This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Kffn_V76okZfAWaWx_cPo4le1AY.roa File: Kffn_V76okZfAWaWx_cPo4le1AY.roa (raw, json) Hash identifier: dF8VADSaW1jPhMGiFEuBcsaLIVvNtCxT+mFCP2bJ76E= Subject key identifier: 29:F7:E7:FD:5E:FA:A2:46:5F:01:66:96:C7:F7:0F:A3:89:5E:D4:06 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DF0FC66BA8B83F867FADBB9D0A9DD Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Kffn_V76okZfAWaWx_cPo4le1AY.roa Signing time: Thu 01 Jan 2026 12:17:35 +0000 ROA not before: Thu 01 Jan 2026 12:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57494 IP address blocks: 89.125.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f0:fc:66:ba:8b:83:f8:67:fa:db:b9:d0:a9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29f7e7fd5efaa2465f016696c7f70fa3895ed406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d5:ac:d6:4c:b7:55:0e:e0:23:b8:11:b7:eb: 9d:4b:c2:09:64:41:c3:12:4e:e1:a7:33:e5:8f:ae: 30:30:06:d8:a3:8b:48:1d:c3:93:6e:b1:a1:20:a7: 70:3d:1c:da:a7:56:4e:43:4c:e3:9b:97:04:2f:73: d0:dd:3a:d2:24:97:69:9e:59:09:5c:d3:5d:cf:a6: 7c:1c:fc:6c:b2:18:5c:cb:85:c7:87:ae:fa:3a:05: 95:cf:b3:11:e6:18:43:cd:1a:3e:22:3c:6a:72:3d: 3e:dc:75:56:e2:c1:12:2f:51:6b:67:41:bd:30:a1: 0f:e2:82:cd:fb:4c:bb:32:eb:df:a8:bf:84:7a:42: 32:e9:94:23:8d:ed:8f:cc:f4:8d:da:45:3b:4f:a6: 16:4e:47:93:32:4c:d7:cd:25:6c:aa:a0:84:a4:fc: 1f:81:08:6a:35:e1:3b:5e:69:3b:e4:b1:b4:21:65: b0:50:43:69:bf:4a:7d:5b:a9:7b:ae:b1:3e:65:20: 57:a1:80:11:f8:51:de:a0:18:4b:ef:71:23:80:95: 71:0f:b6:9d:89:d3:24:2d:df:a9:dd:e6:63:4e:86: c3:ee:f0:3c:fa:a5:b5:7d:3f:ce:34:57:8e:31:61: 68:ac:22:c5:d7:c5:4c:46:dd:11:07:aa:dd:73:ea: ac:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F7:E7:FD:5E:FA:A2:46:5F:01:66:96:C7:F7:0F:A3:89:5E:D4:06 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Kffn_V76okZfAWaWx_cPo4le1AY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.171.0/24 Signature Algorithm: sha256WithRSAEncryption 20:cc:61:9f:fa:5c:c4:e8:85:7c:db:00:c7:ee:67:2a:a4:63: 9d:9b:23:70:9e:57:84:b3:ae:5e:59:1d:44:d7:5b:9e:03:90: 3b:01:7b:2d:7d:42:97:f0:2e:04:a7:9d:66:d2:c7:68:67:ec: 05:2a:6c:89:73:9d:7c:3b:3e:47:c2:bf:25:ef:64:87:07:3a: 5e:f7:f0:21:7c:98:56:96:9a:23:46:c1:5a:6a:75:c4:21:4e: 3d:12:ef:fb:55:dd:66:a9:41:ef:71:54:2e:8a:d8:03:5b:3e: 38:b2:e3:54:c0:02:53:e3:92:4b:32:3a:5b:ec:4d:03:7b:51: e8:96:3f:48:8e:d0:37:8e:09:35:3b:7a:a7:fa:5c:67:8e:32: f6:b1:74:cf:57:b4:85:d5:c7:3f:65:35:c7:68:5f:b4:63:5c: 3e:04:e1:8b:48:df:c3:40:c6:69:5b:6f:87:17:b9:16:0b:fd: bc:5d:3c:f3:27:3e:0f:a8:b7:9f:bd:64:d8:42:9c:b7:00:71: 74:40:d6:4b:85:bf:bf:ed:2c:59:97:70:13:db:50:8c:18:7c: e4:43:2a:e4:06:ca:0c:72:ee:b1:e4:07:0e:b6:02:45:21:a1: ec:58:ae:9b:56:a9:a1:3e:a5:98:68:96:16:84:7a:b8:9e:a6: 6c:29:8e:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffD8ZrqLg/hn+tu50KndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWY3ZTdmZDVlZmFhMjQ2NWYwMTY2OTZjN2Y3MGZhMzg5NWVkNDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dWs1ky3VQ7gI7gRt+udS8IJZEHD Ek7hpzPlj64wMAbYo4tIHcOTbrGhIKdwPRzap1ZOQ0zjm5cEL3PQ3TrSJJdpnlkJ XNNdz6Z8HPxsshhcy4XHh676OgWVz7MR5hhDzRo+Ijxqcj0+3HVW4sESL1FrZ0G9 MKEP4oLN+0y7MuvfqL+EekIy6ZQjje2PzPSN2kU7T6YWTkeTMkzXzSVsqqCEpPwf gQhqNeE7Xmk75LG0IWWwUENpv0p9W6l7rrE+ZSBXoYAR+FHeoBhL73EjgJVxD7ad idMkLd+p3eZjTobD7vA8+qW1fT/ONFeOMWForCLF18VMRt0RB6rdc+qsywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCn35/1e+qJGXwFmlsf3D6OJXtQGMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvS2Zmbl9WNzZva1pmQVdhV3hfY1BvNGxlMUFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWX2rMA0G CSqGSIb3DQEBCwUAA4IBAQAgzGGf+lzE6IV82wDH7mcqpGOdmyNwnleEs65eWR1E 11ueA5A7AXstfUKX8C4Ep51m0sdoZ+wFKmyJc518Oz5Hwr8l72SHBzpe9/AhfJhW lpojRsFaanXEIU49Eu/7Vd1mqUHvcVQuitgDWz44suNUwAJT45JLMjpb7E0De1Ho lj9IjtA3jgk1O3qn+lxnjjL2sXTPV7SF1cc/ZTXHaF+0Y1w+BOGLSN/DQMZpW2+H F7kWC/28XTzzJz4PqLefvWTYQpy3AHF0QNZLhb+/7SxZl3AT21CMGHzkQyrkBsoM cu6x5AcOtgJFIaHsWK6bVqmhPqWYaJYWhHq4nqZsKY6w -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:26 2026 by rpki-client