This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/kvNYuyJjxpLiL78r_HWCaKIVSeM.roa File: kvNYuyJjxpLiL78r_HWCaKIVSeM.roa (raw, json) Hash identifier: an7+no5fubSIGYKy4WMOxhF8ErceM1kP8W7CMY2bk44= Subject key identifier: 92:F3:58:BB:22:63:C6:92:E2:2F:BF:2B:FC:75:82:68:A2:15:49:E3 Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Certificate serial: 019B7C134DF55965FA367954DA76490DEF2C Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/kvNYuyJjxpLiL78r_HWCaKIVSeM.roa Signing time: Fri 02 Jan 2026 00:19:58 +0000 ROA not before: Fri 02 Jan 2026 00:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7922 IP address blocks: 46.34.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4d:f5:59:65:fa:36:79:54:da:76:49:0d:ef:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Validity Not Before: Jan 2 00:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92f358bb2263c692e22fbf2bfc758268a21549e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:24:ec:4f:ab:fa:b1:4b:e5:4f:a4:fd:ce: f3:49:6e:99:9a:80:f9:19:ab:ea:4e:5a:e9:51:f4: 44:9c:21:f5:73:f8:81:14:43:35:9b:69:cd:7a:ca: 83:38:4f:f0:91:81:28:63:86:cf:59:d4:b5:03:07: 41:c1:d8:5d:29:20:ac:a6:79:eb:7b:00:22:da:fb: 02:4b:79:bd:a0:af:66:5d:24:77:d3:7d:09:d3:cd: fd:5b:62:35:e7:e3:5d:7d:70:f4:12:4b:14:44:b4: 22:12:22:93:1f:34:25:d9:f0:52:ee:f1:72:78:44: 99:00:9e:e6:53:d9:b4:05:08:ff:84:56:c3:f1:25: 02:dd:c6:27:a0:ef:40:0b:5a:12:2a:d6:8b:6a:f2: 91:d3:75:c9:ef:9b:a9:94:39:ec:05:55:10:a8:d0: b9:cd:dd:02:80:0c:72:e8:f9:47:92:ce:9e:76:fe: 59:6a:50:60:a5:5b:39:2a:a5:90:85:70:44:25:f3: fa:1c:b5:f2:73:1f:92:1c:37:12:fd:8b:7c:39:17: d6:2c:76:03:aa:64:ab:86:27:f2:ab:f2:a1:c0:7c: 3a:bd:40:d9:f2:97:0c:a8:85:7c:78:79:4b:0a:98: 36:f1:12:81:d0:7b:7a:e6:32:d1:40:2b:60:e8:fa: ab:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F3:58:BB:22:63:C6:92:E2:2F:BF:2B:FC:75:82:68:A2:15:49:E3 X509v3 Authority Key Identifier: keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/kvNYuyJjxpLiL78r_HWCaKIVSeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.34.39.0/24 Signature Algorithm: sha256WithRSAEncryption 39:1a:dc:de:db:d5:26:90:1c:c9:00:1b:e3:0b:14:d0:da:3a: a3:94:2b:e6:11:92:82:46:45:c8:3b:6c:d9:32:b2:dc:9d:34: 5d:67:30:f9:5f:27:4a:30:47:aa:dc:76:2c:29:91:f5:ca:db: 00:34:ed:b6:c8:b4:51:e3:f8:1f:7e:a5:b2:8b:b4:65:c1:ee: bc:82:b7:c9:52:fc:e2:08:72:ec:e0:ea:24:b8:8a:1c:82:8e: 44:e5:21:63:7a:e8:19:29:34:d4:12:af:32:36:6e:b9:a4:3c: f5:32:f9:57:cd:a5:dc:01:25:97:37:0a:1c:ec:87:94:b1:5f: b9:3c:41:d7:07:52:9d:63:a8:85:f2:af:0f:13:3e:02:0a:83: 6a:64:f2:41:63:04:b1:8c:3f:29:2e:e3:f7:b3:d7:dc:73:4d: 1c:10:fa:91:0b:5b:df:cc:c4:80:bb:54:57:cc:be:dc:13:82: 90:1f:d8:87:03:3c:2b:d2:cd:2d:7f:e8:c4:83:40:47:e3:aa: e5:a0:53:40:83:c3:97:b8:06:f9:f7:34:f4:6f:d3:97:d2:28: c6:38:40:eb:b4:b5:dc:d0:cf:18:f6:af:2b:bb:ce:47:16:0b: b7:ea:77:39:d1:52:0d:b9:1e:d4:9d:e8:49:2a:5a:7a:9e:02: 8c:fb:52:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E031WWX6NnlU2nZJDe8sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw N2VmY2UwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmYzNThiYjIyNjNjNjkyZTIyZmJmMmJmYzc1ODI2OGEyMTU0OWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVQk7E+r+rFL5U+k/c7zSW6ZmoD5 GavqTlrpUfREnCH1c/iBFEM1m2nNesqDOE/wkYEoY4bPWdS1AwdBwdhdKSCspnnr ewAi2vsCS3m9oK9mXSR3030J0839W2I15+NdfXD0EksURLQiEiKTHzQl2fBS7vFy eESZAJ7mU9m0BQj/hFbD8SUC3cYnoO9AC1oSKtaLavKR03XJ75uplDnsBVUQqNC5 zd0CgAxy6PlHks6edv5ZalBgpVs5KqWQhXBEJfP6HLXycx+SHDcS/Yt8ORfWLHYD qmSrhifyq/KhwHw6vUDZ8pcMqIV8eHlLCpg28RKB0Ht65jLRQCtg6PqrjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJLzWLsiY8aS4i+/K/x1gmiiFUnjMB8GA1UdIwQY MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt YTZiOTkxZjRmYWY4LzEva3ZOWXV5Smp4cExpTDc4cl9IV0NhS0lWU2VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4 LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiInMA0G CSqGSIb3DQEBCwUAA4IBAQA5Gtze29UmkBzJABvjCxTQ2jqjlCvmEZKCRkXIO2zZ MrLcnTRdZzD5XydKMEeq3HYsKZH1ytsANO22yLRR4/gffqWyi7Rlwe68grfJUvzi CHLs4OokuIocgo5E5SFjeugZKTTUEq8yNm65pDz1MvlXzaXcASWXNwoc7IeUsV+5 PEHXB1KdY6iF8q8PEz4CCoNqZPJBYwSxjD8pLuP3s9fcc00cEPqRC1vfzMSAu1RX zL7cE4KQH9iHAzwr0s0tf+jEg0BH46rloFNAg8OXuAb59zT0b9OX0ijGOEDrtLXc 0M8Y9q8ru85HFgu36nc50VINuR7UnehJKlp6ngKM+1LW -----END CERTIFICATE-----Generated at Fri Jan 9 12:06:12 2026 by rpki-client