This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/Kdv421FxArGX_lR7dnoK8dbBkd8.roa File: Kdv421FxArGX_lR7dnoK8dbBkd8.roa (raw, json) Hash identifier: QF5wI0hLNiGqV5YB/2mk9biUU4gFL01FMlpDcSvN+Dk= Subject key identifier: 29:DB:F8:DB:51:71:02:B1:97:FE:54:7B:76:7A:0A:F1:D6:C1:91:DF Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233 Certificate serial: 019B7DCAECAC41F6688FCA47464472277E26 Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/Kdv421FxArGX_lR7dnoK8dbBkd8.roa Signing time: Fri 02 Jan 2026 08:20:09 +0000 ROA not before: Fri 02 Jan 2026 08:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16015 IP address blocks: 95.171.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ec:ac:41:f6:68:8f:ca:47:46:44:72:27:7e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233 Validity Not Before: Jan 2 08:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29dbf8db517102b197fe547b767a0af1d6c191df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:98:74:c5:35:48:70:20:cd:f7:55:b8:4e:97: 47:df:8b:4c:11:31:3c:f3:52:4c:9d:5e:16:8b:05: 74:df:a8:06:55:36:ff:d5:80:8a:ec:4c:53:8d:f5: 5f:11:6a:b9:7f:5a:05:eb:b6:b2:25:92:bd:00:7f: 84:f0:e0:42:b7:f0:23:03:47:2b:67:2f:2c:35:a2: a2:6d:9c:1c:88:53:eb:a2:7e:c4:a8:b1:b4:1e:cc: 2a:56:29:5a:65:5c:31:cd:1c:81:20:3e:37:77:86: 05:25:e6:f0:d8:dc:f2:32:55:35:ce:da:9a:91:19: 23:b8:43:fb:6d:59:a3:dc:55:cc:53:02:67:89:17: f8:45:7f:a5:74:1c:3f:54:38:57:72:79:35:cf:d9: 5b:a5:f4:c5:9f:0b:7b:10:60:20:b1:e5:9b:59:91: 84:21:5e:c3:ea:4d:33:fe:a3:1f:09:3d:f6:ba:41: 4a:97:4a:4c:48:c9:4b:8c:be:33:23:46:ab:1f:5a: cc:c3:19:5b:17:22:fd:2f:11:65:09:fb:8b:ce:e0: 51:ce:4a:97:d1:0d:69:e0:ca:28:a3:39:ce:c2:99: ba:95:97:09:3c:19:b8:2a:fb:99:9b:7c:cc:66:9b: 20:5e:86:d8:1b:29:22:2c:36:69:d5:bf:94:56:3b: f1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DB:F8:DB:51:71:02:B1:97:FE:54:7B:76:7A:0A:F1:D6:C1:91:DF X509v3 Authority Key Identifier: keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/Kdv421FxArGX_lR7dnoK8dbBkd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.171.76.0/24 Signature Algorithm: sha256WithRSAEncryption 23:29:16:31:26:e7:e8:1e:84:83:d4:d6:00:32:1c:6b:bd:23: e1:63:c9:9b:e9:0a:1b:48:20:1b:6a:00:55:c3:b0:a7:86:16: 49:47:f9:35:91:7e:67:69:d2:f5:06:6e:5a:e1:70:45:91:7a: 8f:77:62:0d:c0:01:ef:cc:0a:49:00:be:9d:95:48:48:45:d5: 4f:a8:af:5e:e6:bb:a2:0f:c4:cb:52:e1:ff:ad:6d:fe:16:ca: 70:62:c8:b9:81:1c:89:3e:27:f2:8c:a6:e9:a8:7d:c5:4d:27: b3:bd:fa:3e:5a:32:4e:9f:81:60:15:39:29:f0:e5:7c:d9:a2: 53:1e:d3:97:58:cb:a9:b6:87:61:8e:1d:b2:7a:35:17:c4:32: b3:ff:79:4d:d0:67:c2:d7:bd:c1:c7:be:be:84:8a:4e:6a:b7: 0f:10:c6:e3:fc:86:d8:12:74:fc:7a:40:b3:5b:f3:be:75:11: 60:2e:00:d4:85:3c:aa:45:e8:5b:e0:66:9d:8a:6f:9f:da:99: 9c:fe:11:20:19:f5:fe:55:3b:43:89:b0:7d:62:2e:73:81:b1: a3:bd:c8:03:36:44:1a:1e:ee:77:9b:0d:7e:0f:2c:f6:c5:63: 09:6c:5a:57:f2:57:fe:d7:3a:a7:fe:a4:cf:8f:b1:39:55:88: c7:45:cb:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yuysQfZoj8pHRkRyJ34mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzYxMDMzNDRmY2QzYjU3NTlmMmRiM2YzYzcwNzEzNzZm OWUyMzMwHhcNMjYwMTAyMDgyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWRiZjhkYjUxNzEwMmIxOTdmZTU0N2I3NjdhMGFmMWQ2YzE5MWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ph0xTVIcCDN91W4TpdH34tMETE8 81JMnV4WiwV036gGVTb/1YCK7ExTjfVfEWq5f1oF67ayJZK9AH+E8OBCt/AjA0cr Zy8sNaKibZwciFPron7EqLG0HswqVilaZVwxzRyBID43d4YFJebw2NzyMlU1ztqa kRkjuEP7bVmj3FXMUwJniRf4RX+ldBw/VDhXcnk1z9lbpfTFnwt7EGAgseWbWZGE IV7D6k0z/qMfCT32ukFKl0pMSMlLjL4zI0arH1rMwxlbFyL9LxFlCfuLzuBRzkqX 0Q1p4MoooznOwpm6lZcJPBm4KvuZm3zMZpsgXobYGykiLDZp1b+UVjvxOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCnb+NtRcQKxl/5Ue3Z6CvHWwZHfMB8GA1UdIwQY MBaAFE82EDNE/NO1dZ8ts/PHBxN2+eIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUt MGFjYzg5MmIxMWQyLzEvS2R2NDIxRnhBckdYX2xSN2Rub0s4ZGJCa2Q4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUtMGFjYzg5MmIxMWQy LzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6tMMA0G CSqGSIb3DQEBCwUAA4IBAQAjKRYxJufoHoSD1NYAMhxrvSPhY8mb6QobSCAbagBV w7CnhhZJR/k1kX5nadL1Bm5a4XBFkXqPd2INwAHvzApJAL6dlUhIRdVPqK9e5rui D8TLUuH/rW3+FspwYsi5gRyJPifyjKbpqH3FTSezvfo+WjJOn4FgFTkp8OV82aJT HtOXWMuptodhjh2yejUXxDKz/3lN0GfC173Bx76+hIpOarcPEMbj/IbYEnT8ekCz W/O+dRFgLgDUhTyqRehb4Gadim+f2pmc/hEgGfX+VTtDibB9Yi5zgbGjvcgDNkQa Hu53mw1+Dyz2xWMJbFpX8lf+1zqn/qTPj7E5VYjHRctS -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:53 2026 by rpki-client