This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/kpdwiZivq0KQEXRziSN4kbLcuPo.roa File: kpdwiZivq0KQEXRziSN4kbLcuPo.roa (raw, json) Hash identifier: uvaVyntvMy6IR5dawncMlQjbQOllUj983tNXqJNMrIQ= Subject key identifier: 92:97:70:89:98:AF:AB:42:90:11:74:73:89:23:78:91:B2:DC:B8:FA Certificate issuer: /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc Certificate serial: 019B7A5B4BF0D6AFECFC6EAEC40CC046899E Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/kpdwiZivq0KQEXRziSN4kbLcuPo.roa Signing time: Thu 01 Jan 2026 16:19:22 +0000 ROA not before: Thu 01 Jan 2026 16:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39156 IP address blocks: 80.76.224.0/20 maxlen: 20 80.76.225.0/24 maxlen: 24 80.76.226.0/24 maxlen: 24 80.76.227.0/24 maxlen: 24 80.76.228.0/24 maxlen: 24 80.76.229.0/24 maxlen: 24 80.76.230.0/24 maxlen: 24 80.76.231.0/24 maxlen: 24 80.76.232.0/24 maxlen: 24 80.76.233.0/24 maxlen: 24 80.76.234.0/24 maxlen: 24 80.76.235.0/24 maxlen: 24 80.76.236.0/24 maxlen: 24 80.76.237.0/24 maxlen: 24 80.76.238.0/24 maxlen: 24 80.76.239.0/24 maxlen: 24 109.235.208.0/21 maxlen: 21 109.235.211.0/24 maxlen: 24 2a03:5200::/48 maxlen: 48 2a03:5200:1::/48 maxlen: 48 2a03:5200:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4b:f0:d6:af:ec:fc:6e:ae:c4:0c:c0:46:89:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc Validity Not Before: Jan 1 16:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9297708998afab429011747389237891b2dcb8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:6e:52:d9:34:02:9b:c3:ee:60:cf:0f:61: a0:f5:e1:62:50:b9:25:df:18:01:d1:39:2b:52:51: d0:a9:bf:4f:c6:b7:0b:58:e4:5a:c6:86:f6:f0:78: 80:f1:43:29:15:e6:b9:5b:dd:4c:c6:6c:af:32:27: c9:ca:b4:a0:41:f5:a0:0e:00:84:cd:e3:31:6b:58: 32:ba:a6:31:cf:e9:ff:a5:24:be:1a:56:0e:ed:b5: bd:45:0d:3b:3e:e8:37:f2:6c:50:ed:7d:1d:f6:92: 14:c9:4b:45:79:86:33:f6:64:e8:e2:2c:88:f5:7b: a1:d1:77:8a:f1:31:b3:f4:4c:3b:e2:a6:42:ce:15: 7a:bb:da:f0:1e:cb:f9:3b:1c:3c:e8:3f:79:84:34: 98:79:2d:8f:a7:b8:6b:5d:bf:8d:ce:8c:26:92:f3: 24:e8:c7:c7:5a:9c:ab:51:4e:1b:f4:ed:6d:61:fe: 27:bc:90:35:4b:d5:65:8b:75:cf:ef:e1:0f:0c:d5: f3:f2:de:76:e3:ad:de:37:e9:38:c6:0a:6e:1e:3c: 9e:7f:7a:59:6d:18:18:14:e6:cf:4b:70:19:58:d2: 88:31:76:84:ef:bc:80:fa:57:29:1c:ca:57:28:b5: 9a:a7:10:de:97:e6:e2:80:b4:7e:84:c8:db:35:fe: 20:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:97:70:89:98:AF:AB:42:90:11:74:73:89:23:78:91:B2:DC:B8:FA X509v3 Authority Key Identifier: keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/kpdwiZivq0KQEXRziSN4kbLcuPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.76.224.0/20 109.235.208.0/21 IPv6: 