This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/KdL2r09wZul28eEPN4dewnB7ukk.roa File: KdL2r09wZul28eEPN4dewnB7ukk.roa (raw, json) Hash identifier: 9pOERGjcNeBDTiqWkoEOFlhoH/O5h5mU1iEJxp7N/4Q= Subject key identifier: 29:D2:F6:AF:4F:70:66:E9:76:F1:E1:0F:37:87:5E:C2:70:7B:BA:49 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84DCD1B29E4F8A1451B17416F7113F Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/KdL2r09wZul28eEPN4dewnB7ukk.roa Signing time: Fri 02 Jan 2026 16:22:52 +0000 ROA not before: Fri 02 Jan 2026 16:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20648 IP address blocks: 88.209.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:dc:d1:b2:9e:4f:8a:14:51:b1:74:16:f7:11:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29d2f6af4f7066e976f1e10f37875ec2707bba49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2e:75:3f:35:56:0f:fc:a5:c5:97:ae:ea:a8: 3e:9b:a6:bf:e6:fd:a4:4b:d0:39:d7:b9:b8:68:95: c3:e8:a7:1f:97:1c:e5:69:c7:c8:d5:05:ef:7d:06: 3b:67:6d:1f:f7:89:18:03:99:7f:53:1a:b6:4d:b5: 0c:e9:71:2c:8b:65:6d:d5:b1:a3:af:97:7f:cf:45: a8:83:ee:8d:1a:1e:a2:15:8a:f3:b9:72:db:3f:15: 7e:75:30:17:a0:1d:f1:f0:b9:52:b6:ff:16:b1:a7: 4a:4f:d6:d9:f7:67:93:70:dc:20:db:99:5d:f8:ff: e8:ad:91:2f:57:f6:93:0b:e7:96:2b:d3:86:95:7c: cd:6f:5c:0a:0b:96:8b:74:42:00:a4:23:c1:64:19: 6e:26:c7:e3:ef:b4:91:d2:25:d6:f0:ea:3b:cd:bf: dd:23:13:99:ce:77:c2:17:b9:2f:70:9d:bd:21:43: b6:46:2a:be:6e:6e:ec:0a:78:df:48:6d:58:f7:a6: cf:ae:d3:ee:fd:cb:ef:34:51:ff:e3:36:6e:47:51: 82:18:98:b1:6b:6a:80:ef:13:0e:b1:87:81:be:26: 4f:c1:06:14:3b:9a:e9:40:65:a6:4c:56:43:4e:2e: 24:80:b9:31:29:44:e9:6e:63:4e:c4:01:39:06:32: a9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D2:F6:AF:4F:70:66:E9:76:F1:E1:0F:37:87:5E:C2:70:7B:BA:49 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/KdL2r09wZul28eEPN4dewnB7ukk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.209.206.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:18:d6:01:fc:4d:52:71:3e:1f:f0:d7:1f:36:f1:53:71:d2: b8:b4:0b:01:b1:55:a1:71:20:08:12:66:99:9d:eb:bf:46:ed: 51:b7:3c:9a:3c:6a:ec:1f:0b:ba:57:93:dd:df:fe:ec:b4:8f: 24:3d:de:e8:79:61:8d:fb:2a:2e:ee:34:f4:4e:97:ec:c6:14: 6f:c7:53:9d:aa:d4:17:14:cd:01:1a:fc:66:a3:26:47:03:5a: 6c:96:5e:df:d9:7a:e0:2d:5c:e8:c6:c2:d6:fd:27:11:57:12: ec:2b:a3:54:41:5e:34:de:01:b7:bb:53:01:c1:27:97:c4:5d: 2a:39:af:e4:55:43:19:d1:b6:8c:51:50:42:1c:bc:72:5e:36: df:a4:f7:58:d7:bd:c7:c5:a7:3e:ca:0e:b2:b5:cd:4a:90:b8: a0:75:6a:bf:30:5d:dd:ab:df:ae:e4:72:59:3a:7a:d3:e0:03: 0d:66:bb:f3:dc:ae:d1:a2:01:88:92:bc:b9:4b:b5:75:bc:df: ab:8d:80:b5:1c:7c:0a:c9:d6:c4:36:3f:10:93:f9:9a:dd:3e: 2b:5b:ad:3c:c3:44:73:69:cf:0e:0a:aa:4a:30:d9:86:7c:00: e5:8f:67:63:5f:3e:97:bd:dd:f6:a7:a1:01:c2:b8:72:06:70: f7:91:4a:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNzRsp5PihRRsXQW9xE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWQyZjZhZjRmNzA2NmU5NzZmMWUxMGYzNzg3NWVjMjcwN2JiYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC51PzVWD/ylxZeu6qg+m6a/5v2k S9A517m4aJXD6KcflxzlacfI1QXvfQY7Z20f94kYA5l/Uxq2TbUM6XEsi2Vt1bGj r5d/z0Wog+6NGh6iFYrzuXLbPxV+dTAXoB3x8LlStv8WsadKT9bZ92eTcNwg25ld +P/orZEvV/aTC+eWK9OGlXzNb1wKC5aLdEIApCPBZBluJsfj77SR0iXW8Oo7zb/d IxOZznfCF7kvcJ29IUO2Riq+bm7sCnjfSG1Y96bPrtPu/cvvNFH/4zZuR1GCGJix a2qA7xMOsYeBviZPwQYUO5rpQGWmTFZDTi4kgLkxKUTpbmNOxAE5BjKp3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCnS9q9PcGbpdvHhDzeHXsJwe7pJMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvS2RMMnIwOXdadWwyOGVFUE40ZGV3bkI3dWtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNHOMA0G CSqGSIb3DQEBCwUAA4IBAQAvGNYB/E1ScT4f8NcfNvFTcdK4tAsBsVWhcSAIEmaZ neu/Ru1RtzyaPGrsHwu6V5Pd3/7stI8kPd7oeWGN+you7jT0TpfsxhRvx1OdqtQX FM0BGvxmoyZHA1psll7f2XrgLVzoxsLW/ScRVxLsK6NUQV403gG3u1MBwSeXxF0q Oa/kVUMZ0baMUVBCHLxyXjbfpPdY173Hxac+yg6ytc1KkLigdWq/MF3dq9+u5HJZ OnrT4AMNZrvz3K7RogGIkry5S7V1vN+rjYC1HHwKydbENj8Qk/ma3T4rW608w0Rz ac8OCqpKMNmGfADlj2djXz6Xvd32p6EBwrhyBnD3kUqO -----END CERTIFICATE-----Generated at Thu Jan 8 08:55:15 2026 by rpki-client