This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/kkTc02amPtTlIxSek3MxXh3dx5I.roa File: kkTc02amPtTlIxSek3MxXh3dx5I.roa (raw, json) Hash identifier: 3304PW+xk4phx9Vfcb2WHYzghsy9uXZSyT0CrQETvuk= Subject key identifier: 92:44:DC:D3:66:A6:3E:D4:E5:23:14:9E:93:73:31:5E:1D:DD:C7:92 Certificate issuer: /CN=b8a516bfec92b1c8c7573ff884d841680e6f783f Certificate serial: 019B7FF2236E7C7F08C895CB105C46EC923E Authority key identifier: B8:A5:16:BF:EC:92:B1:C8:C7:57:3F:F8:84:D8:41:68:0E:6F:78:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/kkTc02amPtTlIxSek3MxXh3dx5I.roa Signing time: Fri 02 Jan 2026 18:22:13 +0000 ROA not before: Fri 02 Jan 2026 18:22:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41492 IP address blocks: 195.78.64.0/24 maxlen: 24 195.78.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:23:6e:7c:7f:08:c8:95:cb:10:5c:46:ec:92:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a516bfec92b1c8c7573ff884d841680e6f783f Validity Not Before: Jan 2 18:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9244dcd366a63ed4e523149e9373315e1dddc792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:47:50:e3:10:10:93:ab:56:03:c2:0d:c5: 63:a4:e1:fc:fb:bb:bb:2c:c0:cb:5f:44:4b:a3:cd: 11:3e:26:c8:65:64:59:7d:94:8f:ac:be:ea:02:3f: 6a:c2:2c:d5:b0:98:2f:4f:a4:55:a9:f4:68:4e:6f: 6a:95:64:8f:3b:4b:16:64:d1:b7:10:7c:00:c2:3e: 00:2f:79:3d:71:ad:21:9a:73:e1:e3:8b:20:4f:90: 2b:08:41:42:c4:65:3d:97:82:f9:a4:31:64:9b:18: 6f:4d:c5:e0:c7:b7:7c:7f:4d:13:f4:c0:8a:5b:ec: ea:b1:72:04:a0:ad:6b:6e:cf:cf:80:56:b3:00:5f: 24:99:f9:0e:5a:fd:aa:0c:e0:01:95:46:aa:21:50: 54:8a:59:01:ce:e5:d8:59:e8:1f:05:3d:c6:6c:14: 52:81:16:8e:76:9c:bf:7c:11:2c:6f:57:7c:8f:92: c1:91:2f:9a:43:ce:05:3c:03:fc:3d:c2:49:c7:d8: 29:88:ba:5c:65:10:46:0a:ed:b2:3f:50:7c:70:95: 46:5d:ca:d0:49:46:11:e2:3e:e0:61:0b:83:7a:60: 1a:13:96:8e:0b:18:36:4f:c0:6c:23:0a:ec:0f:29: 0c:76:e0:df:71:0d:2f:7a:38:1c:33:10:9a:85:92: ad:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:44:DC:D3:66:A6:3E:D4:E5:23:14:9E:93:73:31:5E:1D:DD:C7:92 X509v3 Authority Key Identifier: keyid:B8:A5:16:BF:EC:92:B1:C8:C7:57:3F:F8:84:D8:41:68:0E:6F:78:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/kkTc02amPtTlIxSek3MxXh3dx5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.78.64.0/23 Signature Algorithm: sha256WithRSAEncryption a5:be:fe:d7:c1:75:74:b9:53:2c:47:b3:de:5e:b5:50:54:16: ed:96:20:7f:26:47:96:5f:89:bb:0d:9d:a3:28:9f:19:a2:f4: 