This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/kKlXzTXjueD4aV2RPewpgcu-BS4.roa File: kKlXzTXjueD4aV2RPewpgcu-BS4.roa (raw, json) Hash identifier: o9M2DvXmpV9HLolJqNlhrCOdw2MyjQNTI+g5HIxVra0= Subject key identifier: 90:A9:57:CD:35:E3:B9:E0:F8:69:5D:91:3D:EC:29:81:CB:BE:05:2E Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6 Certificate serial: 019B7758A4B05E2598CD2EF90B126B9DB5D6 Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/kKlXzTXjueD4aV2RPewpgcu-BS4.roa Signing time: Thu 01 Jan 2026 02:17:36 +0000 ROA not before: Thu 01 Jan 2026 02:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39260 IP address blocks: 195.238.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a4:b0:5e:25:98:cd:2e:f9:0b:12:6b:9d:b5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6 Validity Not Before: Jan 1 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90a957cd35e3b9e0f8695d913dec2981cbbe052e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a2:cc:ff:5c:b7:46:ea:3f:6d:2e:25:79:f9: 38:27:fc:d3:6b:db:d8:00:c3:0c:78:ce:c0:65:68: f0:ec:3d:13:d9:cb:cb:09:8b:7d:a4:97:7c:3c:6c: 60:71:81:27:28:c1:6d:d1:34:54:30:17:c0:b0:e8: 49:1e:c5:a7:e1:39:e8:c1:c3:fc:d7:98:6d:3a:d8: f4:55:f1:1f:76:9f:62:c8:4a:95:da:af:25:d4:9a: 3e:4f:90:c7:57:a5:a0:83:aa:60:a3:09:68:2c:b5: 74:73:7d:0f:1c:3c:b3:31:44:21:81:cb:9a:cd:69: 30:e7:b1:5f:2c:3c:26:a2:c3:49:36:a3:85:f0:7c: a8:78:35:61:4c:33:28:05:b8:ef:53:95:0a:70:1c: 7a:9d:ee:1b:46:1c:7b:a3:57:3f:1b:e6:cf:95:82: 8f:32:5b:49:de:98:ea:62:62:63:65:87:ca:8a:62: 09:4c:cc:48:e9:ed:c2:d9:5e:3c:97:e0:f8:a0:41: 7a:b0:f7:be:56:bd:54:ac:7e:7f:8c:1c:7e:d1:e0: a4:d1:4e:c6:65:c2:c5:9b:3c:c3:a3:1a:fc:69:68: 8e:4f:bc:e4:74:fc:e4:c3:1d:f8:62:7d:33:c0:44: 89:28:98:1c:10:3c:1d:36:3e:0b:be:ae:4a:9d:83: a2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A9:57:CD:35:E3:B9:E0:F8:69:5D:91:3D:EC:29:81:CB:BE:05:2E X509v3 Authority Key Identifier: keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/kKlXzTXjueD4aV2RPewpgcu-BS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.238.88.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:90:e9:6e:9f:42:3f:9e:75:e1:10:a5:72:5b:4a:03:8b:6c: 7f:61:d8:52:00:5e:a0:9e:9f:cf:27:3c:25:0a:ba:fb:b5:2c: a0:bf:49:23:e8:26:77:53:bc:0c:32:02:2b:9e:6d:1d:3d:56: 35:ef:d5:fd:0d:cb:90:0e:8f:dc:20:89:d8:ad:82:d4:fd:5c: 52:58:60:e1:c6:b6:1c:a3:e3:5e:47:51:61:38:e2:19:0f:2b: 7f:31:93:7c:54:70:b5:d5:c4:79:be:b4:59:18:eb:34:8a:51: cf:5b:f5:45:ae:fe:f3:71:c6:d5:d7:38:68:b6:87:e5:24:8b: db:99:9a:19:72:ec:f1:c0:7d:fa:92:2b:c8:fb:c5:89:5b:31: 3f:d1:22:7c:97:3e:3c:d4:04:8c:d5:85:5b:0b:7d:ac:b6:33: bb:ea:99:b3:d5:71:d0:15:7a:c6:b0:83:65:5f:10:51:87:36: 22:bc:70:0a:33:49:f1:26:83:5b:dc:38:df:62:d3:48:5e:fb: dc:f0:6f:86:bf:a0:6a:2b:99:9a:31:f2:20:57:2f:81:c3:d2: 6c:e6:a9:2e:65:91:90:c3:ac:81:2b:48:6e:d5:9c:97:84:1b: 25:0b:03:37:33:b5:d9:13:75:00:ec:55:7f:cd:8d:83:5a:23: 03:9c:b8:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WKSwXiWYzS75CxJrnbXWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTE1MDkwZjg1MGUzMzdlYjNiMTE4YTE1N2U0ZTM5MDgz Yjc3YTYwHhcNMjYwMTAxMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGE5NTdjZDM1ZTNiOWUwZjg2OTVkOTEzZGVjMjk4MWNiYmUwNTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6LM/1y3Ruo/bS4lefk4J/zTa9vY AMMMeM7AZWjw7D0T2cvLCYt9pJd8PGxgcYEnKMFt0TRUMBfAsOhJHsWn4TnowcP8 15htOtj0VfEfdp9iyEqV2q8l1Jo+T5DHV6Wgg6pgowloLLV0c30PHDyzMUQhgcua zWkw57FfLDwmosNJNqOF8HyoeDVhTDMoBbjvU5UKcBx6ne4bRhx7o1c/G+bPlYKP MltJ3pjqYmJjZYfKimIJTMxI6e3C2V48l+D4oEF6sPe+Vr1UrH5/jBx+0eCk0U7G ZcLFmzzDoxr8aWiOT7zkdPzkwx34Yn0zwESJKJgcEDwdNj4Lvq5KnYOiFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJCpV80147ng+GldkT3sKYHLvgUuMB8GA1UdIwQY MBaAFBBRUJD4UOM36zsRihV+TjkIO3emMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNDgyMmItNjE4NC00NmEwLWJjYzUt OGYyOWYzZDk4MjE0LzEva0tsWHpUWGp1ZUQ0YVYyUlBld3BnY3UtQlM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNDgyMmItNjE4NC00NmEwLWJjYzUtOGYyOWYzZDk4MjE0 LzEvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw+5YMA0G CSqGSIb3DQEBCwUAA4IBAQCLkOlun0I/nnXhEKVyW0oDi2x/YdhSAF6gnp/PJzwl Crr7tSygv0kj6CZ3U7wMMgIrnm0dPVY179X9DcuQDo/cIInYrYLU/VxSWGDhxrYc o+NeR1FhOOIZDyt/MZN8VHC11cR5vrRZGOs0ilHPW/VFrv7zccbV1zhotoflJIvb mZoZcuzxwH36kivI+8WJWzE/0SJ8lz481ASM1YVbC32stjO76pmz1XHQFXrGsINl XxBRhzYivHAKM0nxJoNb3DjfYtNIXvvc8G+Gv6BqK5maMfIgVy+Bw9Js5qkuZZGQ w6yBK0hu1ZyXhBslCwM3M7XZE3UA7FV/zY2DWiMDnLjq -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:20 2026 by rpki-client