This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/kHyeVvn4JoARm1ZgfSsn_4sjUK0.roa File: kHyeVvn4JoARm1ZgfSsn_4sjUK0.roa (raw, json) Hash identifier: kI7ZNlTpRra3MpODVxn5O1XIoHdEb9TeHKIqmZcOjSw= Subject key identifier: 90:7C:9E:56:F9:F8:26:80:11:9B:56:60:7D:2B:27:FF:8B:23:50:AD Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA2920E91D7BF4BD1C8D417B902BB3 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/kHyeVvn4JoARm1ZgfSsn_4sjUK0.roa Signing time: Fri 02 Jan 2026 08:19:19 +0000 ROA not before: Fri 02 Jan 2026 08:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15640 IP address blocks: 213.87.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:29:20:e9:1d:7b:f4:bd:1c:8d:41:7b:90:2b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=907c9e56f9f82680119b56607d2b27ff8b2350ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ee:ae:0b:a2:66:8d:f5:49:0c:f4:6c:3a:5d: c0:85:9d:93:0d:d0:bd:b5:c8:c0:4c:26:47:db:17: d5:72:88:10:18:f4:52:b3:b1:0c:70:19:bd:2a:5c: df:50:95:f0:a6:17:a3:2d:e3:3a:97:12:98:e1:ad: 69:b4:09:3c:77:a4:d2:6b:68:da:3f:ad:77:ea:07: 07:9d:6e:f2:6a:8c:8d:63:7b:f3:d1:db:6d:cb:99: a0:e1:22:7c:c8:26:3f:ad:5e:c9:e5:09:fa:d5:5a: 79:25:36:07:eb:9c:f3:08:66:0c:eb:49:e2:09:46: 5e:08:57:b3:7c:5a:ec:f3:71:ad:88:7f:c1:67:25: 97:6f:33:7a:1f:af:a5:60:e3:9f:be:b7:5f:70:24: 77:71:ca:12:b2:38:7a:3a:90:3e:d5:f6:41:e1:61: 2f:1d:12:a8:87:60:2c:8a:6a:fe:ea:dc:69:77:4a: 2c:0b:94:7e:21:c1:b3:1c:41:67:19:75:8b:0b:9f: bc:fc:1e:16:5d:42:22:52:65:e1:11:d9:48:18:bd: 0b:2a:4b:5b:16:3f:d1:3e:89:1f:c6:47:95:fa:02: 5c:8d:ca:15:e8:a7:58:cd:f3:3d:ed:8c:fb:9e:72: ae:ef:2d:86:83:d1:d0:6d:65:d5:36:e0:d7:3a:24: fc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7C:9E:56:F9:F8:26:80:11:9B:56:60:7D:2B:27:FF:8B:23:50:AD X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/kHyeVvn4JoARm1ZgfSsn_4sjUK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.87.42.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:c8:7d:f5:e8:b5:8e:97:73:b7:52:2a:d0:44:9c:43:bf:b1: 80:55:85:eb:f9:96:f8:04:90:12:38:aa:d3:67:b2:b3:2f:e9: 0e:dd:df:e5:c7:58:0f:c5:df:67:7a:aa:24:ef:6d:a9:28:c6: c0:b9:7f:bb:ca:c8:4d:56:b4:ea:5c:65:2b:0d:3f:97:b6:47: 48:2c:f3:ac:21:69:2b:b1:84:e9:e6:c6:0c:61:b2:25:ce:9f: 70:97:3b:80:4e:74:8d:dc:ff:96:1f:8b:28:bf:d0:20:87:6a: 59:61:e4:cc:08:3a:48:3a:3e:34:67:82:aa:2b:7a:99:52:40: 92:1d:aa:a7:bc:3f:9a:75:23:be:77:2c:9b:8f:f8:aa:ea:9f: 82:38:6c:88:c8:e6:96:79:02:af:83:f8:91:06:5e:d2:c5:64: ca:a6:78:c8:ec:ed:34:1a:ed:77:53:63:eb:ce:5c:e4:73:eb: 25:52:a5:50:08:41:e7:30:cd:c4:5b:78:0e:64:1b:3c:cc:c3: 55:35:80:97:8a:89:8a:76:ef:fe:cb:cf:c7:a0:93:39:88:8f: 71:bf:cd:3c:21:f2:37:d3:ec:3b:46:08:24:d5:3a:f3:58:c9: 0f:cb:73:5f:74:5a:f5:73:75:5f:03:d1:52:5b:7d:51:9f:12: 54:32:0f:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yikg6R179L0cjUF7kCuzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDdjOWU1NmY5ZjgyNjgwMTE5YjU2NjA3ZDJiMjdmZjhiMjM1MGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+6uC6JmjfVJDPRsOl3AhZ2TDdC9 tcjATCZH2xfVcogQGPRSs7EMcBm9KlzfUJXwphejLeM6lxKY4a1ptAk8d6TSa2ja P6136gcHnW7yaoyNY3vz0dtty5mg4SJ8yCY/rV7J5Qn61Vp5JTYH65zzCGYM60ni CUZeCFezfFrs83GtiH/BZyWXbzN6H6+lYOOfvrdfcCR3ccoSsjh6OpA+1fZB4WEv HRKoh2Asimr+6txpd0osC5R+IcGzHEFnGXWLC5+8/B4WXUIiUmXhEdlIGL0LKktb Fj/RPokfxkeV+gJcjcoV6KdYzfM97Yz7nnKu7y2Gg9HQbWXVNuDXOiT8dwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJB8nlb5+CaAEZtWYH0rJ/+LI1CtMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEva0h5ZVZ2bjRKb0FSbTFaZ2ZTc25fNHNqVUswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1VcqMA0G CSqGSIb3DQEBCwUAA4IBAQAOyH316LWOl3O3UirQRJxDv7GAVYXr+Zb4BJASOKrT Z7KzL+kO3d/lx1gPxd9neqok722pKMbAuX+7yshNVrTqXGUrDT+XtkdILPOsIWkr sYTp5sYMYbIlzp9wlzuATnSN3P+WH4sov9Agh2pZYeTMCDpIOj40Z4KqK3qZUkCS HaqnvD+adSO+dyybj/iq6p+COGyIyOaWeQKvg/iRBl7SxWTKpnjI7O00Gu13U2Pr zlzkc+slUqVQCEHnMM3EW3gOZBs8zMNVNYCXiomKdu/+y8/HoJM5iI9xv808IfI3 0+w7Rggk1TrzWMkPy3NfdFr1c3VfA9FSW31RnxJUMg89 -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:59 2026 by rpki-client