This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/kXVWM7U0cKI60RelO6wOYdiqnaw.roa File: kXVWM7U0cKI60RelO6wOYdiqnaw.roa (raw, json) Hash identifier: RkWa64rezT/93m8EhIZeu8XZ0jmEEJeR0Zr1faMUwPQ= Subject key identifier: 91:75:56:33:B5:34:70:A2:3A:D1:17:A5:3B:AC:0E:61:D8:AA:9D:AC Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349 Certificate serial: 019C34CA826B75FCA84C7D708F319A9AB844 Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/kXVWM7U0cKI60RelO6wOYdiqnaw.roa Signing time: Fri 06 Feb 2026 21:10:12 +0000 ROA not before: Fri 06 Feb 2026 21:10:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213373 IP address blocks: 45.141.56.0/24 maxlen: 24 45.141.58.0/24 maxlen: 24 45.141.59.0/24 maxlen: 24 185.155.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:34:ca:82:6b:75:fc:a8:4c:7d:70:8f:31:9a:9a:b8:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349 Validity Not Before: Feb 6 21:10:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91755633b53470a23ad117a53bac0e61d8aa9dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:aa:44:21:33:c5:bc:c8:52:6c:f1:40:ac:19: 67:19:3f:46:7e:57:e6:6d:66:4e:94:7b:f4:73:5d: 5b:6e:60:2a:aa:81:3a:b4:71:35:2c:c0:68:c6:39: 98:39:8c:20:26:a7:64:d2:2e:a2:39:75:cb:97:09: d4:d2:54:1f:c7:22:b9:d0:09:ec:3b:38:82:d2:df: fe:a7:3a:22:48:43:55:d7:b3:f2:55:69:31:52:89: bd:2b:9d:3f:1b:c6:83:b5:68:84:d3:04:2f:f3:fa: 3f:9c:1f:06:d4:57:7c:b6:05:3e:7b:75:91:17:99: 76:96:84:56:91:69:1f:f0:6c:d0:09:00:50:3b:f6: 9c:b7:32:e1:14:29:98:5e:32:1f:0d:f5:d0:a3:a1: 00:4e:52:3d:04:89:f5:93:c6:56:64:45:c7:90:a9: 45:f5:80:eb:00:49:95:dc:91:fe:f5:e6:e8:74:c2: 63:85:33:13:c5:ab:e7:48:89:ee:d3:b6:55:76:b2: f5:de:dc:61:06:b1:6c:4a:c8:f7:a6:b7:b4:4b:08: 72:87:1c:6d:5e:1f:3b:b8:d3:ad:fb:00:01:68:ca: 25:58:b0:5d:1e:fd:95:f4:39:32:b5:09:79:d0:63: 31:22:86:93:15:fd:ab:be:9f:69:d0:2d:dc:b1:37: d9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:75:56:33:B5:34:70:A2:3A:D1:17:A5:3B:AC:0E:61:D8:AA:9D:AC X509v3 Authority Key Identifier: keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/kXVWM7U0cKI60RelO6wOYdiqnaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.56.0/24 45.141.58.0/23 185.155.117.0/24 Signature Algorithm: sha256WithRSAEncryption 78:91:68:7d:8d:5c:99:8d:68:be:00:f1:e3:a8:6c:74:3f:6c: 0c:30:77:ba:83:6d:58:51:13:b1:a7:4a:4c:bb:aa:dc:3a:8d: e5:0c:f2:f2:b0:7d:80:c3:ea:7d:b7:3b:96:25:e4:7c:92:7a: 53:c2:4b:9c:c0:3d:8a:7b:9a:76:a9:cd:b7:f9:1a:5d:f7:27: e8:b0:e6:e2:73:ab:76:87:78:34:4a:09:a4:d1:4d:6f:59:e6: f3:9c:92:71:78:fe:94:18:7c:28:79:55:bc:ad:c6:51:3c:f1: 18:64:36:bb:01:c4:cc:36:c4:f6:a0:ad:2e:c0:7f:34:1c:5c: fa:3e:71:79:ee:02:e3:ae:d8:74:f8:8a:af:fa:2c:28:c0:83: 89:8e:2c:83:aa:5e:1a:56:f9:d6:ec:41:14:aa:15:42:b7:69: 48:ec:cb:ae:51:68:5a:79:ee:e1:99:7b:2b:7b:42:56:a0:fc: c6:25:97:18:c4:1b:49:3e:dc:de:72:64:ad:70:f2:4d:9d:81: 34:4c:4a:1e:2e:60:29:e7:5b:a4:c8:d2:0d:19:2d:1e:fc:e1: 3b:92:9c:4b:ca:24:27:2d:1d:17:92:50:f6:9c:44:0d:73:2e: 40:4a:48:37:12:70:06:62:a3:1a:dc:e3:c6:24:4b:61:3e:0e: d2:11:b1:2c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZw0yoJrdfyoTH1wjzGamrhEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YWZlYWU4M2QyZDVlMmVhNzdhYzYxNDdmNzU4MzdiMjdm NzQzNDkwHhcNMjYwMjA2MjExMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTc1NTYzM2I1MzQ3MGEyM2FkMTE3YTUzYmFjMGU2MWQ4YWE5ZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjapEITPFvMhSbPFArBlnGT9Gflfm bWZOlHv0c11bbmAqqoE6tHE1LMBoxjmYOYwgJqdk0i6iOXXLlwnU0lQfxyK50Ans OziC0t/+pzoiSENV17PyVWkxUom9K50/G8aDtWiE0wQv8/o/nB8G1Fd8tgU+e3WR F5l2loRWkWkf8GzQCQBQO/actzLhFCmYXjIfDfXQo6EATlI9BIn1k8ZWZEXHkKlF 9YDrAEmV3JH+9ebodMJjhTMTxavnSInu07ZVdrL13txhBrFsSsj3pre0Swhyhxxt Xh87uNOt+wABaMolWLBdHv2V9DkytQl50GMxIoaTFf2rvp9p0C3csTfZFwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJF1VjO1NHCiOtEXpTusDmHYqp2sMB8GA1UdIwQY MBaAFCSv6ug9LV4up3rGFH91g3sn90NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgt NTNjNTcyMGNmYmViLzEva1hWV003VTBjS0k2MFJlbE82d09ZZGlxbmF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgtNTNjNTcyMGNmYmVi LzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALY04AwQB LY06AwQAuZt1MA0GCSqGSIb3DQEBCwUAA4IBAQB4kWh9jVyZjWi+APHjqGx0P2wM MHe6g21YUROxp0pMu6rcOo3lDPLysH2Aw+p9tzuWJeR8knpTwkucwD2Ke5p2qc23 +Rpd9yfosObic6t2h3g0Sgmk0U1vWebznJJxeP6UGHwoeVW8rcZRPPEYZDa7AcTM NsT2oK0uwH80HFz6PnF57gLjrth0+Iqv+iwowIOJjiyDql4aVvnW7EEUqhVCt2lI 7MuuUWhaee7hmXsre0JWoPzGJZcYxBtJPtzecmStcPJNnYE0TEoeLmAp51ukyNIN GS0e/OE7kpxLyiQnLR0XklD2nEQNcy5ASkg3EnAGYqMa3OPGJEthPg7SEbEs -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:35 2026 by rpki-client