This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/kTM5AwyuwsmweHVqh4Sx5C7l3lk.roa File: kTM5AwyuwsmweHVqh4Sx5C7l3lk.roa (raw, json) Hash identifier: 9Ex97t0Gq70q6AwRnqwBR36JInydAPypzTvDsdOkxbE= Subject key identifier: 91:33:39:03:0C:AE:C2:C9:B0:78:75:6A:87:84:B1:E4:2E:E5:DE:59 Certificate issuer: /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71 Certificate serial: 019B7F13B06C7D9D56A2516DF6368DA9863C Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/kTM5AwyuwsmweHVqh4Sx5C7l3lk.roa Signing time: Fri 02 Jan 2026 14:19:15 +0000 ROA not before: Fri 02 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44970 IP address blocks: 77.88.234.0/24 maxlen: 24 77.88.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:b0:6c:7d:9d:56:a2:51:6d:f6:36:8d:a9:86:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71 Validity Not Before: Jan 2 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=913339030caec2c9b078756a8784b1e42ee5de59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:b7:68:1e:b0:90:df:a5:5b:14:9d:98:92: c3:35:e5:61:ca:e2:d1:50:89:da:6a:0d:90:c9:79: ec:63:7a:e9:2f:59:7d:a0:67:de:ab:bc:9f:ce:8e: 77:b8:f5:51:41:71:51:05:a7:b6:d0:02:0c:fc:47: e0:34:aa:ca:ee:7d:6d:7b:c2:26:cc:76:0f:d8:44: c6:60:85:95:c9:a6:9e:14:f4:8e:d0:b3:29:43:8d: da:40:7f:ba:47:03:a4:f0:32:b9:e4:bf:a3:bd:a0: 21:97:63:9b:43:6f:54:9f:00:a2:70:58:36:2b:72: a2:b6:2d:32:71:d0:8b:81:2f:a9:06:ba:cb:4d:9a: 49:6b:3f:e0:19:76:80:fc:09:35:ea:bb:5c:ee:23: 23:74:69:9d:04:90:a1:66:a1:de:60:34:80:25:8e: 60:d5:c7:84:af:9a:58:b9:81:c7:de:03:fb:e6:68: 9d:8d:ae:74:cf:57:2e:12:2f:25:48:8b:c7:2b:a2: 5b:72:b3:e5:dc:c0:7a:20:d7:89:3d:77:a1:e3:e0: a8:a6:41:54:db:55:67:10:69:c8:14:af:8a:99:27: 78:7c:bf:66:56:da:b7:ce:bf:1a:66:e8:56:14:25: be:e1:f0:ab:61:23:a8:66:55:74:f6:8f:d2:2e:10: b2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:33:39:03:0C:AE:C2:C9:B0:78:75:6A:87:84:B1:E4:2E:E5:DE:59 X509v3 Authority Key Identifier: keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/kTM5AwyuwsmweHVqh4Sx5C7l3lk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.88.234.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:72:a6:7e:c1:71:6a:9e:7c:dc:27:09:e0:9b:09:d5:f7:0b: 22:5c:e1:46:00:f5:44:8e:e5:15:a9:4e:cb:18:2b:f0:38:31: 78:d0:15:24:1d:d1:73:e7:24:c7:58:f7:47:c7:66:13:32:47: 0b:a8:f8:ad:aa:19:ee:2f:e1:16:72:aa:e5:62:29:8d:61:4f: 69:8a:5c:a9:44:9a:81:f8:79:f4:e0:bc:1b:02:c3:c7:2c:02: e0:f3:1f:70:57:fa:20:95:c2:0b:e4:45:57:47:2c:9d:4a:68: 19:4c:90:bd:70:aa:99:9a:92:52:48:8d:5b:29:fb:58:33:ef: b4:d2:2c:8b:20:0d:6d:b7:ef:96:25:86:76:40:29:2a:ca:5f: 7e:82:97:ed:e2:ba:f8:d3:04:02:65:6d:a3:df:11:51:75:dc: e4:af:45:0e:6f:5b:f6:f1:ca:c2:5b:bc:78:a2:5b:ce:20:2a: 81:3a:ba:cf:52:08:82:0f:d7:9a:32:10:69:cf:9c:cd:5f:91: 9d:b2:0c:fa:f1:72:74:cb:d6:2f:74:ba:0e:f2:66:ad:f4:f5: ab:eb:bd:2e:52:db:c2:2d:38:4a:a8:19:45:c1:d3:59:69:07: 8b:72:72:c7:9d:42:d0:fa:eb:05:2b:7d:3e:d5:f1:98:cb:91: 48:62:2f:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E7BsfZ1WolFt9jaNqYY8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYTc5ZGNkNWEzZGVlNDUwZWFmM2Y5MzE1MmVkNmRhODA2 YmJmNzEwHhcNMjYwMTAyMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTMzMzkwMzBjYWVjMmM5YjA3ODc1NmE4Nzg0YjFlNDJlZTVkZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLa3aB6wkN+lWxSdmJLDNeVhyuLR UInaag2QyXnsY3rpL1l9oGfeq7yfzo53uPVRQXFRBae20AIM/EfgNKrK7n1te8Im zHYP2ETGYIWVyaaeFPSO0LMpQ43aQH+6RwOk8DK55L+jvaAhl2ObQ29UnwCicFg2 K3Kiti0ycdCLgS+pBrrLTZpJaz/gGXaA/Ak16rtc7iMjdGmdBJChZqHeYDSAJY5g 1ceEr5pYuYHH3gP75midja50z1cuEi8lSIvHK6JbcrPl3MB6INeJPXeh4+CopkFU 21VnEGnIFK+KmSd4fL9mVtq3zr8aZuhWFCW+4fCrYSOoZlV09o/SLhCycQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJEzOQMMrsLJsHh1aoeEseQu5d5ZMB8GA1UdIwQY MBaAFM6nnc1aPe5FDq8/kxUu1tqAa79xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenFlZHpWbzk3a1VPcnotVEZTN1cyb0JydjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mODE5Y2MtYjI5NC00NjBlLThiZTQt ODZlMjQyNjA1MTZmLzEva1RNNUF3eXV3c213ZUhWcWg0U3g1QzdsM2xrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9mODE5Y2MtYjI5NC00NjBlLThiZTQtODZlMjQyNjA1MTZm LzEvenFlZHpWbzk3a1VPcnotVEZTN1cyb0JydjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTVjqMA0G CSqGSIb3DQEBCwUAA4IBAQBNcqZ+wXFqnnzcJwngmwnV9wsiXOFGAPVEjuUVqU7L GCvwODF40BUkHdFz5yTHWPdHx2YTMkcLqPitqhnuL+EWcqrlYimNYU9pilypRJqB +Hn04LwbAsPHLALg8x9wV/oglcIL5EVXRyydSmgZTJC9cKqZmpJSSI1bKftYM++0 0iyLIA1tt++WJYZ2QCkqyl9+gpft4rr40wQCZW2j3xFRddzkr0UOb1v28crCW7x4 olvOICqBOrrPUgiCD9eaMhBpz5zNX5Gdsgz68XJ0y9YvdLoO8mat9PWr670uUtvC LThKqBlFwdNZaQeLcnLHnULQ+usFK30+1fGYy5FIYi88 -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:49 2026 by rpki-client