This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/kpjb-t-YZHOmBc0WiZYQ4iqabCY.roa File: kpjb-t-YZHOmBc0WiZYQ4iqabCY.roa (raw, json) Hash identifier: Euiqd1yuKucYUcEoHqhT7bG61J5J4k6BCCOLw+qgcsQ= Subject key identifier: 92:98:DB:FA:DF:98:64:73:A6:05:CD:16:89:96:10:E2:2A:9A:6C:26 Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072 Certificate serial: 019B7F15F7080B943E5A75A744DC28B48F0C Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/kpjb-t-YZHOmBc0WiZYQ4iqabCY.roa Signing time: Fri 02 Jan 2026 14:21:44 +0000 ROA not before: Fri 02 Jan 2026 14:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 83.217.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f7:08:0b:94:3e:5a:75:a7:44:dc:28:b4:8f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b82433ffe94bf3536fec327543d396158202072 Validity Not Before: Jan 2 14:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9298dbfadf986473a605cd16899610e22a9a6c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:57:42:e3:82:cf:77:7d:22:2c:06:65:10:7a: 7c:d5:2c:cd:64:8b:fd:4f:81:df:55:50:38:36:89: 4c:3c:fa:a6:15:fa:0e:16:df:fe:af:3d:be:c4:00: c6:d4:e8:31:c8:60:a8:c8:60:4d:50:57:b4:36:7b: 8b:6d:4b:26:77:01:b0:d8:a8:f6:1e:fb:8d:41:9b: fb:55:15:0b:87:67:cc:d9:bf:9d:c0:db:0d:77:56: af:cf:f5:c2:fc:fb:41:6a:ae:11:b8:6f:0e:ba:f8: 88:44:5a:a3:0d:d7:95:fc:9f:c0:69:67:81:4f:80: 6e:f4:15:63:0f:c4:67:79:a1:ad:db:72:6b:8d:88: d0:69:5a:46:a0:90:23:15:a1:a7:52:90:2d:df:8d: fc:1a:d3:13:e8:13:4a:69:a1:57:b6:44:58:bf:67: af:90:66:b0:9b:9f:43:7f:81:e2:95:31:ba:e9:54: a9:50:42:20:d8:aa:43:48:c8:6a:0c:ef:69:c5:ef: d0:06:a8:6d:48:23:8a:85:a4:ff:89:2c:5d:cf:d4: db:18:dd:99:0e:d2:74:ca:fc:d1:50:8c:10:f1:07: d9:00:99:58:58:e8:ae:e9:92:ab:16:98:cf:0d:85: c2:3b:a3:87:65:bb:80:e0:05:6b:61:55:3b:5c:74: 15:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:98:DB:FA:DF:98:64:73:A6:05:CD:16:89:96:10:E2:2A:9A:6C:26 X509v3 Authority Key Identifier: keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/kpjb-t-YZHOmBc0WiZYQ4iqabCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.217.222.0/24 Signature Algorithm: sha256WithRSAEncryption 58:be:81:fd:6e:db:d5:32:9b:ae:3e:91:ae:11:18:d5:c2:5f: 80:91:d1:88:bb:28:12:75:76:d0:b2:e3:82:1d:ba:f5:e0:0a: 61:34:30:67:a8:1d:7a:59:30:90:59:2f:f3:b1:4d:8f:18:c3: 1e:04:14:e0:39:e1:2e:db:b7:4c:15:f0:5d:41:16:0f:92:b7: f2:07:e8:ee:7e:31:77:7a:20:38:a4:0f:fe:4f:31:e2:f5:99: 73:23:00:b6:a2:92:8c:9c:e7:c3:bc:06:fe:50:93:03:47:db: 34:95:35:13:86:2e:6c:6d:7c:80:04:4b:c6:1f:34:63:bf:71: 6f:eb:9a:b1:e8:b2:a3:69:38:62:e6:e3:25:f5:42:df:8e:d0: 09:97:e9:3e:5f:83:66:35:38:a9:e3:3d:19:af:26:b6:86:94: 0a:2c:12:f6:f2:66:a8:0d:ac:5f:ef:27:95:65:67:f3:a2:03: 69:26:96:6f:ca:2f:17:95:a3:11:70:6b:48:07:b8:18:77:d0: d4:84:31:d3:51:f6:a2:a7:4d:a1:c4:d3:2e:2e:33:21:28:09: 80:50:df:03:5a:5c:f2:18:0e:21:b3:42:33:70:39:29:c7:88: ac:7e:47:17:fb:a1:0d:c2:6b:ee:17:d5:f4:b9:a8:74:82:c4: fd:e2:ba:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FfcIC5Q+WnWnRNwotI8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy MDIwNzIwHhcNMjYwMTAyMTQyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mjk4ZGJmYWRmOTg2NDczYTYwNWNkMTY4OTk2MTBlMjJhOWE2YzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ldC44LPd30iLAZlEHp81SzNZIv9 T4HfVVA4NolMPPqmFfoOFt/+rz2+xADG1OgxyGCoyGBNUFe0NnuLbUsmdwGw2Kj2 HvuNQZv7VRULh2fM2b+dwNsNd1avz/XC/PtBaq4RuG8OuviIRFqjDdeV/J/AaWeB T4Bu9BVjD8RneaGt23JrjYjQaVpGoJAjFaGnUpAt3438GtMT6BNKaaFXtkRYv2ev kGawm59Df4HilTG66VSpUEIg2KpDSMhqDO9pxe/QBqhtSCOKhaT/iSxdz9TbGN2Z DtJ0yvzRUIwQ8QfZAJlYWOiu6ZKrFpjPDYXCO6OHZbuA4AVrYVU7XHQV8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJKY2/rfmGRzpgXNFomWEOIqmmwmMB8GA1UdIwQY MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEva3BqYi10LVlaSE9tQmMwV2laWVE0aXFhYkNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU9neMA0G CSqGSIb3DQEBCwUAA4IBAQBYvoH9btvVMpuuPpGuERjVwl+AkdGIuygSdXbQsuOC Hbr14AphNDBnqB16WTCQWS/zsU2PGMMeBBTgOeEu27dMFfBdQRYPkrfyB+jufjF3 eiA4pA/+TzHi9ZlzIwC2opKMnOfDvAb+UJMDR9s0lTUThi5sbXyABEvGHzRjv3Fv 65qx6LKjaThi5uMl9ULfjtAJl+k+X4NmNTip4z0Zrya2hpQKLBL28maoDaxf7yeV ZWfzogNpJpZvyi8XlaMRcGtIB7gYd9DUhDHTUfaip02hxNMuLjMhKAmAUN8DWlzy GA4hs0IzcDkpx4isfkcX+6ENwmvuF9X0uah0gsT94rpl -----END CERTIFICATE-----Generated at Wed Jan 21 11:14:51 2026 by rpki-client