This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/kvD9VGLLMdV8Z-0U6xAPcdb9xNs.roa File: kvD9VGLLMdV8Z-0U6xAPcdb9xNs.roa (raw, json) Hash identifier: UOjHZulJJ0l7NjYIq2CISrUEi7sGsjxxCwq6ItXieZA= Subject key identifier: 92:F0:FD:54:62:CB:31:D5:7C:67:ED:14:EB:10:0F:71:D6:FD:C4:DB Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3 Certificate serial: 019B77C66FD78E8225B5C43C10C072923293 Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/kvD9VGLLMdV8Z-0U6xAPcdb9xNs.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198765 IP address blocks: 91.238.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6f:d7:8e:82:25:b5:c4:3c:10:c0:72:92:32:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92f0fd5462cb31d57c67ed14eb100f71d6fdc4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c7:6a:21:d4:44:23:8a:2f:ed:22:a8:8e:9f: 2c:23:ad:f4:7c:71:25:0e:4a:93:32:0e:c2:74:df: a0:46:93:ad:3c:96:49:93:68:33:d8:17:ce:8d:e6: c0:5f:75:c3:ed:a9:01:ba:3b:7f:ae:b0:dc:de:ee: d5:21:d5:99:0d:31:7b:2c:33:e4:74:85:a4:dc:d8: 81:c5:e8:f2:7d:46:11:0e:1f:1b:fa:91:52:ca:99: 99:d5:b7:a2:0d:a6:b0:dc:ca:ee:cb:97:43:2f:12: f8:f3:57:62:00:a2:5f:1b:45:ea:c1:54:06:35:30: ea:6a:0a:5f:61:97:26:a3:77:77:69:f6:df:3d:d0: 14:03:ab:e0:84:f3:c1:81:11:51:69:0a:9c:1a:40: c0:33:18:b3:91:f7:88:ed:f1:e3:83:ea:57:b6:d5: 94:c8:42:0a:fa:da:5f:5f:3b:94:83:e9:0a:91:63: 66:e9:e6:02:1f:47:e1:be:3a:c0:b8:ed:76:54:8b: 22:8b:39:c1:ca:b8:77:b2:b5:b2:42:74:c8:12:1f: 92:63:6a:c9:6d:27:27:2c:24:8d:b9:cf:47:7f:0a: ab:ac:55:52:06:39:56:81:08:b2:ce:b9:57:cb:db: 5c:20:48:5b:27:52:05:51:7f:fc:0a:d7:6f:77:6d: cd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F0:FD:54:62:CB:31:D5:7C:67:ED:14:EB:10:0F:71:D6:FD:C4:DB X509v3 Authority Key Identifier: keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/kvD9VGLLMdV8Z-0U6xAPcdb9xNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.199.0/24 Signature Algorithm: sha256WithRSAEncryption 85:99:df:8f:0b:7b:56:00:17:6c:b7:49:b3:0b:54:64:f6:d3: b0:c6:5c:13:f8:c9:fe:d4:02:a9:49:ab:a1:7d:08:39:fc:2e: 82:41:4a:c5:62:23:f6:78:9e:4f:d5:73:1c:15:1e:b1:65:56: 60:fd:a2:a8:e8:af:cf:f4:7b:77:98:97:5f:f2:f0:6e:5a:73: 87:81:aa:ad:f6:46:10:ad:d2:79:b0:1d:1d:53:cb:c1:3d:a8: 63:78:9f:a0:e0:98:9c:79:d1:db:b6:ab:b3:0a:a0:fc:02:d9: f6:19:3e:5a:ec:73:b3:5a:2b:13:1d:83:ce:0b:0d:61:9f:e3: 04:d8:3b:51:79:a6:ee:ca:4f:84:cc:68:60:7a:86:b6:2b:3e: e6:ce:9c:f7:71:a8:7e:06:4e:84:08:bf:ca:bc:ed:14:c1:00: c5:03:d4:4d:6e:b8:ef:d1:63:4c:32:0b:a8:40:b8:89:70:34: 75:c4:60:75:60:84:c1:a1:2b:78:c3:1d:3b:c9:4c:c3:3b:09: e8:62:6d:5f:07:e1:aa:fa:16:d5:b7:f5:a1:35:65:a8:f3:2a: 30:08:14:ee:e0:cf:e0:72:02:c8:b8:1f:67:5e:f9:dc:1e:2e: b5:e5:4a:74:47:f9:30:b7:60:fd:1f:00:8b:44:27:db:28:7d: 96:cd:88:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xm/XjoIltcQ8EMBykjKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYzQ0NDZiYTk5YjQzODkxZWNmMWY3ZmEyY2RiMDJlMTRh MzQ0ZjMwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmYwZmQ1NDYyY2IzMWQ1N2M2N2VkMTRlYjEwMGY3MWQ2ZmRjNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8dqIdREI4ov7SKojp8sI630fHEl DkqTMg7CdN+gRpOtPJZJk2gz2BfOjebAX3XD7akBujt/rrDc3u7VIdWZDTF7LDPk dIWk3NiBxejyfUYRDh8b+pFSypmZ1beiDaaw3Mruy5dDLxL481diAKJfG0XqwVQG NTDqagpfYZcmo3d3afbfPdAUA6vghPPBgRFRaQqcGkDAMxizkfeI7fHjg+pXttWU yEIK+tpfXzuUg+kKkWNm6eYCH0fhvjrAuO12VIsiiznByrh3srWyQnTIEh+SY2rJ bScnLCSNuc9HfwqrrFVSBjlWgQiyzrlXy9tcIEhbJ1IFUX/8Ctdvd23NowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJLw/VRiyzHVfGftFOsQD3HW/cTbMB8GA1UdIwQY MBaAFDrERGupm0OJHs8ff6LNsC4Uo0TzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NSRWE2bWJRNGtleng5X29zMndMaFNqUlBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNWM4NzctYTJlZS00YzNmLWFkNWMt MDJhN2Y2ZGY2ODEwLzEva3ZEOVZHTExNZFY4Wi0wVTZ4QVBjZGI5eE5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNWM4NzctYTJlZS00YzNmLWFkNWMtMDJhN2Y2ZGY2ODEw LzEvT3NSRWE2bWJRNGtleng5X29zMndMaFNqUlBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+7HMA0G CSqGSIb3DQEBCwUAA4IBAQCFmd+PC3tWABdst0mzC1Rk9tOwxlwT+Mn+1AKpSauh fQg5/C6CQUrFYiP2eJ5P1XMcFR6xZVZg/aKo6K/P9Ht3mJdf8vBuWnOHgaqt9kYQ rdJ5sB0dU8vBPahjeJ+g4JicedHbtquzCqD8Atn2GT5a7HOzWisTHYPOCw1hn+ME 2DtReabuyk+EzGhgeoa2Kz7mzpz3cah+Bk6ECL/KvO0UwQDFA9RNbrjv0WNMMguo QLiJcDR1xGB1YITBoSt4wx07yUzDOwnoYm1fB+Gq+hbVt/WhNWWo8yowCBTu4M/g cgLIuB9nXvncHi615Up0R/kwt2D9HwCLRCfbKH2WzYgL -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:54 2026 by rpki-client