This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/KkqMLgVSOl4C9gkiDIZV5IAys_A.roa File: KkqMLgVSOl4C9gkiDIZV5IAys_A.roa (raw, json) Hash identifier: yUWuR1LKMlNOOPlPCHzgsf5Jj1BpkzuEJuF1kFFXOiw= Subject key identifier: 2A:4A:8C:2E:05:52:3A:5E:02:F6:09:22:0C:86:55:E4:80:32:B3:F0 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019B79ECB5DE31AFFFFF68B07CE8319E98DD Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/KkqMLgVSOl4C9gkiDIZV5IAys_A.roa Signing time: Thu 01 Jan 2026 14:18:34 +0000 ROA not before: Thu 01 Jan 2026 14:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42855 IP address blocks: 84.54.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b5:de:31:af:ff:ff:68:b0:7c:e8:31:9e:98:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Jan 1 14:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a4a8c2e05523a5e02f609220c8655e48032b3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:49:56:0a:0b:62:fb:91:c1:dc:34:62:f3:8f: f9:56:9a:c8:17:2b:2a:5b:5a:db:bb:a6:84:59:c1: 0f:b8:c0:c2:0a:d4:00:ad:c3:36:0a:d6:97:c4:aa: 8b:31:7e:bd:b1:fa:5c:bb:a1:6a:d0:37:42:31:55: e6:e6:ef:72:ce:26:f9:f6:7a:e5:85:0d:e3:f7:1d: d2:50:44:33:31:ed:68:7e:cf:e1:f7:49:d9:b0:b6: 79:1a:1a:8a:1c:50:e4:0b:03:4c:e8:ea:f6:22:fb: 4f:d6:c8:82:74:dc:68:10:49:cc:ca:56:a8:67:31: d1:3a:30:1f:e6:fa:1e:e0:c7:b5:42:77:da:e0:e0: 88:50:72:73:8a:81:34:83:09:9c:a4:e2:6d:0d:75: 69:f9:66:47:e4:f8:cd:38:c7:3c:3d:08:9d:d8:3d: 9d:08:d1:e2:12:6e:44:77:a8:04:bc:fe:50:31:5d: 5c:6b:6b:41:4f:a0:00:db:19:51:59:c9:3b:22:33: cb:71:0f:2b:3c:d2:49:91:47:dd:2f:00:82:8b:90: 80:7b:48:de:a4:82:c1:70:8e:98:48:cf:66:78:ae: 56:e9:5c:08:8e:47:e1:f4:d4:56:3e:50:e2:41:d2: 88:7a:7b:1a:be:e7:45:67:d7:74:e6:06:82:dc:d7: 33:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4A:8C:2E:05:52:3A:5E:02:F6:09:22:0C:86:55:E4:80:32:B3:F0 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/KkqMLgVSOl4C9gkiDIZV5IAys_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.184.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:d2:d8:43:38:1c:29:70:c3:3d:80:f7:dd:82:b4:05:58:31: a2:ea:f9:bb:8f:ef:9e:cc:66:24:8e:f7:2a:f6:8f:91:b1:0d: 22:0e:14:a2:e7:2b:54:57:f7:8f:01:ab:b6:04:bc:eb:ff:4b: ba:da:eb:90:c2:d1:3b:18:c5:f1:6c:e8:ce:d6:8e:4d:61:e0: a1:bc:88:f7:9f:47:ce:b8:49:1c:12:27:68:78:58:fc:50:66: a7:ed:bf:a2:83:68:66:b2:bc:fd:f8:f2:9c:16:12:fb:13:c9: 5c:22:3d:84:74:21:59:e1:0d:9f:50:42:02:a3:1b:2d:8b:35: 37:fb:ba:dc:63:4e:93:ac:cd:22:68:b8:80:58:9b:bc:d4:ed: b7:98:c7:df:f2:05:f2:6b:30:6a:a0:92:39:e0:3e:36:f6:80: 25:42:0b:f2:fe:a7:d7:1d:09:63:01:a1:d7:8e:f0:c5:a0:bb: 1e:67:52:56:90:4c:91:b3:e8:07:66:26:e8:74:e0:b6:8f:e1: 64:a2:9f:85:5f:59:dd:b1:e3:95:9f:17:12:ac:04:13:0d:67: 25:02:d4:f0:59:69:a8:17:a7:23:55:b1:46:21:74:ff:09:d0: 85:cb:7f:88:55:b7:34:a6:2e:70:e4:05:d4:32:4a:63:55:70: aa:3c:09:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LXeMa///2iwfOgxnpjdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwMTAxMTQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTRhOGMyZTA1NTIzYTVlMDJmNjA5MjIwYzg2NTVlNDgwMzJiM2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlElWCgti+5HB3DRi84/5VprIFysq W1rbu6aEWcEPuMDCCtQArcM2CtaXxKqLMX69sfpcu6Fq0DdCMVXm5u9yzib59nrl hQ3j9x3SUEQzMe1ofs/h90nZsLZ5GhqKHFDkCwNM6Or2IvtP1siCdNxoEEnMylao ZzHROjAf5voe4Me1Qnfa4OCIUHJzioE0gwmcpOJtDXVp+WZH5PjNOMc8PQid2D2d CNHiEm5Ed6gEvP5QMV1ca2tBT6AA2xlRWck7IjPLcQ8rPNJJkUfdLwCCi5CAe0je pILBcI6YSM9meK5W6VwIjkfh9NRWPlDiQdKIensavudFZ9d05gaC3NczDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCpKjC4FUjpeAvYJIgyGVeSAMrPwMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvS2txTUxnVlNPbDRDOWdraURJWlY1SUF5c19BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDa4MA0G CSqGSIb3DQEBCwUAA4IBAQAq0thDOBwpcMM9gPfdgrQFWDGi6vm7j++ezGYkjvcq 9o+RsQ0iDhSi5ytUV/ePAau2BLzr/0u62uuQwtE7GMXxbOjO1o5NYeChvIj3n0fO uEkcEidoeFj8UGan7b+ig2hmsrz9+PKcFhL7E8lcIj2EdCFZ4Q2fUEICoxstizU3 +7rcY06TrM0iaLiAWJu81O23mMff8gXyazBqoJI54D429oAlQgvy/qfXHQljAaHX jvDFoLseZ1JWkEyRs+gHZibodOC2j+Fkop+FX1ndseOVnxcSrAQTDWclAtTwWWmo F6cjVbFGIXT/CdCFy3+IVbc0pi5w5AXUMkpjVXCqPAkJ -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:02 2026 by rpki-client