This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/kN69teI4lOPRDRSTeJKcvbg3DVI.roa File: kN69teI4lOPRDRSTeJKcvbg3DVI.roa (raw, json) Hash identifier: 0zY8u4pSs4JdcMd1LnlNAD4f7WGos0AD35DsttS72fg= Subject key identifier: 90:DE:BD:B5:E2:38:94:E3:D1:0D:14:93:78:92:9C:BD:B8:37:0D:52 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 019B77C709316265152668153D62C4DA4286 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/kN69teI4lOPRDRSTeJKcvbg3DVI.roa Signing time: Thu 01 Jan 2026 04:18:11 +0000 ROA not before: Thu 01 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30731 IP address blocks: 91.236.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 22:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:09:31:62:65:15:26:68:15:3d:62:c4:da:42:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90debdb5e23894e3d10d149378929cbdb8370d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a5:b4:67:73:05:75:f1:92:d7:47:b6:f4:bc: 25:07:2d:8e:80:e1:f0:5e:db:63:78:2c:fa:cc:45: 4e:0f:e9:d9:43:d4:7e:d0:89:31:5d:9f:a2:2d:b5: 33:68:75:4d:a0:ff:72:5f:64:d3:39:5e:49:ce:96: 8b:74:35:70:6f:76:ff:c5:08:1b:3f:61:d7:b4:b7: f8:a7:7a:53:12:35:60:46:82:ea:6e:37:95:a2:3f: 47:2c:81:f1:3e:21:f1:76:fb:b7:bd:a0:48:9e:b4: 7b:87:96:18:b4:59:bd:0d:33:41:7d:42:9e:ad:b1: 0c:57:a2:e8:04:be:a8:a4:50:39:8d:4f:28:58:bc: 1b:f7:0c:d0:96:03:24:ab:bd:31:cb:86:6c:66:21: ec:b7:ac:ab:5d:7c:32:57:25:81:43:b3:d4:be:fc: bd:43:71:a1:f5:58:a2:eb:4e:44:1b:a6:06:46:14: 4b:0c:b4:da:be:92:b4:4f:4d:2a:b8:fa:7c:9a:cb: 78:f2:55:0f:5e:e4:2c:49:13:6a:eb:e2:a2:d6:7a: cf:6c:91:21:11:2d:a3:ab:56:9d:84:df:75:07:47: 0a:93:2d:de:1b:c4:50:f0:94:c8:7a:db:38:25:84: a3:4a:1b:07:11:a2:33:b6:60:0a:99:5e:af:e8:3f: 56:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DE:BD:B5:E2:38:94:E3:D1:0D:14:93:78:92:9C:BD:B8:37:0D:52 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/kN69teI4lOPRDRSTeJKcvbg3DVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.130.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:fb:5c:e1:46:22:6f:c6:4a:fd:8a:5a:d5:bc:d8:fe:99:73: ef:f7:1b:23:ce:cb:7d:92:8f:ed:57:ab:2c:7b:fd:bb:86:d5: f2:42:85:8e:93:b8:25:46:3e:db:b3:84:cf:8d:9f:4f:7d:c8: 33:03:cf:61:72:9f:c0:74:b9:e4:65:df:e3:1c:3a:4a:37:c8: cb:f3:51:7c:99:29:11:f7:22:f2:f1:31:f8:10:c4:cd:37:85: db:ee:16:eb:c9:91:37:b3:10:4a:b5:1f:07:2d:ad:32:46:15: 3d:7d:02:e8:84:6e:34:34:e2:c6:17:55:0c:98:5d:68:17:ee: 17:d8:ac:16:3f:30:f8:dc:9d:b1:5b:2f:9b:03:db:1f:42:64: ce:23:b5:a3:ce:c9:ee:09:75:b2:6c:e7:65:79:fa:b2:cd:c1: c5:95:e7:b6:b6:79:e4:30:db:6c:16:1c:fd:b8:16:81:0a:89: 19:46:b5:02:3d:5c:99:68:f4:6c:5d:9e:ed:3d:ab:75:1f:c8: 89:0a:9b:6d:47:46:f2:54:a2:ba:f9:d8:57:e3:07:df:f9:14: 4f:fc:38:54:37:0c:1a:91:da:0d:5c:04:82:2c:84:2b:c5:40: 1e:ce:16:b7:8f:59:05:87:2e:79:7f:a5:bf:80:e9:3f:2c:9c: c7:e0:93:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwkxYmUVJmgVPWLE2kKGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGRlYmRiNWUyMzg5NGUzZDEwZDE0OTM3ODkyOWNiZGI4MzcwZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6W0Z3MFdfGS10e29LwlBy2OgOHw XttjeCz6zEVOD+nZQ9R+0IkxXZ+iLbUzaHVNoP9yX2TTOV5JzpaLdDVwb3b/xQgb P2HXtLf4p3pTEjVgRoLqbjeVoj9HLIHxPiHxdvu3vaBInrR7h5YYtFm9DTNBfUKe rbEMV6LoBL6opFA5jU8oWLwb9wzQlgMkq70xy4ZsZiHst6yrXXwyVyWBQ7PUvvy9 Q3Gh9Vii605EG6YGRhRLDLTavpK0T00quPp8mst48lUPXuQsSRNq6+Ki1nrPbJEh ES2jq1adhN91B0cKky3eG8RQ8JTIets4JYSjShsHEaIztmAKmV6v6D9WnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJDevbXiOJTj0Q0Uk3iSnL24Nw1SMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEva042OXRlSTRsT1BSRFJTVGVKS2N2YmczRFZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+yCMA0G CSqGSIb3DQEBCwUAA4IBAQCK+1zhRiJvxkr9ilrVvNj+mXPv9xsjzst9ko/tV6ss e/27htXyQoWOk7glRj7bs4TPjZ9PfcgzA89hcp/AdLnkZd/jHDpKN8jL81F8mSkR 9yLy8TH4EMTNN4Xb7hbryZE3sxBKtR8HLa0yRhU9fQLohG40NOLGF1UMmF1oF+4X 2KwWPzD43J2xWy+bA9sfQmTOI7WjzsnuCXWybOdlefqyzcHFlee2tnnkMNtsFhz9 uBaBCokZRrUCPVyZaPRsXZ7tPat1H8iJCpttR0byVKK6+dhX4wff+RRP/DhUNwwa kdoNXASCLIQrxUAezha3j1kFhy55f6W/gOk/LJzH4JPC -----END CERTIFICATE-----Generated at Sat Feb 7 04:04:29 2026 by rpki-client