This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/kOeStUr-S36PPYxRvN7P5tKOJwg.roa File: kOeStUr-S36PPYxRvN7P5tKOJwg.roa (raw, json) Hash identifier: JYGGn+yiElMOBrVTl8GeU6lToRXH7Upj5oy8AgfmV7c= Subject key identifier: 90:E7:92:B5:4A:FE:4B:7E:8F:3D:8C:51:BC:DE:CF:E6:D2:8E:27:08 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE363DFDE978111CE2BEC663576793 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/kOeStUr-S36PPYxRvN7P5tKOJwg.roa Signing time: Fri 02 Jan 2026 04:19:04 +0000 ROA not before: Fri 02 Jan 2026 04:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9002 IP address blocks: 82.163.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:36:3d:fd:e9:78:11:1c:e2:be:c6:63:57:67:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90e792b54afe4b7e8f3d8c51bcdecfe6d28e2708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:61:84:50:bd:12:3d:61:7a:8f:65:f7:71:d0: 33:d8:41:4c:f9:2a:e4:a1:f5:74:7f:d3:d3:e8:04: ce:32:fe:fc:a7:a0:e4:f1:87:ae:b3:25:72:a6:93: 03:12:02:5b:c3:2c:06:1e:16:b8:dd:a6:39:5b:f2: 23:db:b3:e8:58:da:d1:2a:cc:70:52:c4:e5:b5:db: 54:e0:ee:45:a7:3e:b7:1b:6c:5c:4f:72:9c:47:d1: b8:5c:5a:5a:8d:07:ca:05:4f:63:e5:e1:ad:ff:d0: 54:ce:ae:72:69:22:a9:df:d4:9c:de:76:80:3c:ec: 10:e1:0c:14:d5:dd:99:47:ae:a9:e6:bd:dc:cc:df: 1c:48:bf:5e:a1:cf:6f:8b:93:6f:dd:af:09:5e:0e: 51:79:b4:8f:b5:9c:fd:fb:0c:0c:bb:23:9e:5e:31: 62:07:69:8d:77:85:a1:9b:53:26:c0:2a:36:4a:18: ba:13:20:a0:4d:4a:7d:3e:05:42:35:0e:5f:0c:30: 26:a8:e0:23:ae:b8:07:58:4a:71:5a:83:47:df:8b: 08:dc:5f:1e:0d:9a:33:52:66:65:dc:53:80:c2:f5: 12:65:3e:64:95:d6:14:6a:9e:bd:d5:08:60:04:46: 37:d6:ee:43:22:93:c2:14:13:81:2e:6a:77:76:10: aa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E7:92:B5:4A:FE:4B:7E:8F:3D:8C:51:BC:DE:CF:E6:D2:8E:27:08 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/kOeStUr-S36PPYxRvN7P5tKOJwg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.163.52.0/23 Signature Algorithm: sha256WithRSAEncryption 76:c7:66:7a:f5:c1:99:e6:c5:60:a1:35:ec:a1:49:c6:e2:c5: 13:70:7b:f7:09:60:8a:e0:02:4b:66:7a:79:f8:2f:70:3e:d5: bd:e6:a4:12:a7:88:5d:b0:11:be:ff:a4:30:d8:ec:44:65:8a: 49:2c:14:ef:66:e5:4f:91:aa:84:be:dd:cd:7f:d4:bc:49:36: ae:4d:02:94:e2:98:0b:c2:d7:c8:6e:8d:f4:05:9b:3b:79:fc: d9:8f:d1:82:fd:da:25:c5:a8:43:9a:10:77:a0:a5:7e:38:fc: 8c:77:1f:08:e9:f9:27:b1:4c:c4:82:17:02:fa:d8:64:02:67: a7:20:46:6b:01:17:ba:56:f4:8c:87:ce:51:d2:57:77:9d:79: 86:cc:c4:5b:58:d9:af:a4:81:bb:04:7d:d3:4b:70:e4:5a:a7: 8d:9a:78:45:b2:67:84:2f:26:2e:c4:5e:0d:20:59:7d:3b:63: 0a:57:6a:7f:54:d6:71:af:76:70:b9:0a:fd:cf:1c:17:e2:2b: dd:ff:0c:02:63:55:95:52:ac:c9:dc:83:fe:fb:22:43:7c:20: 47:d5:a6:7e:2a:fd:55:c5:54:f2:12:93:cc:18:ef:0a:78:3d: 7f:b6:91:8f:1f:d8:23:8c:a7:3e:e2:c1:91:18:06:e4:b5:5a: a0:92:72:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87jY9/el4ERzivsZjV2eTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGU3OTJiNTRhZmU0YjdlOGYzZDhjNTFiY2RlY2ZlNmQyOGUyNzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2GEUL0SPWF6j2X3cdAz2EFM+Srk ofV0f9PT6ATOMv78p6Dk8YeusyVyppMDEgJbwywGHha43aY5W/Ij27PoWNrRKsxw UsTltdtU4O5Fpz63G2xcT3KcR9G4XFpajQfKBU9j5eGt/9BUzq5yaSKp39Sc3naA POwQ4QwU1d2ZR66p5r3czN8cSL9eoc9vi5Nv3a8JXg5RebSPtZz9+wwMuyOeXjFi B2mNd4Whm1MmwCo2Shi6EyCgTUp9PgVCNQ5fDDAmqOAjrrgHWEpxWoNH34sI3F8e DZozUmZl3FOAwvUSZT5kldYUap691QhgBEY31u5DIpPCFBOBLmp3dhCq8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJDnkrVK/kt+jz2MUbzez+bSjicIMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEva09lU3RVci1TMzZQUFl4UnZON1A1dEtPSndnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUqM0MA0G CSqGSIb3DQEBCwUAA4IBAQB2x2Z69cGZ5sVgoTXsoUnG4sUTcHv3CWCK4AJLZnp5 +C9wPtW95qQSp4hdsBG+/6Qw2OxEZYpJLBTvZuVPkaqEvt3Nf9S8STauTQKU4pgL wtfIbo30BZs7efzZj9GC/dolxahDmhB3oKV+OPyMdx8I6fknsUzEghcC+thkAmen IEZrARe6VvSMh85R0ld3nXmGzMRbWNmvpIG7BH3TS3DkWqeNmnhFsmeELyYuxF4N IFl9O2MKV2p/VNZxr3ZwuQr9zxwX4ivd/wwCY1WVUqzJ3IP++yJDfCBH1aZ+Kv1V xVTyEpPMGO8KeD1/tpGPH9gjjKc+4sGRGAbktVqgknI+ -----END CERTIFICATE-----Generated at Sun Jan 25 12:45:56 2026 by rpki-client