This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/KfDzrq7tls4z8KwGwt2Od5d7QR4.roa File: KfDzrq7tls4z8KwGwt2Od5d7QR4.roa (raw, json) Hash identifier: f00ZqBVQKAfP7VbwXBNtxBQ4qjVHHyynJHKspTjJhAI= Subject key identifier: 29:F0:F3:AE:AE:ED:96:CE:33:F0:AC:06:C2:DD:8E:77:97:7B:41:1E Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F8536568FC4E6650ED3825CEE09FA8A Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/KfDzrq7tls4z8KwGwt2Od5d7QR4.roa Signing time: Fri 02 Jan 2026 16:23:15 +0000 ROA not before: Fri 02 Jan 2026 16:23:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42694 IP address blocks: 193.221.211.0/24 maxlen: 24 2a13:5800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:36:56:8f:c4:e6:65:0e:d3:82:5c:ee:09:fa:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29f0f3aeaeed96ce33f0ac06c2dd8e77977b411e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:0c:c5:c4:22:13:68:6d:84:6a:4d:12:85: 4e:c3:2e:f4:dc:5c:f8:49:09:04:48:e2:07:c5:af: f1:81:f8:21:7f:bd:1a:bc:3f:c9:86:ad:56:40:7f: 48:f3:1a:08:4b:6b:f4:f9:b8:12:e3:7f:c8:a6:c2: 2e:d0:c7:93:e6:53:23:4c:0b:6b:ee:69:75:91:a6: 28:f4:96:f0:ce:6d:97:00:e8:57:10:4a:41:a3:eb: 54:03:9a:03:09:f7:88:ef:cb:33:18:ec:06:d6:46: 51:cd:03:73:96:4a:40:6d:4d:94:50:3b:ce:27:b3: ce:53:6a:10:03:e0:bb:37:6c:3f:41:47:69:4d:48: b9:c7:8b:fa:2b:2d:07:79:e9:01:c6:ea:0c:df:6b: 38:2b:f7:67:9d:85:d3:a6:ca:e7:11:65:67:7f:fe: 23:17:d3:21:09:80:74:0c:2a:23:e8:f1:e6:d6:28: 01:42:df:1e:f8:19:d9:51:dc:ba:61:0d:32:ce:0c: b6:80:36:b8:15:86:06:55:a8:f2:75:81:68:17:90: ab:b4:83:6e:4b:17:70:e0:a6:03:37:2f:78:86:36: 9f:a9:9a:ef:0d:25:b0:df:5f:df:c1:d0:da:c9:b3: 38:a2:7a:bb:40:1d:04:e4:2e:28:75:d3:c7:dd:73: 5c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F0:F3:AE:AE:ED:96:CE:33:F0:AC:06:C2:DD:8E:77:97:7B:41:1E X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/KfDzrq7tls4z8KwGwt2Od5d7QR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.221.211.0/24 IPv6: 2a13:5800::/29 Signature Algorithm: sha256WithRSAEncryption 29:00:a9:9d:89:22:49:79:0f:91:93:94:9f:0e:cf:57:ec:2a: db:dc:bb:56:f5:69:98:3c:8f:ac:fa:fe:02:c0:30:36:4b:73: c5:1f:af:6c:0f:76:b3:af:79:86:63:18:9e:3b:8a:6e:42:b3: f1:36:1a:05:81:f8:fc:f4:69:3c:73:10:39:6a:6a:e1:bd:ac: 40:de:df:48:ba:38:32:65:0a:83:e2:a7:af:53:ce:4b:42:11: ee:a5:e5:b9:07:df:74:68:21:88:42:38:74:47:4e:f3:6a:8e: c4:f2:91:d1:d6:2c:b5:c0:1d:f6:96:20:c7:52:51:e7:79:9e: 7a:8f:fd:3b:3e:61:ca:10:ca:9e:6b:23:25:89:d6:89:bb:81: 2e:13:5c:cb:6d:42:0b:66:a8:9a:ae:6e:fb:db:43:63:d3:c0: 54:e1:5e:2a:37:a6:45:a7:35:6f:ac:5a:f7:93:3f:8b:9e:8d: 06:52:ca:82:45:29:d4:b1:bb:c5:c5:94:21:18:f3:4c:4b:12: 07:f2:9b:3a:ad:17:38:2b:c1:ef:ae:77:b7:2e:37:0d:89:e6: 3b:cf:d5:37:8d:88:a9:a4:66:16:ce:63:a3:c7:e8:ce:3f:94: f3:9c:6f:34:81:ec:2b:02:78:56:10:97:8f:29:d5:fe:7d:2d: f4:74:ef:d4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hTZWj8TmZQ7TglzuCfqKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWYwZjNhZWFlZWQ5NmNlMzNmMGFjMDZjMmRkOGU3Nzk3N2I0MTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1sMxcQiE2hthGpNEoVOwy703Fz4 SQkESOIHxa/xgfghf70avD/Jhq1WQH9I8xoIS2v0+bgS43/IpsIu0MeT5lMjTAtr 7ml1kaYo9Jbwzm2XAOhXEEpBo+tUA5oDCfeI78szGOwG1kZRzQNzlkpAbU2UUDvO J7POU2oQA+C7N2w/QUdpTUi5x4v6Ky0HeekBxuoM32s4K/dnnYXTpsrnEWVnf/4j F9MhCYB0DCoj6PHm1igBQt8e+BnZUdy6YQ0yzgy2gDa4FYYGVajydYFoF5CrtINu Sxdw4KYDNy94hjafqZrvDSWw31/fwdDaybM4onq7QB0E5C4oddPH3XNcaQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCnw866u7ZbOM/CsBsLdjneXe0EeMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvS2ZEenJxN3RsczR6OEt3R3d0Mk9kNWQ3UVI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwd3TMA0E AgACMAcDBQMqE1gAMA0GCSqGSIb3DQEBCwUAA4IBAQApAKmdiSJJeQ+Rk5SfDs9X 7Crb3LtW9WmYPI+s+v4CwDA2S3PFH69sD3azr3mGYxieO4puQrPxNhoFgfj89Gk8 cxA5amrhvaxA3t9IujgyZQqD4qevU85LQhHupeW5B990aCGIQjh0R07zao7E8pHR 1iy1wB32liDHUlHneZ56j/07PmHKEMqeayMlidaJu4EuE1zLbUILZqiarm7720Nj 08BU4V4qN6ZFpzVvrFr3kz+Lno0GUsqCRSnUsbvFxZQhGPNMSxIH8ps6rRc4K8Hv rne3LjcNieY7z9U3jYippGYWzmOjx+jOP5TznG80gewrAnhWEJePKdX+fS30dO/U -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:50 2026 by rpki-client