2a03:5200::-2a03:5200:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 22:cf:21:5e:d3:12:fd:37:7e:e0:0e:03:fb:e8:e2:b8:75:29: f9:0a:23:95:a8:0e:2f:d5:41:f1:8b:3d:9a:61:4c:9f:58:09: 16:74:9e:b5:86:2c:bf:d6:23:e5:a2:d1:89:09:e1:55:4a:c2: c5:97:f2:c1:25:6d:fc:29:12:17:f0:da:0d:6b:e3:32:73:32: 32:07:4d:34:44:ff:b7:02:17:67:79:f6:c4:fc:9f:c3:47:a7: 6f:e8:95:bf:e7:2f:61:78:56:05:0c:bf:89:da:82:31:94:ff: 5d:bc:96:e2:c2:f4:2a:99:f3:43:d9:21:4c:a1:ab:22:39:3b: 3d:f9:68:cd:b9:6c:35:0d:1e:11:dd:6a:54:89:24:15:e6:b5: d7:3f:f3:f0:04:3d:98:e2:b2:5d:df:09:57:16:42:7f:d4:4b: 17:79:a7:1b:11:30:4c:69:64:df:32:2c:0f:7e:24:a2:01:e9: 88:0a:53:31:48:ab:c7:6c:a6:cc:ec:ad:ae:c4:33:a3:ff:2f: 61:37:0a:41:da:84:81:40:32:f7:b8:dd:f4:17:f3:7e:80:2f: 5f:2f:4c:52:37:12:c6:ec:0e:ee:60:78:a9:ff:6e:dc:ea:98: 3a:f2:32:23:6f:51:f2:97:9d:9e:35:73:ac:b3:6e:cc:4a:57: 4f:5e:54:46 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt6W0vw1q/s/G6uxAzARomeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODQyNjU2MTc3YjQyNjdhYjU1ZTRiYTE2NWE1ZWMwMGY1 MDg0YmMwHhcNMjYwMTAxMTYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mjk3NzA4OTk4YWZhYjQyOTAxMTc0NzM4OTIzNzg5MWIyZGNiOGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb9uUtk0ApvD7mDPD2Gg9eFiULkl 3xgB0TkrUlHQqb9PxrcLWORaxob28HiA8UMpFea5W91MxmyvMifJyrSgQfWgDgCE zeMxa1gyuqYxz+n/pSS+GlYO7bW9RQ07Pug38mxQ7X0d9pIUyUtFeYYz9mTo4iyI 9Xuh0XeK8TGz9Ew74qZCzhV6u9rwHsv5Oxw86D95hDSYeS2Pp7hrXb+NzowmkvMk 6MfHWpyrUU4b9O1tYf4nvJA1S9Vli3XP7+EPDNXz8t52463eN+k4xgpuHjyef3pZ bRgYFObPS3AZWNKIMXaE77yA+lcpHMpXKLWapxDel+bigLR+hMjbNf4gZwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFJKXcImYr6tCkBF0c4kjeJGy3Lj6MB8GA1UdIwQY MBaAFI2EJlYXe0Jnq1XkuhZaXsAPUIS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallRbVZoZDdRbWVyVmVTNkZscGV3QTlRaEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MzYwZWMtOWNkMS00YzAwLTg2Njgt OTRjMmY4MjY5ZTljLzEva3Bkd2laaXZxMEtRRVhSemlTTjRrYkxjdVBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS85MzYwZWMtOWNkMS00YzAwLTg2NjgtOTRjMmY4MjY5ZTlj LzEvallRbVZoZDdRbWVyVmVTNkZscGV3QTlRaEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTASBAIAATAMAwQEUEzgAwQD bevQMBcEAgACMBEwDwMEASoDUgMHACoDUgAAAjANBgkqhkiG9w0BAQsFAAOCAQEA Is8hXtMS/Td+4A4D++jiuHUp+QojlagOL9VB8Ys9mmFMn1gJFnSetYYsv9Yj5aLR iQnhVUrCxZfywSVt/CkSF/DaDWvjMnMyMgdNNET/twIXZ3n2xPyfw0enb+iVv+cv YXhWBQy/idqCMZT/XbyW4sL0KpnzQ9khTKGrIjk7PflozblsNQ0eEd1qVIkkFea1 1z/z8AQ9mOKyXd8JVxZCf9RLF3mnGxEwTGlk3zIsD34kogHpiApTMUirx2ymzOyt rsQzo/8vYTcKQdqEgUAy97jd9BfzfoAvXy9MUjcSxuwO7mB4qf9u3OqYOvIyI29R 8pednjVzrLNuzEpXT15URg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:23 2026 by rpki-client