02:3c:07:9c:26:66:0c:4f:4c:1f:b5:49:30:a1:cc:0c:c3:34: ad:bb:ed:a8:64:6e:f8:48:60:ad:d7:a6:00:7e:95:26:76:41: 17:d8:44:68:30:9f:a7:9e:52:af:eb:3a:44:9d:51:c2:e4:b7: 57:f3:91:0b:6c:45:44:3b:ad:ac:25:07:7b:13:e7:22:54:e1: 0f:83:09:74:5b:c9:ef:83:04:10:fc:cb:e8:2b:8c:05:94:7f: 92:31:3a:f9:f5:25:02:96:29:27:32:95:6c:cb:fd:a9:7f:13: ce:e2:15:fd:00:fd:66:04:ad:e5:d5:19:64:48:98:2e:84:3e: e0:e7:8e:2a:3f:bd:cc:75:18:b7:93:06:32:be:d9:d4:18:81: eb:9d:f5:17:90:30:27:b3:55:88:d2:72:90:d6:9d:b9:db:1a: 60:37:39:c1:c5:46:a8:16:ee:62:94:5f:1e:a7:59:07:5b:de: 28:c1:37:b3:0c:12:1e:49:44:27:ae:7b:95:22:4d:11:f7:db: f3:a3:27:2a:18:4d:80:35:4d:cc:da:3d:8e:7c:62:cc:f6:13: 4f:bf:32:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8iNufH8IyJXLEFxG7JI+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YTUxNmJmZWM5MmIxYzhjNzU3M2ZmODg0ZDg0MTY4MGU2 Zjc4M2YwHhcNMjYwMTAyMTgyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjQ0ZGNkMzY2YTYzZWQ0ZTUyMzE0OWU5MzczMzE1ZTFkZGRjNzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEJHUOMQEJOrVgPCDcVjpOH8+7u7 LMDLX0RLo80RPibIZWRZfZSPrL7qAj9qwizVsJgvT6RVqfRoTm9qlWSPO0sWZNG3 EHwAwj4AL3k9ca0hmnPh44sgT5ArCEFCxGU9l4L5pDFkmxhvTcXgx7d8f00T9MCK W+zqsXIEoK1rbs/PgFazAF8kmfkOWv2qDOABlUaqIVBUilkBzuXYWegfBT3GbBRS gRaOdpy/fBEsb1d8j5LBkS+aQ84FPAP8PcJJx9gpiLpcZRBGCu2yP1B8cJVGXcrQ SUYR4j7gYQuDemAaE5aOCxg2T8BsIwrsDykMduDfcQ0vejgcMxCahZKtKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJJE3NNmpj7U5SMUnpNzMV4d3ceSMB8GA1UdIwQY MBaAFLilFr/skrHIx1c/+ITYQWgOb3g/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUtVV3YteVNzY2pIVnpfNGhOaEJhQTV2ZUQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81ZmJjMjAtMTM2Ny00ZDY0LWFlMDUt ZTE1MzM5Zjc3MmM1LzEva2tUYzAyYW1QdFRsSXhTZWszTXhYaDNkeDVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81ZmJjMjAtMTM2Ny00ZDY0LWFlMDUtZTE1MzM5Zjc3MmM1 LzEvdUtVV3YteVNzY2pIVnpfNGhOaEJhQTV2ZUQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw05AMA0G CSqGSIb3DQEBCwUAA4IBAQClvv7XwXV0uVMsR7PeXrVQVBbtliB/JkeWX4m7DZ2j KJ8ZovQCPAecJmYMT0wftUkwocwMwzStu+2oZG74SGCt16YAfpUmdkEX2ERoMJ+n nlKv6zpEnVHC5LdX85ELbEVEO62sJQd7E+ciVOEPgwl0W8nvgwQQ/MvoK4wFlH+S MTr59SUCliknMpVsy/2pfxPO4hX9AP1mBK3l1RlkSJguhD7g544qP73MdRi3kwYy vtnUGIHrnfUXkDAns1WI0nKQ1p252xpgNznBxUaoFu5ilF8ep1kHW94owTezDBIe SUQnrnuVIk0R99vzoycqGE2ANU3M2j2OfGLM9hNPvzLa -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:30 2026 by rpki-client