This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/k-n-GsyO_mTiSOIm9lqOkgAu5vY.roa File: k-n-GsyO_mTiSOIm9lqOkgAu5vY.roa (raw, json) Hash identifier: aSisbBGKGDSpf9RAMhdJyBBfMRoEL1qRhRNnn4HHPHs= Subject key identifier: 93:E9:FE:1A:CC:8E:FE:64:E2:48:E2:26:F6:5A:8E:92:00:2E:E6:F6 Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F84653A69B8502CE3741ECF67F53982 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/k-n-GsyO_mTiSOIm9lqOkgAu5vY.roa Signing time: Fri 02 Jan 2026 16:22:21 +0000 ROA not before: Fri 02 Jan 2026 16:22:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51557 IP address blocks: 84.51.21.0/24 maxlen: 24 84.51.25.0/24 maxlen: 24 84.51.38.0/24 maxlen: 24 91.93.146.0/24 maxlen: 24 91.93.149.0/24 maxlen: 24 91.93.151.0/24 maxlen: 24 91.93.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:65:3a:69:b8:50:2c:e3:74:1e:cf:67:f5:39:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93e9fe1acc8efe64e248e226f65a8e92002ee6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2f:a4:fb:18:06:1f:84:a2:77:b6:e5:1d:ad: 50:2c:e2:8b:2c:b4:95:00:c3:b1:e1:24:da:b0:10: 8d:cc:57:58:3c:44:2b:f8:b0:03:cc:f3:ba:b1:0e: 13:09:e4:c5:ab:e6:fc:42:a6:a6:9e:6a:a1:ec:2c: 51:e7:af:1b:2d:fc:ff:b6:b2:83:bd:12:e0:64:83: 3c:8e:d9:ad:8f:e2:32:b0:35:0c:bf:79:01:a5:1b: 69:dd:b9:65:a8:b5:94:69:3f:10:76:f5:69:fd:fa: 7f:6d:55:a1:2a:65:98:56:da:2f:50:9b:cd:1a:60: f6:52:92:aa:88:e2:e5:35:70:4b:7d:40:0d:a3:e8: 93:0d:59:6d:03:30:31:cb:a2:85:69:e8:eb:fa:56: 2f:46:4a:84:7c:ae:2a:d4:df:2a:2a:cd:6b:dc:c7: 6d:e6:e3:cd:6d:a6:ed:e4:06:e2:74:58:ac:b3:e1: e5:4e:e4:29:bc:eb:4e:5d:7c:2f:8b:d3:c7:ae:d1: cf:44:87:30:c1:8a:48:24:0a:1c:13:35:2a:79:2d: f3:98:7f:53:70:9c:a6:b5:5b:ed:92:4e:df:17:66: 33:c6:34:47:c9:b8:03:19:3b:44:dd:64:10:a1:8b: 1e:4c:f5:22:79:45:04:98:11:f6:c5:02:ec:36:17: d9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E9:FE:1A:CC:8E:FE:64:E2:48:E2:26:F6:5A:8E:92:00:2E:E6:F6 X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/k-n-GsyO_mTiSOIm9lqOkgAu5vY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.51.21.0/24 84.51.25.0/24 84.51.38.0/24 91.93.146.0/24 91.93.149.0/24 91.93.151.0-91.93.152.255 Signature Algorithm: sha256WithRSAEncryption 1d:cd:25:f7:f9:d4:5b:05:4c:04:e0:9a:95:e6:f9:fc:4e:6a: 87:ad:7e:78:ab:d5:97:90:b6:79:91:a3:d9:0a:6a:c7:2a:f8: a7:c8:3f:e9:40:8e:1f:e3:7a:eb:a4:5a:57:58:ec:4d:ff:af: 06:e7:b0:03:c8:11:b1:1e:9e:a1:e8:c7:74:dd:09:f5:2f:f9: 23:d9:ad:bf:10:fe:75:11:5e:06:5b:01:15:91:b4:00:c3:e8: 7d:3d:90:53:68:60:3f:17:32:75:38:4c:f0:f3:81:78:6c:91: cb:ad:43:75:ce:10:03:24:97:4e:ca:ed:7d:83:e4:96:b6:7f: a3:18:1c:0e:b8:4a:44:54:9a:43:8a:aa:6c:7c:a3:35:07:10: fd:89:3e:b7:00:da:b1:52:3f:18:da:23:af:e0:19:af:af:1b: a0:6b:6f:cc:9d:99:7f:b8:92:b0:b0:50:67:55:00:f7:f2:21: 8f:90:a8:2d:80:d9:02:d4:b6:e2:aa:99:f0:41:6e:e7:d1:ba: 60:11:87:3a:5a:e2:1a:79:18:8f:64:c2:a6:ed:b9:e2:67:e6: e7:67:3b:b0:60:24:16:14:9d:a7:45:18:72:af:ac:c1:f3:73: 0e:ae:fa:9d:95:08:8f:0d:0e:b0:b2:1b:7a:32:e7:cf:6b:2c: 99:4c:75:14 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt/hGU6abhQLON0Hs9n9TmCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2U5ZmUxYWNjOGVmZTY0ZTI0OGUyMjZmNjVhOGU5MjAwMmVlNmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi+k+xgGH4Sid7blHa1QLOKLLLSV AMOx4STasBCNzFdYPEQr+LADzPO6sQ4TCeTFq+b8Qqamnmqh7CxR568bLfz/trKD vRLgZIM8jtmtj+IysDUMv3kBpRtp3bllqLWUaT8QdvVp/fp/bVWhKmWYVtovUJvN GmD2UpKqiOLlNXBLfUANo+iTDVltAzAxy6KFaejr+lYvRkqEfK4q1N8qKs1r3Mdt 5uPNbabt5AbidFiss+HlTuQpvOtOXXwvi9PHrtHPRIcwwYpIJAocEzUqeS3zmH9T cJymtVvtkk7fF2YzxjRHybgDGTtE3WQQoYseTPUieUUEmBH2xQLsNhfZjQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFJPp/hrMjv5k4kjiJvZajpIALub2MB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvay1uLUdzeU9fbVRpU09JbTlscU9rZ0F1NXZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAVDMVAwQA VDMZAwQAVDMmAwQAW12SAwQAW12VMAwDBABbXZcDBABbXZgwDQYJKoZIhvcNAQEL BQADggEBAB3NJff51FsFTATgmpXm+fxOaoetfnir1ZeQtnmRo9kKascq+KfIP+lA jh/jeuukWldY7E3/rwbnsAPIEbEenqHox3TdCfUv+SPZrb8Q/nURXgZbARWRtADD 6H09kFNoYD8XMnU4TPDzgXhskcutQ3XOEAMkl07K7X2D5Ja2f6MYHA64SkRUmkOK qmx8ozUHEP2JPrcA2rFSPxjaI6/gGa+vG6Brb8ydmX+4krCwUGdVAPfyIY+QqC2A 2QLUtuKqmfBBbufRumARhzpa4hp5GI9kwqbtueJn5udnO7BgJBYUnadFGHKvrMHz cw6u+p2VCI8NDrCyG3oy589rLJlMdRQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:50:04 2026 by rpki-client