This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/pKievJotd0Vwu1YJE0cQcf-DltY.roa File: pKievJotd0Vwu1YJE0cQcf-DltY.roa (raw, json) Hash identifier: h+T203a1jd44mMy05CeC2wpUpgb3MOkiNaLP9bVt08U= Subject key identifier: A4:A8:9E:BC:9A:2D:77:45:70:BB:56:09:13:47:10:71:FF:83:96:D6 Certificate issuer: /CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7 Certificate serial: 019B7C7F067F86B40708C5517E21F635ED24 Authority key identifier: CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/pKievJotd0Vwu1YJE0cQcf-DltY.roa Signing time: Fri 02 Jan 2026 02:17:38 +0000 ROA not before: Fri 02 Jan 2026 02:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197944 IP address blocks: 91.230.90.0/24 maxlen: 24 2001:67c:24dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:06:7f:86:b4:07:08:c5:51:7e:21:f6:35:ed:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7 Validity Not Before: Jan 2 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4a89ebc9a2d774570bb560913471071ff8396d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ea:f1:13:b5:30:ac:cc:66:c8:ce:78:9a:91: 28:4f:e8:ae:37:d3:cc:ca:c9:00:12:7c:71:b0:18: b7:b1:8d:49:7c:3f:5c:21:07:19:84:19:51:06:5f: 3c:4a:24:27:c4:72:d9:8b:53:51:4b:6f:bb:63:49: 9c:7b:91:03:ef:d8:66:e0:be:05:5a:e1:b8:8a:d6: ab:f4:ec:e8:1d:95:c7:2b:67:33:62:11:37:64:c4: c8:f5:a7:c7:43:f1:c6:24:f3:a1:4f:71:86:9e:84: c2:39:19:6b:d9:89:39:1b:41:22:6c:cb:8c:b6:d2: 97:bc:1e:7a:ca:f3:35:75:50:29:c6:ba:5e:1f:07: 03:f1:ef:f8:f8:49:45:82:2e:05:a7:4d:79:7b:5d: d6:82:30:8c:69:7c:89:21:3d:7d:6a:c8:ad:51:5e: 43:9a:3c:cd:d3:35:97:68:12:1e:66:49:7d:71:dd: 0b:91:ac:61:2a:2a:79:b6:56:08:95:be:63:20:52: 34:51:61:e2:d6:ee:01:5e:2b:8e:a5:2f:40:92:77: ba:ad:90:1e:af:06:95:75:c6:c1:c7:66:6d:51:46: 6b:d0:38:57:e4:e8:45:33:d7:07:6a:70:9e:fe:4d: 21:1a:d3:ef:3b:02:53:67:4c:b6:f2:d1:5d:62:7c: 98:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A8:9E:BC:9A:2D:77:45:70:BB:56:09:13:47:10:71:FF:83:96:D6 X509v3 Authority Key Identifier: keyid:CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/pKievJotd0Vwu1YJE0cQcf-DltY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.90.0/24 IPv6: 2001:67c:24dc::/48 Signature Algorithm: sha256WithRSAEncryption 75:21:83:cd:6f:70:f7:d7:07:12:a9:3e:60:04:e5:72:83:cf: 9d:5f:00:6f:a2:9e:9d:20:b8:ff:fb:99:3c:fe:4a:df:69:c5: c3:d3:eb:33:ae:7b:3c:fb:e1:ed:6e:1d:1b:ad:8c:1c:c3:12: 3b:ed:db:b2:d6:d3:79:04:f0:6f:31:5f:d8:e8:39:65:84:b1: 12:48:e2:87:af:6d:f2:19:6c:31:f5:58:5d:f3:67:f7:dc:1e: 49:e5:01:e3:81:4a:fd:13:08:84:42:a7:e3:4f:5a:e1:60:2a: 4e:62:1a:f3:d7:7e:25:92:cf:11:7f:51:be:07:77:6c:b7:94: 64:d9:d0:57:d0:5b:0f:9f:12:d9:6f:e9:cb:5a:92:49:0b:a8: ac:5a:8d:8e:ae:55:a6:6f:7e:14:d7:ea:28:bc:b8:ed:3b:25: 40:e1:4f:56:cf:94:49:9c:be:fd:54:fa:8a:c6:40:d9:8f:ed: 45:96:50:18:ec:48:2a:a1:28:3d:b0:e6:2a:a0:d9:c9:bf:19: db:57:11:91:38:dc:f1:ae:8e:f5:82:3a:f4:eb:c6:5a:7d:77: d8:50:fc:33:06:ea:eb:a8:79:c9:98:f4:be:7f:15:ac:82:22: ca:f7:c0:c4:7f:07:ce:be:bd:97:45:3a:52:8a:5a:88:c1:53: b6:82:f1:c0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8fwZ/hrQHCMVRfiH2Ne0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNjg0M2NlMTUyMjlhODAyM2Q5N2ZhMjdhMzdlNTkyNzhi MmJmZDcwHhcNMjYwMTAyMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGE4OWViYzlhMmQ3NzQ1NzBiYjU2MDkxMzQ3MTA3MWZmODM5NmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OrxE7UwrMxmyM54mpEoT+iuN9PM yskAEnxxsBi3sY1JfD9cIQcZhBlRBl88SiQnxHLZi1NRS2+7Y0mce5ED79hm4L4F WuG4itar9OzoHZXHK2czYhE3ZMTI9afHQ/HGJPOhT3GGnoTCORlr2Yk5G0EibMuM ttKXvB56yvM1dVApxrpeHwcD8e/4+ElFgi4Fp015e13WgjCMaXyJIT19asitUV5D mjzN0zWXaBIeZkl9cd0LkaxhKip5tlYIlb5jIFI0UWHi1u4BXiuOpS9Akne6rZAe rwaVdcbBx2ZtUUZr0DhX5OhFM9cHanCe/k0hGtPvOwJTZ0y28tFdYnyYuQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKSonryaLXdFcLtWCRNHEHH/g5bWMB8GA1UdIwQY MBaAFM9oQ84VIpqAI9l/ono35ZJ4sr/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejJoRHpoVWltb0FqMlgtaWVqZmxrbml5djljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83NjFiNDgtNjllYS00MGU0LThkN2Mt NjRjZDE5NGY3ZjRmLzEvcEtpZXZKb3RkMFZ3dTFZSkUwY1FjZi1EbHRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy83NjFiNDgtNjllYS00MGU0LThkN2MtNjRjZDE5NGY3ZjRm LzEvejJoRHpoVWltb0FqMlgtaWVqZmxrbml5djljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW+ZaMA8E AgACMAkDBwAgAQZ8JNwwDQYJKoZIhvcNAQELBQADggEBAHUhg81vcPfXBxKpPmAE 5XKDz51fAG+inp0guP/7mTz+St9pxcPT6zOuezz74e1uHRutjBzDEjvt27LW03kE 8G8xX9joOWWEsRJI4oevbfIZbDH1WF3zZ/fcHknlAeOBSv0TCIRCp+NPWuFgKk5i GvPXfiWSzxF/Ub4Hd2y3lGTZ0FfQWw+fEtlv6ctakkkLqKxajY6uVaZvfhTX6ii8 uO07JUDhT1bPlEmcvv1U+orGQNmP7UWWUBjsSCqhKD2w5iqg2cm/GdtXEZE43PGu jvWCOvTrxlp9d9hQ/DMG6uuoecmY9L5/FayCIsr3wMR/B86+vZdFOlKKWojBU7aC 8cA= -----END CERTIFICATE-----Generated at Mon Feb 2 06:21:21 2026 by rpki-client