This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/kvMWdnWiB8O4z6UGidzk9YiNNds.roa File: kvMWdnWiB8O4z6UGidzk9YiNNds.roa (raw, json) Hash identifier: qQo2451yWLYIM5XcxKIaEg78mQdIPydPLkoRnJCOxSg= Subject key identifier: 92:F3:16:76:75:A2:07:C3:B8:CF:A5:06:89:DC:E4:F5:88:8D:35:DB Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE3C00577FDA62B59BB96376DC0E9C Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/kvMWdnWiB8O4z6UGidzk9YiNNds.roa Signing time: Fri 02 Jan 2026 04:19:06 +0000 ROA not before: Fri 02 Jan 2026 04:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51737 IP address blocks: 46.20.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3c:00:57:7f:da:62:b5:9b:b9:63:76:dc:0e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92f3167675a207c3b8cfa50689dce4f5888d35db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:cb:f2:5d:b9:0f:a0:d5:90:c9:db:aa:c7: 49:73:f2:81:65:2b:9e:00:88:73:1f:70:a8:46:ee: b5:b0:14:ae:04:0d:6a:91:6b:11:5e:55:bf:80:28: f2:58:ce:6c:fe:85:75:d0:8e:c6:5b:f6:9e:25:c2: da:7f:b7:55:bf:bf:f0:12:6c:f3:6c:67:5c:57:86: 6b:ec:5f:34:57:1c:75:53:08:5b:44:20:ef:34:0d: cc:c3:78:d8:b6:eb:60:9f:e4:95:ba:05:db:44:e7: a5:5c:49:f4:a8:c5:54:a9:6a:1b:4f:6c:f1:06:9c: 8e:97:8f:1d:23:01:83:57:f1:a0:ef:bb:56:73:62: 0e:1a:dc:62:7a:29:d6:52:d1:62:ed:19:ed:4a:58: 4e:3a:ac:d1:6e:ac:64:20:07:f2:37:35:8a:a6:a7: b9:61:96:44:a3:65:30:96:cd:76:70:aa:77:1c:71: 94:39:29:f2:86:55:90:df:8a:bc:75:42:d3:c8:47: 4d:e6:c6:eb:1c:ad:fe:62:0b:b8:84:0c:16:07:85: e6:ef:a9:97:6f:fd:ee:85:65:83:cf:d3:0c:68:a2: d1:51:3f:82:49:0b:14:d3:16:17:98:e1:5c:3b:cc: e1:81:72:0a:09:fe:92:17:ad:ff:19:09:b8:a6:e2: 9c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F3:16:76:75:A2:07:C3:B8:CF:A5:06:89:DC:E4:F5:88:8D:35:DB X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/kvMWdnWiB8O4z6UGidzk9YiNNds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.20.208.0/23 Signature Algorithm: sha256WithRSAEncryption 90:bb:ee:45:b1:21:d5:84:32:7e:46:f5:df:57:a3:96:c6:ea: 60:06:18:e7:c0:aa:f8:03:89:f6:d4:f2:3d:e8:4d:a3:a5:21: ac:86:95:1a:61:df:05:dc:bb:07:d2:9b:0b:c5:1d:6a:2e:65: 1c:ff:42:3f:1a:4d:15:9d:7f:43:0f:6b:6d:c9:0e:29:18:3d: 0e:8f:d1:07:25:65:de:1e:aa:3d:5d:34:18:58:de:ac:73:37: 96:26:ee:58:8a:13:f7:4e:a0:c7:68:78:bb:db:2f:16:5b:93: 66:dc:49:8f:66:91:d3:30:8b:23:4c:4d:b2:1b:27:82:03:ee: d4:44:e4:65:1b:09:d7:08:83:dc:dc:14:94:21:fe:bc:2c:a2: 89:7d:12:cc:ab:3b:d9:2e:8e:1d:a8:37:b9:2f:d9:ce:5b:6d: 2b:18:56:af:44:e4:7c:8d:b5:c8:1d:16:db:ef:9f:a6:a7:b3: 47:26:7c:fc:18:fb:86:76:43:79:07:d9:df:64:70:6f:3a:9b: e7:51:fd:67:82:2d:b3:4f:bb:98:4b:7a:6e:be:16:6f:e1:8d: 4d:dd:2a:1e:c7:d6:47:a2:e1:55:e3:bc:b8:d4:4e:c5:7b:a3: b3:24:79:f8:89:1e:be:eb:e4:be:6c:e0:fd:d7:6c:6e:82:65: d0:09:31:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87jwAV3/aYrWbuWN23A6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmYzMTY3Njc1YTIwN2MzYjhjZmE1MDY4OWRjZTRmNTg4OGQzNWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4TL8l25D6DVkMnbqsdJc/KBZSue AIhzH3CoRu61sBSuBA1qkWsRXlW/gCjyWM5s/oV10I7GW/aeJcLaf7dVv7/wEmzz bGdcV4Zr7F80Vxx1UwhbRCDvNA3Mw3jYtutgn+SVugXbROelXEn0qMVUqWobT2zx BpyOl48dIwGDV/Gg77tWc2IOGtxieinWUtFi7RntSlhOOqzRbqxkIAfyNzWKpqe5 YZZEo2Uwls12cKp3HHGUOSnyhlWQ34q8dULTyEdN5sbrHK3+Ygu4hAwWB4Xm76mX b/3uhWWDz9MMaKLRUT+CSQsU0xYXmOFcO8zhgXIKCf6SF63/GQm4puKcQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJLzFnZ1ogfDuM+lBonc5PWIjTXbMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEva3ZNV2RuV2lCOE80ejZVR2lkems5WWlOTmRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLhTQMA0G CSqGSIb3DQEBCwUAA4IBAQCQu+5FsSHVhDJ+RvXfV6OWxupgBhjnwKr4A4n21PI9 6E2jpSGshpUaYd8F3LsH0psLxR1qLmUc/0I/Gk0VnX9DD2ttyQ4pGD0Oj9EHJWXe Hqo9XTQYWN6sczeWJu5YihP3TqDHaHi72y8WW5Nm3EmPZpHTMIsjTE2yGyeCA+7U RORlGwnXCIPc3BSUIf68LKKJfRLMqzvZLo4dqDe5L9nOW20rGFavROR8jbXIHRbb 75+mp7NHJnz8GPuGdkN5B9nfZHBvOpvnUf1ngi2zT7uYS3puvhZv4Y1N3Soex9ZH ouFV47y41E7Fe6OzJHn4iR6+6+S+bOD912xugmXQCTFX -----END CERTIFICATE-----Generated at Sun Jan 25 07:26:11 2026 by rpki-client