ca:50:ff:b9:f9:67:26:03: 67:18:57:b5:ca:de:77:3d:49:6b:ef:a8:19:57:f2: cc:13:46:49:35:09:6e:78:c7:88:e2:dc:66:44:02: 2d:43:2f:0b:ce:71:6c:ec:95:f4:5b:65:e1:46:92: cf:b8:9e:74:3b:3b:d9:4c:52:c4:e0:e2:67:3f:16: 70:9b:5b:9e:af:ff:5c:de:55:ee:f4:4a:53:bc:5a: ba:6b:b5:58:93:e2:05:e5:a9:4f:fe:da:21:0f:f9: 4e:17:26:54:a0:5f:3e:19:eb:5c:9a:d9:2c:4a:bf: 24:78:1d:d7:ad:c3:a4:a6:c6:3a:46:b2:28:06:c6: 8b:f9:59:00:6e:c1:c1:aa:f2:f8:b6:94:5d:e8:16: 37:54:ca:bb:01:e7:ac:d4:09:98:d7:58:2f:d1:f6: 09:cf:31:0e:42:cb:8d:2e:c0:f0:13:8a:76:84:df: b2:8e:23:5a:10:07:c0:e5:fd:52:cf:2c:e3:1d:54: 89:4a:11:4c:9e:8f:f8:16:13:4e:d4:9c:66:b6:66: ea:6b:18:57:bf:62:d6:5c:02:10:02:46:1e:47:2f: 81:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:98:C0:DA:3B:EA:69:EA:41:AF:8A:8C:80:7F:C5:2E:73:AF:52:96 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/KpjA2jvqaepBr4qMgH_FLnOvUpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.44.0/24 Signature Algorithm: sha256WithRSAEncryption 20:1c:18:55:b7:75:af:f5:5a:0d:6e:8a:96:14:cd:87:61:d0: 4d:c4:4a:0c:b2:7c:8e:f9:49:df:bd:b3:2f:7c:f4:f2:9e:50: 1b:ec:68:ba:24:29:e2:ba:e0:f3:bf:00:b8:a0:03:55:d8:f6: 10:01:fa:b6:d4:6d:07:c1:b5:84:d8:9f:4a:b3:cf:75:10:40: 71:24:1b:70:65:87:03:3d:16:6d:69:5c:a1:0d:6b:76:89:9b: 72:ed:84:6e:b6:74:8e:90:73:3b:aa:3e:15:d6:8b:43:2e:6d: 8a:83:c5:ab:db:97:b0:30:44:91:98:dd:e3:9c:ea:d3:ae:da: de:69:36:9c:c1:f8:0b:67:2c:9f:42:96:93:d2:7c:9c:d5:33: 47:ca:55:34:4d:ed:22:4b:95:e2:d3:37:1d:b4:ca:34:b7:03: b9:2c:fd:aa:d4:e0:05:0e:f5:fa:5b:94:dc:de:5d:29:cd:94: ec:2c:53:70:57:49:72:0e:06:c5:a0:ae:74:b2:a5:08:21:9f: 2b:5f:49:69:58:6c:f5:b5:e4:e6:fb:21:6e:ee:39:47:32:6a: 8d:d7:ec:27:28:bc:d5:fa:bc:17:d9:11:99:9f:62:4b:47:e6: 35:2a:cd:c4:b9:07:d4:89:9f:9a:15:a9:e6:82:45:1c:14:5a: e9:bc:42:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8XDy/RAHv8TZxUq3ka+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTk4YzBkYTNiZWE2OWVhNDFhZjhhOGM4MDdmYzUyZTczYWY1Mjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCX8vrjqQawuf4xmytVXBTRQ7V9P jcglUZb1BJMxBnCz3w4YylD/uflnJgNnGFe1yt53PUlr76gZV/LME0ZJNQlueMeI 4txmRAItQy8LznFs7JX0W2XhRpLPuJ50OzvZTFLE4OJnPxZwm1uer/9c3lXu9EpT vFq6a7VYk+IF5alP/tohD/lOFyZUoF8+GetcmtksSr8keB3XrcOkpsY6RrIoBsaL +VkAbsHBqvL4tpRd6BY3VMq7Aees1AmY11gv0fYJzzEOQsuNLsDwE4p2hN+yjiNa EAfA5f1SzyzjHVSJShFMno/4FhNO1JxmtmbqaxhXv2LWXAIQAkYeRy+B/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCqYwNo76mnqQa+KjIB/xS5zr1KWMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvS3BqQTJqdnFhZXBCcjRxTWdIX0ZMbk92VXBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW20sMA0G CSqGSIb3DQEBCwUAA4IBAQAgHBhVt3Wv9VoNboqWFM2HYdBNxEoMsnyO+UnfvbMv fPTynlAb7Gi6JCniuuDzvwC4oANV2PYQAfq21G0HwbWE2J9Ks891EEBxJBtwZYcD PRZtaVyhDWt2iZty7YRutnSOkHM7qj4V1otDLm2Kg8Wr25ewMESRmN3jnOrTrtre aTacwfgLZyyfQpaT0nyc1TNHylU0Te0iS5Xi0zcdtMo0twO5LP2q1OAFDvX6W5Tc 3l0pzZTsLFNwV0lyDgbFoK50sqUIIZ8rX0lpWGz1teTm+yFu7jlHMmqN1+wnKLzV +rwX2RGZn2JLR+Y1Ks3EuQfUiZ+aFanmgkUcFFrpvELl -----END CERTIFICATE-----Generated at Sat Jan 10 22:50:54 2026 by rpki-client