This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/k9k26h_wk2KwXBbexASmBckIdio.roa File: k9k26h_wk2KwXBbexASmBckIdio.roa (raw, json) Hash identifier: IkgLudWAy48LS7n3a0wG6CHVGFDidThlfHrJKCCT1wM= Subject key identifier: 93:D9:36:EA:1F:F0:93:62:B0:5C:16:DE:C4:04:A6:05:C9:08:76:2A Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e Certificate serial: 019B7D5B605D55C294A7A67644D9A5AE8EE4 Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/k9k26h_wk2KwXBbexASmBckIdio.roa Signing time: Fri 02 Jan 2026 06:18:19 +0000 ROA not before: Fri 02 Jan 2026 06:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12676 IP address blocks: 109.234.248.0/21 maxlen: 24 2a01:a740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:60:5d:55:c2:94:a7:a6:76:44:d9:a5:ae:8e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e Validity Not Before: Jan 2 06:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93d936ea1ff09362b05c16dec404a605c908762a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9e:02:50:e7:c9:33:bf:17:10:ab:30:48:0c: 0e:b2:38:43:7b:c7:19:d6:a9:59:c9:c3:cf:a2:59: 9c:d7:e0:66:87:aa:d9:ed:12:fc:a7:0e:d8:37:29: 53:96:98:3d:05:57:e1:e8:df:7e:b6:27:2b:0f:fa: 24:8c:2d:d1:56:ab:62:fe:5c:88:29:d4:0b:e9:21: ae:2f:6d:56:a5:dc:b9:27:40:8b:e1:9d:e2:92:68: 6b:cb:99:53:dc:cc:49:8f:23:a0:df:cc:d1:11:c9: 97:34:cd:f2:c1:9c:03:92:03:03:b7:d3:8f:69:2c: 23:e4:4b:fa:9c:09:e7:c1:64:6a:fd:9a:c3:65:7a: ee:14:5f:92:14:d8:22:35:12:14:e4:fa:07:fd:da: dd:81:a5:46:87:1e:70:2c:a4:fb:14:b6:b9:b2:d9: 9a:cb:d5:3e:c7:30:19:d6:d3:cd:9d:48:9b:9a:8f: 6e:7c:63:13:d9:a4:2c:9d:ab:46:c2:57:c0:d4:06: a1:6c:92:8a:d5:c0:fa:75:20:1a:04:a9:25:97:6f: 1b:1d:f1:31:d8:1d:fb:3b:ab:23:b7:dc:5f:37:1f: a3:d5:9f:d2:4b:e4:0e:a9:8c:47:fc:53:87:d7:54: 03:00:13:25:d6:c6:f4:bc:2f:4a:dc:ca:89:92:17: 11:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D9:36:EA:1F:F0:93:62:B0:5C:16:DE:C4:04:A6:05:C9:08:76:2A X509v3 Authority Key Identifier: keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/k9k26h_wk2KwXBbexASmBckIdio.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.234.248.0/21 IPv6: 2a01:a740::/32 Signature Algorithm: sha256WithRSAEncryption 08:ce:41:2f:24:2d:80:ea:91:00:72:de:69:11:d5:74:ef:e3: 9e:31:0d:c7:2b:03:15:3e:a0:7c:a0:ea:1e:43:ed:bf:7d:43: f2:ac:ab:58:64:8e:28:14:86:57:0e:d3:fb:26:d1:5a:7a:8a: 0e:80:56:3c:04:ca:d9:ac:da:67:44:78:59:63:41:0a:1c:18: 8e:3a:96:f8:66:2d:10:25:42:9b:b9:64:78:d9:20:1c:9c:59: 4a:7b:d5:dc:59:d9:1f:21:45:08:69:71:16:c7:bb:7b:d8:67: fb:c3:d5:25:7a:32:8a:c0:ff:72:e3:d5:3c:db:37:6d:6e:ac: a6:7e:81:f8:ac:30:e8:3b:40:ec:28:27:e5:7a:fa:c2:ef:08: 7e:e2:2b:41:29:ab:34:27:ae:8e:70:aa:dd:ef:d6:82:8f:33: 56:60:7b:bf:5a:52:d1:53:27:d7:de:d2:5c:05:45:64:03:a1: d9:ae:40:da:76:cb:85:1e:62:e0:f0:f5:30:45:38:ca:01:0d: 2b:d5:94:2a:c1:24:9f:5f:28:4c:05:40:a8:ce:44:e8:4a:e7: 98:ab:23:b2:c5:21:0c:ed:df:5d:4e:6b:55:3f:e5:1e:a7:6b: 00:b7:a5:13:fb:03:13:b0:c3:b6:cd:01:32:f0:1e:0b:19:3e: bb:10:54:9e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9W2BdVcKUp6Z2RNmlro7kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZTQzN2JjYWQ5YmFjZmEzYjc2YjdkZDA0NTQxMzNmYjRk OGNiM2UwHhcNMjYwMTAyMDYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2Q5MzZlYTFmZjA5MzYyYjA1YzE2ZGVjNDA0YTYwNWM5MDg3NjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp4CUOfJM78XEKswSAwOsjhDe8cZ 1qlZycPPolmc1+Bmh6rZ7RL8pw7YNylTlpg9BVfh6N9+ticrD/okjC3RVqti/lyI KdQL6SGuL21Wpdy5J0CL4Z3ikmhry5lT3MxJjyOg38zREcmXNM3ywZwDkgMDt9OP aSwj5Ev6nAnnwWRq/ZrDZXruFF+SFNgiNRIU5PoH/drdgaVGhx5wLKT7FLa5stma y9U+xzAZ1tPNnUibmo9ufGMT2aQsnatGwlfA1AahbJKK1cD6dSAaBKkll28bHfEx 2B37O6sjt9xfNx+j1Z/SS+QOqYxH/FOH11QDABMl1sb0vC9K3MqJkhcRJQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJPZNuof8JNisFwW3sQEpgXJCHYqMB8GA1UdIwQY MBaAFP/kN7ytm6z6O3a33QRUEz+02Ms+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zZDQ4MjctM2YxNC00MzBlLTljZWUt ZDEyMWM1YTc1ZDk4LzEvazlrMjZoX3drMkt3WEJiZXhBU21CY2tJZGlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8zZDQ4MjctM2YxNC00MzBlLTljZWUtZDEyMWM1YTc1ZDk4 LzEvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDber4MA0E AgACMAcDBQAqAadAMA0GCSqGSIb3DQEBCwUAA4IBAQAIzkEvJC2A6pEAct5pEdV0 7+OeMQ3HKwMVPqB8oOoeQ+2/fUPyrKtYZI4oFIZXDtP7JtFaeooOgFY8BMrZrNpn RHhZY0EKHBiOOpb4Zi0QJUKbuWR42SAcnFlKe9XcWdkfIUUIaXEWx7t72Gf7w9Ul ejKKwP9y49U82zdtbqymfoH4rDDoO0DsKCflevrC7wh+4itBKas0J66OcKrd79aC jzNWYHu/WlLRUyfX3tJcBUVkA6HZrkDadsuFHmLg8PUwRTjKAQ0r1ZQqwSSfXyhM BUCozkToSueYqyOyxSEM7d9dTmtVP+Uep2sAt6UT+wMTsMO2zQEy8B4LGT67EFSe -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:06 2026 by rpki-client