This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/kekcgSv-eDONMe6ZG8p99c62CHY.roa File: kekcgSv-eDONMe6ZG8p99c62CHY.roa (raw, json) Hash identifier: YXzQs9p+P9jRTPWs0pwKa3KkCYRND2jAcNEa4dtHmUE= Subject key identifier: 91:E9:1C:81:2B:FE:78:33:8D:31:EE:99:1B:CA:7D:F5:CE:B6:08:76 Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2 Certificate serial: 019B7C7FF55AB26350B6C135E6454B973048 Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/kekcgSv-eDONMe6ZG8p99c62CHY.roa Signing time: Fri 02 Jan 2026 02:18:39 +0000 ROA not before: Fri 02 Jan 2026 02:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51101 IP address blocks: 91.237.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f5:5a:b2:63:50:b6:c1:35:e6:45:4b:97:30:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2 Validity Not Before: Jan 2 02:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91e91c812bfe78338d31ee991bca7df5ceb60876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c7:49:61:87:69:b5:6b:b9:e9:63:f7:60:ae: a1:0a:95:1b:b4:63:90:b3:2c:08:d7:bb:8f:fc:db: 5a:cb:71:88:d7:5f:8c:d1:1b:10:03:5e:ef:ff:e6: c2:39:17:a7:bf:bf:99:4a:a3:56:38:dc:a8:4a:73: 25:f8:ee:6c:4e:cb:d5:31:40:bf:c1:7f:6a:d1:b1: ed:3c:19:b4:9d:e9:15:b2:2c:69:83:9c:4f:b6:eb: 09:7e:07:a3:3c:37:f0:cb:94:70:a1:51:66:b1:fb: 92:66:f4:16:85:90:ee:4e:26:5b:08:78:4a:58:91: 69:4a:cd:53:ce:b6:26:56:9d:ac:e8:e0:94:b8:1a: 36:fe:80:d8:c1:fb:e7:d3:6d:55:9c:1b:aa:5b:b8: e6:54:2f:85:71:1a:81:10:b8:65:63:6a:61:a9:02: 7d:3b:02:b0:7c:37:40:ec:a3:98:8e:21:72:5e:65: 4f:0e:b7:24:a8:ca:44:f6:bc:13:f0:75:6f:dc:67: 6f:ca:85:11:93:9a:60:02:ee:b7:5d:6f:6d:8d:b4: 74:96:df:59:85:f9:47:f6:99:b8:ba:db:57:9c:25: 80:3a:fa:86:a4:07:c6:95:33:74:c6:ef:79:8c:e6: 44:d4:55:46:29:27:f7:5e:15:2a:30:a6:a7:7f:76: ca:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E9:1C:81:2B:FE:78:33:8D:31:EE:99:1B:CA:7D:F5:CE:B6:08:76 X509v3 Authority Key Identifier: keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/kekcgSv-eDONMe6ZG8p99c62CHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.72.0/23 Signature Algorithm: sha256WithRSAEncryption 78:24:80:a3:4f:c3:1e:64:6f:bd:e1:1f:9a:3e:ab:09:68:c7: 45:be:5c:f6:88:82:0a:7b:03:69:40:c0:4c:11:9e:54:25:68: c1:54:57:87:2f:a3:cc:23:1f:e1:cc:8b:d3:98:ce:d3:16:48: 5c:28:90:5e:b8:ef:fc:08:c9:ac:6d:3a:36:fd:a6:b1:94:ef: 03:e4:e7:af:64:d9:0e:bd:92:ae:19:02:d5:96:a0:43:55:de: ff:d5:5c:53:cc:95:86:cb:5c:ab:49:04:8f:30:50:89:17:8f: dd:8d:c6:c7:c3:15:3b:b9:e8:e8:b1:cb:13:44:e0:30:49:b8: 14:07:e1:31:dc:e5:57:d0:10:1b:47:43:33:c1:08:b1:a1:23: 5c:cf:1c:e6:c0:a2:9c:12:18:a3:71:82:97:0f:33:10:2c:5c: e0:be:91:35:7e:8e:b9:c7:8a:6a:83:26:f7:d6:2a:07:ff:68: 0b:49:aa:7c:10:86:c0:31:73:14:bd:d6:cb:e1:26:8a:42:0b: 89:95:bc:e3:a9:00:48:4d:dc:4f:34:bf:0b:96:11:fe:d5:93: d8:4b:25:a6:f5:1e:3c:d1:c0:d2:cd:c5:51:18:7c:65:f6:07: bb:04:09:9a:ce:b4:1d:e3:57:47:fa:80:9c:62:8f:fe:5d:0a: 3e:8e:42:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f/VasmNQtsE15kVLlzBIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWVlY2FiOTU3MGNmMGFmZmE4MWJlNzQ4ZTkxMjhmNTVl NDE2YzIwHhcNMjYwMTAyMDIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWU5MWM4MTJiZmU3ODMzOGQzMWVlOTkxYmNhN2RmNWNlYjYwODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMdJYYdptWu56WP3YK6hCpUbtGOQ sywI17uP/Ntay3GI11+M0RsQA17v/+bCORenv7+ZSqNWONyoSnMl+O5sTsvVMUC/ wX9q0bHtPBm0nekVsixpg5xPtusJfgejPDfwy5RwoVFmsfuSZvQWhZDuTiZbCHhK WJFpSs1TzrYmVp2s6OCUuBo2/oDYwfvn021VnBuqW7jmVC+FcRqBELhlY2phqQJ9 OwKwfDdA7KOYjiFyXmVPDrckqMpE9rwT8HVv3GdvyoURk5pgAu63XW9tjbR0lt9Z hflH9pm4uttXnCWAOvqGpAfGlTN0xu95jOZE1FVGKSf3XhUqMKanf3bKTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJHpHIEr/ngzjTHumRvKffXOtgh2MB8GA1UdIwQY MBaAFDRe7KuVcM8K/6gb50jpEo9V5BbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDct ZTcyZmE1NTMxZDQ1LzEva2VrY2dTdi1lRE9OTWU2Wkc4cDk5YzYyQ0hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDctZTcyZmE1NTMxZDQ1 LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+1IMA0G CSqGSIb3DQEBCwUAA4IBAQB4JICjT8MeZG+94R+aPqsJaMdFvlz2iIIKewNpQMBM EZ5UJWjBVFeHL6PMIx/hzIvTmM7TFkhcKJBeuO/8CMmsbTo2/aaxlO8D5OevZNkO vZKuGQLVlqBDVd7/1VxTzJWGy1yrSQSPMFCJF4/djcbHwxU7uejoscsTROAwSbgU B+Ex3OVX0BAbR0MzwQixoSNczxzmwKKcEhijcYKXDzMQLFzgvpE1fo65x4pqgyb3 1ioH/2gLSap8EIbAMXMUvdbL4SaKQguJlbzjqQBITdxPNL8LlhH+1ZPYSyWm9R48 0cDSzcVRGHxl9ge7BAmazrQd41dH+oCcYo/+XQo+jkJm -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:29 2026 by rpki-client