This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/KPNqUJTDryjEBwTxDAEyBsMsC0Y.roa File: KPNqUJTDryjEBwTxDAEyBsMsC0Y.roa (raw, json) Hash identifier: yjqRDZtjjopYArtLpDegzeb61BU7kWd9dead5mD4cMU= Subject key identifier: 28:F3:6A:50:94:C3:AF:28:C4:07:04:F1:0C:01:32:06:C3:2C:0B:46 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791060B89EC0B2565AB058A52E3CC895 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/KPNqUJTDryjEBwTxDAEyBsMsC0Y.roa Signing time: Thu 01 Jan 2026 10:17:54 +0000 ROA not before: Thu 01 Jan 2026 10:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206558 IP address blocks: 77.92.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:60:b8:9e:c0:b2:56:5a:b0:58:a5:2e:3c:c8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28f36a5094c3af28c40704f10c013206c32c0b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:2c:22:ca:c5:71:e0:2f:40:aa:94:1a:64: 41:ca:bc:3f:09:75:1a:1c:a4:b8:ae:cb:82:31:73: 05:b1:4f:b7:25:40:23:5b:6b:96:26:82:8c:25:40: 4c:ac:39:8a:19:42:9f:68:e2:80:4d:89:9d:57:cc: ea:e4:81:e3:fc:83:6c:8a:ac:cf:fc:60:bf:bb:d6: 2b:99:21:b5:dc:ea:18:66:14:8c:c0:7d:44:09:7d: 5d:c2:90:16:b7:9f:fc:27:76:73:da:c1:96:d0:a4: 08:8f:78:05:67:bc:5b:81:15:e7:89:bb:08:2e:5d: b3:13:41:6a:21:25:39:e5:9f:3e:5b:a9:93:65:59: 7b:01:5d:3d:a2:57:1f:50:06:42:88:1f:6b:65:d1: 0d:16:8c:a1:9f:05:3e:b7:20:be:74:97:9d:cb:4f: 41:57:cb:52:32:03:b8:d5:9f:b1:1d:99:b1:6e:91: 2e:2b:0a:bc:00:4c:67:92:61:2b:42:8c:ef:d7:a5: c5:cc:13:9d:d4:dd:de:83:55:74:35:51:3d:99:e2: 1d:af:39:b4:27:69:fe:81:ba:59:d7:8c:4d:23:17: 1e:f8:ac:03:84:1a:7c:0f:d8:44:74:47:5c:ee:c2: cd:eb:56:9f:1f:06:f3:f1:ba:06:5e:3b:0d:7b:a2: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F3:6A:50:94:C3:AF:28:C4:07:04:F1:0C:01:32:06:C3:2C:0B:46 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/KPNqUJTDryjEBwTxDAEyBsMsC0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.92.150.0/24 Signature Algorithm: sha256WithRSAEncryption 25:16:e6:f2:a6:73:a8:7e:41:10:fc:c4:36:36:89:a3:f0:79: 5d:ef:c3:33:cf:84:b1:4d:96:f4:e5:78:62:16:fe:62:00:41: bb:82:8f:b9:77:5a:43:f9:62:90:4a:7a:e7:7c:da:ee:47:43: 5e:16:c7:2d:3e:e3:bc:ec:03:e4:1f:50:48:b5:67:5a:35:e9: 45:7e:cc:b7:5b:58:de:05:2b:8a:ae:a4:c3:6d:d4:c7:c7:bd: e2:26:d6:49:a4:5c:f9:fd:4a:63:30:0f:90:ad:8f:cd:da:71: c8:95:fa:a6:a3:c6:24:c0:88:e2:c8:da:17:9b:04:23:72:ce: bd:3d:9d:05:f5:0f:60:03:94:a4:5c:6c:83:53:41:81:94:37: bd:a3:8a:96:2d:fd:ec:44:a4:3c:64:a1:4d:40:5b:68:ba:ef: 74:5d:34:87:8f:d6:c4:e6:c7:01:8d:59:c4:b6:20:db:99:07: 2e:88:66:5c:b1:12:7a:13:ae:61:59:fd:db:91:67:f6:3e:a4: 67:1a:e2:18:fb:73:cb:8c:a7:8d:cf:98:c9:a0:b9:be:e6:30: fd:5d:a9:f2:f2:64:ae:46:80:69:32:97:c2:b3:fa:0a:50:a1: 74:de:e9:b0:5c:e4:b9:b0:39:1e:09:c5:74:45:f6:23:86:a3: db:8a:d1:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGC4nsCyVlqwWKUuPMiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGYzNmE1MDk0YzNhZjI4YzQwNzA0ZjEwYzAxMzIwNmMzMmMwYjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs98sIsrFceAvQKqUGmRByrw/CXUa HKS4rsuCMXMFsU+3JUAjW2uWJoKMJUBMrDmKGUKfaOKATYmdV8zq5IHj/INsiqzP /GC/u9YrmSG13OoYZhSMwH1ECX1dwpAWt5/8J3Zz2sGW0KQIj3gFZ7xbgRXnibsI Ll2zE0FqISU55Z8+W6mTZVl7AV09olcfUAZCiB9rZdENFoyhnwU+tyC+dJedy09B V8tSMgO41Z+xHZmxbpEuKwq8AExnkmErQozv16XFzBOd1N3eg1V0NVE9meIdrzm0 J2n+gbpZ14xNIxce+KwDhBp8D9hEdEdc7sLN61afHwbz8boGXjsNe6IbZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCjzalCUw68oxAcE8QwBMgbDLAtGMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvS1BOcVVKVERyeWpFQndUeERBRXlCc01zQzBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVyWMA0G CSqGSIb3DQEBCwUAA4IBAQAlFubypnOofkEQ/MQ2Nomj8Hld78Mzz4SxTZb05Xhi Fv5iAEG7go+5d1pD+WKQSnrnfNruR0NeFsctPuO87APkH1BItWdaNelFfsy3W1je BSuKrqTDbdTHx73iJtZJpFz5/UpjMA+QrY/N2nHIlfqmo8YkwIjiyNoXmwQjcs69 PZ0F9Q9gA5SkXGyDU0GBlDe9o4qWLf3sRKQ8ZKFNQFtouu90XTSHj9bE5scBjVnE tiDbmQcuiGZcsRJ6E65hWf3bkWf2PqRnGuIY+3PLjKeNz5jJoLm+5jD9Xany8mSu RoBpMpfCs/oKUKF03umwXOS5sDkeCcV0RfYjhqPbitEI -----END CERTIFICATE-----Generated at Wed Jan 21 13:32:42 2026 by rpki-client