This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/kx4dGEV1WCVdxmXSMMr56j_3lbs.roa File: kx4dGEV1WCVdxmXSMMr56j_3lbs.roa (raw, json) Hash identifier: /AeCPUE+7U+x0eAWjMncSzT2rSFqU0vKvVwI+dTpmZs= Subject key identifier: 93:1E:1D:18:45:75:58:25:5D:C6:65:D2:30:CA:F9:EA:3F:F7:95:BB Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463 Certificate serial: 019B79ED63146A26A14ED57DA1CB8DD85E64 Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/kx4dGEV1WCVdxmXSMMr56j_3lbs.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34250 IP address blocks: 84.54.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:63:14:6a:26:a1:4e:d5:7d:a1:cb:8d:d8:5e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=931e1d18457558255dc665d230caf9ea3ff795bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dd:b2:21:a3:8a:16:7e:dd:19:d6:b1:da:d6: e0:ec:ba:e1:cd:e5:de:fe:bb:af:24:f9:00:e0:9a: 48:ab:2e:c2:90:cf:bc:ae:e1:f2:4f:95:98:bf:44: 29:4d:89:0f:e8:bd:4b:1b:b5:ab:ef:62:95:c4:19: 26:46:f3:76:8f:cf:65:3b:81:88:a6:d4:79:00:34: f5:91:b1:ea:2e:eb:5a:bc:d3:43:36:09:45:d2:88: 53:0d:3d:6f:0a:63:dc:64:f2:72:d6:30:5c:83:cd: da:c4:de:f9:48:d9:6e:16:f0:ef:eb:fa:ea:06:4b: 46:5f:3f:75:79:98:1d:06:37:d2:e3:d1:dc:00:9a: 30:29:73:1b:97:c5:3f:b9:c5:62:6c:26:88:02:5f: 82:45:d4:f2:62:3d:7c:25:ab:e4:70:4d:92:17:72: e2:a7:42:ad:6e:db:1f:7f:d0:23:ac:08:97:40:f3: 4e:23:3f:b1:d8:82:a5:29:69:06:e8:4b:06:21:10: d0:54:50:a4:56:ca:cf:aa:d7:bd:96:69:ae:d2:d8: 07:b0:d7:7c:c1:c7:b2:7b:94:3c:83:38:f3:59:78: 93:a8:f3:86:07:22:96:50:14:fb:fe:57:fc:89:1a: 66:03:d0:51:78:e0:14:85:9f:55:ad:15:20:28:ab: f4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1E:1D:18:45:75:58:25:5D:C6:65:D2:30:CA:F9:EA:3F:F7:95:BB X509v3 Authority Key Identifier: keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/kx4dGEV1WCVdxmXSMMr56j_3lbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.113.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:a0:b1:5f:0c:a8:0c:72:20:2b:ca:db:4c:45:8f:30:45:5d: b6:a5:d6:8b:bd:92:9b:0d:64:89:50:88:46:38:97:d9:4f:0a: 92:de:75:a2:84:ba:75:e6:8d:6b:10:73:13:55:38:9c:4c:bb: d7:0e:ea:2d:65:52:ab:42:f3:aa:fd:be:59:e7:f9:db:14:0f: 5e:9e:50:0b:14:45:28:6a:a0:93:d1:7f:f7:58:15:02:c7:1f: c7:21:c3:d4:b5:d8:79:47:24:92:34:48:ad:a6:4f:77:a9:e7: 30:b6:bb:3e:9c:94:7c:67:f7:7a:a1:a9:0d:01:82:9f:28:ef: f5:3d:2b:2d:4b:6a:aa:2c:19:c2:66:b6:18:fe:81:47:0a:35: 6b:18:fc:46:e8:9e:0f:ab:c8:63:93:f8:9a:08:74:df:94:e3: b4:7f:d4:0d:3a:83:01:e8:ad:86:8a:0d:5b:0b:e8:85:ba:7f: e9:13:c6:3b:fa:9b:96:43:9f:6d:73:ad:34:53:9b:d6:d2:b7: f4:c8:ce:42:48:4f:14:16:9e:ba:ae:21:c0:48:cd:69:2a:8f: 71:d8:b1:e6:30:52:b8:41:a9:b4:7f:ca:1c:9d:86:12:59:c2: 81:ee:3a:33:2b:0c:0a:78:7e:3d:ac:f0:3d:bb:44:eb:1c:44: c8:f0:c0:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WMUaiahTtV9ocuN2F5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNjQxNjZhOTExNzkzMDhmMjUzYTkxNzU2MTZjY2M2ODI4 YzQ0NjMwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzFlMWQxODQ1NzU1ODI1NWRjNjY1ZDIzMGNhZjllYTNmZjc5NWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt2yIaOKFn7dGdax2tbg7LrhzeXe /ruvJPkA4JpIqy7CkM+8ruHyT5WYv0QpTYkP6L1LG7Wr72KVxBkmRvN2j89lO4GI ptR5ADT1kbHqLutavNNDNglF0ohTDT1vCmPcZPJy1jBcg83axN75SNluFvDv6/rq BktGXz91eZgdBjfS49HcAJowKXMbl8U/ucVibCaIAl+CRdTyYj18JavkcE2SF3Li p0Ktbtsff9AjrAiXQPNOIz+x2IKlKWkG6EsGIRDQVFCkVsrPqte9lmmu0tgHsNd8 wceye5Q8gzjzWXiTqPOGByKWUBT7/lf8iRpmA9BReOAUhZ9VrRUgKKv0ywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJMeHRhFdVglXcZl0jDK+eo/95W7MB8GA1UdIwQY MBaAFN1kFmqRF5MI8lOpF1YWzMaCjERjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3Yzct NzRkZTI1OGE3NmY4LzEva3g0ZEdFVjFXQ1ZkeG1YU01NcjU2al8zbGJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3YzctNzRkZTI1OGE3NmY4 LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDZxMA0G CSqGSIb3DQEBCwUAA4IBAQAPoLFfDKgMciAryttMRY8wRV22pdaLvZKbDWSJUIhG OJfZTwqS3nWihLp15o1rEHMTVTicTLvXDuotZVKrQvOq/b5Z5/nbFA9enlALFEUo aqCT0X/3WBUCxx/HIcPUtdh5RySSNEitpk93qecwtrs+nJR8Z/d6oakNAYKfKO/1 PSstS2qqLBnCZrYY/oFHCjVrGPxG6J4Pq8hjk/iaCHTflOO0f9QNOoMB6K2Gig1b C+iFun/pE8Y7+puWQ59tc600U5vW0rf0yM5CSE8UFp66riHASM1pKo9x2LHmMFK4 Qam0f8ocnYYSWcKB7jozKwwKeH49rPA9u0TrHETI8MCY -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:14 2026 by rpki-client