This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/kPoE-1VY68eWf2B_-RsXSLwHlj0.roa File: kPoE-1VY68eWf2B_-RsXSLwHlj0.roa (raw, json) Hash identifier: qc4d2pBUfQw8QGZfftrrfm76ABXcN59ldL78mECZUzI= Subject key identifier: 90:FA:04:FB:55:58:EB:C7:96:7F:60:7F:F9:1B:17:48:BC:07:96:3D Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C6933DE6A2AA725283C3A02C5AE409 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/kPoE-1VY68eWf2B_-RsXSLwHlj0.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202491 IP address blocks: 84.236.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:93:3d:e6:a2:aa:72:52:83:c3:a0:2c:5a:e4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90fa04fb5558ebc7967f607ff91b1748bc07963d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:33:b3:49:57:5b:4c:de:fa:68:28:b0:0e:2e: b4:56:4c:3f:34:9b:bb:08:f2:4c:5b:5c:3d:5e:0e: 53:a1:a3:24:0a:f1:73:07:a6:b1:0e:fe:dc:de:f0: b4:b5:de:76:99:98:13:e5:1c:1c:36:b2:5c:d7:83: 9c:38:e9:b4:69:b5:16:55:6a:01:d7:b3:4f:de:80: fe:ab:7d:cf:15:31:fe:cc:84:ec:4d:79:cf:4b:2b: 2c:31:23:1a:96:8b:2b:0b:17:f9:a1:ab:da:b0:90: ea:97:8a:8c:ca:59:51:1d:0a:90:c5:20:4d:ac:10: 0b:61:31:fe:f7:b0:e6:cb:86:58:5a:0a:0c:76:5b: 94:82:db:c4:04:84:b6:06:cb:21:92:c8:3a:85:08: 02:e8:f2:10:6e:30:24:3d:f6:4c:cc:dc:fb:5b:a1: d2:37:c1:8e:36:19:c0:24:57:6a:59:4e:19:25:cc: 65:e8:45:9a:2f:94:d6:00:2d:84:da:5b:2b:58:fb: 1d:10:32:6e:a6:5e:04:e8:66:42:71:83:ee:c3:fc: 5a:8b:ca:53:ac:09:d6:70:52:f9:56:c1:5c:22:53: 3f:4e:9c:a0:c9:b8:d7:37:55:15:0f:f8:96:61:ee: 02:16:a6:fc:6c:6a:de:07:15:ff:51:ab:82:bc:92: 3a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FA:04:FB:55:58:EB:C7:96:7F:60:7F:F9:1B:17:48:BC:07:96:3D X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/kPoE-1VY68eWf2B_-RsXSLwHlj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.236.137.0/24 Signature Algorithm: sha256WithRSAEncryption 59:51:f4:4c:5f:74:54:84:21:18:14:4d:b5:03:eb:ff:69:4a: 1f:ef:36:85:81:78:d9:05:62:42:75:48:33:13:64:ef:44:a3: ad:fa:7f:00:3c:90:74:82:ed:f0:ad:bf:36:1e:37:47:e0:e3: 83:dd:98:dd:af:6f:48:6b:e8:5e:40:28:c0:98:78:15:7b:d9: 26:fa:5c:63:03:98:81:b9:ca:3e:92:d9:c5:64:27:26:7c:f9: 7e:57:d6:e9:6d:d3:7c:a4:3f:87:11:54:d8:85:33:ac:04:6f: ee:99:6a:fc:6a:70:29:7a:2f:fc:31:c3:40:38:e8:11:dc:f3: f6:5e:2a:75:96:13:9a:3a:15:db:55:47:9c:cb:ca:da:5d:ce: 6f:08:bb:d1:d0:b2:9f:9f:59:2b:21:9c:5f:fc:96:bb:8d:2d: 86:b6:27:15:c5:34:bb:83:10:23:04:64:76:15:05:c5:d2:0a: 97:3a:4c:96:6d:1f:f1:b8:36:b1:97:e1:cd:42:f5:d5:e3:09: d8:c1:15:a6:15:23:1f:63:75:a9:32:de:83:68:1d:d1:19:3e: ea:47:96:c8:97:f6:88:dd:44:c0:db:b9:ff:cc:ef:cc:1e:76: 5d:61:0a:08:4a:04:21:c7:ec:f8:7b:6e:ff:6d:d0:9b:df:5e: cc:78:e8:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpM95qKqclKDw6AsWuQJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGZhMDRmYjU1NThlYmM3OTY3ZjYwN2ZmOTFiMTc0OGJjMDc5NjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjOzSVdbTN76aCiwDi60Vkw/NJu7 CPJMW1w9Xg5ToaMkCvFzB6axDv7c3vC0td52mZgT5RwcNrJc14OcOOm0abUWVWoB 17NP3oD+q33PFTH+zITsTXnPSyssMSMalosrCxf5oavasJDql4qMyllRHQqQxSBN rBALYTH+97Dmy4ZYWgoMdluUgtvEBIS2Bsshksg6hQgC6PIQbjAkPfZMzNz7W6HS N8GONhnAJFdqWU4ZJcxl6EWaL5TWAC2E2lsrWPsdEDJupl4E6GZCcYPuw/xai8pT rAnWcFL5VsFcIlM/TpygybjXN1UVD/iWYe4CFqb8bGreBxX/UauCvJI6eQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJD6BPtVWOvHln9gf/kbF0i8B5Y9MB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEva1BvRS0xVlk2OGVXZjJCXy1Sc1hTTHdIbGowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVOyJMA0G CSqGSIb3DQEBCwUAA4IBAQBZUfRMX3RUhCEYFE21A+v/aUof7zaFgXjZBWJCdUgz E2TvRKOt+n8APJB0gu3wrb82HjdH4OOD3Zjdr29Ia+heQCjAmHgVe9km+lxjA5iB uco+ktnFZCcmfPl+V9bpbdN8pD+HEVTYhTOsBG/umWr8anApei/8McNAOOgR3PP2 Xip1lhOaOhXbVUecy8raXc5vCLvR0LKfn1krIZxf/Ja7jS2GticVxTS7gxAjBGR2 FQXF0gqXOkyWbR/xuDaxl+HNQvXV4wnYwRWmFSMfY3WpMt6DaB3RGT7qR5bIl/aI 3UTA27n/zO/MHnZdYQoISgQhx+z4e27/bdCb317MeOjs -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:16 2026 by rpki-client