This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/kjD9MNfC0BPcwkyPzs0CEhSag-I.roa File: kjD9MNfC0BPcwkyPzs0CEhSag-I.roa (raw, json) Hash identifier: e8QlVBviEv2pFqVxAanGI81u7if0cNyxjU/3EXVOJq4= Subject key identifier: 92:30:FD:30:D7:C2:D0:13:DC:C2:4C:8F:CE:CD:02:12:14:9A:83:E2 Certificate issuer: /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b Certificate serial: 019B77C72C04BBCFCB7578C2F840A1347596 Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/kjD9MNfC0BPcwkyPzs0CEhSag-I.roa Signing time: Thu 01 Jan 2026 04:18:20 +0000 ROA not before: Thu 01 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199424 IP address blocks: 195.2.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2c:04:bb:cf:cb:75:78:c2:f8:40:a1:34:75:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b Validity Not Before: Jan 1 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9230fd30d7c2d013dcc24c8fcecd0212149a83e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c4:00:10:64:9e:84:48:5d:f0:11:23:51:6d: a9:9d:b9:ac:79:fa:16:e7:1a:43:f3:71:d1:39:75: a9:76:96:82:e2:e1:d3:70:31:79:ed:db:b9:fb:90: 90:d3:ac:fb:80:81:f1:57:4e:93:e5:13:12:47:d2: 90:4c:ca:86:cc:cf:fb:6e:83:bd:c2:6d:71:95:ac: 8d:3d:61:8d:66:64:78:bc:0c:49:17:72:d6:21:dd: 48:b3:d5:0e:28:c5:bd:32:43:91:de:7d:1a:c3:ff: bd:8a:67:1c:03:ea:8d:76:1a:fe:fe:8d:24:23:01: 9c:fd:3d:dc:2d:08:64:a9:80:d0:7c:d4:b0:20:9b: cf:6f:49:87:e8:26:49:63:7e:1d:e3:4a:2c:03:09: 3a:36:57:65:50:33:7f:95:16:7e:84:02:4c:f4:fc: 14:10:63:9b:37:83:95:50:a6:2b:c9:07:a8:6c:12: 71:10:ad:e6:50:c5:7f:b5:cf:0c:20:57:ab:bf:21: f6:b6:ad:6b:65:dc:86:3c:36:74:f4:2e:20:0b:af: ce:a4:1c:39:40:e9:6c:73:fe:e4:5c:bb:d9:39:94: e1:db:84:77:17:2b:31:34:79:78:e3:9c:05:91:22: c1:c0:a4:2a:c9:e7:ec:ce:b9:bf:58:a3:80:34:4c: 19:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:30:FD:30:D7:C2:D0:13:DC:C2:4C:8F:CE:CD:02:12:14:9A:83:E2 X509v3 Authority Key Identifier: keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/kjD9MNfC0BPcwkyPzs0CEhSag-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.2.226.0/24 Signature Algorithm: sha256WithRSAEncryption 12:57:a7:75:6e:9d:a7:3f:33:92:a5:bb:22:37:4f:0f:b7:7e: 8e:3e:52:0a:60:d3:d0:d7:e0:2b:0f:ac:59:b0:93:aa:2e:e6: 7d:b5:c0:e1:ba:7d:95:ef:dc:58:98:ec:0c:eb:a8:1d:1e:66: 02:fb:16:7d:d1:3b:3f:cf:cd:69:96:e6:c5:2b:f0:67:dc:f3: 85:1c:c5:b3:70:82:e4:b2:96:f3:6f:b9:43:50:05:ae:14:5b: 4e:63:09:f7:a4:b0:17:e1:ab:8e:ab:7f:fc:7c:06:6b:b5:8e: 30:7d:61:b5:d0:76:a8:a9:d5:c5:18:be:62:51:49:85:34:57: 12:59:b3:0c:79:41:0a:75:c4:d5:5a:14:04:73:2f:c2:bf:cb: 1f:06:91:99:67:13:ea:74:74:2f:ff:ba:a7:7f:3d:79:9e:04: 9b:a7:50:14:6b:db:c4:e0:94:45:60:20:24:83:53:b5:0a:c3: 64:ea:2e:5d:a5:16:62:0e:aa:e3:0c:9a:76:56:e6:c3:7b:a6: a8:ff:91:d3:d1:4c:50:67:f2:2b:17:c5:9b:c7:f9:c9:ad:7d: ff:e2:72:15:ec:d6:fb:d5:c8:ac:2d:c0:9b:a8:cb:03:95:fa: 30:bb:f3:6a:70:4c:de:4e:f5:1f:1c:f4:73:92:18:41:1c:50: 96:31:3f:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xywEu8/LdXjC+EChNHWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2M4NjI2MTM4YmYxZTljYjNmZDFmZWMyNmM2OGM0YTYz NDA5NmIwHhcNMjYwMTAxMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjMwZmQzMGQ3YzJkMDEzZGNjMjRjOGZjZWNkMDIxMjE0OWE4M2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMQAEGSehEhd8BEjUW2pnbmsefoW 5xpD83HROXWpdpaC4uHTcDF57du5+5CQ06z7gIHxV06T5RMSR9KQTMqGzM/7boO9 wm1xlayNPWGNZmR4vAxJF3LWId1Is9UOKMW9MkOR3n0aw/+9imccA+qNdhr+/o0k IwGc/T3cLQhkqYDQfNSwIJvPb0mH6CZJY34d40osAwk6NldlUDN/lRZ+hAJM9PwU EGObN4OVUKYryQeobBJxEK3mUMV/tc8MIFervyH2tq1rZdyGPDZ09C4gC6/OpBw5 QOlsc/7kXLvZOZTh24R3FysxNHl445wFkSLBwKQqyefszrm/WKOANEwZvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJIw/TDXwtAT3MJMj87NAhIUmoPiMB8GA1UdIwQY MBaAFOfMhiYTi/Hpyz/R/sJsaMSmNAlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWIt ZjVjMDlmZjM4YTAwLzEva2pEOU1OZkMwQlBjd2t5UHpzMENFaFNhZy1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWItZjVjMDlmZjM4YTAw LzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwLiMA0G CSqGSIb3DQEBCwUAA4IBAQASV6d1bp2nPzOSpbsiN08Pt36OPlIKYNPQ1+ArD6xZ sJOqLuZ9tcDhun2V79xYmOwM66gdHmYC+xZ90Ts/z81plubFK/Bn3POFHMWzcILk spbzb7lDUAWuFFtOYwn3pLAX4auOq3/8fAZrtY4wfWG10HaoqdXFGL5iUUmFNFcS WbMMeUEKdcTVWhQEcy/Cv8sfBpGZZxPqdHQv/7qnfz15ngSbp1AUa9vE4JRFYCAk g1O1CsNk6i5dpRZiDqrjDJp2VubDe6ao/5HT0UxQZ/IrF8Wbx/nJrX3/4nIV7Nb7 1cisLcCbqMsDlfowu/NqcEzeTvUfHPRzkhhBHFCWMT+T -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:59 2026 by rpki-client