This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/kpaNejaKmczszSeV4Kr3nQVsfCk.roa File: kpaNejaKmczszSeV4Kr3nQVsfCk.roa (raw, json) Hash identifier: ae4+SDY4Ysgx2BqDFABpfVwYYmnIsIslEL496b85q74= Subject key identifier: 92:96:8D:7A:36:8A:99:CC:EC:CD:27:95:E0:AA:F7:9D:05:6C:7C:29 Certificate issuer: /CN=adc3e47acf2013f8654cadb5bbc0522680e3d020 Certificate serial: 019BE54C6F29CB6720839854E5EA8D89A6FC Authority key identifier: AD:C3:E4:7A:CF:20:13:F8:65:4C:AD:B5:BB:C0:52:26:80:E3:D0:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcPkes8gE_hlTK21u8BSJoDj0CA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/kpaNejaKmczszSeV4Kr3nQVsfCk.roa Signing time: Thu 22 Jan 2026 10:42:30 +0000 ROA not before: Thu 22 Jan 2026 10:42:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203482 IP address blocks: 213.134.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/rcPkes8gE_hlTK21u8BSJoDj0CA.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/rcPkes8gE_hlTK21u8BSJoDj0CA.mft rsync://rpki.ripe.net/repository/DEFAULT/rcPkes8gE_hlTK21u8BSJoDj0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:4c:6f:29:cb:67:20:83:98:54:e5:ea:8d:89:a6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adc3e47acf2013f8654cadb5bbc0522680e3d020 Validity Not Before: Jan 22 10:42:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92968d7a368a99cceccd2795e0aaf79d056c7c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:44:ec:aa:0c:f6:b2:49:b0:84:3b:1c:a6: 86:9c:4b:27:0c:82:0b:a7:9e:a6:2c:8c:80:08:c3: b0:84:97:a2:17:e4:12:c6:67:57:07:ec:f2:a6:c2: d3:40:68:6f:3d:09:df:b7:24:3b:d8:12:4a:c7:8f: b8:12:d4:4b:60:1a:a4:f2:81:96:49:b9:01:b4:56: 66:47:54:e7:24:8e:ed:2b:82:1f:e5:a9:fa:7c:fc: 7d:30:6e:09:37:7b:a8:b6:44:62:e6:b0:e5:c1:5d: c3:05:aa:52:06:b2:51:ea:3a:18:79:cc:a5:f4:a5: fa:ff:c6:c9:ca:b5:57:c4:c8:5b:eb:b9:67:a4:dc: 49:7d:56:41:a5:cf:42:9c:26:f9:d6:7a:52:bb:b3: 23:71:e3:87:71:f6:92:e8:b8:ce:89:38:db:b2:26: e7:1d:ec:76:5b:ec:ea:06:23:eb:30:e7:02:6d:d8: 58:1d:fc:8c:44:ca:f2:94:21:ea:b0:2f:b4:64:f1: 81:5f:38:d1:ef:2d:c5:ca:b8:ee:8d:16:76:64:49: 02:39:99:93:6a:a8:ba:83:cd:d0:28:4d:18:43:af: ed:d1:b6:9d:6b:8e:f4:02:8b:20:6a:ba:cd:39:3b: fa:57:92:8d:2d:98:09:58:22:33:f8:b2:d5:c1:8a: 0e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:96:8D:7A:36:8A:99:CC:EC:CD:27:95:E0:AA:F7:9D:05:6C:7C:29 X509v3 Authority Key Identifier: keyid:AD:C3:E4:7A:CF:20:13:F8:65:4C:AD:B5:BB:C0:52:26:80:E3:D0:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcPkes8gE_hlTK21u8BSJoDj0CA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/kpaNejaKmczszSeV4Kr3nQVsfCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/rcPkes8gE_hlTK21u8BSJoDj0CA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.134.26.0/24 