This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/ktuOQpvhIVshzEh1AKVHwjETmDQ.roa File: ktuOQpvhIVshzEh1AKVHwjETmDQ.roa (raw, json) Hash identifier: RkFBt5jBdqM9V+vWsmvf1KhOIAy1CQTkom8d2viWOuc= Subject key identifier: 92:DB:8E:42:9B:E1:21:5B:21:CC:48:75:00:A5:47:C2:31:13:98:34 Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca Certificate serial: 019B7EA5965D8880527CD12982EEDCF33AD9 Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/ktuOQpvhIVshzEh1AKVHwjETmDQ.roa Signing time: Fri 02 Jan 2026 12:18:59 +0000 ROA not before: Fri 02 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215686 IP address blocks: 91.229.236.0/24 maxlen: 24 194.39.242.0/24 maxlen: 24 2a0c:dd00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:96:5d:88:80:52:7c:d1:29:82:ee:dc:f3:3a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca Validity Not Before: Jan 2 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92db8e429be1215b21cc487500a547c231139834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:7a:86:5b:f8:6d:d7:c1:ab:e6:d8:47:bd: 6f:a8:c5:64:c3:0e:d7:26:b8:67:a6:36:76:b9:7b: 4e:c9:5d:a9:f4:e6:16:fe:25:19:e8:06:be:a7:85: 80:92:64:df:c3:08:00:e1:77:d3:ad:4a:7d:17:47: 57:f0:e4:40:25:0f:a6:35:6f:6f:9d:b4:eb:2f:ea: f8:a0:be:8a:b3:c5:3e:2c:9a:d7:e2:a0:71:9c:1f: 3f:38:31:52:7b:73:c5:76:be:2a:75:a8:0c:9b:b2: 84:ae:3d:2d:ce:8c:ce:99:db:d8:03:6a:65:f3:22: ae:ac:8b:bb:a6:d8:ff:cd:82:be:dc:8e:a0:7c:c3: 53:1e:70:58:87:fa:45:17:53:6f:c0:f8:d6:d0:36: 49:b1:20:68:00:9a:9c:76:a9:86:f4:59:36:72:71: 97:e0:80:c3:d7:8f:b9:82:f9:e4:64:e8:68:42:81: d0:d9:00:6b:1c:66:06:c4:ad:4c:b4:59:5f:71:b7: d7:7d:37:21:0b:d9:35:25:f4:eb:a4:18:bd:31:c8: 99:26:ec:89:5b:f9:44:a3:08:6f:e6:34:7b:21:2d: 27:15:f5:a0:64:ab:e4:cc:64:ff:65:1c:7f:36:6a: c1:9e:36:af:aa:ac:8d:13:1b:f5:34:0c:df:b1:dd: 60:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DB:8E:42:9B:E1:21:5B:21:CC:48:75:00:A5:47:C2:31:13:98:34 X509v3 Authority Key Identifier: keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/ktuOQpvhIVshzEh1AKVHwjETmDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.236.0/24 194.39.242.0/24 IPv6: 2a0c:dd00::/29 Signature Algorithm: sha256WithRSAEncryption b3:80:fd:0d:31:bf:ae:73:fc:c4:79:06:df:7b:4b:c9:e4:c4: 80:17:80:f4:0c:78:aa:0f:f8:55:d8:91:71:71:bc:a9:b7:a4: 68:af:23:73:a4:24:7d:ee:df:fd:d0:ed:66:21:0f:8b:40:02: c6:3b:31:33:1e:98:ca:14:b5:e8:25:b7:52:5f:c4:a3:7d:17: 31:3e:58:14:3d:bd:90:c3:c9:be:2c:1e:d9:9e:19:60:e9:d0: c2:6c:17:9f:00:6f:df:c3:61:ff:f2:52:a3:70:ee:50:4d:d7: 6e:d5:ca:f7:1a:05:e7:9a:37:8b:26:be:39:43:38:54:bb:a3: ac:8c:b5:a7:be:4e:c5:6e:23:d1:4b:13:52:be:5d:6e:d6:e6: 02:86:87:72:86:b3:d8:c4:0f:ef:6f:f5:8f:98:e4:4b:63:97: 0c:9b:13:ff:fa:ba:60:19:c0:37:01:63:e0:76:cf:60:1b:6e: 0f:34:92:b3:f4:c9:ed:29:b9:b4:48:49:7e:41:2b:4e:65:57: 3c:97:1e:62:33:26:91:78:46:f3:03:87:bd:76:d9:84:91:8c: 68:63:4f:23:68:2f:f2:b5:d8:e3:86:cc:5a:63:da:fe:c6:c9: e6:5a:2b:ca:b9:5c:27:b3:4d:2b:d3:a8:56:d8:ef:e2:f1:6b: 78:48:b1:dc -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+pZZdiIBSfNEpgu7c8zrZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NGUzNWVjMjE4MGRhZWJkMWJmM2RkNDQ0MDNhOWUwYmZj YjU2Y2EwHhcNMjYwMTAyMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmRiOGU0MjliZTEyMTViMjFjYzQ4NzUwMGE1NDdjMjMxMTM5ODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrd6hlv4bdfBq+bYR71vqMVkww7X JrhnpjZ2uXtOyV2p9OYW/iUZ6Aa+p4WAkmTfwwgA4XfTrUp9F0dX8ORAJQ+mNW9v nbTrL+r4oL6Ks8U+LJrX4qBxnB8/ODFSe3PFdr4qdagMm7KErj0tzozOmdvYA2pl 8yKurIu7ptj/zYK+3I6gfMNTHnBYh/pFF1NvwPjW0DZJsSBoAJqcdqmG9Fk2cnGX 4IDD14+5gvnkZOhoQoHQ2QBrHGYGxK1MtFlfcbfXfTchC9k1JfTrpBi9MciZJuyJ W/lEowhv5jR7IS0nFfWgZKvkzGT/ZRx/NmrBnjavqqyNExv1NAzfsd1gLwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJLbjkKb4SFbIcxIdQClR8IxE5g0MB8GA1UdIwQY MBaAFJdONewhgNrr0b891EQDqeC/y1bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUt Y2RmNGM2YjQyNGUxLzEva3R1T1FwdmhJVnNoekVoMUFLVkh3akVUbURRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUtY2RmNGM2YjQyNGUx LzEvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW+XsAwQA wifyMA0EAgACMAcDBQMqDN0AMA0GCSqGSIb3DQEBCwUAA4IBAQCzgP0NMb+uc/zE eQbfe0vJ5MSAF4D0DHiqD/hV2JFxcbypt6RoryNzpCR97t/90O1mIQ+LQALGOzEz HpjKFLXoJbdSX8SjfRcxPlgUPb2Qw8m+LB7Znhlg6dDCbBefAG/fw2H/8lKjcO5Q Tddu1cr3GgXnmjeLJr45QzhUu6OsjLWnvk7FbiPRSxNSvl1u1uYChodyhrPYxA/v b/WPmORLY5cMmxP/+rpgGcA3AWPgds9gG24PNJKz9MntKbm0SEl+QStOZVc8lx5i MyaReEbzA4e9dtmEkYxoY08jaC/ytdjjhsxaY9r+xsnmWivKuVwns00r06hW2O/i 8Wt4SLHc -----END CERTIFICATE-----Generated at Tue Jan 27 08:47:00 2026 by rpki-client