This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/KKSnR3IpY-ZlQZ7fCqJOTQXn6QQ.roa File: KKSnR3IpY-ZlQZ7fCqJOTQXn6QQ.roa (raw, json) Hash identifier: OEf6LQ6X2z/PFuCPlWdFltcpBYxSjIqCPzGHBJ7ugwg= Subject key identifier: 28:A4:A7:47:72:29:63:E6:65:41:9E:DF:0A:A2:4E:4D:05:E7:E9:04 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019BBD5BA8ED6C456EBFD71CD9ADFE24EA16 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/KKSnR3IpY-ZlQZ7fCqJOTQXn6QQ.roa Signing time: Wed 14 Jan 2026 16:34:19 +0000 ROA not before: Wed 14 Jan 2026 16:34:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202248 IP address blocks: 213.226.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bd:5b:a8:ed:6c:45:6e:bf:d7:1c:d9:ad:fe:24:ea:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 14 16:34:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28a4a747722963e665419edf0aa24e4d05e7e904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:52:bd:79:88:ef:a3:7e:1a:f8:39:0b:0b:ec: 36:48:19:af:46:b5:5d:ca:81:61:5e:20:ed:4a:33: 72:fe:76:3e:16:a5:90:86:df:b5:0c:d4:1e:4e:cc: b2:e2:86:ca:cf:5c:c1:4b:15:c9:d8:b3:ee:cb:2d: 01:41:89:83:07:1f:b8:ab:71:9f:3f:ea:2c:3d:69: 87:ea:f6:dd:0f:5a:01:c2:80:0d:0e:0e:9d:27:45: 60:e7:d5:86:f2:89:d9:f6:d0:36:40:61:aa:f5:73: e9:6b:c4:19:1e:14:52:89:47:34:1a:5a:0c:82:a5: 58:95:a2:3e:6a:20:30:ab:9c:3d:6b:d4:26:d3:56: 1d:59:22:0c:26:48:69:8c:53:9a:60:7a:95:f6:76: e6:04:a7:d0:95:07:d7:7c:21:f1:f1:e1:8a:59:4e: 09:d3:9e:78:bf:2f:e1:85:6e:ed:14:b4:e0:b1:b8: d2:82:c7:b4:a4:cf:99:eb:5b:47:72:36:50:c9:5a: 8a:8b:90:c4:66:04:be:e3:3f:72:43:9b:9d:72:ad: 90:37:46:8b:2f:52:94:57:66:4f:a2:fc:7b:bb:e9: e3:2c:ff:d3:15:35:ff:41:a6:da:51:bf:be:e9:27: 4a:11:a6:ad:ac:e3:57:44:4d:f7:c2:c4:c7:9c:3e: 36:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A4:A7:47:72:29:63:E6:65:41:9E:DF:0A:A2:4E:4D:05:E7:E9:04 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/KKSnR3IpY-ZlQZ7fCqJOTQXn6QQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.226.113.0/24 Signature Algorithm: sha256WithRSAEncryption 14:0c:d4:cb:c2:ce:4b:ba:63:9c:4d:d1:c2:20:b5:12:d4:1d: 05:0e:40:b5:ad:72:70:37:da:32:27:5c:b1:d8:57:45:e8:b6: 6e:08:21:93:c9:e6:79:25:30:b0:bf:f9:6c:57:b9:81:e4:3c: 79:d8:7c:5a:5f:04:09:1d:fb:9b:65:d0:ca:4a:ae:ec:18:d6: c8:9d:3c:f9:1a:1e:a0:cd:4e:59:c9:ce:e8:f2:96:07:1e:47: c0:13:88:be:54:7b:16:e4:d3:78:6f:99:b9:d0:1b:52:de:12: de:9f:3f:b0:2e:cb:a8:88:7b:96:e5:b1:12:35:33:66:e3:5c: 21:17:74:27:a5:b8:a5:1b:4e:8c:59:29:d6:35:97:44:2f:78: 5a:65:71:23:38:12:7d:60:35:a8:ce:e7:65:a5:27:e3:78:66: d1:e3:7e:99:be:25:88:4d:58:90:65:24:13:70:10:21:b3:c0: de:fa:ea:98:f9:f1:fa:4d:6c:af:cf:7f:b7:84:e5:c7:b4:18: 0e:30:a4:32:1d:76:6f:32:32:ab:c3:62:1a:67:21:8d:e4:ea: c0:e5:50:98:96:4c:c1:99:76:36:a5:10:f7:4e:03:67:f3:78: ac:a7:93:23:b7:f7:a8:69:ec:8c:3d:f4:79:87:a8:7f:49:3f: c8:39:2b:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu9W6jtbEVuv9cc2a3+JOoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTE0MTYzNDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGE0YTc0NzcyMjk2M2U2NjU0MTllZGYwYWEyNGU0ZDA1ZTdlOTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lK9eYjvo34a+DkLC+w2SBmvRrVd yoFhXiDtSjNy/nY+FqWQht+1DNQeTsyy4obKz1zBSxXJ2LPuyy0BQYmDBx+4q3Gf P+osPWmH6vbdD1oBwoANDg6dJ0Vg59WG8onZ9tA2QGGq9XPpa8QZHhRSiUc0GloM gqVYlaI+aiAwq5w9a9Qm01YdWSIMJkhpjFOaYHqV9nbmBKfQlQfXfCHx8eGKWU4J 0554vy/hhW7tFLTgsbjSgse0pM+Z61tHcjZQyVqKi5DEZgS+4z9yQ5udcq2QN0aL L1KUV2ZPovx7u+njLP/TFTX/QabaUb++6SdKEaatrONXRE33wsTHnD42NwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCikp0dyKWPmZUGe3wqiTk0F5+kEMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvS0tTblIzSXBZLVpsUVo3ZkNxSk9UUVhuNlFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1eJxMA0G CSqGSIb3DQEBCwUAA4IBAQAUDNTLws5LumOcTdHCILUS1B0FDkC1rXJwN9oyJ1yx 2FdF6LZuCCGTyeZ5JTCwv/lsV7mB5Dx52HxaXwQJHfubZdDKSq7sGNbInTz5Gh6g zU5Zyc7o8pYHHkfAE4i+VHsW5NN4b5m50BtS3hLenz+wLsuoiHuW5bESNTNm41wh F3QnpbilG06MWSnWNZdEL3haZXEjOBJ9YDWozudlpSfjeGbR436ZviWITViQZSQT cBAhs8De+uqY+fH6TWyvz3+3hOXHtBgOMKQyHXZvMjKrw2IaZyGN5OrA5VCYlkzB mXY2pRD3TgNn83isp5Mjt/eoaeyMPfR5h6h/ST/IOSsR -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:07 2026 by rpki-client