This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/kJEyi9t8ewQAOML32QKelXRnNQw.roa File: kJEyi9t8ewQAOML32QKelXRnNQw.roa (raw, json) Hash identifier: qisABknNXytALeoXTgeNFHWe1rQRJTNgqfs59Mw/Lek= Subject key identifier: 90:91:32:8B:DB:7C:7B:04:00:38:C2:F7:D9:02:9E:95:74:67:35:0C Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1 Certificate serial: 019B7834A764D6151E011ED88ACFB973ADDE Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/kJEyi9t8ewQAOML32QKelXRnNQw.roa Signing time: Thu 01 Jan 2026 06:17:55 +0000 ROA not before: Thu 01 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 185.21.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a7:64:d6:15:1e:01:1e:d8:8a:cf:b9:73:ad:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1 Validity Not Before: Jan 1 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9091328bdb7c7b040038c2f7d9029e957467350c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:56:71:c5:0f:ee:35:d8:58:5e:48:8e:61:71: 5d:0b:c9:97:14:85:04:de:5a:3c:e2:93:01:64:ed: 19:00:3f:36:85:1a:cf:c7:7b:d6:5b:d2:dd:98:e2: bb:ca:84:8b:8a:f7:cc:8f:ef:f4:aa:1e:cb:e3:cc: 59:15:97:8d:84:7e:c8:cf:fb:37:35:2d:73:60:f0: 0e:78:ce:cb:c8:1b:67:ac:d2:57:50:91:e1:88:f8: 33:1d:52:2d:1d:a6:d1:46:1c:95:5f:6a:ea:35:7c: 2b:ee:92:aa:5d:f4:77:ac:0f:09:ce:fa:12:9a:8d: b6:a2:38:18:f8:46:65:2f:08:65:5c:84:df:96:f9: 4d:ca:50:54:70:8f:df:8e:fc:41:96:c8:0c:78:42: 26:15:2a:e8:fd:75:8c:50:23:75:71:09:af:06:28: 36:d4:65:46:13:38:60:b3:b8:16:cf:fd:45:f4:d9: f9:ba:4a:58:02:95:fe:4b:31:e8:ad:11:27:d1:1d: e6:05:24:4a:a0:fb:95:4c:da:69:17:83:30:29:98: 7c:b7:26:68:4a:ec:d4:8f:a0:16:15:34:2f:07:61: 71:86:77:4c:40:bf:0d:41:a6:74:95:a7:87:db:4b: 43:37:41:b9:77:c7:14:85:87:58:4a:96:fa:fd:03: 91:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:91:32:8B:DB:7C:7B:04:00:38:C2:F7:D9:02:9E:95:74:67:35:0C X509v3 Authority Key Identifier: keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/kJEyi9t8ewQAOML32QKelXRnNQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.21.128.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:63:33:1e:da:b8:67:2d:44:38:12:61:91:2d:29:8a:f5:d3: 16:76:5a:33:ef:f2:dd:c6:c2:9c:2d:ff:4d:42:93:05:fb:d8: 38:c8:66:7a:db:9b:21:4c:19:9a:bf:59:95:2c:54:84:90:1a: a0:eb:9c:b7:bf:8b:4d:ee:81:4a:cf:9c:97:28:1e:3e:63:20: 0f:e7:eb:86:21:78:75:d9:4f:51:8c:79:f7:63:1e:87:e5:21: e8:6c:74:e0:6e:c5:ec:db:3c:9d:bf:5b:a1:4c:13:e1:3a:6f: 42:86:4e:c7:db:3e:47:1d:cd:ce:71:ee:4f:49:ae:51:41:3d: dd:f0:e6:39:0b:38:4e:10:42:43:60:32:8e:cc:54:f8:f0:7a: 33:79:0f:a3:d4:8e:e4:88:c5:f7:bf:28:ac:23:d6:23:0e:9f: 64:bc:01:f6:3a:4d:e9:9f:79:5c:fe:a1:45:31:42:e0:ee:8d: 8f:8a:c8:66:4c:95:77:61:df:fc:83:fb:1e:06:fa:48:47:dc: 69:f7:a5:2a:d6:39:91:d7:e7:e0:22:77:5a:6c:60:2f:79:3a: e8:f1:16:91:98:81:79:64:9c:dc:c7:bf:48:59:75:9e:2e:26: ae:6c:bb:84:7c:03:1b:48:16:a9:71:61:14:ed:ba:b9:f0:c3: 16:cd:08:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKdk1hUeAR7Yis+5c63eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2QxZjFlODc3YzEyNzk4Mjc0ZTAxMzM0NTU0Zjg5OWYz OGVhYzEwHhcNMjYwMTAxMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDkxMzI4YmRiN2M3YjA0MDAzOGMyZjdkOTAyOWU5NTc0NjczNTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFZxxQ/uNdhYXkiOYXFdC8mXFIUE 3lo84pMBZO0ZAD82hRrPx3vWW9LdmOK7yoSLivfMj+/0qh7L48xZFZeNhH7Iz/s3 NS1zYPAOeM7LyBtnrNJXUJHhiPgzHVItHabRRhyVX2rqNXwr7pKqXfR3rA8JzvoS mo22ojgY+EZlLwhlXITflvlNylBUcI/fjvxBlsgMeEImFSro/XWMUCN1cQmvBig2 1GVGEzhgs7gWz/1F9Nn5ukpYApX+SzHorREn0R3mBSRKoPuVTNppF4MwKZh8tyZo SuzUj6AWFTQvB2FxhndMQL8NQaZ0laeH20tDN0G5d8cUhYdYSpb6/QORcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJCRMovbfHsEADjC99kCnpV0ZzUMMB8GA1UdIwQY MBaAFGt9Hx6HfBJ5gnTgEzRVT4mfOOrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUt MmZhZDlhMmZjM2VmLzEva0pFeWk5dDhld1FBT01MMzJRS2VsWFJuTlF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUtMmZhZDlhMmZjM2Vm LzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRWAMA0G CSqGSIb3DQEBCwUAA4IBAQA8YzMe2rhnLUQ4EmGRLSmK9dMWdloz7/LdxsKcLf9N QpMF+9g4yGZ625shTBmav1mVLFSEkBqg65y3v4tN7oFKz5yXKB4+YyAP5+uGIXh1 2U9RjHn3Yx6H5SHobHTgbsXs2zydv1uhTBPhOm9Chk7H2z5HHc3Oce5PSa5RQT3d 8OY5CzhOEEJDYDKOzFT48HozeQ+j1I7kiMX3vyisI9YjDp9kvAH2Ok3pn3lc/qFF MULg7o2PishmTJV3Yd/8g/seBvpIR9xp96Uq1jmR1+fgIndabGAveTro8RaRmIF5 ZJzcx79IWXWeLiaubLuEfAMbSBapcWEU7bq58MMWzQi2 -----END CERTIFICATE-----Generated at Thu Jan 8 00:11:49 2026 by rpki-client