This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/kaQtgdA_xkT8VcLNET4qBRDacpA.roa File: kaQtgdA_xkT8VcLNET4qBRDacpA.roa (raw, json) Hash identifier: U1+wqzZQQwgpG7eBM7/cTp9i4biPZoUPqCaYBifZ6mk= Subject key identifier: 91:A4:2D:81:D0:3F:C6:44:FC:55:C2:CD:11:3E:2A:05:10:DA:72:90 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE5B5D39CFFB580EB3038DB528759D Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/kaQtgdA_xkT8VcLNET4qBRDacpA.roa Signing time: Fri 02 Jan 2026 04:19:14 +0000 ROA not before: Fri 02 Jan 2026 04:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55201 IP address blocks: 87.229.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5b:5d:39:cf:fb:58:0e:b3:03:8d:b5:28:75:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91a42d81d03fc644fc55c2cd113e2a0510da7290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3d:0c:67:5c:c5:bb:9e:fd:6e:58:b0:f3:87: 77:10:36:88:b8:04:32:f3:ad:66:e1:10:13:24:24: e3:a9:8b:75:bd:0f:eb:9b:b6:f9:63:95:8f:d1:56: 9e:e1:2b:e5:c2:aa:75:62:45:ae:eb:92:4f:60:14: 64:2e:01:46:40:4c:99:f8:c0:70:fa:b0:5c:15:a9: 53:a1:6d:af:eb:bd:6d:2f:ca:8a:ea:48:c3:48:2e: 9e:fa:8f:6b:2c:2a:88:7e:30:e2:0a:68:2d:69:90: f7:84:fe:26:8a:a0:e9:62:a6:b1:9e:ad:d0:02:da: 32:6c:ac:30:5f:70:8e:b6:3b:a4:3c:43:96:96:3e: ea:dc:d8:e8:0a:b7:35:77:3c:1b:d2:04:f0:62:4b: 3f:7d:a2:87:ba:ea:42:78:ed:c8:ce:4d:f6:71:88: d7:01:53:f4:1c:ad:44:dd:6f:c0:6f:fb:d6:74:d4: c0:1b:98:e7:72:ec:2d:25:7b:3a:a1:15:18:f6:46: 68:e6:8d:cc:01:31:74:ab:6c:c6:f8:36:d3:3f:43: 2a:5c:c7:25:3c:2e:fa:f2:c0:8b:ab:d3:23:2e:6e: 9a:ba:b7:1f:94:bf:9d:f8:21:a3:06:46:9f:11:10: bb:85:c3:4d:ba:f1:2b:5f:e3:ab:0e:be:03:0a:cf: 6d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A4:2D:81:D0:3F:C6:44:FC:55:C2:CD:11:3E:2A:05:10:DA:72:90 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/kaQtgdA_xkT8VcLNET4qBRDacpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.71.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:67:06:4f:24:08:a7:41:27:44:e0:ea:3d:9f:40:b7:61:42: ef:ab:c3:fd:1c:56:12:bf:f9:c3:80:a1:a9:9d:cd:c0:65:8f: 93:a2:a9:d2:aa:f4:ff:ba:11:ee:0d:57:98:3e:e3:86:1b:df: 05:ef:18:0e:bd:87:d4:1c:9d:8d:87:78:83:fd:69:18:2c:ec: 6d:de:b7:d6:e2:d1:48:5d:da:0c:c5:c2:0c:2a:19:e5:64:17: 76:f1:3d:f6:84:02:54:e8:c0:79:a3:cf:e6:a9:96:6c:ae:c0: 1a:66:75:bc:1c:57:de:1b:dd:d0:1e:8a:30:d2:69:d5:8b:ec: 5b:75:73:45:1e:58:27:13:03:5a:ff:14:5a:32:3a:45:18:55: 4d:9d:7c:10:56:d0:1b:eb:47:d3:0c:4f:4b:05:1a:30:cd:6c: 60:7e:b3:27:8f:bc:35:09:9a:33:e3:ab:4c:a6:b7:75:80:4e: 1b:00:a6:42:d7:06:da:2a:6c:85:3c:89:8e:8f:38:0f:26:e7: a7:68:d5:82:91:b0:90:08:2f:b3:92:72:2d:75:79:63:6b:cc: 0c:e0:ba:25:6b:ae:01:b2:7b:10:2c:19:01:7b:d1:fe:9d:08: b4:ea:47:9c:eb:a8:d1:07:99:34:54:c6:db:28:1f:f1:c3:12: 2a:0a:dd:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ltdOc/7WA6zA421KHWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWE0MmQ4MWQwM2ZjNjQ0ZmM1NWMyY2QxMTNlMmEwNTEwZGE3MjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD0MZ1zFu579bliw84d3EDaIuAQy 861m4RATJCTjqYt1vQ/rm7b5Y5WP0Vae4Svlwqp1YkWu65JPYBRkLgFGQEyZ+MBw +rBcFalToW2v671tL8qK6kjDSC6e+o9rLCqIfjDiCmgtaZD3hP4miqDpYqaxnq3Q AtoybKwwX3COtjukPEOWlj7q3NjoCrc1dzwb0gTwYks/faKHuupCeO3Izk32cYjX AVP0HK1E3W/Ab/vWdNTAG5jncuwtJXs6oRUY9kZo5o3MATF0q2zG+DbTP0MqXMcl PC768sCLq9MjLm6aurcflL+d+CGjBkafERC7hcNNuvErX+OrDr4DCs9t0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJGkLYHQP8ZE/FXCzRE+KgUQ2nKQMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEva2FRdGdkQV94a1Q4VmNMTkVUNHFCUkRhY3BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VHMA0G CSqGSIb3DQEBCwUAA4IBAQB+ZwZPJAinQSdE4Oo9n0C3YULvq8P9HFYSv/nDgKGp nc3AZY+ToqnSqvT/uhHuDVeYPuOGG98F7xgOvYfUHJ2Nh3iD/WkYLOxt3rfW4tFI XdoMxcIMKhnlZBd28T32hAJU6MB5o8/mqZZsrsAaZnW8HFfeG93QHoow0mnVi+xb dXNFHlgnEwNa/xRaMjpFGFVNnXwQVtAb60fTDE9LBRowzWxgfrMnj7w1CZoz46tM prd1gE4bAKZC1wbaKmyFPImOjzgPJuenaNWCkbCQCC+zknItdXlja8wM4Lola64B snsQLBkBe9H+nQi06kec66jRB5k0VMbbKB/xwxIqCt2k -----END CERTIFICATE-----Generated at Wed Jan 21 11:13:32 2026 by rpki-client