This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/kpUSwA2owhRDQsiRkLkFCKzeDjY.roa
File: kpUSwA2owhRDQsiRkLkFCKzeDjY.roa (raw, json)
Hash identifier: twtnbiLdWRxoWIEkMo+bxkXNXgyJd8H1k69QIGS4cRk=
Subject key identifier: 92:95:12:C0:0D:A8:C2:14:43:42:C8:91:90:B9:05:08:AC:DE:0E:36
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019B7F1503D2106A5600023706EAE87080C2
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/kpUSwA2owhRDQsiRkLkFCKzeDjY.roa
Signing time: Fri 02 Jan 2026 14:20:42 +0000
ROA not before: Fri 02 Jan 2026 14:20:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201634
IP address blocks: 87.107.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:03:d2:10:6a:56:00:02:37:06:ea:e8:70:80:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:20:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=929512c00da8c2144342c89190b90508acde0e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:93:4d:0c:53:a8:b0:a8:b5:8b:c0:a0:ec:e1:
b7:b2:38:d0:3b:02:02:59:2d:78:f1:03:1f:ba:a0:
db:3e:a3:44:12:56:36:c7:ae:18:1c:b0:a5:7b:d8:
92:eb:42:d5:a0:e8:c6:1c:83:ca:a1:76:64:36:b2:
c4:ca:18:41:37:02:8d:f4:53:fe:41:4a:a3:32:29:
8b:a8:51:41:97:07:df:ce:a6:6b:f0:2d:83:05:47:
c2:7c:26:71:3a:67:de:32:9a:9f:d1:99:15:31:ec:
94:d8:95:7b:79:15:81:6b:f6:04:4a:c0:4d:4e:c0:
f5:58:48:b7:09:9c:7e:77:81:80:cc:6d:1e:8e:5a:
6d:30:c6:16:71:62:de:43:09:13:92:c7:13:8b:4b:
58:21:e2:9a:ea:3e:83:00:56:ba:38:53:4b:27:0f:
e1:82:b7:88:e0:41:fb:93:d1:78:ab:7d:50:db:1d:
99:fd:fb:1f:26:35:96:62:c6:b6:2f:aa:34:4d:de:
a5:ce:af:f5:0e:10:77:3a:33:4a:68:4f:2f:ab:51:
a7:1f:ad:34:11:2b:ee:cf:d3:f1:d0:9b:05:3a:6e:
b8:3d:fa:15:93:de:ac:26:3e:d8:e3:00:fb:d4:63:
1d:3f:53:20:e4:c1:a0:ad:6b:ac:d8:86:69:2e:fa:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:95:12:C0:0D:A8:C2:14:43:42:C8:91:90:B9:05:08:AC:DE:0E:36
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/kpUSwA2owhRDQsiRkLkFCKzeDjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.190.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:4b:3f:8f:65:00:6a:b6:d0:24:e9:d7:db:61:27:3e:db:75:
52:ea:09:1c:9a:7a:55:06:70:cc:fe:60:31:ef:7e:2f:cc:09:
f5:73:91:db:5f:94:a2:8d:a3:9c:45:a7:cb:4e:b8:5e:8e:d9:
96:da:ac:de:ad:22:cd:91:9d:d4:7f:2b:53:2a:36:45:05:e9:
23:81:9c:d1:e2:84:e4:c8:37:49:50:7c:b9:d2:9d:16:20:71:
5f:64:a9:75:f7:e1:90:8a:fb:d1:54:04:75:57:7b:d8:49:ef:
d5:78:a9:33:fb:16:32:f4:4b:1c:39:0c:92:09:a5:2e:19:e8:
08:18:ee:ac:0e:7d:56:8d:7d:59:7a:65:7b:ee:50:45:59:95:
99:64:6d:d3:90:65:d5:64:d4:83:ea:97:14:cc:fc:ba:c4:3c:
32:01:10:4a:ee:30:6c:44:bd:01:d1:4f:ce:26:c4:1c:e7:1b:
76:be:f8:36:bc:68:68:b7:1f:aa:16:cc:97:38:ae:0e:ea:f8:
12:de:64:10:da:c0:66:41:e8:10:88:ac:7d:b7:52:42:e9:0d:
8f:3a:43:25:9a:e6:02:b3:3f:fa:5d:64:2c:d0:98:ac:69:f2:
c3:d0:35:65:27:28:92:47:36:d4:6f:68:0d:ae:e1:0b:9f:e6:
1d:bf:aa:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FQPSEGpWAAI3BurocIDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Mjk1MTJjMDBkYThjMjE0NDM0MmM4OTE5MGI5MDUwOGFjZGUwZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JNNDFOosKi1i8Cg7OG3sjjQOwIC
WS148QMfuqDbPqNEElY2x64YHLCle9iS60LVoOjGHIPKoXZkNrLEyhhBNwKN9FP+
QUqjMimLqFFBlwffzqZr8C2DBUfCfCZxOmfeMpqf0ZkVMeyU2JV7eRWBa/YESsBN
TsD1WEi3CZx+d4GAzG0ejlptMMYWcWLeQwkTkscTi0tYIeKa6j6DAFa6OFNLJw/h
greI4EH7k9F4q31Q2x2Z/fsfJjWWYsa2L6o0Td6lzq/1DhB3OjNKaE8vq1GnH600
ESvuz9Px0JsFOm64PfoVk96sJj7Y4wD71GMdP1Mg5MGgrWus2IZpLvodNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJKVEsANqMIUQ0LIkZC5BQis3g42MB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEva3BVU3dBMm93aFJEUXNpUmtMa0ZDS3plRGpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV2u+MA0G
CSqGSIb3DQEBCwUAA4IBAQC7Sz+PZQBqttAk6dfbYSc+23VS6gkcmnpVBnDM/mAx
734vzAn1c5HbX5SijaOcRafLTrhejtmW2qzerSLNkZ3UfytTKjZFBekjgZzR4oTk
yDdJUHy50p0WIHFfZKl19+GQivvRVAR1V3vYSe/VeKkz+xYy9EscOQySCaUuGegI
GO6sDn1WjX1ZemV77lBFWZWZZG3TkGXVZNSD6pcUzPy6xDwyARBK7jBsRL0B0U/O
JsQc5xt2vvg2vGhotx+qFsyXOK4O6vgS3mQQ2sBmQegQiKx9t1JC6Q2POkMlmuYC
sz/6XWQs0JisafLD0DVlJyiSRzbUb2gNruELn+Ydv6oh
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:47 2026 by rpki-client