This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/KFAbKKe7jo2XjrWvMFjbhME-DXc.roa File: KFAbKKe7jo2XjrWvMFjbhME-DXc.roa (raw, json) Hash identifier: 4OtvIQVEiPvcGG7i9r46Rvs1hJ/uhdVoDzjyfUfIYZk= Subject key identifier: 28:50:1B:28:A7:BB:8E:8D:97:8E:B5:AF:30:58:DB:84:C1:3E:0D:77 Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62 Certificate serial: 019B77C67FBC3ED0580D309BC8DD60F03182 Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/KFAbKKe7jo2XjrWvMFjbhME-DXc.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.218.37.0/24 maxlen: 24 2a02:ef80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7f:bc:3e:d0:58:0d:30:9b:c8:dd:60:f0:31:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62 Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28501b28a7bb8e8d978eb5af3058db84c13e0d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c1:87:d3:00:79:df:46:87:50:75:6a:15:9d: d1:18:a3:73:31:2d:d0:3a:9a:17:86:f7:bb:f5:0d: ec:54:ed:ab:09:68:b1:72:64:29:56:b1:11:ba:06: 45:b5:8c:6e:92:9a:3e:93:37:b9:c1:64:b6:04:3b: 9e:56:29:8f:12:31:08:d0:a9:27:16:3a:25:4c:4e: c7:70:f7:f1:a9:e7:6d:29:22:98:7c:d4:f9:79:6d: 13:eb:55:b1:e7:85:27:45:a7:2a:30:2a:d8:23:61: e5:67:8d:af:ae:73:1e:bd:25:76:f3:17:28:ce:08: cd:aa:18:31:8d:e4:ca:0c:73:91:57:37:c1:e2:19: cd:3f:44:d1:6a:71:b5:ed:b8:28:88:79:a1:e9:52: 47:42:1e:d2:81:5e:8d:cd:65:b5:53:3e:d7:13:20: a6:ef:49:3a:a0:53:e2:09:bf:7c:ec:12:b4:2e:20: 85:25:93:8d:bb:6c:33:9c:44:1b:56:70:45:ee:ea: b9:7e:e2:f3:36:60:7d:83:e6:2f:d2:dd:7f:7b:8f: 65:8e:4e:ea:f2:6a:50:84:fb:af:7f:90:f8:64:ce: fc:e5:b3:7d:48:f9:8b:67:e5:81:14:5b:69:6d:7a: 34:83:06:1e:96:f3:1e:ed:cb:41:27:7e:31:07:dc: 57:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:50:1B:28:A7:BB:8E:8D:97:8E:B5:AF:30:58:DB:84:C1:3E:0D:77 X509v3 Authority Key Identifier: keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/KFAbKKe7jo2XjrWvMFjbhME-DXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.37.0/24 IPv6: 2a02:ef80::/48 Signature Algorithm: sha256WithRSAEncryption 4d:7d:b3:ed:57:2e:09:b7:f2:b6:23:26:45:95:5f:9f:a9:ac: 42:2b:63:72:92:b4:45:c9:8a:a5:e8:bf:30:0c:de:6c:95:53: ed:a5:0a:68:6c:cc:5e:17:5c:0a:bd:6a:34:f1:9a:4c:17:96: 4b:32:fc:70:79:8b:b0:d3:aa:99:44:b6:98:21:a0:01:30:28: 96:f4:b9:ee:89:96:78:1c:06:b2:d5:5e:57:ec:64:e7:56:00: 97:df:37:0e:ec:26:0e:69:c5:92:86:03:8d:02:76:d4:d5:d7: 47:d4:0a:ec:68:40:6e:9e:0e:64:b1:6e:32:a5:fe:b1:32:4c: 69:ce:de:6a:76:10:0a:90:b1:bf:f4:c3:02:89:a2:5c:e1:f4: f4:df:4a:94:23:bf:77:26:a8:58:18:6f:cf:c8:18:8c:7b:10: c7:11:f2:49:14:91:72:8e:33:39:c1:81:61:3f:81:65:90:15: d9:14:ce:38:8b:0d:c1:4b:62:52:ae:4e:0a:13:4d:18:a5:bd: 4f:e3:b1:0e:77:2f:d0:a3:00:60:81:44:3b:36:61:ab:8e:d3: a4:d0:e9:6b:5f:1f:82:1d:5d:ba:36:ff:91:67:87:c3:a6:dd: e4:8d:28:0d:6c:66:bc:77:4f:f2:0e:d5:ab:e8:ca:8a:65:3c: 07:b0:f1:c1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xn+8PtBYDTCbyN1g8DGCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMTUzNWEyZWFlYmM2OGMxNjU3YWFmY2Y1YTc4OGM4NzUx ZDliNjIwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODUwMWIyOGE3YmI4ZThkOTc4ZWI1YWYzMDU4ZGI4NGMxM2UwZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcGH0wB530aHUHVqFZ3RGKNzMS3Q OpoXhve79Q3sVO2rCWixcmQpVrERugZFtYxukpo+kze5wWS2BDueVimPEjEI0Kkn FjolTE7HcPfxqedtKSKYfNT5eW0T61Wx54UnRacqMCrYI2HlZ42vrnMevSV28xco zgjNqhgxjeTKDHORVzfB4hnNP0TRanG17bgoiHmh6VJHQh7SgV6NzWW1Uz7XEyCm 70k6oFPiCb987BK0LiCFJZONu2wznEQbVnBF7uq5fuLzNmB9g+Yv0t1/e49ljk7q 8mpQhPuvf5D4ZM785bN9SPmLZ+WBFFtpbXo0gwYelvMe7ctBJ34xB9xXewIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFChQGyinu46Nl461rzBY24TBPg13MB8GA1UdIwQY MBaAFHMVNaLq68aMFleq/PWniMh1HZtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTkt NDM1YmRhNWJkMDQ4LzEvS0ZBYktLZTdqbzJYanJXdk1GamJoTUUtRFhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTktNDM1YmRhNWJkMDQ4 LzEvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9olMA8E AgACMAkDBwAqAu+AAAAwDQYJKoZIhvcNAQELBQADggEBAE19s+1XLgm38rYjJkWV X5+prEIrY3KStEXJiqXovzAM3myVU+2lCmhszF4XXAq9ajTxmkwXlksy/HB5i7DT qplEtpghoAEwKJb0ue6JlngcBrLVXlfsZOdWAJffNw7sJg5pxZKGA40CdtTV10fU CuxoQG6eDmSxbjKl/rEyTGnO3mp2EAqQsb/0wwKJolzh9PTfSpQjv3cmqFgYb8/I GIx7EMcR8kkUkXKOMznBgWE/gWWQFdkUzjiLDcFLYlKuTgoTTRilvU/jsQ53L9Cj AGCBRDs2YauO06TQ6WtfH4IdXbo2/5Fnh8Om3eSNKA1sZrx3T/IO1avoyoplPAew 8cE= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:17 2026 by rpki-client