This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/kk41E9wK0dMNp3UzVD82jZ-Xu_A.roa File: kk41E9wK0dMNp3UzVD82jZ-Xu_A.roa (raw, json) Hash identifier: uelRjQS+f/j8WooWIB3/Gzm3JA/8BAj3iz0X2FN7kXs= Subject key identifier: 92:4E:35:13:DC:0A:D1:D3:0D:A7:75:33:54:3F:36:8D:9F:97:BB:F0 Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4 Certificate serial: 019B78A37789FD71D572A756D63DDB004527 Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/kk41E9wK0dMNp3UzVD82jZ-Xu_A.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209810 IP address blocks: 85.92.96.0/22 maxlen: 23 89.190.128.0/22 maxlen: 22 176.118.170.0/23 maxlen: 23 194.31.188.0/22 maxlen: 22 2a09:1980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:77:89:fd:71:d5:72:a7:56:d6:3d:db:00:45:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4 Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=924e3513dc0ad1d30da77533543f368d9f97bbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:7e:f4:0e:48:e6:24:bc:f4:ca:89:a0:9c: 7d:60:0e:e5:26:b2:43:80:86:4e:c0:b5:af:7d:81: 54:33:fc:37:20:b8:1f:8f:f5:b2:ca:56:8e:6b:ca: 3e:3a:06:ea:76:bf:cc:67:b8:9c:e2:7f:15:de:4c: 9a:c9:34:18:2c:56:5e:a8:20:dd:f1:30:99:cb:9b: d8:74:97:28:37:e2:c7:6f:b7:4b:f3:26:ac:03:57: 2e:20:8d:65:ad:42:d6:b9:4c:b4:ac:1d:0e:7e:d1: a0:9d:68:92:66:c8:97:3b:55:3b:13:74:c1:7c:6f: 82:43:db:bc:34:4f:9b:40:60:c3:c1:b9:67:78:70: 6b:8e:98:df:0d:36:49:93:a5:d9:14:c6:e1:9c:69: 20:61:2c:b5:6b:ed:f5:39:f8:50:56:d9:5e:0f:0a: 5f:f6:f5:d5:e3:f9:02:d8:a9:28:d7:cc:56:63:5f: 7f:36:79:e9:54:ff:b9:e5:d9:25:db:e3:b0:57:92: cf:9f:59:38:47:3e:6b:76:6f:8b:71:82:65:38:f0: c8:b5:16:b1:5a:83:8b:1e:cf:4b:34:3b:08:3b:87: fb:14:56:cd:84:2e:b7:0a:e4:65:d1:0d:31:f3:24: a7:3d:b1:c2:4c:c4:38:91:0a:1c:24:95:ce:ed:f4: 2a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4E:35:13:DC:0A:D1:D3:0D:A7:75:33:54:3F:36:8D:9F:97:BB:F0 X509v3 Authority Key Identifier: keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/kk41E9wK0dMNp3UzVD82jZ-Xu_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.92.96.0/22 89.190.128.0/22 176.118.170.0/23 194.31.188.0/22 IPv6: 2a09:1980::/29 Signature Algorithm: sha256WithRSAEncryption 10:7b:b9:ec:b6:bd:83:09:1e:56:e4:ae:50:b2:b1:8a:0e:f2: d9:cc:bd:e1:8b:cb:f8:15:24:a2:a4:ea:e3:64:31:2f:45:5d: 7f:1d:fe:d3:88:47:19:8d:f5:6f:af:e9:92:03:0a:98:38:f0: 87:2a:d0:0d:c0:02:34:90:31:7d:62:e4:5e:95:c3:3a:51:c0: c7:04:01:11:20:1c:52:b0:e0:54:13:ec:4e:fd:7d:1d:f7:0a: aa:82:59:4f:63:24:90:0a:64:6f:d3:59:58:bd:4f:5d:dd:51: a1:c5:66:04:b3:50:f8:c1:42:1d:34:56:9c:a1:78:5d:6a:4e: 98:2d:50:c0:62:65:49:c3:b4:40:d8:54:12:7c:f3:6a:f4:b8: c7:52:33:4a:0d:93:95:92:c3:33:cb:0b:9b:83:30:30:f2:f6: 66:71:fa:8a:67:09:71:d9:13:7b:f8:8a:5b:0e:98:71:27:40: 8c:2e:06:2b:0e:a2:54:80:c3:a4:71:91:72:fc:5f:54:18:99: ac:b9:69:d6:e7:fa:9c:82:e3:bc:26:98:61:76:8d:d9:e7:d4: c3:f8:28:df:75:67:3b:d1:f0:c1:04:37:c6:4c:11:3e:34:93: b4:5d:21:f5:93:49:a2:2a:35:03:ff:b8:de:14:d6:fb:a9:8f: 60:ac:23:a3 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4o3eJ/XHVcqdW1j3bAEUnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDJjMzU2MTJmNDVhZjQxMTAzNTIwYWYyNzYxY2RhYTUx ZTNhYTQwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjRlMzUxM2RjMGFkMWQzMGRhNzc1MzM1NDNmMzY4ZDlmOTdiYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VZ+9A5I5iS89MqJoJx9YA7lJrJD gIZOwLWvfYFUM/w3ILgfj/WyylaOa8o+Ogbqdr/MZ7ic4n8V3kyayTQYLFZeqCDd 8TCZy5vYdJcoN+LHb7dL8yasA1cuII1lrULWuUy0rB0OftGgnWiSZsiXO1U7E3TB fG+CQ9u8NE+bQGDDwblneHBrjpjfDTZJk6XZFMbhnGkgYSy1a+31OfhQVtleDwpf 9vXV4/kC2Kko18xWY19/NnnpVP+55dkl2+OwV5LPn1k4Rz5rdm+LcYJlOPDItRax WoOLHs9LNDsIO4f7FFbNhC63CuRl0Q0x8ySnPbHCTMQ4kQocJJXO7fQqBwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFJJONRPcCtHTDad1M1Q/No2fl7vwMB8GA1UdIwQY MBaAFF5Cw1YS9Fr0EQNSCvJ2HNqlHjqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYt ODIxMTk5NzhkNmJiLzEva2s0MUU5d0swZE1OcDNVelZEODJqWi1YdV9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYtODIxMTk5NzhkNmJi LzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCVVxgAwQC Wb6AAwQBsHaqAwQCwh+8MA0EAgACMAcDBQMqCRmAMA0GCSqGSIb3DQEBCwUAA4IB AQAQe7nstr2DCR5W5K5QsrGKDvLZzL3hi8v4FSSipOrjZDEvRV1/Hf7TiEcZjfVv r+mSAwqYOPCHKtANwAI0kDF9YuRelcM6UcDHBAERIBxSsOBUE+xO/X0d9wqqgllP YySQCmRv01lYvU9d3VGhxWYEs1D4wUIdNFacoXhdak6YLVDAYmVJw7RA2FQSfPNq 9LjHUjNKDZOVksMzywubgzAw8vZmcfqKZwlx2RN7+IpbDphxJ0CMLgYrDqJUgMOk cZFy/F9UGJmsuWnW5/qcguO8Jphhdo3Z59TD+CjfdWc70fDBBDfGTBE+NJO0XSH1 k0miKjUD/7jeFNb7qY9grCOj -----END CERTIFICATE-----Generated at Tue Jan 27 04:24:37 2026 by rpki-client