This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/kV7e10saaQPCoLh5QTcySIvp4uc.roa File: kV7e10saaQPCoLh5QTcySIvp4uc.roa (raw, json) Hash identifier: pBHqxDVhP26N4thi6/YK8++Q0cIyG7tLenTDlDflfVQ= Subject key identifier: 91:5E:DE:D7:4B:1A:69:03:C2:A0:B8:79:41:37:32:48:8B:E9:E2:E7 Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F8472294A1F3FA99F66AEA92AE94803 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/kV7e10saaQPCoLh5QTcySIvp4uc.roa Signing time: Fri 02 Jan 2026 16:22:24 +0000 ROA not before: Fri 02 Jan 2026 16:22:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203925 IP address blocks: 213.14.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:72:29:4a:1f:3f:a9:9f:66:ae:a9:2a:e9:48:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=915eded74b1a6903c2a0b879413732488be9e2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f6:a2:98:73:a3:8a:d1:95:4f:86:9f:5a:34: 25:33:02:4f:89:55:47:9b:04:bc:58:b5:de:e2:f9: cd:cd:db:32:51:82:5c:50:ba:86:47:8e:d9:14:4d: cb:fb:f8:30:ce:d1:8b:65:27:b2:61:78:78:92:43: c1:86:66:c6:b1:2c:59:27:4b:65:23:83:76:89:32: c2:c6:96:b6:c4:45:6c:1b:db:de:3c:db:71:9e:8e: 93:01:98:ab:23:48:17:f3:5c:67:9e:53:5c:48:28: 7b:c1:1b:12:1b:4e:6f:87:f2:ed:bd:65:75:37:c2: f5:c1:ae:10:3d:da:c4:16:3c:ef:2b:ac:7e:68:c7: 9d:b5:0f:67:c4:5d:68:f9:40:87:02:85:1c:3a:9a: 51:48:dc:98:9c:05:24:ce:04:32:54:ef:4a:9c:7d: 2e:9f:23:b7:c6:27:bc:5c:52:47:68:8a:d5:81:44: 01:b9:1f:d8:3d:22:5a:4c:b4:63:ed:06:1b:ec:44: 6e:31:0e:c2:9b:d8:6f:05:b9:23:77:00:98:71:9b: 77:17:6f:9b:29:21:43:30:91:2d:9e:11:f6:f9:ae: 0d:2a:91:59:97:3b:e0:62:74:06:a7:1d:5c:04:d6: e5:68:df:ff:ea:c5:ee:3d:6a:ed:b9:33:9e:93:f0: b8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5E:DE:D7:4B:1A:69:03:C2:A0:B8:79:41:37:32:48:8B:E9:E2:E7 X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/kV7e10saaQPCoLh5QTcySIvp4uc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.14.224.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:d0:82:88:a2:91:37:4c:89:76:d9:d6:fd:19:8e:8d:0c:59: b3:b6:2b:65:74:58:c2:51:0a:dc:d1:57:fb:4b:88:5a:5c:58: f9:24:12:4c:7c:62:c6:7a:6d:de:0c:cc:91:56:95:40:9d:29: bd:40:49:59:45:45:ff:78:99:22:e2:2d:b4:d2:8e:66:d2:e9: d7:9b:a7:ec:ce:ff:ce:9e:75:06:d4:ac:b7:56:95:58:70:b1: 31:84:04:8f:5e:de:49:dc:63:50:9b:1d:b4:08:eb:37:b1:93: 24:f0:55:2e:90:2d:65:57:1a:a2:cd:7b:1c:f1:e9:ec:33:96: 3e:48:a0:21:d5:81:24:af:49:90:56:88:52:71:d0:6c:7e:19: 2e:47:60:58:bd:d5:24:49:20:1f:a7:b0:1d:0e:9d:83:1f:e1: 34:11:1e:98:f6:74:9d:73:01:21:c4:dc:37:7c:60:05:a7:5e: 73:63:6e:0d:8f:38:46:08:71:7c:d1:60:66:aa:7c:d8:6f:af: 3a:a6:b0:cb:a4:39:f7:e2:2a:b6:d0:e6:b9:49:d9:77:e1:fe: d8:4f:ee:3a:f9:ac:fa:07:e5:c1:b6:8b:ed:ad:44:b7:6e:1e: bc:03:0b:b8:34:a3:6e:66:47:66:03:bf:d3:15:26:bc:57:ed: 07:14:e6:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHIpSh8/qZ9mrqkq6UgDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTVlZGVkNzRiMWE2OTAzYzJhMGI4Nzk0MTM3MzI0ODhiZTllMmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvaimHOjitGVT4afWjQlMwJPiVVH mwS8WLXe4vnNzdsyUYJcULqGR47ZFE3L+/gwztGLZSeyYXh4kkPBhmbGsSxZJ0tl I4N2iTLCxpa2xEVsG9vePNtxno6TAZirI0gX81xnnlNcSCh7wRsSG05vh/LtvWV1 N8L1wa4QPdrEFjzvK6x+aMedtQ9nxF1o+UCHAoUcOppRSNyYnAUkzgQyVO9KnH0u nyO3xie8XFJHaIrVgUQBuR/YPSJaTLRj7QYb7ERuMQ7Cm9hvBbkjdwCYcZt3F2+b KSFDMJEtnhH2+a4NKpFZlzvgYnQGpx1cBNblaN//6sXuPWrtuTOek/C48wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJFe3tdLGmkDwqC4eUE3MkiL6eLnMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEva1Y3ZTEwc2FhUVBDb0xoNVFUY3lTSXZwNHVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Q7gMA0G CSqGSIb3DQEBCwUAA4IBAQA70IKIopE3TIl22db9GY6NDFmztitldFjCUQrc0Vf7 S4haXFj5JBJMfGLGem3eDMyRVpVAnSm9QElZRUX/eJki4i200o5m0unXm6fszv/O nnUG1Ky3VpVYcLExhASPXt5J3GNQmx20COs3sZMk8FUukC1lVxqizXsc8ensM5Y+ SKAh1YEkr0mQVohScdBsfhkuR2BYvdUkSSAfp7AdDp2DH+E0ER6Y9nSdcwEhxNw3 fGAFp15zY24NjzhGCHF80WBmqnzYb686prDLpDn34iq20Oa5Sdl34f7YT+46+az6 B+XBtovtrUS3bh68Awu4NKNuZkdmA7/TFSa8V+0HFObR -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:55 2026 by rpki-client