This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/kKVFvVwz4lKUeI_BYUYkcF4zOgY.roa File: kKVFvVwz4lKUeI_BYUYkcF4zOgY.roa (raw, json) Hash identifier: M3kl/dW1izCba43Gvn97MkBlbANqv5CR/FlI8KEINZc= Subject key identifier: 90:A5:45:BD:5C:33:E2:52:94:78:8F:C1:61:46:24:70:5E:33:3A:06 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84E2FF385AB15C00A5A2872CF6CA39 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/kKVFvVwz4lKUeI_BYUYkcF4zOgY.roa Signing time: Fri 02 Jan 2026 16:22:53 +0000 ROA not before: Fri 02 Jan 2026 16:22:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47169 IP address blocks: 45.14.8.0/23 maxlen: 23 45.88.92.0/24 maxlen: 24 88.209.218.0/24 maxlen: 24 88.209.250.0/23 maxlen: 23 92.52.192.0/21 maxlen: 21 92.52.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e2:ff:38:5a:b1:5c:00:a5:a2:87:2c:f6:ca:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90a545bd5c33e25294788fc1614624705e333a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:3d:53:49:0f:79:a3:6e:2f:8a:c8:fc:90: fa:bf:1c:72:4f:ce:4e:92:d9:97:6d:66:e3:64:84: 59:1b:eb:f8:cd:67:ef:d1:68:7c:cb:9c:fb:73:a2: df:f3:e3:a5:cc:fb:e4:bf:c5:7d:b9:7b:7e:3d:80: 05:3e:a8:d1:1a:0a:c6:81:5a:98:4a:27:f3:ca:87: c5:90:4a:73:d6:d9:e2:5b:34:6d:17:5d:b3:d7:cd: 92:9b:bc:4e:c8:5b:d2:ca:b2:1a:5f:ed:ba:4f:1f: 9f:b8:6b:76:10:e3:96:96:98:b5:f9:3e:cd:1a:73: 3a:00:38:8a:63:7f:b6:4e:4c:43:22:99:de:1c:ed: 22:40:27:f3:17:2e:0e:57:f0:1a:6d:20:74:e0:dc: 8d:5e:58:1a:c1:9c:a4:07:31:32:23:78:f8:41:f3: 77:a3:c5:f2:b1:97:27:cd:97:0f:e8:67:dd:a8:1b: 6b:f3:a8:2f:e7:fb:ec:37:d5:14:32:10:66:fd:fd: 92:6b:92:d5:44:e0:e9:15:78:08:3c:bf:88:21:1a: 59:62:dc:12:75:e9:70:d5:e4:2c:39:f4:ba:39:03: 28:29:61:b4:b6:f3:1d:94:46:6b:31:6f:4c:91:9c: 45:6e:92:22:0d:b9:b5:aa:d1:51:dc:9d:72:00:6d: 34:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A5:45:BD:5C:33:E2:52:94:78:8F:C1:61:46:24:70:5E:33:3A:06 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/kKVFvVwz4lKUeI_BYUYkcF4zOgY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.8.0/23 45.88.92.0/24 88.209.218.0/24 88.209.250.0/23 92.52.192.0-92.52.203.255 Signature Algorithm: sha256WithRSAEncryption 82:d7:1c:0f:08:db:0e:4c:36:29:26:c5:b8:13:e7:40:84:29: dc:3c:75:5b:73:2e:40:35:1c:76:6e:13:bd:27:80:dd:3a:55: f4:2a:86:32:67:e6:2f:68:3c:17:fb:16:48:51:42:3f:fc:20: c1:31:f0:b5:df:42:20:ab:0b:f5:c0:76:3e:f9:c0:54:11:37: 6c:44:e7:05:45:93:19:5a:16:a2:84:c7:ed:55:9a:f5:6a:a3: 4f:c3:93:ce:be:7e:3a:91:77:80:f7:dc:70:4e:58:07:3d:61: ff:39:1b:ab:70:9d:cc:b3:e2:8b:c1:ea:9c:8b:8b:f8:23:2c: d9:ec:d2:3f:2e:d6:25:f0:91:ce:42:a2:31:c6:27:1c:3b:45: 1e:c4:d3:7d:d3:9a:4e:70:fe:b8:e8:2c:56:52:aa:9f:c1:46: 8e:8c:a1:81:3a:a2:6c:d1:78:09:b3:e7:c0:ee:c2:b7:f9:2e: 70:6c:e2:8b:e5:e3:53:d5:4b:cd:70:11:d7:ba:90:5f:5a:4a: 87:1f:70:ff:d3:f3:03:64:b8:0e:4b:64:9a:7c:be:5d:16:4a: b4:99:1b:73:7a:95:61:34:a6:1e:2f:28:1f:c2:d0:29:19:d8: 1b:36:19:fc:74:dc:cb:3b:5d:75:42:91:45:ea:93:ff:00:6b: 93:96:33:46 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt/hOL/OFqxXACloocs9so5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGE1NDViZDVjMzNlMjUyOTQ3ODhmYzE2MTQ2MjQ3MDVlMzMzYTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mk9U0kPeaNuL4rI/JD6vxxyT85O ktmXbWbjZIRZG+v4zWfv0Wh8y5z7c6Lf8+OlzPvkv8V9uXt+PYAFPqjRGgrGgVqY SifzyofFkEpz1tniWzRtF12z182Sm7xOyFvSyrIaX+26Tx+fuGt2EOOWlpi1+T7N GnM6ADiKY3+2TkxDIpneHO0iQCfzFy4OV/AabSB04NyNXlgawZykBzEyI3j4QfN3 o8XysZcnzZcP6GfdqBtr86gv5/vsN9UUMhBm/f2Sa5LVRODpFXgIPL+IIRpZYtwS delw1eQsOfS6OQMoKWG0tvMdlEZrMW9MkZxFbpIiDbm1qtFR3J1yAG000QIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFJClRb1cM+JSlHiPwWFGJHBeMzoGMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEva0tWRnZWd3o0bEtVZUlfQllVWWtjRjR6T2dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBLQ4IAwQA LVhcAwQAWNHaAwQBWNH6MAwDBAZcNMADBAJcNMgwDQYJKoZIhvcNAQELBQADggEB AILXHA8I2w5MNikmxbgT50CEKdw8dVtzLkA1HHZuE70ngN06VfQqhjJn5i9oPBf7 FkhRQj/8IMEx8LXfQiCrC/XAdj75wFQRN2xE5wVFkxlaFqKEx+1VmvVqo0/Dk86+ fjqRd4D33HBOWAc9Yf85G6twncyz4ovB6pyLi/gjLNns0j8u1iXwkc5CojHGJxw7 RR7E033Tmk5w/rjoLFZSqp/BRo6MoYE6omzReAmz58Duwrf5LnBs4ovl41PVS81w Ede6kF9aSocfcP/T8wNkuA5LZJp8vl0WSrSZG3N6lWE0ph4vKB/C0CkZ2Bs2Gfx0 3Ms7XXVCkUXqk/8Aa5OWM0Y= -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:01 2026 by rpki-client