This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/kPXbHwmFeaUgl0gADFGcVtXfM54.roa File: kPXbHwmFeaUgl0gADFGcVtXfM54.roa (raw, json) Hash identifier: PFLTi3V9mE8UoiZOrhozT0x6k7lKbzmX0yMq70JlctI= Subject key identifier: 90:F5:DB:1F:09:85:79:A5:20:97:48:00:0C:51:9C:56:D5:DF:33:9E Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a Certificate serial: 019B7AC7B5C14F0CCF790B9AD47528D40621 Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/kPXbHwmFeaUgl0gADFGcVtXfM54.roa Signing time: Thu 01 Jan 2026 18:17:47 +0000 ROA not before: Thu 01 Jan 2026 18:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12552 IP address blocks: 45.92.12.0/24 maxlen: 24 45.92.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b5:c1:4f:0c:cf:79:0b:9a:d4:75:28:d4:06:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a Validity Not Before: Jan 1 18:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90f5db1f098579a5209748000c519c56d5df339e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:13:66:08:b4:e3:59:cc:6d:4c:e3:84:49:d2: 57:00:9d:00:ef:95:03:c9:b1:18:9f:64:52:d2:3e: a2:ef:31:7e:22:da:0d:69:c7:1d:08:27:d3:dd:e3: 8a:29:d3:27:5e:e1:c2:68:d5:ac:72:73:fb:e3:b1: 8d:bf:5f:e8:30:79:ae:85:8b:0f:30:08:26:04:75: 65:c9:12:9c:42:d4:17:c4:fa:81:98:a2:de:68:76: 1b:e9:2b:eb:a9:dd:aa:1a:25:69:cb:3f:9d:9b:8a: 98:1d:6a:c7:e8:06:45:4f:8c:d4:84:81:1b:87:6f: 82:f4:87:49:e5:38:58:3a:d5:3a:24:51:20:dd:45: 0b:9c:d0:a7:04:8a:88:8a:cd:1b:9c:6c:83:4a:24: d9:94:0d:56:7f:3d:e4:83:3b:9e:1b:e2:a1:e7:5c: 49:ec:89:19:bb:b9:71:f8:d5:44:ef:69:3b:e2:db: 82:82:12:ed:e2:49:98:1f:51:5a:08:8a:b1:a7:d4: d1:2b:e3:20:ea:3c:e6:42:df:92:02:50:0e:03:00: 9b:13:cc:d2:48:c1:81:c7:68:9d:b4:c9:e1:35:52: 13:41:e1:4f:8c:1d:b8:e1:09:57:3b:1f:99:ee:23: cf:05:76:ab:b9:51:be:ae:a2:32:d2:5c:eb:17:af: 2a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F5:DB:1F:09:85:79:A5:20:97:48:00:0C:51:9C:56:D5:DF:33:9E X509v3 Authority Key Identifier: keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/kPXbHwmFeaUgl0gADFGcVtXfM54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.12.0/23 Signature Algorithm: sha256WithRSAEncryption 48:c8:ea:d6:c8:79:d7:8b:00:f0:65:50:ff:4a:3f:4c:e7:18: 0d:56:ff:9f:2f:e1:2b:c0:8d:ff:cf:f5:c9:2f:5b:38:85:97: 58:f2:e7:a3:3f:59:2f:94:ca:fa:3c:21:73:f0:da:fd:bb:8e: 8a:fc:65:79:00:39:04:57:5a:3d:5e:95:24:d9:7a:17:ab:98: 62:72:f9:52:8d:3e:00:72:5e:49:88:29:89:64:f0:4a:b3:c3: 54:5e:59:6f:95:c9:b6:36:b1:60:1b:58:f7:40:92:ac:48:7a: 11:2a:d7:4a:d3:b2:8a:34:5b:96:92:91:e1:8d:b0:d7:9c:07: be:5d:bc:d4:b8:1a:1d:aa:53:37:1c:9d:af:ea:b7:db:83:d8: 5e:db:d0:fb:bd:98:46:3c:66:50:9f:86:bd:06:0c:57:7c:d7: 35:f5:73:22:12:a3:b7:a4:d4:be:e5:84:4f:31:4d:fb:75:3b: d1:b7:03:aa:da:30:2a:c4:a4:e2:5d:3a:ca:67:51:f9:9a:74: b7:96:3f:4c:0c:7d:cd:96:89:81:59:09:5c:6a:09:9a:b0:33: 15:f4:d2:3b:bd:c5:de:82:41:1f:35:fb:e6:e4:fd:b1:29:7b: c1:33:09:36:2c:14:21:67:bb:36:a2:88:9d:bf:ec:48:bd:be: 57:f5:43:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x7XBTwzPeQua1HUo1AYhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNGVkYmQxOTYzNGNiYjkxYTBkMmRhZmQ3NTlkNGM5YTdl NzdiN2EwHhcNMjYwMTAxMTgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGY1ZGIxZjA5ODU3OWE1MjA5NzQ4MDAwYzUxOWM1NmQ1ZGYzMzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BNmCLTjWcxtTOOESdJXAJ0A75UD ybEYn2RS0j6i7zF+ItoNaccdCCfT3eOKKdMnXuHCaNWscnP747GNv1/oMHmuhYsP MAgmBHVlyRKcQtQXxPqBmKLeaHYb6Svrqd2qGiVpyz+dm4qYHWrH6AZFT4zUhIEb h2+C9IdJ5ThYOtU6JFEg3UULnNCnBIqIis0bnGyDSiTZlA1Wfz3kgzueG+Kh51xJ 7IkZu7lx+NVE72k74tuCghLt4kmYH1FaCIqxp9TRK+Mg6jzmQt+SAlAOAwCbE8zS SMGBx2idtMnhNVITQeFPjB244QlXOx+Z7iPPBXaruVG+rqIy0lzrF68qZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJD12x8JhXmlIJdIAAxRnFbV3zOeMB8GA1UdIwQY MBaAFIFO29GWNMu5Gg0tr9dZ1Mmn53t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMt YzA4OTk3YTdhMDhmLzEva1BYYkh3bUZlYVVnbDBnQURGR2NWdFhmTTU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMtYzA4OTk3YTdhMDhm LzEvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVwMMA0G CSqGSIb3DQEBCwUAA4IBAQBIyOrWyHnXiwDwZVD/Sj9M5xgNVv+fL+ErwI3/z/XJ L1s4hZdY8uejP1kvlMr6PCFz8Nr9u46K/GV5ADkEV1o9XpUk2XoXq5hicvlSjT4A cl5JiCmJZPBKs8NUXllvlcm2NrFgG1j3QJKsSHoRKtdK07KKNFuWkpHhjbDXnAe+ XbzUuBodqlM3HJ2v6rfbg9he29D7vZhGPGZQn4a9BgxXfNc19XMiEqO3pNS+5YRP MU37dTvRtwOq2jAqxKTiXTrKZ1H5mnS3lj9MDH3NlomBWQlcagmasDMV9NI7vcXe gkEfNfvm5P2xKXvBMwk2LBQhZ7s2ooidv+xIvb5X9UPV -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:59 2026 by rpki-client