This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/KPei4pGh6l2ch2CO4YkeyV22yvw.roa File: KPei4pGh6l2ch2CO4YkeyV22yvw.roa (raw, json) Hash identifier: k1IWbcYO0kXCRKUgrnwnc4nPu4ClnarK73JxRUTod6I= Subject key identifier: 28:F7:A2:E2:91:A1:EA:5D:9C:87:60:8E:E1:89:1E:C9:5D:B6:CA:FC Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd Certificate serial: 019B7F83C441B8ADD5AD289ABB6AFB9CAFE6 Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/KPei4pGh6l2ch2CO4YkeyV22yvw.roa Signing time: Fri 02 Jan 2026 16:21:40 +0000 ROA not before: Fri 02 Jan 2026 16:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20546 IP address blocks: 193.109.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:c4:41:b8:ad:d5:ad:28:9a:bb:6a:fb:9c:af:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd Validity Not Before: Jan 2 16:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28f7a2e291a1ea5d9c87608ee1891ec95db6cafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:be:c5:9e:42:da:38:94:ec:f5:18:ff:c7: c8:26:b1:26:8e:94:4d:a0:b6:31:77:81:f9:d9:7d: f5:f6:ad:23:01:fd:29:c1:01:52:4b:3d:33:3e:a6: 20:63:f9:60:a0:c2:e6:b5:47:8c:d9:fb:ac:f6:4a: 40:e9:4f:86:53:d4:3d:0e:63:a7:e4:89:3e:44:78: 10:b9:ac:c1:46:2d:6c:d3:6a:fb:19:2f:64:49:ce: cf:a1:3e:79:fd:b7:5b:05:88:de:74:d2:9c:57:6b: 6a:33:bd:e5:9f:30:dc:b8:46:66:d6:57:a7:4a:36: 85:bc:e1:cc:4f:ab:f5:9b:8b:f1:59:e3:ca:20:64: f9:a0:11:e1:34:99:54:1b:f5:df:cf:ee:56:31:aa: 8d:cd:89:fb:41:da:2d:c7:98:24:9e:18:c2:2d:98: 41:b1:68:a2:c5:5a:ba:8d:56:19:91:17:4f:4d:eb: fa:7a:7d:96:4f:db:29:26:8f:77:b0:e7:2a:da:3b: fc:23:1a:e7:47:35:36:2e:b8:19:1f:9c:48:b6:62: 93:95:f5:ca:07:52:5a:31:72:ef:a7:5d:1f:18:09: 06:ff:10:89:73:5b:9a:57:47:39:aa:ce:fa:ff:5f: 98:7b:d4:59:23:37:86:f8:d5:38:44:28:dd:91:05: fe:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F7:A2:E2:91:A1:EA:5D:9C:87:60:8E:E1:89:1E:C9:5D:B6:CA:FC X509v3 Authority Key Identifier: keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/KPei4pGh6l2ch2CO4YkeyV22yvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.231.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:6f:ac:44:cc:f4:f4:26:3d:a6:12:5b:e1:9e:36:d5:c3:ab: 4f:46:01:47:4a:8d:dc:69:62:e7:ca:5f:4d:40:a8:1d:28:a0: dc:d4:14:55:c0:ab:18:42:4d:d5:13:29:1c:38:ec:4f:e0:57: 9a:38:5f:5b:ad:c8:dc:7f:16:4b:47:46:9c:17:cc:06:39:74: 85:fc:5f:85:f7:f1:70:4f:d7:f3:f3:ed:95:3f:b7:17:51:33: 51:7b:8e:9d:87:6c:cf:36:4f:3e:ed:ff:a8:71:37:fa:49:10: d9:6e:4e:77:a1:59:b8:66:ed:ee:be:78:9b:fa:1b:ea:ea:e9: 42:c0:f6:9c:6e:5d:1d:8d:04:27:e2:7a:70:8e:fa:7f:3f:f1: e3:2a:a1:c2:c9:94:29:e3:89:ab:53:3b:e7:9e:06:f0:38:ca: 20:6e:e6:82:a0:4f:c4:71:b4:fc:52:27:f6:0b:34:e4:ff:68: f9:1c:24:16:bf:33:7d:3c:09:9a:5e:65:0d:33:1a:65:eb:29: 9c:a9:01:a1:79:b0:76:0b:12:1e:2e:41:b1:b7:2c:7f:18:1b: c1:d8:b8:82:b7:66:23:16:d7:06:87:bd:87:d8:11:6b:a0:8e: 4b:1b:fc:85:af:5d:26:22:a3:74:6b:35:7f:d9:6c:00:48:2a: 09:dc:6d:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g8RBuK3VrSiau2r7nK/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Y2UwNmI0NGQ4ZGM0M2RjNzQyYzQwZGUzYmRhOGFhMzc0 NGUyYmQwHhcNMjYwMTAyMTYyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGY3YTJlMjkxYTFlYTVkOWM4NzYwOGVlMTg5MWVjOTVkYjZjYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6m+xZ5C2jiU7PUY/8fIJrEmjpRN oLYxd4H52X319q0jAf0pwQFSSz0zPqYgY/lgoMLmtUeM2fus9kpA6U+GU9Q9DmOn 5Ik+RHgQuazBRi1s02r7GS9kSc7PoT55/bdbBYjedNKcV2tqM73lnzDcuEZm1len SjaFvOHMT6v1m4vxWePKIGT5oBHhNJlUG/Xfz+5WMaqNzYn7Qdotx5gknhjCLZhB sWiixVq6jVYZkRdPTev6en2WT9spJo93sOcq2jv8IxrnRzU2LrgZH5xItmKTlfXK B1JaMXLvp10fGAkG/xCJc1uaV0c5qs76/1+Ye9RZIzeG+NU4RCjdkQX+WwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCj3ouKRoepdnIdgjuGJHsldtsr8MB8GA1UdIwQY MBaAFBXOBrRNjcQ9x0LEDeO9qKo3ROK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YmQ5MjctYjUwNy00MzYzLTlhZGEt ZGVlNDMxN2Y1YjE0LzEvS1BlaTRwR2g2bDJjaDJDTzRZa2V5VjIyeXZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83YmQ5MjctYjUwNy00MzYzLTlhZGEtZGVlNDMxN2Y1YjE0 LzEvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW3nMA0G CSqGSIb3DQEBCwUAA4IBAQB7b6xEzPT0Jj2mElvhnjbVw6tPRgFHSo3caWLnyl9N QKgdKKDc1BRVwKsYQk3VEykcOOxP4FeaOF9brcjcfxZLR0acF8wGOXSF/F+F9/Fw T9fz8+2VP7cXUTNRe46dh2zPNk8+7f+ocTf6SRDZbk53oVm4Zu3uvnib+hvq6ulC wPacbl0djQQn4npwjvp/P/HjKqHCyZQp44mrUzvnngbwOMogbuaCoE/EcbT8Uif2 CzTk/2j5HCQWvzN9PAmaXmUNMxpl6ymcqQGhebB2CxIeLkGxtyx/GBvB2LiCt2Yj FtcGh72H2BFroI5LG/yFr10mIqN0azV/2WwASCoJ3G2M -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:47 2026 by rpki-client