This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/Kpj-186fjuAYRRYnilKKfHVGN8E.roa File: Kpj-186fjuAYRRYnilKKfHVGN8E.roa (raw, json) Hash identifier: W4eIu6BlkL603t8W8JuwGE33q4DgMOfHpuuHjrT/r2s= Subject key identifier: 2A:98:FE:D7:CE:9F:8E:E0:18:45:16:27:8A:52:8A:7C:75:46:37:C1 Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d Certificate serial: 019B7B3658FE292F581B7F935D1F7EB4F3B3 Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/Kpj-186fjuAYRRYnilKKfHVGN8E.roa Signing time: Thu 01 Jan 2026 20:18:37 +0000 ROA not before: Thu 01 Jan 2026 20:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12301 IP address blocks: 81.94.240.0/20 maxlen: 20 185.119.180.0/22 maxlen: 22 2a01:9b80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:58:fe:29:2f:58:1b:7f:93:5d:1f:7e:b4:f3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a98fed7ce9f8ee0184516278a528a7c754637c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:ec:01:48:2b:09:79:1a:3f:30:7e:c1:fa: 1e:9d:b9:69:c4:e5:38:37:25:58:73:50:d4:f2:e8: 32:ff:dd:f9:4a:a2:a0:b6:6e:e0:c0:dc:99:bf:8e: 75:3b:f7:f8:5a:05:61:2e:67:ca:56:20:8f:83:ac: cf:95:ad:bd:44:12:77:ae:21:6d:fd:5f:2d:60:b2: 27:21:91:03:66:be:d1:20:d5:61:0f:ab:25:2a:d2: 07:cf:61:d4:a4:41:3f:1f:25:c5:f7:b1:47:26:c4: 83:96:07:c4:72:c7:0f:84:00:df:77:e3:e0:6c:81: 45:3d:69:0d:7d:5d:c8:b8:22:0c:25:62:9b:9a:ec: 2e:85:7e:4f:03:08:cb:ea:8a:54:c4:7c:f9:f4:89: 07:2a:92:15:25:c5:fd:a4:2a:9e:65:cb:3a:29:23: 7d:d1:b8:83:9a:83:5c:86:bd:bb:4a:1f:15:f1:dd: 68:a0:9b:15:cb:5e:63:05:f3:46:28:dd:bd:8d:66: 7e:d5:c3:38:9e:09:63:b6:17:fd:41:b2:60:01:b5: 6f:32:cd:d2:12:5c:77:60:ab:b2:41:ed:60:ab:2f: b4:00:e4:68:af:0f:2d:3c:3e:72:ef:22:ec:6b:7f: 11:c6:da:77:6a:59:fa:19:a9:8f:37:c2:ab:d3:17: 16:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:98:FE:D7:CE:9F:8E:E0:18:45:16:27:8A:52:8A:7C:75:46:37:C1 X509v3 Authority Key Identifier: keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/Kpj-186fjuAYRRYnilKKfHVGN8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.94.240.0/20 185.119.180.0/22 IPv6: 2a01:9b80::/32 Signature Algorithm: sha256WithRSAEncryption 86:c1:85:29:e1:cd:f5:52:5a:6f:30:8b:07:6e:db:cc:a0:0e: 04:35:2c:83:d4:65:48:a6:52:ec:86:a7:02:16:c3:73:f7:d7: 20:5b:ec:b6:41:f2:9f:a8:11:6d:b5:07:15:41:db:77:9c:2c: b4:86:9b:0e:c4:ed:78:6e:ab:12:29:87:e5:46:94:c6:a7:d0: 48:7a:07:2e:70:a6:12:c4:37:6e:a1:fc:c3:02:c2:65:e6:49: 6f:b5:e1:21:90:c8:be:07:0d:c5:6a:7d:6a:d1:14:fb:66:af: 72:0f:7c:2c:39:f2:e5:3f:f8:9c:41:fa:cf:ad:5d:a2:ea:27: 6a:8f:2c:54:73:83:e9:ca:33:1c:0c:cf:02:9d:45:57:23:3e: 01:7f:be:48:de:19:e2:26:d0:2b:62:0e:4e:7f:0a:db:a5:ff: a8:d8:5b:ce:77:8c:25:f3:06:6c:eb:d3:b5:6f:4e:08:85:2a: 5e:25:1a:f7:2e:1e:2e:57:31:5f:b3:1e:15:76:3f:af:ae:37: 1f:2b:cb:c3:bf:b2:f2:ff:00:ff:14:4d:38:97:cd:e6:5b:d0: e2:4d:08:7a:43:1e:5f:48:38:a8:14:b1:e5:8f:21:a7:de:85: 92:34:93:ab:73:70:5b:0a:d6:d3:56:dc:6e:17:00:8f:ae:5f: 23:de:9f:58 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7Nlj+KS9YG3+TXR9+tPOzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlY2ExMDVjZTRhZjZjMjFjZDQyOWU5OTJkMDZlYTdkMDZk OGE1NmQwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTk4ZmVkN2NlOWY4ZWUwMTg0NTE2Mjc4YTUyOGE3Yzc1NDYzN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1HsAUgrCXkaPzB+wfoenblpxOU4 NyVYc1DU8ugy/935SqKgtm7gwNyZv451O/f4WgVhLmfKViCPg6zPla29RBJ3riFt /V8tYLInIZEDZr7RINVhD6slKtIHz2HUpEE/HyXF97FHJsSDlgfEcscPhADfd+Pg bIFFPWkNfV3IuCIMJWKbmuwuhX5PAwjL6opUxHz59IkHKpIVJcX9pCqeZcs6KSN9 0biDmoNchr27Sh8V8d1ooJsVy15jBfNGKN29jWZ+1cM4ngljthf9QbJgAbVvMs3S Elx3YKuyQe1gqy+0AORorw8tPD5y7yLsa38Rxtp3aln6GamPN8Kr0xcWHwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCqY/tfOn47gGEUWJ4pSinx1RjfBMB8GA1UdIwQY MBaAFE7KEFzkr2whzUKemS0G6n0G2KVtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgt NDZlZTBjZDdmY2JhLzEvS3BqLTE4NmZqdUFZUlJZbmlsS0tmSFZHTjhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgtNDZlZTBjZDdmY2Jh LzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUV7wAwQC uXe0MA0EAgACMAcDBQAqAZuAMA0GCSqGSIb3DQEBCwUAA4IBAQCGwYUp4c31Ulpv MIsHbtvMoA4ENSyD1GVIplLshqcCFsNz99cgW+y2QfKfqBFttQcVQdt3nCy0hpsO xO14bqsSKYflRpTGp9BIegcucKYSxDduofzDAsJl5klvteEhkMi+Bw3Fan1q0RT7 Zq9yD3wsOfLlP/icQfrPrV2i6idqjyxUc4PpyjMcDM8CnUVXIz4Bf75I3hniJtAr Yg5Ofwrbpf+o2FvOd4wl8wZs69O1b04IhSpeJRr3Lh4uVzFfsx4Vdj+vrjcfK8vD v7Ly/wD/FE04l83mW9DiTQh6Qx5fSDioFLHljyGn3oWSNJOrc3BbCtbTVtxuFwCP rl8j3p9Y -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:47 2026 by rpki-client