This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/kVKI5bXvJSn5tyQySVxPr0YVjUw.roa File: kVKI5bXvJSn5tyQySVxPr0YVjUw.roa (raw, json) Hash identifier: NTL21PZSBGTNm7kCXsDwO+4tuqr/3MrAs0BKFoz5+1A= Subject key identifier: 91:52:88:E5:B5:EF:25:29:F9:B7:24:32:49:5C:4F:AF:46:15:8D:4C Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04 Certificate serial: 019B7B35E2F03EBAD2BAC617739FA1F3BFEE Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/kVKI5bXvJSn5tyQySVxPr0YVjUw.roa Signing time: Thu 01 Jan 2026 20:18:07 +0000 ROA not before: Thu 01 Jan 2026 20:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 85.115.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e2:f0:3e:ba:d2:ba:c6:17:73:9f:a1:f3:bf:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04 Validity Not Before: Jan 1 20:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=915288e5b5ef2529f9b72432495c4faf46158d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fa:6b:28:fe:c6:f2:10:94:8e:04:af:50:18: 41:e1:c8:30:bc:99:ae:f0:d2:3b:a8:7e:7c:b6:d1: 50:6d:c5:8a:83:43:28:51:26:40:87:a7:70:fc:78: 26:bc:3d:b9:07:72:f6:01:d4:4b:55:ad:98:fc:21: 6b:0f:94:6c:e9:af:c6:9b:0c:be:86:22:66:27:c3: 56:f7:5a:e2:7d:47:8f:16:a6:87:2d:df:c8:94:06: 34:3c:d4:67:b4:01:55:9e:7e:c5:a6:0b:e3:5c:4c: b7:b4:b3:92:fb:87:b6:57:6f:ff:53:fb:70:b1:b6: c4:0c:6e:f4:49:78:43:11:b6:16:ed:a4:92:d3:cb: b7:10:54:8f:f3:83:8c:7f:d0:cc:d6:91:41:bc:1e: 23:6f:7f:f0:f3:0c:27:c8:ec:78:2b:fe:4c:c3:38: 01:f6:e3:88:e3:33:44:8b:c7:4b:bc:0b:30:3a:65: 94:0b:d7:44:23:31:bd:3a:38:33:08:2b:a1:6e:63: 8a:11:b3:f5:c6:9e:7d:f4:14:88:84:8a:c4:6c:25: a9:ec:8e:5d:09:2d:4f:0e:6e:4c:03:ef:19:0a:e2: b1:2c:c9:26:5f:c9:b9:fc:4a:df:d8:b4:03:91:6d: 44:c6:0f:f2:22:a7:87:96:39:d3:b7:44:3b:9e:b1: 0c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:52:88:E5:B5:EF:25:29:F9:B7:24:32:49:5C:4F:AF:46:15:8D:4C X509v3 Authority Key Identifier: keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/kVKI5bXvJSn5tyQySVxPr0YVjUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.115.88.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:87:48:f1:d0:ee:ca:43:be:86:8f:d3:55:5e:63:b0:8f:c9: b8:fc:16:b2:04:55:3f:a8:14:74:1b:78:1f:05:31:07:b4:1a: b8:cf:a6:d2:86:e6:db:09:7c:ab:11:57:76:38:21:ec:bc:20: 36:ad:b0:fe:ac:8e:57:ef:e3:0a:16:5b:a5:e6:cf:bd:8a:1f: bb:13:bf:bd:e5:df:4e:66:4b:1f:69:bc:aa:7c:a8:ec:a3:04: d4:0d:6a:d2:7b:73:76:7c:37:53:9e:82:ca:23:e0:11:93:be: 47:60:d7:f6:0e:5f:6b:d9:39:a1:32:61:22:8d:a0:84:0c:17: 65:a9:9c:48:a8:ea:56:ba:e8:eb:65:16:06:65:38:2e:c6:3d: 9f:03:3f:f5:fb:5c:b9:8f:10:f0:01:53:2d:15:fc:c5:c8:38: 97:5a:bb:8b:04:84:81:9b:33:5f:43:65:83:cf:07:9b:32:33: 16:ad:c0:7a:14:54:7a:41:0b:1b:73:a5:19:fb:a7:09:aa:1c: 0d:cc:5a:aa:11:62:ef:af:97:7e:fe:55:40:2e:93:5a:0e:83: 64:83:18:b9:35:3a:bd:13:50:fd:a6:06:e5:9a:49:2b:a0:89: 07:f2:d6:ef:67:e6:36:95:96:db:f7:72:cb:d1:29:67:a5:8f: 7a:4e:8f:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NeLwPrrSusYXc5+h87/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYjUxMDBlNzk4ZmFiNzU3N2JmNzI1YWM5NTY5ZWE4MGU2 YzJhMDQwHhcNMjYwMTAxMjAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTUyODhlNWI1ZWYyNTI5ZjliNzI0MzI0OTVjNGZhZjQ2MTU4ZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvprKP7G8hCUjgSvUBhB4cgwvJmu 8NI7qH58ttFQbcWKg0MoUSZAh6dw/HgmvD25B3L2AdRLVa2Y/CFrD5Rs6a/Gmwy+ hiJmJ8NW91rifUePFqaHLd/IlAY0PNRntAFVnn7FpgvjXEy3tLOS+4e2V2//U/tw sbbEDG70SXhDEbYW7aSS08u3EFSP84OMf9DM1pFBvB4jb3/w8wwnyOx4K/5MwzgB 9uOI4zNEi8dLvAswOmWUC9dEIzG9OjgzCCuhbmOKEbP1xp599BSIhIrEbCWp7I5d CS1PDm5MA+8ZCuKxLMkmX8m5/Erf2LQDkW1Exg/yIqeHljnTt0Q7nrEMewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJFSiOW17yUp+bckMklcT69GFY1MMB8GA1UdIwQY MBaAFCC1EA55j6t1d79yWslWnqgObCoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQt ODAzNzk2NTY5M2EyLzEva1ZLSTViWHZKU241dHlReVNWeFByMFlWalV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQtODAzNzk2NTY5M2Ey LzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXNYMA0G CSqGSIb3DQEBCwUAA4IBAQBOh0jx0O7KQ76Gj9NVXmOwj8m4/BayBFU/qBR0G3gf BTEHtBq4z6bShubbCXyrEVd2OCHsvCA2rbD+rI5X7+MKFlul5s+9ih+7E7+95d9O ZksfabyqfKjsowTUDWrSe3N2fDdTnoLKI+ARk75HYNf2Dl9r2TmhMmEijaCEDBdl qZxIqOpWuujrZRYGZTguxj2fAz/1+1y5jxDwAVMtFfzFyDiXWruLBISBmzNfQ2WD zwebMjMWrcB6FFR6QQsbc6UZ+6cJqhwNzFqqEWLvr5d+/lVALpNaDoNkgxi5NTq9 E1D9pgblmkkroIkH8tbvZ+Y2lZbb93LL0SlnpY96To8W -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:26 2026 by rpki-client