Signature Algorithm: sha256WithRSAEncryption 34:8a:d6:74:64:a8:cb:46:eb:4c:4b:e2:c5:ce:a3:af:35:2b: 58:ef:8c:4f:35:76:d2:c0:d3:36:c5:13:34:9b:53:f8:30:0b: 38:25:23:ba:f5:c3:2e:16:4c:0f:22:2f:7e:f8:d6:79:fd:89: b6:1a:28:43:43:02:e2:e1:68:d0:93:d4:6c:39:34:e6:2d:50: dd:fe:c0:7f:44:73:bf:70:e4:f9:f1:05:4a:59:5b:aa:d7:c2: 08:33:7b:b3:7b:81:ec:e8:8d:8a:2a:c0:a2:41:0a:89:fb:39: 6e:d0:0f:8b:1d:40:d4:29:12:13:c3:13:69:41:8a:1e:9f:35: 0f:83:07:b2:a4:91:95:ae:e9:f6:3a:48:d0:3e:31:69:a8:c1: b8:f3:39:2d:f5:9e:26:d7:d7:e5:73:b6:e6:fd:25:98:b7:4e: 80:c4:56:2c:d8:96:c7:04:38:0e:eb:fe:52:d7:ba:8f:ab:05: 62:1c:f6:2d:0d:a1:8d:55:f0:cf:4b:7d:d3:a9:3a:a3:67:24: a3:ad:f7:bb:c0:bb:d8:25:22:83:83:bd:0f:02:c3:fb:e4:55: 31:a3:29:93:d3:bd:15:fe:2f:55:72:1f:a8:eb:25:c4:74:e7: f7:2b:30:87:71:48:69:c5:02:ea:b3:de:70:e8:17:db:83:8d: ed:25:0c:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvlTG8py2cgg5hU5eqNiab8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYzNlNDdhY2YyMDEzZjg2NTRjYWRiNWJiYzA1MjI2ODBl M2QwMjAwHhcNMjYwMTIyMTA0MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mjk2OGQ3YTM2OGE5OWNjZWNjZDI3OTVlMGFhZjc5ZDA1NmM3YzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulBE7KoM9rJJsIQ7HKaGnEsnDIIL p56mLIyACMOwhJeiF+QSxmdXB+zypsLTQGhvPQnftyQ72BJKx4+4EtRLYBqk8oGW SbkBtFZmR1TnJI7tK4If5an6fPx9MG4JN3uotkRi5rDlwV3DBapSBrJR6joYecyl 9KX6/8bJyrVXxMhb67lnpNxJfVZBpc9CnCb51npSu7MjceOHcfaS6LjOiTjbsibn Hex2W+zqBiPrMOcCbdhYHfyMRMrylCHqsC+0ZPGBXzjR7y3FyrjujRZ2ZEkCOZmT aqi6g83QKE0YQ6/t0bada470AosgarrNOTv6V5KNLZgJWCIz+LLVwYoOOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJKWjXo2ipnM7M0nleCq950FbHwpMB8GA1UdIwQY MBaAFK3D5HrPIBP4ZUyttbvAUiaA49AgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmNQa2VzOGdFX2hsVEsyMXU4QlNKb0RqMENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zNTBiMWEtN2EwNi00OWJmLWJkZTIt YmYwZjY1YjdkMzVhLzEva3BhTmVqYUttY3pzelNlVjRLcjNuUVZzZkNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zNTBiMWEtN2EwNi00OWJmLWJkZTItYmYwZjY1YjdkMzVh LzEvcmNQa2VzOGdFX2hsVEsyMXU4QlNKb0RqMENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YYaMA0G CSqGSIb3DQEBCwUAA4IBAQA0itZ0ZKjLRutMS+LFzqOvNStY74xPNXbSwNM2xRM0 m1P4MAs4JSO69cMuFkwPIi9++NZ5/Ym2GihDQwLi4WjQk9RsOTTmLVDd/sB/RHO/ cOT58QVKWVuq18IIM3uze4Hs6I2KKsCiQQqJ+zlu0A+LHUDUKRITwxNpQYoenzUP gweypJGVrun2OkjQPjFpqMG48zkt9Z4m19flc7bm/SWYt06AxFYs2JbHBDgO6/5S 17qPqwViHPYtDaGNVfDPS33TqTqjZySjrfe7wLvYJSKDg70PAsP75FUxoymT070V /i9Vch+o6yXEdOf3KzCHcUhpxQLqs95w6Bfbg43tJQyt -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:17 2026 by rpki-client