This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/kPNoJ23SEMgM36-Kve6SFHJ4YQc.roa File: kPNoJ23SEMgM36-Kve6SFHJ4YQc.roa (raw, json) Hash identifier: 30xbJhQ1SB3jxREvAyTeR9kTXJRiZHorpyWtjMtAYcI= Subject key identifier: 90:F3:68:27:6D:D2:10:C8:0C:DF:AF:8A:BD:EE:92:14:72:78:61:07 Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519 Certificate serial: 019B797E85CF4E0D30F963CC964E9E6B50FD Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/kPNoJ23SEMgM36-Kve6SFHJ4YQc.roa Signing time: Thu 01 Jan 2026 12:18:13 +0000 ROA not before: Thu 01 Jan 2026 12:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35590 IP address blocks: 178.239.37.0/24 maxlen: 24 178.239.38.0/24 maxlen: 24 2a09:3fc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:85:cf:4e:0d:30:f9:63:cc:96:4e:9e:6b:50:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519 Validity Not Before: Jan 1 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90f368276dd210c80cdfaf8abdee921472786107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e9:76:f6:78:cc:6d:3f:ef:39:24:7e:9c:20: e3:fa:c5:b7:a9:89:d5:3c:ff:ae:e3:2a:b5:6d:f6: 03:b6:46:09:09:cb:7b:d5:bb:7d:34:30:9b:8a:34: 04:b1:6c:e8:57:23:d8:ee:9d:d7:ab:d9:29:e7:a8: 28:3c:26:88:92:88:54:2e:86:2d:b9:c4:ce:ff:e9: dc:14:9d:6e:63:b2:f3:c7:c1:70:3b:4d:f4:19:50: 97:da:cf:ff:74:7e:cf:a7:b4:78:40:41:33:7c:c8: 4a:39:e4:11:ac:6e:d2:c3:12:41:58:48:87:fc:0c: 64:7b:af:23:64:c1:bc:40:45:75:3f:b5:5b:e8:43: 2d:58:7f:d6:cb:8d:d3:e3:13:0a:31:30:98:7b:dd: 20:8d:3e:84:56:b0:05:d2:f4:62:0e:01:67:86:ca: 85:07:38:a5:8f:1b:f9:8c:4c:dd:7f:00:15:48:9e: fe:66:51:cb:1b:71:09:d9:ae:c6:ce:8a:21:7e:f6: 55:a0:59:f9:39:57:eb:41:57:38:13:f6:e7:d2:2c: ce:a7:79:11:0a:e9:58:33:c7:fe:19:4f:4e:d2:79: 82:77:9f:9b:42:0a:8e:44:f5:84:a7:a6:f9:15:21: 31:29:ca:ef:95:cf:e2:03:8c:85:1a:4e:81:9f:b5: 06:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F3:68:27:6D:D2:10:C8:0C:DF:AF:8A:BD:EE:92:14:72:78:61:07 X509v3 Authority Key Identifier: keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/kPNoJ23SEMgM36-Kve6SFHJ4YQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.37.0-178.239.38.255 IPv6: 2a09:3fc0::/29 Signature Algorithm: sha256WithRSAEncryption 36:64:9a:8f:86:23:87:fe:35:80:02:fa:87:f5:6f:ee:8d:47: 50:b9:c6:bb:1a:8c:68:27:46:af:b8:b2:0a:8b:6d:9b:27:56: 7e:12:c1:a7:fe:08:89:f4:0b:e3:d3:5f:0d:dd:a6:5b:f2:34: 5a:0c:84:53:e3:d7:55:43:c2:d2:33:59:f6:0b:db:6b:57:20: 1e:9a:0a:be:ed:18:bc:bf:1f:68:63:57:f2:74:c1:a1:63:b2: 01:20:7c:0d:40:f2:75:88:60:e2:69:e4:61:c5:8c:ac:d6:fb: c5:73:66:dc:0e:72:76:51:dc:cd:ee:9e:91:e2:44:d2:fa:9a: f8:89:6f:fe:ae:6b:a1:c0:1a:f1:5a:6f:54:26:44:05:46:f3: fc:da:a6:86:1c:11:6f:bd:97:44:6c:b0:d5:d9:74:44:99:c3: 03:b2:8d:0f:36:68:e9:1c:50:33:d3:3e:21:de:bf:01:e9:a3: 5a:a5:b5:84:25:8d:28:b7:53:a8:7f:be:41:ea:11:c0:58:48: cb:6a:c1:82:17:a2:5f:f6:9a:a2:08:1a:4d:54:a1:bf:20:5e: 38:dc:f1:d6:5a:d0:8a:66:ed:8d:ad:ec:75:68:f1:32:a6:92: c1:53:fb:ce:a6:d9:9e:2c:6a:9b:d1:3c:0b:1e:91:d7:45:8c: 54:ae:92:5c -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5foXPTg0w+WPMlk6ea1D9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZjllMzJmZjZhZjNkNWU1ZDc3YmRiYjk4ZGEzN2QwYjhl NDQ1MTkwHhcNMjYwMTAxMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGYzNjgyNzZkZDIxMGM4MGNkZmFmOGFiZGVlOTIxNDcyNzg2MTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ol29njMbT/vOSR+nCDj+sW3qYnV PP+u4yq1bfYDtkYJCct71bt9NDCbijQEsWzoVyPY7p3Xq9kp56goPCaIkohULoYt ucTO/+ncFJ1uY7Lzx8FwO030GVCX2s//dH7Pp7R4QEEzfMhKOeQRrG7SwxJBWEiH /Axke68jZMG8QEV1P7Vb6EMtWH/Wy43T4xMKMTCYe90gjT6EVrAF0vRiDgFnhsqF Bziljxv5jEzdfwAVSJ7+ZlHLG3EJ2a7GzoohfvZVoFn5OVfrQVc4E/bn0izOp3kR CulYM8f+GU9O0nmCd5+bQgqORPWEp6b5FSExKcrvlc/iA4yFGk6Bn7UGyQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJDzaCdt0hDIDN+vir3ukhRyeGEHMB8GA1UdIwQY MBaAFEX54y/2rz1eXXe9u5jaN9C45EUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYt OGVlMGExMmEzNTliLzEva1BOb0oyM1NFTWdNMzYtS3ZlNlNGSEo0WVFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYtOGVlMGExMmEzNTli LzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBACy7yUD BACy7yYwDQQCAAIwBwMFAyoJP8AwDQYJKoZIhvcNAQELBQADggEBADZkmo+GI4f+ NYAC+of1b+6NR1C5xrsajGgnRq+4sgqLbZsnVn4Swaf+CIn0C+PTXw3dplvyNFoM hFPj11VDwtIzWfYL22tXIB6aCr7tGLy/H2hjV/J0waFjsgEgfA1A8nWIYOJp5GHF jKzW+8VzZtwOcnZR3M3unpHiRNL6mviJb/6ua6HAGvFab1QmRAVG8/zapoYcEW+9 l0RssNXZdESZwwOyjQ82aOkcUDPTPiHevwHpo1qltYQljSi3U6h/vkHqEcBYSMtq wYIXol/2mqIIGk1Uob8gXjjc8dZa0Ipm7Y2t7HVo8TKmksFT+86m2Z4sapvRPAse kddFjFSuklw= -----END CERTIFICATE-----Generated at Mon Jan 26 12:19:59 2026 by rpki-client