This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/KvxEQrxDZmBIxkbUUNQp6HsFC_0.roa File: KvxEQrxDZmBIxkbUUNQp6HsFC_0.roa (raw, json) Hash identifier: BSUmQnkTle9HViYYJkRZjSse8w3JaRvHWOR9HNyaels= Subject key identifier: 2A:FC:44:42:BC:43:66:60:48:C6:46:D4:50:D4:29:E8:7B:05:0B:FD Certificate issuer: /CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4 Certificate serial: 019B7F84A976DE17C22540B79493E9C1D658 Authority key identifier: D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/KvxEQrxDZmBIxkbUUNQp6HsFC_0.roa Signing time: Fri 02 Jan 2026 16:22:39 +0000 ROA not before: Fri 02 Jan 2026 16:22:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56816 IP address blocks: 91.228.16.0/23 maxlen: 24 91.228.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a9:76:de:17:c2:25:40:b7:94:93:e9:c1:d6:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4 Validity Not Before: Jan 2 16:22:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2afc4442bc43666048c646d450d429e87b050bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:06:82:e5:67:7e:e6:46:46:50:72:13:ed: 37:c3:55:74:c0:c3:64:94:fb:cf:84:ff:ef:4b:cb: 61:73:0d:84:b0:50:f7:b3:0f:de:ab:33:18:27:38: d4:e7:c7:86:d5:9c:6e:88:13:28:78:93:f5:ea:bb: 02:43:6e:88:94:43:4d:ae:70:93:85:7e:72:c4:1f: fa:7d:a1:d8:06:da:a2:fa:ad:a0:0a:04:dd:8b:3b: 7d:db:ba:60:ef:f9:21:40:4a:40:2a:74:3c:e3:cb: 07:8b:78:fc:ca:20:22:3e:ad:ad:f3:47:6d:84:73: ea:54:89:32:52:6d:48:86:e7:43:4a:b1:18:2b:f7: a0:4b:18:3b:b4:f3:de:f4:65:91:e8:97:18:40:69: 2e:28:58:fe:e7:f0:cc:cd:71:65:1c:14:27:2f:43: 21:51:18:9c:e3:9a:35:7e:64:69:78:c4:30:aa:d4: 0e:bc:1a:ca:4e:ba:5d:7a:6a:df:66:1b:08:e7:20: 72:c0:ef:d9:23:06:bc:d4:19:f3:52:33:41:5c:b3: 13:2e:8e:aa:49:41:24:2e:a0:f1:85:a9:4f:21:a8: 18:f9:46:73:dc:d5:bb:85:4f:cb:49:4d:97:ea:a8: 14:2c:4f:de:15:8e:f3:89:5f:d7:a7:f3:63:89:27: f1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FC:44:42:BC:43:66:60:48:C6:46:D4:50:D4:29:E8:7B:05:0B:FD X509v3 Authority Key Identifier: keyid:D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/KvxEQrxDZmBIxkbUUNQp6HsFC_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.16.0/23 91.228.20.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:49:7e:77:69:70:85:e3:40:55:a2:99:61:fc:fb:2b:60:31: 7d:60:5a:e8:0d:6c:f3:eb:c2:7e:c2:be:a1:16:9a:72:a8:fe: f4:f2:8b:0e:96:aa:0d:ac:c3:76:54:85:51:92:d2:e7:06:75: 59:ee:9f:f4:b5:1d:52:1c:71:47:84:f5:1b:d6:4e:5c:f3:e7: 41:e1:4b:2e:f4:6f:73:23:73:19:4a:17:a3:b5:53:8b:9a:00: c6:aa:43:5a:dd:47:24:34:d7:00:ab:27:09:03:0f:9d:70:50: 36:9a:98:00:f9:9c:1b:b2:f1:56:ee:fc:c6:a7:f9:c0:21:2f: 81:2c:30:e8:8a:67:ab:21:1a:81:a1:58:61:48:2b:c1:a9:f4: 63:f0:3d:ee:53:c5:ec:8c:06:a3:4a:fc:dc:fb:d0:50:cc:69: cf:b1:fd:b9:2c:bc:98:13:21:33:c2:81:1f:8c:c8:e5:d6:6a: ff:b7:80:20:70:3b:2a:e8:3b:87:c2:2a:43:60:34:7e:8a:23: 46:68:27:09:9f:69:31:ad:e0:48:1b:ab:97:cd:f7:05:db:50: 42:6f:52:8e:71:6c:a7:b1:5c:c6:02:08:c7:d8:c0:fa:c0:ba: 63:c7:4d:72:f7:90:98:62:0a:06:fd:16:3c:e9:fb:bc:bf:9a: 20:7b:12:3e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hKl23hfCJUC3lJPpwdZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZTc4ZTg2NmU5MjA0ZDAxYTZmNTJkMzlmZDg0ZmYwOTAw YjIxZDQwHhcNMjYwMTAyMTYyMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWZjNDQ0MmJjNDM2NjYwNDhjNjQ2ZDQ1MGQ0MjllODdiMDUwYmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRAGguVnfuZGRlByE+03w1V0wMNk lPvPhP/vS8thcw2EsFD3sw/eqzMYJzjU58eG1ZxuiBMoeJP16rsCQ26IlENNrnCT hX5yxB/6faHYBtqi+q2gCgTdizt927pg7/khQEpAKnQ848sHi3j8yiAiPq2t80dt hHPqVIkyUm1IhudDSrEYK/egSxg7tPPe9GWR6JcYQGkuKFj+5/DMzXFlHBQnL0Mh URic45o1fmRpeMQwqtQOvBrKTrpdemrfZhsI5yBywO/ZIwa81BnzUjNBXLMTLo6q SUEkLqDxhalPIagY+UZz3NW7hU/LSU2X6qgULE/eFY7ziV/Xp/NjiSfxQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCr8REK8Q2ZgSMZG1FDUKeh7BQv9MB8GA1UdIwQY MBaAFNnnjoZukgTQGm9S05/YT/CQCyHUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmVlT2htNlNCTkFhYjFMVG45aFA4SkFMSWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8zMjkxNWItOWVhMS00YzY0LThmZjEt ZDc2ZDY2MjdmYjJlLzEvS3Z4RVFyeERabUJJeGtiVVVOUXA2SHNGQ18wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8zMjkxNWItOWVhMS00YzY0LThmZjEtZDc2ZDY2MjdmYjJl LzEvMmVlT2htNlNCTkFhYjFMVG45aFA4SkFMSWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+QQAwQB W+QUMA0GCSqGSIb3DQEBCwUAA4IBAQBcSX53aXCF40BVoplh/PsrYDF9YFroDWzz 68J+wr6hFppyqP708osOlqoNrMN2VIVRktLnBnVZ7p/0tR1SHHFHhPUb1k5c8+dB 4Usu9G9zI3MZShejtVOLmgDGqkNa3UckNNcAqycJAw+dcFA2mpgA+ZwbsvFW7vzG p/nAIS+BLDDoimerIRqBoVhhSCvBqfRj8D3uU8XsjAajSvzc+9BQzGnPsf25LLyY EyEzwoEfjMjl1mr/t4AgcDsq6DuHwipDYDR+iiNGaCcJn2kxreBIG6uXzfcF21BC b1KOcWynsVzGAgjH2MD6wLpjx01y95CYYgoG/RY86fu8v5ogexI+ -----END CERTIFICATE-----Generated at Tue Jan 27 01:40:44 2026 by rpki-client