This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/KP_tbT0Qmi1tnDPEODrACpxcWfw.roa File: KP_tbT0Qmi1tnDPEODrACpxcWfw.roa (raw, json) Hash identifier: qrmp+XIBJirdSX0KfQasdEnzbFKy2Ws2ewUMN1w4pqw= Subject key identifier: 28:FF:ED:6D:3D:10:9A:2D:6D:9C:33:C4:38:3A:C0:0A:9C:5C:59:FC Certificate issuer: /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Certificate serial: 019B9D618B9C3FBBAF8F66FE941E7326031B Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/KP_tbT0Qmi1tnDPEODrACpxcWfw.roa Signing time: Thu 08 Jan 2026 11:32:54 +0000 ROA not before: Thu 08 Jan 2026 11:32:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 85.116.196.0/22 maxlen: 22 89.238.114.0/24 maxlen: 24 89.238.115.0/24 maxlen: 24 89.238.116.0/24 maxlen: 24 89.238.117.0/24 maxlen: 24 89.238.118.0/24 maxlen: 24 89.238.119.0/24 maxlen: 24 89.238.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:61:8b:9c:3f:bb:af:8f:66:fe:94:1e:73:26:03:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Validity Not Before: Jan 8 11:32:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28ffed6d3d109a2d6d9c33c4383ac00a9c5c59fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:f3:56:fd:f7:92:ba:6d:09:1c:a4:55:ac: e0:df:7f:5b:8e:41:db:1a:11:c1:9c:85:41:f7:0f: e6:34:89:a1:4a:b5:8d:2c:6b:0c:cd:8c:cb:fc:46: b6:a0:30:4f:60:2a:fb:30:cc:2d:31:ee:f2:75:53: 27:8b:b1:03:1c:4c:54:6c:7c:d5:d9:bf:ad:17:9f: 76:28:59:7a:56:02:92:1d:af:fb:5d:f3:58:f7:16: 71:70:5b:fb:26:2d:10:c5:98:5b:ca:c5:21:f1:24: e6:eb:5f:fe:0b:f1:0f:1a:bd:ef:a2:51:b8:f0:99: ae:e2:dc:2c:ca:ef:3a:ed:11:7d:f6:87:2c:48:4a: 29:a3:31:3c:55:f1:74:65:b5:32:22:32:e7:c4:d7: f8:3f:3f:f6:ae:91:da:2d:8f:9c:ef:64:b9:4c:ba: e8:b8:9f:39:0f:84:17:68:50:43:31:05:25:c0:4a: 8b:23:47:7c:da:fb:e3:bb:18:9f:1a:35:1c:af:cb: dc:fb:73:5d:83:38:c2:c9:02:0a:4e:de:21:c3:4c: 35:e7:ed:e9:97:25:43:e0:e9:51:9f:a2:22:74:ac: 63:27:d1:19:65:ae:84:c6:ba:d1:87:67:31:7e:40: 87:74:dc:ad:b8:91:0d:51:4f:be:0c:bb:77:04:ad: 2c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FF:ED:6D:3D:10:9A:2D:6D:9C:33:C4:38:3A:C0:0A:9C:5C:59:FC X509v3 Authority Key Identifier: keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/KP_tbT0Qmi1tnDPEODrACpxcWfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.116.196.0/22 89.238.114.0-89.238.119.255 89.238.124.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:96:f3:4c:ca:bf:8a:7c:7b:54:13:5f:42:b6:b9:84:de:af: a8:f6:9b:0e:2e:47:10:d6:81:5f:5b:fd:24:1a:a7:53:13:19: 53:c7:fd:38:0d:99:94:a2:0c:a2:20:a1:a4:dd:f6:0d:b5:21: 2f:55:5a:8c:b3:91:76:3d:2e:ce:ba:aa:be:cc:1f:ac:b1:c1: bb:72:06:7e:7c:53:d0:41:24:fe:c0:a5:6b:03:c3:d3:a8:9d: a0:94:92:a9:37:1f:29:8e:e8:32:f3:4f:2e:00:dd:08:a3:c9: b3:51:4e:b1:38:f8:f6:47:ff:86:13:1d:c3:7c:68:61:f2:f5: 22:26:97:26:22:b2:d6:8d:ab:93:de:a3:d6:f8:3f:b6:b6:30: 2a:f4:fb:e0:cb:76:31:85:d9:ce:6d:be:99:b0:ea:24:47:b1: 3f:0d:98:51:51:4c:3d:c9:db:11:84:76:9b:a2:2e:d8:dd:36: 82:ae:e6:e8:39:9e:58:ef:f9:53:c8:0b:b1:42:6a:39:61:bb: 5c:41:79:1a:80:f7:b6:e8:3a:9b:c7:ea:98:07:c8:1d:4d:37: d9:59:83:ab:6a:9b:4b:15:3b:eb:e7:6c:5c:d8:53:99:ca:8c: 92:50:ec:0e:ba:6f:1a:b5:16:92:b9:5f:7d:ef:a3:34:97:4c: 88:6a:a5:cd -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZudYYucP7uvj2b+lB5zJgMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZDAzOTJhYzc2NjBiZDE0NjBmYTFkNTAzMWQxODQwZDAx Yjk0MTIwHhcNMjYwMTA4MTEzMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGZmZWQ2ZDNkMTA5YTJkNmQ5YzMzYzQzODNhYzAwYTljNWM1OWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukTzVv33krptCRykVazg339bjkHb GhHBnIVB9w/mNImhSrWNLGsMzYzL/Ea2oDBPYCr7MMwtMe7ydVMni7EDHExUbHzV 2b+tF592KFl6VgKSHa/7XfNY9xZxcFv7Ji0QxZhbysUh8STm61/+C/EPGr3volG4 8Jmu4twsyu867RF99ocsSEopozE8VfF0ZbUyIjLnxNf4Pz/2rpHaLY+c72S5TLro uJ85D4QXaFBDMQUlwEqLI0d82vvjuxifGjUcr8vc+3NdgzjCyQIKTt4hw0w15+3p lyVD4OlRn6IidKxjJ9EZZa6ExrrRh2cxfkCHdNytuJENUU++DLt3BK0s9wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFCj/7W09EJotbZwzxDg6wAqcXFn8MB8GA1UdIwQY MBaAFG7QOSrHZgvRRg+h1QMdGEDQG5QSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQt ZThiYWY5ZmZhZGY4LzEvS1BfdGJUMFFtaTF0bkRQRU9EckFDcHhjV2Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQtZThiYWY5ZmZhZGY4 LzEvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCVXTEMAwD BAFZ7nIDBANZ7nADBABZ7nwwDQYJKoZIhvcNAQELBQADggEBAF2W80zKv4p8e1QT X0K2uYTer6j2mw4uRxDWgV9b/SQap1MTGVPH/TgNmZSiDKIgoaTd9g21IS9VWoyz kXY9Ls66qr7MH6yxwbtyBn58U9BBJP7ApWsDw9OonaCUkqk3HymO6DLzTy4A3Qij ybNRTrE4+PZH/4YTHcN8aGHy9SImlyYistaNq5Peo9b4P7a2MCr0++DLdjGF2c5t vpmw6iRHsT8NmFFRTD3J2xGEdpuiLtjdNoKu5ug5nljv+VPIC7FCajlhu1xBeRqA 97boOpvH6pgHyB1NN9lZg6tqm0sVO+vnbFzYU5nKjJJQ7A66bxq1FpK5X33vozSX TIhqpc0= -----END CERTIFICATE-----Generated at Mon Jan 19 20:14:54 2026 by rpki-client