This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/kfPqHKxGz6wYPw64blmcJam1kr4.roa File: kfPqHKxGz6wYPw64blmcJam1kr4.roa (raw, json) Hash identifier: cy7z9oIdDHZSV98B3pHrJ6kEzhCC/yM5qdI8yfk1XNs= Subject key identifier: 91:F3:EA:1C:AC:46:CF:AC:18:3F:0E:B8:6E:59:9C:25:A9:B5:92:BE Certificate issuer: /CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9 Certificate serial: 019B7758EC77F044A18A23C73C1F472DC14D Authority key identifier: 58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/kfPqHKxGz6wYPw64blmcJam1kr4.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196881 IP address blocks: 178.21.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ec:77:f0:44:a1:8a:23:c7:3c:1f:47:2d:c1:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9 Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91f3ea1cac46cfac183f0eb86e599c25a9b592be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:56:eb:05:0b:0a:1c:4f:73:a2:e8:68:34: c9:42:7a:6d:71:f1:7a:6e:c0:44:3b:77:78:c2:06: 3b:19:3b:6b:13:73:64:0c:3b:30:fb:5a:db:10:c8: 3c:5e:47:60:74:85:fa:8f:a9:b7:69:ea:5e:ca:83: cb:64:00:58:aa:9b:b0:bc:9c:4d:a2:20:37:ee:1b: 42:93:36:31:f5:06:43:4c:2f:bb:4b:0e:05:dc:a2: 6e:bc:c3:ee:98:cf:c9:3d:8c:f3:03:a8:68:30:33: 74:f5:ea:7d:af:ea:af:44:46:07:4b:40:2f:7a:7f: e4:8c:10:1b:d5:61:39:8c:a2:20:17:2b:c3:a9:da: e5:14:8b:84:d3:ac:66:e5:94:d5:3e:24:0e:a3:6d: b0:d1:0f:7f:ac:4b:60:27:5f:5c:ab:87:80:60:3f: 0e:27:e7:8e:88:a4:14:ad:fc:33:5c:cd:22:ce:17: be:f1:5e:90:4a:e3:92:f4:2a:73:f2:44:21:08:28: f5:99:cb:f8:97:51:a6:b3:69:96:75:b5:af:f2:af: a6:cd:5a:f2:06:d5:8a:cf:2e:d0:9d:d1:72:ba:08: f9:34:56:4e:08:34:32:7a:cd:55:a8:62:6e:4f:6d: f9:8d:24:8a:5e:5c:1a:e5:9a:c0:c0:7a:4a:48:36: 01:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F3:EA:1C:AC:46:CF:AC:18:3F:0E:B8:6E:59:9C:25:A9:B5:92:BE X509v3 Authority Key Identifier: keyid:58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/kfPqHKxGz6wYPw64blmcJam1kr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.21.34.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:ba:5c:cc:21:8f:4c:11:09:68:4c:98:46:31:4d:0b:8a:6e: 19:78:d1:37:58:a2:55:c5:25:a7:b1:b7:28:7d:94:7d:53:8e: 5b:cf:b6:4a:8b:55:e9:8d:c5:2a:cf:7c:d9:bd:d2:d2:c6:78: cd:94:6c:ef:83:ab:74:96:c7:f0:44:c5:2a:dc:ba:4e:f7:ae: ca:8d:25:7c:9c:32:80:c2:9a:16:01:c4:f6:d8:c6:11:76:6d: 99:52:37:56:1c:1d:c2:ef:72:30:bf:bb:4f:1e:07:cf:08:15: a3:a1:7d:a2:b7:58:ab:49:f4:3e:bf:39:e3:f8:f7:5e:68:dc: 6a:e5:12:a3:36:be:4c:0f:df:15:4f:d6:26:28:75:c0:5c:31: 6e:a4:86:36:b0:aa:07:cd:80:dc:82:c9:87:5c:2a:37:28:19: 5a:94:f3:11:af:01:97:6f:34:77:5b:ee:d8:f9:7e:d2:2b:be: 69:37:ff:64:c6:94:4c:20:64:74:e1:8e:f8:d5:58:36:e7:7c: 53:22:c2:80:e3:7a:02:a5:aa:2d:88:f8:d4:d8:79:97:a5:8a: 6f:25:a0:ad:37:60:57:7a:b3:a7:ab:be:4c:cc:fc:8c:77:c5: 97:a0:cc:06:cf:28:45:4b:ad:b0:80:bd:15:dd:6c:2c:30:81: d3:18:f3:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOx38EShiiPHPB9HLcFNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MTRkYmJhYjYzZTkxMTdkMGIwMmNiYWI1NjYzOWU2ZmQw ZDQwZDkwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWYzZWExY2FjNDZjZmFjMTgzZjBlYjg2ZTU5OWMyNWE5YjU5MmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPhW6wULChxPc6LoaDTJQnptcfF6 bsBEO3d4wgY7GTtrE3NkDDsw+1rbEMg8XkdgdIX6j6m3aepeyoPLZABYqpuwvJxN oiA37htCkzYx9QZDTC+7Sw4F3KJuvMPumM/JPYzzA6hoMDN09ep9r+qvREYHS0Av en/kjBAb1WE5jKIgFyvDqdrlFIuE06xm5ZTVPiQOo22w0Q9/rEtgJ19cq4eAYD8O J+eOiKQUrfwzXM0izhe+8V6QSuOS9Cpz8kQhCCj1mcv4l1Gms2mWdbWv8q+mzVry BtWKzy7QndFyugj5NFZOCDQyes1VqGJuT235jSSKXlwa5ZrAwHpKSDYBHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJHz6hysRs+sGD8OuG5ZnCWptZK+MB8GA1UdIwQY MBaAFFgU27q2PpEX0LAsurVmOeb9DUDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0JUYnVyWS1rUmZRc0N5NnRXWTU1djBOUU5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jMjJjM2YtOTFlNi00NWZiLWFmNzYt NjhhODA4OTcwMWY0LzEva2ZQcUhLeEd6NndZUHc2NGJsbWNKYW0xa3I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jMjJjM2YtOTFlNi00NWZiLWFmNzYtNjhhODA4OTcwMWY0 LzEvV0JUYnVyWS1rUmZRc0N5NnRXWTU1djBOUU5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshUiMA0G CSqGSIb3DQEBCwUAA4IBAQA9ulzMIY9MEQloTJhGMU0Lim4ZeNE3WKJVxSWnsbco fZR9U45bz7ZKi1XpjcUqz3zZvdLSxnjNlGzvg6t0lsfwRMUq3LpO967KjSV8nDKA wpoWAcT22MYRdm2ZUjdWHB3C73Iwv7tPHgfPCBWjoX2it1irSfQ+vznj+PdeaNxq 5RKjNr5MD98VT9YmKHXAXDFupIY2sKoHzYDcgsmHXCo3KBlalPMRrwGXbzR3W+7Y +X7SK75pN/9kxpRMIGR04Y741Vg253xTIsKA43oCpaotiPjU2HmXpYpvJaCtN2BX erOnq75MzPyMd8WXoMwGzyhFS62wgL0V3WwsMIHTGPOU -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:31 2026 by rpki-client