This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/KVPekIBwtTvoWS8IiLuKU8fAiUI.roa File: KVPekIBwtTvoWS8IiLuKU8fAiUI.roa (raw, json) Hash identifier: 9+g9Bq8fgBmveWIVh0SbGqbsAm+bPN0oN6NyLxgE/rA= Subject key identifier: 29:53:DE:90:80:70:B5:3B:E8:59:2F:08:88:BB:8A:53:C7:C0:89:42 Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e Certificate serial: 019B7C7FF4E47B1214B3B5DDFC3A705B3E6D Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/KVPekIBwtTvoWS8IiLuKU8fAiUI.roa Signing time: Fri 02 Jan 2026 02:18:39 +0000 ROA not before: Fri 02 Jan 2026 02:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207123 IP address blocks: 45.142.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f4:e4:7b:12:14:b3:b5:dd:fc:3a:70:5b:3e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e Validity Not Before: Jan 2 02:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2953de908070b53be8592f0888bb8a53c7c08942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a0:7c:2d:9d:cc:b1:ad:09:c1:2e:e0:c2:fc: 5e:8b:cf:32:69:d1:0c:27:98:10:94:8c:21:35:0f: a7:99:cd:3f:5c:60:79:44:74:f1:a5:f2:bc:02:c7: 09:dd:14:8a:ce:ff:3f:9b:ed:8c:e4:39:57:85:2a: 4c:d0:e0:e4:50:e8:08:2e:66:16:bb:bf:1a:58:5c: 39:68:f7:e7:8b:d9:8f:66:04:0d:57:e6:6c:3c:73: b9:21:4e:3c:e6:91:c4:77:ff:75:c1:3c:dd:d1:cc: af:96:e2:c1:ee:74:10:65:c4:f5:75:88:e8:6d:75: c4:02:c8:ad:ff:43:5c:0d:b9:74:4d:c8:ea:01:ee: b3:a2:4b:b9:66:c8:dc:e0:fc:88:8b:02:dc:ec:5e: 79:56:d3:bd:9e:f7:b9:55:3e:c1:18:59:66:c0:53: 0b:ef:6a:2b:2d:ca:05:29:78:ec:32:8b:d5:4f:a0: 82:38:5c:51:fc:e0:e6:04:a4:95:dc:d5:4e:32:92: 55:dc:4f:2a:65:05:35:a4:8b:87:eb:2b:bb:73:b8: 74:36:c2:1f:db:b9:52:e6:19:f7:5c:27:ff:f6:ff: bd:c2:b9:ee:0e:ae:0e:fa:4c:0e:95:8a:48:92:a8: 6d:73:56:ec:f6:b4:cb:1e:f5:c4:a0:0a:35:86:dc: bc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:53:DE:90:80:70:B5:3B:E8:59:2F:08:88:BB:8A:53:C7:C0:89:42 X509v3 Authority Key Identifier: keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/KVPekIBwtTvoWS8IiLuKU8fAiUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.89.0/24 Signature Algorithm: sha256WithRSAEncryption 16:bd:1b:2d:ce:e6:d4:d8:5e:59:3e:28:de:33:cb:bd:61:ba: a8:8b:86:4e:44:fd:cf:65:2f:43:a2:79:89:69:6a:fc:75:47: 56:93:2f:6d:75:52:34:a0:2d:8c:64:63:88:eb:8f:1b:d0:a6: 53:44:f5:f6:53:c4:2f:ff:7a:41:2e:02:a6:91:86:ca:2d:b5: 25:5d:61:d6:16:14:53:ac:74:f9:bd:25:fc:e5:40:13:5a:45: 14:dc:3f:d0:9e:5f:24:8d:19:db:9e:97:54:d3:45:83:87:f0: 52:2e:c6:18:e9:aa:5b:05:66:42:66:ef:a2:be:98:43:b1:75: f8:c0:f2:bf:0d:05:36:40:da:5c:f7:77:24:bc:ac:33:49:32: 09:7b:b0:e0:b5:1e:f4:78:05:a8:6b:f1:6a:84:f3:08:6e:d6: 75:18:50:75:f4:2b:54:d8:ee:89:91:6a:1c:98:9b:d8:f4:be: 12:6b:f1:99:5b:e9:a0:5f:a5:a1:88:99:c5:f2:40:f2:7a:d1: 1c:86:54:20:71:d3:ee:b1:d0:f3:ce:95:3b:56:01:b6:70:43: f1:40:5f:06:c9:75:66:c6:1a:3c:e9:32:99:ca:40:ed:f4:15: 45:83:c7:a3:8a:9e:93:84:77:ca:e6:6a:3d:7a:50:11:44:82: 06:54:e4:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f/TkexIUs7Xd/DpwWz5tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDg1ODJiMDI0Mzg2M2M1NzJjZTI1Nzg2Y2NiMzZmZjc5 NWIyMmUwHhcNMjYwMTAyMDIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTUzZGU5MDgwNzBiNTNiZTg1OTJmMDg4OGJiOGE1M2M3YzA4OTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKB8LZ3Msa0JwS7gwvxei88yadEM J5gQlIwhNQ+nmc0/XGB5RHTxpfK8AscJ3RSKzv8/m+2M5DlXhSpM0ODkUOgILmYW u78aWFw5aPfni9mPZgQNV+ZsPHO5IU485pHEd/91wTzd0cyvluLB7nQQZcT1dYjo bXXEAsit/0NcDbl0TcjqAe6zoku5Zsjc4PyIiwLc7F55VtO9nve5VT7BGFlmwFML 72orLcoFKXjsMovVT6CCOFxR/ODmBKSV3NVOMpJV3E8qZQU1pIuH6yu7c7h0NsIf 27lS5hn3XCf/9v+9wrnuDq4O+kwOlYpIkqhtc1bs9rTLHvXEoAo1hty8jwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFClT3pCAcLU76FkvCIi7ilPHwIlCMB8GA1UdIwQY MBaAFN7YWCsCQ4Y8VyziV4bMs2/3lbIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3RoWUt3SkRoanhYTE9KWGhzeXpiX2VWc2k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jYTUxMGMtYjZkMS00ZWIzLThkZDEt NDk4ZjRjMTBiNjU1LzEvS1ZQZWtJQnd0VHZvV1M4SWlMdUtVOGZBaVVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jYTUxMGMtYjZkMS00ZWIzLThkZDEtNDk4ZjRjMTBiNjU1 LzEvM3RoWUt3SkRoanhYTE9KWGhzeXpiX2VWc2k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY5ZMA0G CSqGSIb3DQEBCwUAA4IBAQAWvRstzubU2F5ZPijeM8u9Ybqoi4ZORP3PZS9DonmJ aWr8dUdWky9tdVI0oC2MZGOI648b0KZTRPX2U8Qv/3pBLgKmkYbKLbUlXWHWFhRT rHT5vSX85UATWkUU3D/Qnl8kjRnbnpdU00WDh/BSLsYY6apbBWZCZu+ivphDsXX4 wPK/DQU2QNpc93ckvKwzSTIJe7DgtR70eAWoa/FqhPMIbtZ1GFB19CtU2O6JkWoc mJvY9L4Sa/GZW+mgX6WhiJnF8kDyetEchlQgcdPusdDzzpU7VgG2cEPxQF8GyXVm xho86TKZykDt9BVFg8ejip6ThHfK5mo9elARRIIGVOSF -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:41 2026 by rpki-client