This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/kPvxZ2OyeoUeAIvW5z89UU8ASkE.roa File: kPvxZ2OyeoUeAIvW5z89UU8ASkE.roa (raw, json) Hash identifier: Sv6cjXS82obyL50XzOiS7kDFeEpRD0eJe0mAtx0A7U8= Subject key identifier: 90:FB:F1:67:63:B2:7A:85:1E:00:8B:D6:E7:3F:3D:51:4F:00:4A:41 Certificate issuer: /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30 Certificate serial: 019B78A31FEC08E17AC6D25E7BF846A157E5 Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/kPvxZ2OyeoUeAIvW5z89UU8ASkE.roa Signing time: Thu 01 Jan 2026 08:18:35 +0000 ROA not before: Thu 01 Jan 2026 08:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33806 IP address blocks: 178.212.255.0/24 maxlen: 24 188.191.128.0/24 maxlen: 24 188.191.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1f:ec:08:e1:7a:c6:d2:5e:7b:f8:46:a1:57:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30 Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90fbf16763b27a851e008bd6e73f3d514f004a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:f5:bb:e4:c7:1c:05:80:ac:75:17:1b:94: 2b:af:71:f6:0d:1a:8f:a8:7e:01:24:03:3a:65:83: 66:96:66:8c:af:eb:4f:b9:e0:93:49:d5:57:35:e4: b9:d1:a0:35:59:5c:fd:46:65:08:15:5e:68:d0:b6: 4e:15:09:0b:81:9b:19:c0:c8:89:26:d0:a5:2a:97: d0:74:1c:e5:b1:1c:f9:c2:aa:7d:71:ef:42:fd:86: a3:63:79:95:5b:13:fd:72:e9:4d:18:5f:75:63:bc: 27:34:29:77:fc:bf:ef:78:2d:6f:a6:b1:7d:a6:de: 95:be:2b:ea:2a:7f:68:8b:55:ee:5a:0d:b5:62:19: 53:55:70:80:37:3a:ae:fc:84:c1:b4:2f:98:d1:68: 13:2a:a3:6e:7f:f9:42:1c:55:3d:dc:e2:da:07:ee: e9:41:b2:79:08:3d:84:ac:f4:f0:a2:c5:74:ae:c4: ab:1a:de:76:d1:63:44:f8:71:56:3a:3d:8f:52:0e: f5:9a:c4:16:9d:db:f3:aa:47:72:5e:ae:48:ab:dc: d9:32:38:eb:0e:dc:37:8c:76:0c:a2:aa:82:16:81: 57:16:c9:29:8c:8c:e5:db:5c:95:68:27:c0:a2:e7: d1:93:be:b8:ef:47:74:ad:dd:5d:8e:08:8f:74:e0: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FB:F1:67:63:B2:7A:85:1E:00:8B:D6:E7:3F:3D:51:4F:00:4A:41 X509v3 Authority Key Identifier: keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/kPvxZ2OyeoUeAIvW5z89UU8ASkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.255.0/24 188.191.128.0/23 Signature Algorithm: sha256WithRSAEncryption 65:41:cb:c2:a6:87:3a:5b:1f:f6:7c:a3:1e:f7:2c:38:19:7a: 0c:b1:98:0d:d4:12:17:71:fc:55:6b:eb:7b:45:68:79:4c:b6: 80:5d:2c:4e:6b:9a:43:66:b3:52:72:97:85:1a:0c:25:51:1e: f8:56:2f:de:3c:d3:2b:52:31:f8:e3:7d:8c:68:8d:92:1d:00: e6:79:2d:27:3b:25:b1:86:45:b9:6b:c9:09:59:9b:78:99:cf: 56:d7:4a:d5:ee:64:e3:1a:39:c5:ca:d5:c5:1a:68:2c:a1:41: f2:95:69:51:10:b7:ba:f9:b4:2d:ee:2c:29:b6:5f:70:72:51: 90:f5:55:89:1b:34:82:d0:75:ba:ae:d8:d3:61:4d:eb:91:d6: f2:93:e2:4a:4d:8f:11:cd:e8:e3:55:ef:78:53:6b:cb:9f:92: d5:8f:a9:9b:1c:da:01:00:03:12:83:1a:7d:de:00:29:46:8b: 5b:8e:f3:c0:c6:2f:81:b2:c2:20:c8:9b:fb:52:c5:87:c5:2f: c0:80:0b:32:63:23:a5:9f:8f:36:ce:7f:40:89:7b:db:30:e5: 50:8a:52:4d:f2:4c:11:6e:6d:28:16:c5:72:3d:83:86:ff:15: 87:4f:5d:b5:81:9d:28:b2:36:1e:c9:5c:2a:0b:85:ed:78:ca: 1a:41:e1:b4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ox/sCOF6xtJee/hGoVflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NTE3YWFmNDhmNjY5YTBiZWM4ZWM2YWM4NjgyYjRjMTI0 ZTZkMzAwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGZiZjE2NzYzYjI3YTg1MWUwMDhiZDZlNzNmM2Q1MTRmMDA0YTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutv1u+THHAWArHUXG5Qrr3H2DRqP qH4BJAM6ZYNmlmaMr+tPueCTSdVXNeS50aA1WVz9RmUIFV5o0LZOFQkLgZsZwMiJ JtClKpfQdBzlsRz5wqp9ce9C/YajY3mVWxP9culNGF91Y7wnNCl3/L/veC1vprF9 pt6VvivqKn9oi1XuWg21YhlTVXCANzqu/ITBtC+Y0WgTKqNuf/lCHFU93OLaB+7p QbJ5CD2ErPTwosV0rsSrGt520WNE+HFWOj2PUg71msQWndvzqkdyXq5Iq9zZMjjr Dtw3jHYMoqqCFoFXFskpjIzl21yVaCfAoufRk76470d0rd1djgiPdOC1pwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJD78WdjsnqFHgCL1uc/PVFPAEpBMB8GA1UdIwQY MBaAFHdReq9I9mmgvsjsashoK0wSTm0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEt MjRjNjI2ZTdmNTIwLzEva1B2eFoyT3llb1VlQUl2VzV6ODlVVThBU2tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEtMjRjNjI2ZTdmNTIw LzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAstT/AwQB vL+AMA0GCSqGSIb3DQEBCwUAA4IBAQBlQcvCpoc6Wx/2fKMe9yw4GXoMsZgN1BIX cfxVa+t7RWh5TLaAXSxOa5pDZrNScpeFGgwlUR74Vi/ePNMrUjH4432MaI2SHQDm eS0nOyWxhkW5a8kJWZt4mc9W10rV7mTjGjnFytXFGmgsoUHylWlRELe6+bQt7iwp tl9wclGQ9VWJGzSC0HW6rtjTYU3rkdbyk+JKTY8RzejjVe94U2vLn5LVj6mbHNoB AAMSgxp93gApRotbjvPAxi+BssIgyJv7UsWHxS/AgAsyYyOln482zn9AiXvbMOVQ ilJN8kwRbm0oFsVyPYOG/xWHT121gZ0osjYeyVwqC4XteMoaQeG0 -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:39 2026 by rpki-client