This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/kNIMwvIm17KNl4j_uiod0k8I7zA.roa File: kNIMwvIm17KNl4j_uiod0k8I7zA.roa (raw, json) Hash identifier: UUpBz48IIuQvNQbtn+EM3409/ewRtq2gofruXX7xipw= Subject key identifier: 90:D2:0C:C2:F2:26:D7:B2:8D:97:88:FF:BA:2A:1D:D2:4F:08:EF:30 Certificate issuer: /CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832 Certificate serial: 019B791072754D5CD15314FABE9AA391348A Authority key identifier: CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/kNIMwvIm17KNl4j_uiod0k8I7zA.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44806 IP address blocks: 93.94.104.0/21 maxlen: 24 178.23.40.0/21 maxlen: 24 185.192.32.0/22 maxlen: 24 2a00:1140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:72:75:4d:5c:d1:53:14:fa:be:9a:a3:91:34:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90d20cc2f226d7b28d9788ffba2a1dd24f08ef30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3f:75:38:6a:1d:f7:4c:2c:2a:55:28:d9:5b: 71:4b:24:a8:25:1f:ba:12:a5:22:b0:66:41:fe:3c: 9a:e9:a4:fa:37:01:f1:a2:b1:8d:5e:63:c0:c7:10: ef:86:54:c3:91:00:69:5c:b8:17:5e:b0:28:d0:02: 43:76:c0:3b:5a:5e:2b:51:05:4d:9b:6b:e5:3b:85: bb:c4:19:58:8a:05:92:d5:30:0d:d6:fc:ad:49:5b: cc:f7:b7:e5:11:44:70:5f:d3:a2:28:27:49:e6:02: c6:46:d9:cf:9e:a6:ee:af:c7:fe:05:8c:20:32:ad: 90:2a:da:9c:24:56:04:df:63:11:c7:10:96:e4:97: 44:c8:42:41:28:a4:ad:94:3f:c7:0e:a7:10:db:13: ef:92:62:03:4c:fe:0a:d9:e0:f1:47:b4:e7:ea:4e: c9:d4:f9:47:41:f4:3b:35:c4:3a:a5:7f:3f:c9:64: 78:10:20:1f:62:74:2d:89:60:f8:9d:2a:82:4f:8e: 3a:b7:05:89:4c:0b:7c:dd:78:65:83:d3:d0:d6:83: 8c:b8:fc:e9:bb:5c:bf:b1:06:80:56:0c:9b:2f:a4: f1:88:5a:8e:9e:41:1b:2c:5a:29:2b:a3:ff:02:3a: a6:40:3a:10:38:26:3d:c6:a6:80:cd:cd:1a:1e:57: 6d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D2:0C:C2:F2:26:D7:B2:8D:97:88:FF:BA:2A:1D:D2:4F:08:EF:30 X509v3 Authority Key Identifier: keyid:CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/kNIMwvIm17KNl4j_uiod0k8I7zA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.94.104.0/21 178.23.40.0/21 185.192.32.0/22 IPv6: 2a00:1140::/32 Signature Algorithm: sha256WithRSAEncryption 39:35:ab:29:9a:f1:e1:bc:84:4d:75:ba:83:cd:53:6f:82:1c: 02:c4:7c:29:db:6e:77:64:67:ff:ca:db:29:34:76:35:57:e8: 9d:00:70:cc:52:86:26:41:df:71:1b:eb:8a:24:f2:9b:87:d6: ac:82:92:1b:25:c2:2d:c1:f8:87:57:36:fd:fb:84:6f:04:3f: f6:ae:cc:4f:8c:ed:a0:db:e7:8d:62:05:83:90:d6:87:2b:23: d9:40:8f:6f:ec:e2:5f:5c:61:fb:65:d3:c1:6a:87:56:bd:cb: ab:b2:69:3c:59:08:c4:7b:d1:64:12:2b:4b:e9:70:b2:7e:9f: 4c:ae:5f:62:ec:bf:9b:a8:e6:b5:79:15:af:0a:67:8a:e6:32: 65:73:25:12:c0:bf:38:38:1a:bc:92:00:b3:67:b2:a9:ce:bb: e7:48:28:e5:aa:76:9a:f9:ea:d4:57:91:f3:b4:d0:9d:0e:b0: d9:77:2f:eb:d2:37:01:10:c2:4e:36:80:bf:16:3a:28:a7:02: 26:0f:a7:31:d0:e9:bb:1f:21:83:a3:65:19:37:f1:8d:81:e0: d7:c0:f2:6c:7f:42:88:63:47:fc:53:7f:62:fa:6b:2a:b2:2c: 08:ea:0f:e5:71:cd:1d:9c:a3:df:09:de:98:40:28:c7:61:6b: eb:16:b7:f3 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5EHJ1TVzRUxT6vpqjkTSKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDJkYzRmMzhmOTZiNmQ0Nzc5Njk4OGVjZGRmMGM2ZDBj NGU4MzIwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGQyMGNjMmYyMjZkN2IyOGQ5Nzg4ZmZiYTJhMWRkMjRmMDhlZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT91OGod90wsKlUo2VtxSySoJR+6 EqUisGZB/jya6aT6NwHxorGNXmPAxxDvhlTDkQBpXLgXXrAo0AJDdsA7Wl4rUQVN m2vlO4W7xBlYigWS1TAN1vytSVvM97flEURwX9OiKCdJ5gLGRtnPnqbur8f+BYwg Mq2QKtqcJFYE32MRxxCW5JdEyEJBKKStlD/HDqcQ2xPvkmIDTP4K2eDxR7Tn6k7J 1PlHQfQ7NcQ6pX8/yWR4ECAfYnQtiWD4nSqCT446twWJTAt83Xhlg9PQ1oOMuPzp u1y/sQaAVgybL6TxiFqOnkEbLFopK6P/AjqmQDoQOCY9xqaAzc0aHldtDQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJDSDMLyJteyjZeI/7oqHdJPCO8wMB8GA1UdIwQY MBaAFMzS3E84+WttR3lpiOzd8MbQxOgyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YTJlNWYtOWJiOS00M2E0LWI0NTIt NDYwYzg5YjM5MmIzLzEva05JTXd2SW0xN0tObDRqX3Vpb2QwazhJN3pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni82YTJlNWYtOWJiOS00M2E0LWI0NTItNDYwYzg5YjM5MmIz LzEvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDXV5oAwQD shcoAwQCucAgMA0EAgACMAcDBQAqABFAMA0GCSqGSIb3DQEBCwUAA4IBAQA5Nasp mvHhvIRNdbqDzVNvghwCxHwp2253ZGf/ytspNHY1V+idAHDMUoYmQd9xG+uKJPKb h9asgpIbJcItwfiHVzb9+4RvBD/2rsxPjO2g2+eNYgWDkNaHKyPZQI9v7OJfXGH7 ZdPBaodWvcursmk8WQjEe9FkEitL6XCyfp9Mrl9i7L+bqOa1eRWvCmeK5jJlcyUS wL84OBq8kgCzZ7KpzrvnSCjlqnaa+erUV5HztNCdDrDZdy/r0jcBEMJONoC/Fjoo pwImD6cx0Om7HyGDo2UZN/GNgeDXwPJsf0KIY0f8U39i+msqsiwI6g/lcc0dnKPf Cd6YQCjHYWvrFrfz -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:57 2026 by rpki-client