This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KPO9pHjhVpiY-mEl0_bEGVz-Pcc.roa File: KPO9pHjhVpiY-mEl0_bEGVz-Pcc.roa (raw, json) Hash identifier: 3sn3Yl8cOjIUmNQFpQaqyhd4LVY8seKRLuud3VfCUAo= Subject key identifier: 28:F3:BD:A4:78:E1:56:98:98:FA:61:25:D3:F6:C4:19:5C:FE:3D:C7 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE57660E0746BAC71ADA1CEDCBB721 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KPO9pHjhVpiY-mEl0_bEGVz-Pcc.roa Signing time: Fri 02 Jan 2026 04:19:13 +0000 ROA not before: Fri 02 Jan 2026 04:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43641 IP address blocks: 79.172.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:57:66:0e:07:46:ba:c7:1a:da:1c:ed:cb:b7:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28f3bda478e1569898fa6125d3f6c4195cfe3dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:f0:bc:eb:75:4f:70:1b:f5:d0:d2:69:2c: 66:5e:3f:85:25:ae:b9:2a:81:d2:c8:b2:0d:72:29: 82:3d:ac:e0:8f:3e:02:b1:76:86:36:e8:e2:a7:7f: d4:e0:05:5f:dd:ca:b6:b3:56:e3:49:82:b0:dc:a8: 97:52:5c:4e:19:79:8f:2a:9d:79:7b:8f:69:35:b3: 0a:40:00:b4:d1:68:20:ee:0b:0e:75:fa:73:64:49: 14:7f:5a:0a:fc:03:9b:8a:61:5e:80:e2:60:c4:13: f9:bf:dc:10:23:9e:f8:87:fe:52:cb:56:32:bd:07: be:bd:c1:f3:ef:58:e7:9d:5d:a4:96:6c:6e:8f:de: 53:c3:bf:b3:d3:36:27:a3:66:6a:06:7d:bd:c4:68: ab:97:90:9b:a9:50:fc:8a:72:c3:f2:42:fb:26:9f: fe:2e:c0:6d:ba:c8:2f:11:ae:7f:24:55:b1:ac:03: 6d:9d:11:00:07:2a:fd:01:ae:16:a9:42:0a:a8:e7: 2a:ef:d8:64:d1:47:ce:e3:2e:ac:c4:64:18:a2:07: 28:65:1b:f4:d5:d4:1b:4d:aa:09:8e:c4:81:56:15: 2d:6d:62:80:98:c2:44:b4:43:e7:fd:80:dc:1d:73: 42:5e:12:25:b8:4c:d8:ed:d3:62:34:e8:35:c8:d8: 89:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F3:BD:A4:78:E1:56:98:98:FA:61:25:D3:F6:C4:19:5C:FE:3D:C7 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KPO9pHjhVpiY-mEl0_bEGVz-Pcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.218.0/24 Signature Algorithm: sha256WithRSAEncryption 88:c4:57:e9:97:c6:80:13:74:b1:f3:02:e6:f1:f5:c7:6f:be: 36:ce:9e:7d:9c:65:f8:c6:da:65:74:93:0c:fd:eb:5f:e1:2a: 56:83:42:3e:65:f6:48:67:84:40:c4:c8:37:d5:56:02:18:fc: 03:67:c8:a9:68:b0:d3:c5:e6:f4:01:8b:aa:c0:80:53:8b:14: e9:e3:65:9d:3c:63:64:c3:f4:49:0b:01:1e:4c:2c:83:92:c3: c6:9f:f2:fe:9f:9e:99:e1:86:b7:69:83:f0:c6:1e:ce:2d:c1: dd:dd:ba:c8:37:b3:c5:4c:af:65:f8:bd:bc:af:66:54:4a:8a: 7b:e0:c1:d5:68:10:af:b0:9d:7a:12:e0:04:f3:28:29:63:07: 0c:ec:f6:e8:d4:4e:94:87:44:a4:53:31:5d:60:a8:49:eb:55: c6:c1:26:c7:0f:8a:da:9e:11:31:45:c7:54:77:7b:2d:59:11: ec:7b:8f:1c:6d:e8:c3:ba:7c:8d:ea:f5:88:62:e9:01:0a:5b: 24:df:ee:9f:6d:09:d4:96:59:e2:9f:d2:17:de:f7:eb:b7:bf: 1d:e8:48:c3:32:42:26:72:b3:88:1c:78:9a:3b:f8:5c:49:11: f1:08:e2:f2:52:be:c2:bf:6a:ce:a8:fb:c7:28:3e:f9:0b:96: 5c:d8:63:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ldmDgdGusca2hzty7chMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGYzYmRhNDc4ZTE1Njk4OThmYTYxMjVkM2Y2YzQxOTVjZmUzZGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbTwvOt1T3Ab9dDSaSxmXj+FJa65 KoHSyLINcimCPazgjz4CsXaGNujip3/U4AVf3cq2s1bjSYKw3KiXUlxOGXmPKp15 e49pNbMKQAC00Wgg7gsOdfpzZEkUf1oK/AObimFegOJgxBP5v9wQI574h/5Sy1Yy vQe+vcHz71jnnV2klmxuj95Tw7+z0zYno2ZqBn29xGirl5CbqVD8inLD8kL7Jp/+ LsBtusgvEa5/JFWxrANtnREAByr9Aa4WqUIKqOcq79hk0UfO4y6sxGQYogcoZRv0 1dQbTaoJjsSBVhUtbWKAmMJEtEPn/YDcHXNCXhIluEzY7dNiNOg1yNiJdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCjzvaR44VaYmPphJdP2xBlc/j3HMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvS1BPOXBIamhWcGlZLW1FbDBfYkVHVnotUGNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6zaMA0G CSqGSIb3DQEBCwUAA4IBAQCIxFfpl8aAE3Sx8wLm8fXHb742zp59nGX4xtpldJMM /etf4SpWg0I+ZfZIZ4RAxMg31VYCGPwDZ8ipaLDTxeb0AYuqwIBTixTp42WdPGNk w/RJCwEeTCyDksPGn/L+n56Z4Ya3aYPwxh7OLcHd3brIN7PFTK9l+L28r2ZUSop7 4MHVaBCvsJ16EuAE8ygpYwcM7Pbo1E6Uh0SkUzFdYKhJ61XGwSbHD4ranhExRcdU d3stWRHse48cbejDunyN6vWIYukBClsk3+6fbQnUllnin9IX3vfrt78d6EjDMkIm crOIHHiaO/hcSRHxCOLyUr7Cv2rOqPvHKD75C5Zc2GNt -----END CERTIFICATE-----Generated at Mon Jan 19 11:23:53 2026 by rpki-client