This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KJ5HxVM_mh9H2ajWhpxdJrojNQQ.roa File: KJ5HxVM_mh9H2ajWhpxdJrojNQQ.roa (raw, json) Hash identifier: S1ZaGaiKHU03cvRoqPeuYk63WuSoX6pq0q4gjTvwCoE= Subject key identifier: 28:9E:47:C5:53:3F:9A:1F:47:D9:A8:D6:86:9C:5D:26:BA:23:35:04 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019C62AD2E60F841DFE548D206050EA83D53 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KJ5HxVM_mh9H2ajWhpxdJrojNQQ.roa Signing time: Sun 15 Feb 2026 19:00:42 +0000 ROA not before: Sun 15 Feb 2026 19:00:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 85.202.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Feb 2026 23:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:62:ad:2e:60:f8:41:df:e5:48:d2:06:05:0e:a8:3d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Feb 15 19:00:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=289e47c5533f9a1f47d9a8d6869c5d26ba233504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:10:bf:56:c3:8d:2c:9e:f3:42:75:5a:82: ae:75:a3:00:84:85:5c:ee:2e:5a:40:59:c5:2f:18: 12:02:40:9a:21:3b:87:14:f0:4a:85:ae:fb:9d:f2: 6f:21:22:c6:bf:22:bd:22:78:39:96:fb:3b:b0:10: 7c:bb:c6:bc:4a:d9:74:cf:cd:4e:a6:87:fc:69:12: 15:8b:12:b0:8b:c8:82:30:be:95:5b:47:e2:08:a1: 3d:eb:c5:56:52:3d:c1:be:92:f9:9c:02:3b:21:e1: 8d:77:7a:29:fd:c0:02:98:c0:83:74:7d:e3:57:2f: 72:0a:24:53:5a:ad:91:3c:67:66:b7:68:42:f0:6c: 6c:29:87:b4:8c:69:9c:f9:65:c4:8e:d8:91:6e:35: b5:a9:ae:aa:82:55:65:27:b8:1f:ca:7c:e0:a4:70: df:e0:a2:0b:76:2b:85:a9:28:3d:2b:28:2a:49:b9: 49:6b:23:d5:b9:50:de:ca:e2:0e:e7:11:a2:64:cc: e5:37:67:0f:a3:18:5e:09:c7:88:8c:ae:e3:25:2d: 9f:ba:2e:cf:4d:c4:1b:3c:1a:ca:5b:c7:c2:53:b9: c0:3a:63:b2:be:a6:84:4a:f9:ce:c3:58:cf:eb:d4: 46:d5:07:de:8b:ed:ff:ab:3f:6f:1d:72:e3:b6:7f: 53:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9E:47:C5:53:3F:9A:1F:47:D9:A8:D6:86:9C:5D:26:BA:23:35:04 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KJ5HxVM_mh9H2ajWhpxdJrojNQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.203.0/24 Signature Algorithm: sha256WithRSAEncryption c7:d4:c8:f8:6d:0a:be:4b:fa:3c:dc:59:3e:a0:4b:14:b7:48: 03:ae:e8:c1:3f:4f:63:89:1b:e1:01:41:5e:1a:6f:45:d0:54: e4:16:dd:eb:4f:97:25:1c:dd:6c:c7:34:e3:d1:19:3d:ab:76: 3f:10:5b:b4:4c:e3:6c:aa:d9:94:30:a3:f5:5a:8a:eb:4e:a9: a1:a3:2a:a5:e9:42:b3:1e:06:e1:67:48:ab:cf:a2:c0:2b:5e: 0a:46:69:29:96:13:75:20:de:20:c3:0b:31:d7:c9:9a:5c:11: 77:a7:1b:54:42:4b:4b:ed:dc:81:a5:99:4f:18:ee:6f:20:bd: 5e:0a:9d:68:99:67:c3:73:18:4c:c8:09:1f:05:45:73:db:c5: 1f:c8:65:dc:17:9f:f6:5b:78:45:f5:52:93:af:95:8e:98:c8: d2:e2:74:bf:b0:71:ce:e4:2f:14:e3:80:61:91:7f:62:be:ac: 4e:59:5a:e7:d0:ec:da:ac:58:c4:bb:45:0f:d6:bb:8d:b1:19: 38:89:80:96:65:cc:e1:6f:d8:77:19:f3:ab:9a:b4:15:c2:37: 6c:da:3c:e3:9c:2a:d1:d8:61:a6:b5:c2:83:20:93:1f:a0:7e: d2:05:f7:37:8d:cd:28:a8:c3:93:f3:08:88:d2:5a:4a:56:8c: f8:8c:2e:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZxirS5g+EHf5UjSBgUOqD1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMjE1MTkwMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODllNDdjNTUzM2Y5YTFmNDdkOWE4ZDY4NjljNWQyNmJhMjMzNTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMkQv1bDjSye80J1WoKudaMAhIVc 7i5aQFnFLxgSAkCaITuHFPBKha77nfJvISLGvyK9Ing5lvs7sBB8u8a8Stl0z81O pof8aRIVixKwi8iCML6VW0fiCKE968VWUj3BvpL5nAI7IeGNd3op/cACmMCDdH3j Vy9yCiRTWq2RPGdmt2hC8GxsKYe0jGmc+WXEjtiRbjW1qa6qglVlJ7gfynzgpHDf 4KILdiuFqSg9KygqSblJayPVuVDeyuIO5xGiZMzlN2cPoxheCceIjK7jJS2fui7P TcQbPBrKW8fCU7nAOmOyvqaESvnOw1jP69RG1Qfei+3/qz9vHXLjtn9TFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCieR8VTP5ofR9mo1oacXSa6IzUEMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvS0o1SHhWTV9taDlIMmFqV2hweGRKcm9qTlFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcrLMA0G CSqGSIb3DQEBCwUAA4IBAQDH1Mj4bQq+S/o83Fk+oEsUt0gDrujBP09jiRvhAUFe Gm9F0FTkFt3rT5clHN1sxzTj0Rk9q3Y/EFu0TONsqtmUMKP1WorrTqmhoyql6UKz HgbhZ0irz6LAK14KRmkplhN1IN4gwwsx18maXBF3pxtUQktL7dyBpZlPGO5vIL1e Cp1omWfDcxhMyAkfBUVz28UfyGXcF5/2W3hF9VKTr5WOmMjS4nS/sHHO5C8U44Bh kX9ivqxOWVrn0OzarFjEu0UP1ruNsRk4iYCWZczhb9h3GfOrmrQVwjds2jzjnCrR 2GGmtcKDIJMfoH7SBfc3jc0oqMOT8wiI0lpKVoz4jC6E -----END CERTIFICATE-----Generated at Mon Feb 16 04:55:43 2026 by rpki-client