This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/ka7aLk420YTBj2lWDkHarAVtbD0.roa File: ka7aLk420YTBj2lWDkHarAVtbD0.roa (raw, json) Hash identifier: mbAETTjg/QXgcUSNvJYoLhzkdNjTzmiAhVEDDUMk/LM= Subject key identifier: 91:AE:DA:2E:4E:36:D1:84:C1:8F:69:56:0E:41:DA:AC:05:6D:6C:3D Certificate issuer: /CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a Certificate serial: 019B783504CA512CC2A0B93EA47D63CCD52A Authority key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/ka7aLk420YTBj2lWDkHarAVtbD0.roa Signing time: Thu 01 Jan 2026 06:18:19 +0000 ROA not before: Thu 01 Jan 2026 06:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29267 IP address blocks: 195.85.211.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:04:ca:51:2c:c2:a0:b9:3e:a4:7d:63:cc:d5:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a Validity Not Before: Jan 1 06:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91aeda2e4e36d184c18f69560e41daac056d6c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:79:b3:ff:55:8c:0c:da:8c:5a:fd:59:33:e6: 66:22:aa:f0:a5:bf:dd:d4:77:33:24:a8:e2:8e:5f: b8:e0:57:a7:e3:e8:90:02:ff:5c:f0:27:76:ce:9e: ed:42:ae:66:b3:e1:a7:36:26:b0:e5:d4:8d:fe:68: b9:28:74:9e:41:0f:98:1a:1f:0c:c8:01:21:5f:ca: 82:9a:23:3b:92:23:a0:9c:ad:2b:a1:b1:27:1d:14: 2e:1a:89:37:56:db:93:d8:e8:cf:43:5a:33:c4:36: bb:55:3d:f4:25:ec:af:36:e0:02:89:67:5b:0a:66: f4:50:e6:a2:71:0f:c9:09:d4:d4:86:43:c4:44:c4: 48:5c:f5:35:df:9d:9e:13:23:e7:99:03:cf:22:dd: 1d:9a:6f:e8:5e:f2:d2:cf:03:62:0e:49:08:2b:19: bf:6d:00:53:38:65:60:28:21:38:57:5d:d8:12:9f: 30:1a:ef:3b:79:c3:b8:86:e6:39:d9:69:6a:69:2d: c6:a9:6c:b8:8d:e4:58:b6:4c:c2:40:b9:11:71:1a: 57:d1:11:60:bb:89:96:88:c1:1c:41:a7:af:67:e2: d5:1d:72:bc:73:ec:e6:99:12:58:3a:b6:2d:35:b1: 3e:98:d4:67:cf:99:22:00:34:7b:f5:11:12:89:2e: 8e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AE:DA:2E:4E:36:D1:84:C1:8F:69:56:0E:41:DA:AC:05:6D:6C:3D X509v3 Authority Key Identifier: keyid:2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/ka7aLk420YTBj2lWDkHarAVtbD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.85.211.0/24 Signature Algorithm: sha256WithRSAEncryption 22:f5:c2:0c:e9:e8:bc:d8:98:11:59:07:33:3a:b1:e1:2e:ee: 7a:60:fa:66:13:cc:64:7c:f5:bc:ae:a2:c6:7a:b8:e1:ae:b7: e2:82:db:af:f0:a5:c8:29:61:ce:0d:1e:17:3c:c0:df:6e:b7: cd:57:da:d2:1e:ee:36:d8:51:60:37:bf:77:f2:5e:d8:a6:71: 8a:3e:a4:dc:22:55:a3:79:23:de:81:76:aa:2a:fd:4a:0f:ce: 2f:76:cf:b0:c9:5f:0b:30:37:3d:b3:0a:66:d6:db:95:fb:46: 85:87:f8:34:0d:e1:cd:bf:7f:92:96:b7:92:1e:76:85:02:fd: 4c:61:59:39:21:89:f1:e1:27:84:aa:43:7c:f6:f8:53:d6:e6: 52:bf:d5:a1:46:e7:f0:23:77:1c:8d:90:a6:85:03:7f:2e:81: 10:0a:ca:d2:14:5f:40:8b:15:99:3f:4f:ca:87:84:8c:70:c0: ba:2c:e0:42:0a:63:4e:d5:86:a0:63:c5:80:5d:68:eb:9f:18: a5:d0:a2:5c:81:28:c1:cb:9c:4e:a0:c5:7e:d8:5d:21:bc:f0: 22:cf:ff:af:d2:ab:dd:7d:34:86:89:f3:fb:11:55:33:f4:d3: 88:60:55:b5:88:16:d5:bd:3d:17:1b:3f:4f:d4:8e:1d:68:cb: 32:09:62:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NQTKUSzCoLk+pH1jzNUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZTI5OTUwNThiM2RlOWFlZDIzYTYxZjdmYjdiNWI3YjE5 Mzk4NGEwHhcNMjYwMTAxMDYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWFlZGEyZTRlMzZkMTg0YzE4ZjY5NTYwZTQxZGFhYzA1NmQ2YzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnmz/1WMDNqMWv1ZM+ZmIqrwpb/d 1HczJKjijl+44Fen4+iQAv9c8Cd2zp7tQq5ms+GnNiaw5dSN/mi5KHSeQQ+YGh8M yAEhX8qCmiM7kiOgnK0robEnHRQuGok3VtuT2OjPQ1ozxDa7VT30JeyvNuACiWdb Cmb0UOaicQ/JCdTUhkPERMRIXPU1352eEyPnmQPPIt0dmm/oXvLSzwNiDkkIKxm/ bQBTOGVgKCE4V13YEp8wGu87ecO4huY52WlqaS3GqWy4jeRYtkzCQLkRcRpX0RFg u4mWiMEcQaevZ+LVHXK8c+zmmRJYOrYtNbE+mNRnz5kiADR79RESiS6OXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJGu2i5ONtGEwY9pVg5B2qwFbWw9MB8GA1UdIwQY MBaAFCzimVBYs96a7SOmH3+3tbexk5hKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9LWlVGaXozcHJ0STZZZmY3ZTF0N0dUbUVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9kNTIwZGItYmRmOC00ZjI3LThkZmYt OGMxMzBlNjg0MWRiLzEva2E3YUxrNDIwWVRCajJsV0RrSGFyQVZ0YkQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9kNTIwZGItYmRmOC00ZjI3LThkZmYtOGMxMzBlNjg0MWRi LzEvTE9LWlVGaXozcHJ0STZZZmY3ZTF0N0dUbUVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1XTMA0G CSqGSIb3DQEBCwUAA4IBAQAi9cIM6ei82JgRWQczOrHhLu56YPpmE8xkfPW8rqLG erjhrrfigtuv8KXIKWHODR4XPMDfbrfNV9rSHu422FFgN7938l7YpnGKPqTcIlWj eSPegXaqKv1KD84vds+wyV8LMDc9swpm1tuV+0aFh/g0DeHNv3+SlreSHnaFAv1M YVk5IYnx4SeEqkN89vhT1uZSv9WhRufwI3ccjZCmhQN/LoEQCsrSFF9AixWZP0/K h4SMcMC6LOBCCmNO1YagY8WAXWjrnxil0KJcgSjBy5xOoMV+2F0hvPAiz/+v0qvd fTSGifP7EVUz9NOIYFW1iBbVvT0XGz9P1I4daMsyCWIj -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:10 2026 by rpki-client