This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KVjGwYugbPPFqudZCnl6UNdcj30.roa File: KVjGwYugbPPFqudZCnl6UNdcj30.roa (raw, json) Hash identifier: D6dttWCCQfrO51xwBikxG3ryckE7cxUCEJKm5x15pqo= Subject key identifier: 29:58:C6:C1:8B:A0:6C:F3:C5:AA:E7:59:0A:79:7A:50:D7:5C:8F:7D Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5A93E3D1C39D11AC62F3B82B88339F Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KVjGwYugbPPFqudZCnl6UNdcj30.roa Signing time: Thu 01 Jan 2026 16:18:34 +0000 ROA not before: Thu 01 Jan 2026 16:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 109.176.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:93:e3:d1:c3:9d:11:ac:62:f3:b8:2b:88:33:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2958c6c18ba06cf3c5aae7590a797a50d75c8f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:20:2e:e2:39:23:05:2b:ca:f2:fb:3e:3c: d0:51:64:19:ee:8d:0a:12:b5:0e:20:c4:2d:6e:b7: e5:68:2c:61:81:dc:46:c5:a2:82:60:5f:c5:5d:43: 2b:55:d5:a5:52:31:da:e9:86:3c:22:09:6f:69:5c: fb:1c:9c:75:76:78:28:f4:53:9d:19:2e:53:3a:a5: 0c:7a:6e:47:10:f6:62:ee:67:c5:1b:c9:4f:05:07: c2:41:67:49:8c:1b:ba:4f:5e:ef:31:36:f9:98:a1: 59:c1:12:25:77:a8:47:b4:9e:a4:31:e6:b4:8f:4b: 76:50:c7:1c:3f:1b:f8:09:90:d3:28:4e:21:69:28: 8c:e0:6a:bf:3f:25:3d:95:a4:94:01:d1:62:8f:9a: 9c:b1:d0:42:3f:33:4e:e0:b5:13:22:bb:b1:1e:cc: 27:6e:cd:04:40:07:0f:3b:cb:67:bc:82:11:e8:a0: 63:6b:d3:18:44:ca:f2:6f:a4:53:5f:13:96:62:ee: 6e:39:85:a1:5e:3a:f9:dd:07:d0:6d:4f:2a:98:5f: f0:65:e1:cd:db:5f:eb:fb:a1:63:b4:01:7b:81:cc: 00:13:b0:90:46:1c:66:77:55:00:72:88:09:98:e7: 07:4f:30:cb:8c:1b:a4:42:1b:08:cf:ec:40:93:42: 6e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:58:C6:C1:8B:A0:6C:F3:C5:AA:E7:59:0A:79:7A:50:D7:5C:8F:7D X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KVjGwYugbPPFqudZCnl6UNdcj30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.15.0/24 Signature Algorithm: sha256WithRSAEncryption 38:7b:43:3a:92:2e:68:d9:9d:40:78:c2:f9:e3:fc:ce:8d:4a: c8:54:f4:73:61:33:d7:70:46:cf:91:0f:e2:03:91:d5:f5:18: d8:c5:82:ae:c4:0b:5f:4b:f3:0f:44:14:68:91:f1:bf:d1:0f: ae:27:b0:4b:9b:ef:0d:47:b2:9d:d4:00:aa:96:03:0f:3b:ed: f8:d8:2a:6b:69:09:fd:38:58:83:70:62:05:5a:95:c6:53:c3: 99:e4:f7:dd:dd:1c:7d:c0:26:84:15:03:e6:ed:5b:dc:06:27: a0:28:01:67:60:1f:90:c7:e1:6a:16:d3:6d:68:87:30:ee:ac: f2:32:45:70:20:5f:a3:36:ef:a6:d3:e9:d9:a9:b9:3f:9d:d8: 4a:9f:03:9d:fe:00:8c:f9:b6:f0:c6:a8:1d:7e:93:c3:9d:a7: 9b:6a:15:06:0f:a1:55:d8:5b:50:65:de:67:36:61:54:86:5d: 83:80:b8:2b:0d:31:62:19:da:a0:4a:f1:1b:c7:06:e9:d4:0a: b7:51:22:e4:3e:73:29:ad:66:b8:b9:a6:bf:93:56:a2:59:dc: 1f:a0:9e:fa:39:04:34:60:a7:b8:d4:aa:a0:ff:d9:ed:6a:43: 97:d6:9a:f3:f7:59:fe:90:38:98:fb:97:63:36:78:5b:78:d1: 5e:28:f9:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WpPj0cOdEaxi87griDOfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTU4YzZjMThiYTA2Y2YzYzVhYWU3NTkwYTc5N2E1MGQ3NWM4ZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4MgLuI5IwUryvL7PjzQUWQZ7o0K ErUOIMQtbrflaCxhgdxGxaKCYF/FXUMrVdWlUjHa6YY8IglvaVz7HJx1dngo9FOd GS5TOqUMem5HEPZi7mfFG8lPBQfCQWdJjBu6T17vMTb5mKFZwRIld6hHtJ6kMea0 j0t2UMccPxv4CZDTKE4haSiM4Gq/PyU9laSUAdFij5qcsdBCPzNO4LUTIruxHswn bs0EQAcPO8tnvIIR6KBja9MYRMryb6RTXxOWYu5uOYWhXjr53QfQbU8qmF/wZeHN 21/r+6FjtAF7gcwAE7CQRhxmd1UAcogJmOcHTzDLjBukQhsIz+xAk0JulQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFClYxsGLoGzzxarnWQp5elDXXI99MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvS1ZqR3dZdWdiUFBGcXVkWkNubDZVTmRjajMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbAPMA0G CSqGSIb3DQEBCwUAA4IBAQA4e0M6ki5o2Z1AeML54/zOjUrIVPRzYTPXcEbPkQ/i A5HV9RjYxYKuxAtfS/MPRBRokfG/0Q+uJ7BLm+8NR7Kd1ACqlgMPO+342CpraQn9 OFiDcGIFWpXGU8OZ5Pfd3Rx9wCaEFQPm7VvcBiegKAFnYB+Qx+FqFtNtaIcw7qzy MkVwIF+jNu+m0+nZqbk/ndhKnwOd/gCM+bbwxqgdfpPDnaebahUGD6FV2FtQZd5n NmFUhl2DgLgrDTFiGdqgSvEbxwbp1Aq3USLkPnMprWa4uaa/k1aiWdwfoJ76OQQ0 YKe41Kqg/9ntakOX1prz91n+kDiY+5djNnhbeNFeKPkF -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:59 2026 by rpki-client