This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/KIyqHPfwDNAdOx_NOjp4-P_X4oc.roa File: KIyqHPfwDNAdOx_NOjp4-P_X4oc.roa (raw, json) Hash identifier: 7ZcCUlsf8/YzuQGzuoy8zSBfxuieaLNl0lOg+fkUsWM= Subject key identifier: 28:8C:AA:1C:F7:F0:0C:D0:1D:3B:1F:CD:3A:3A:78:F8:FF:D7:E2:87 Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 019B77C76E333C214149BE2194EBFB6A24CE Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/KIyqHPfwDNAdOx_NOjp4-P_X4oc.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216319 IP address blocks: 94.228.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6e:33:3c:21:41:49:be:21:94:eb:fb:6a:24:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=288caa1cf7f00cd01d3b1fcd3a3a78f8ffd7e287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a0:fe:6f:ba:f8:3e:30:59:c9:26:c8:f0:b6: cb:b1:ee:30:40:eb:2a:30:b0:5a:63:6e:bf:c0:13: a1:ff:d3:4e:2d:08:e1:ab:2e:74:15:28:95:22:cc: 34:5a:50:41:12:e1:4a:86:5d:a5:1b:6f:12:ad:c4: 53:60:6e:e7:97:18:ba:4a:46:da:0b:05:d9:89:dc: d4:e8:42:de:25:77:1f:fe:8e:c7:c7:79:1e:54:26: eb:6c:27:9a:a3:fd:99:36:b1:fa:eb:6c:03:2f:06: 9b:22:32:b3:9d:42:3b:98:1d:b2:6f:b7:37:89:ce: ed:0a:75:f3:2d:53:29:9e:61:7d:d8:aa:1e:47:1d: f9:c1:b6:60:43:90:07:b6:d8:8c:43:87:ad:12:4c: 9c:6b:84:e4:0d:8f:10:93:2a:c9:73:53:ae:77:33: 7f:90:cc:05:3f:cb:60:39:ff:76:0d:1d:9a:66:0e: 35:f9:13:30:47:35:4e:4e:e9:1c:97:dc:ac:93:3c: 84:cd:26:71:4a:86:e7:6d:12:58:31:c0:6c:4a:09: 73:f7:d4:48:fb:79:c8:27:92:00:6b:4b:24:89:83: 69:18:a0:b7:92:e2:a5:45:ca:f1:1b:5d:2a:2b:24: 29:96:65:1f:6d:d7:38:4c:1f:f6:7e:0e:58:92:0f: 93:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8C:AA:1C:F7:F0:0C:D0:1D:3B:1F:CD:3A:3A:78:F8:FF:D7:E2:87 X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/KIyqHPfwDNAdOx_NOjp4-P_X4oc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.228.170.0/24 Signature Algorithm: sha256WithRSAEncryption 94:66:e2:06:54:1f:a3:d1:94:8f:b1:99:48:1a:be:ab:93:b4: e4:4f:3e:5c:93:cb:fb:ae:8c:f9:20:f9:18:e4:9c:db:0b:bb: e3:54:fb:c2:b9:78:77:2c:08:ac:d7:31:ab:83:8c:85:92:7f: 9e:40:5f:ca:f2:17:84:4c:1b:8f:11:cf:ea:4b:10:4e:2f:67: 4b:74:ac:85:b6:e3:13:1c:43:57:58:ab:10:42:d0:ce:04:21: ef:cd:78:fd:9d:a2:02:58:9c:28:75:30:db:37:80:00:3b:62: 50:46:88:d1:4f:a2:5b:53:de:e4:68:60:67:dd:87:e5:94:dd: 00:9a:a6:c8:7f:2f:e0:ab:d2:bc:65:61:2a:69:42:ff:c7:11: 99:3b:f3:b1:75:13:62:ee:59:d0:6d:29:28:ef:83:51:cd:10: 1b:0c:f8:d3:f2:1e:3f:5a:3b:92:04:62:a4:d5:8c:62:b4:43: a4:b5:e8:86:b0:11:7e:b8:de:ac:e0:92:b4:1a:6e:3b:78:32: 4c:ee:c9:cc:a0:96:ab:dd:ae:5a:cc:a4:43:f5:a2:ad:e9:9b: 16:c5:45:8f:2e:5f:51:00:d1:47:54:24:ea:9c:2c:c7:9b:60: e9:6f:78:06:03:b7:38:bb:e3:4f:25:10:1f:bb:29:0e:de:fa: 57:41:c8:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x24zPCFBSb4hlOv7aiTOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODhjYWExY2Y3ZjAwY2QwMWQzYjFmY2QzYTNhNzhmOGZmZDdlMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KD+b7r4PjBZySbI8LbLse4wQOsq MLBaY26/wBOh/9NOLQjhqy50FSiVIsw0WlBBEuFKhl2lG28SrcRTYG7nlxi6Skba CwXZidzU6ELeJXcf/o7Hx3keVCbrbCeao/2ZNrH662wDLwabIjKznUI7mB2yb7c3 ic7tCnXzLVMpnmF92KoeRx35wbZgQ5AHttiMQ4etEkyca4TkDY8QkyrJc1OudzN/ kMwFP8tgOf92DR2aZg41+RMwRzVOTukcl9yskzyEzSZxSobnbRJYMcBsSglz99RI +3nIJ5IAa0skiYNpGKC3kuKlRcrxG10qKyQplmUfbdc4TB/2fg5Ykg+TXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCiMqhz38AzQHTsfzTo6ePj/1+KHMB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvS0l5cUhQZndETkFkT3hfTk9qcDQtUF9YNG9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuSqMA0G CSqGSIb3DQEBCwUAA4IBAQCUZuIGVB+j0ZSPsZlIGr6rk7TkTz5ck8v7roz5IPkY 5JzbC7vjVPvCuXh3LAis1zGrg4yFkn+eQF/K8heETBuPEc/qSxBOL2dLdKyFtuMT HENXWKsQQtDOBCHvzXj9naICWJwodTDbN4AAO2JQRojRT6JbU97kaGBn3YfllN0A mqbIfy/gq9K8ZWEqaUL/xxGZO/OxdRNi7lnQbSko74NRzRAbDPjT8h4/WjuSBGKk 1YxitEOkteiGsBF+uN6s4JK0Gm47eDJM7snMoJar3a5azKRD9aKt6ZsWxUWPLl9R ANFHVCTqnCzHm2Dpb3gGA7c4u+NPJRAfuykO3vpXQchL -----END CERTIFICATE-----Generated at Mon Jan 26 03:04:42 2026 by rpki-client