This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/kaVISpwOiZKA5ta06OCxyBxR49A.roa File: kaVISpwOiZKA5ta06OCxyBxR49A.roa (raw, json) Hash identifier: VNZtrnciQ6Gc5y4H0ppJqHERZaAXg4qGMfFH99dOFts= Subject key identifier: 91:A5:48:4A:9C:0E:89:92:80:E6:D6:B4:E8:E0:B1:C8:1C:51:E3:D0 Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5CFF0BEBC91178330B826AAFDF50E5 Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/kaVISpwOiZKA5ta06OCxyBxR49A.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41097 IP address blocks: 78.133.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ff:0b:eb:c9:11:78:33:0b:82:6a:af:df:50:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91a5484a9c0e899280e6d6b4e8e0b1c81c51e3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5f:9b:20:b0:00:b9:6e:49:a4:df:fe:cd:f3: 26:59:f2:6f:5b:38:e2:04:17:c6:97:02:4e:2a:f9: 6b:da:07:17:fb:d6:6a:7d:00:1c:a7:34:03:c4:d4: 1e:cc:98:bf:e4:91:15:e8:83:72:bf:d8:cf:29:9e: e6:2f:2d:a5:5c:96:df:1b:35:18:4d:78:aa:16:c7: f4:b6:db:89:95:e6:49:1c:3c:9d:9b:60:43:d0:62: c2:a0:b9:83:33:32:e1:3e:5d:bc:1e:0e:41:28:0b: 2b:c9:d5:43:cc:33:b0:d4:fb:a7:64:7d:3e:6d:ad: 82:8d:22:59:60:49:1a:3c:f6:59:7e:ad:f4:cf:50: 5d:d6:d1:47:ab:c5:53:90:46:9b:1f:0f:6a:97:b3: c0:67:a5:bc:db:c8:ee:d8:e6:7f:48:0a:8e:84:da: 7b:6e:cf:e1:63:5a:9e:d1:84:44:db:09:03:aa:e9: 1b:58:6a:b7:20:5e:8c:e8:16:38:b4:cc:f2:99:0a: e6:ba:4e:47:40:54:b3:4e:33:bf:3f:4c:62:50:c9: c8:cc:0c:7e:db:0c:d7:d5:82:e2:9f:97:b1:99:d2: 83:b9:ef:92:97:7c:92:48:fc:87:87:ac:55:9c:19: 53:dd:39:47:68:65:e8:3e:bc:4d:0d:a0:ff:88:36: 63:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A5:48:4A:9C:0E:89:92:80:E6:D6:B4:E8:E0:B1:C8:1C:51:E3:D0 X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/kaVISpwOiZKA5ta06OCxyBxR49A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.133.228.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:6d:b9:c3:e2:41:47:09:6d:fc:c7:5c:9f:1c:26:52:2a:db: af:73:57:75:a4:bc:2b:ff:e2:9a:e5:40:99:67:fd:dc:79:33: bb:fa:33:b6:35:8e:11:6b:d1:9a:ca:7f:dc:4b:c8:58:5d:49: b3:59:d3:e5:50:26:46:18:7d:61:18:07:67:c0:fe:af:cb:a0: 31:a3:0f:48:71:70:e5:bd:94:47:1e:bf:e1:da:dd:dd:10:77: 9d:e0:f5:49:bb:a4:3a:d3:fa:bb:53:26:bd:69:97:8c:52:65: 48:89:2e:b3:79:76:2a:5f:56:f6:e1:f6:ea:b1:cf:46:e3:f3: 77:af:44:21:1e:20:09:66:58:32:92:41:89:5d:c6:a8:03:7f: d4:52:b4:e6:56:23:84:a2:81:cb:65:f8:f8:3f:5b:e8:af:80: 49:ca:53:3b:47:fd:8f:a9:b7:90:45:c6:91:6c:3f:02:d5:29: 86:ff:07:10:ad:88:cb:b7:da:7c:e0:a1:70:1e:37:03:29:19: 9d:e2:6c:2f:b1:b8:4a:f5:5c:2f:98:a6:2e:3b:58:8d:f4:24: a7:bc:49:52:2b:c4:79:d8:bb:a8:ca:30:6a:d4:8b:e0:52:b7: ba:33:83:3b:f8:96:f3:62:d2:b8:e3:20:f1:fc:75:fd:0f:43: 11:7f:5a:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XP8L68kReDMLgmqv31DlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWE1NDg0YTljMGU4OTkyODBlNmQ2YjRlOGUwYjFjODFjNTFlM2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV+bILAAuW5JpN/+zfMmWfJvWzji BBfGlwJOKvlr2gcX+9ZqfQAcpzQDxNQezJi/5JEV6INyv9jPKZ7mLy2lXJbfGzUY TXiqFsf0ttuJleZJHDydm2BD0GLCoLmDMzLhPl28Hg5BKAsrydVDzDOw1PunZH0+ ba2CjSJZYEkaPPZZfq30z1Bd1tFHq8VTkEabHw9ql7PAZ6W828ju2OZ/SAqOhNp7 bs/hY1qe0YRE2wkDqukbWGq3IF6M6BY4tMzymQrmuk5HQFSzTjO/P0xiUMnIzAx+ 2wzX1YLin5exmdKDue+Sl3ySSPyHh6xVnBlT3TlHaGXoPrxNDaD/iDZjwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJGlSEqcDomSgObWtOjgscgcUePQMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEva2FWSVNwd09pWktBNXRhMDZPQ3h5QnhSNDlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAToXkMA0G CSqGSIb3DQEBCwUAA4IBAQA8bbnD4kFHCW38x1yfHCZSKtuvc1d1pLwr/+Ka5UCZ Z/3ceTO7+jO2NY4Ra9Gayn/cS8hYXUmzWdPlUCZGGH1hGAdnwP6vy6Axow9IcXDl vZRHHr/h2t3dEHed4PVJu6Q60/q7Uya9aZeMUmVIiS6zeXYqX1b24fbqsc9G4/N3 r0QhHiAJZlgykkGJXcaoA3/UUrTmViOEooHLZfj4P1vor4BJylM7R/2PqbeQRcaR bD8C1SmG/wcQrYjLt9p84KFwHjcDKRmd4mwvsbhK9VwvmKYuO1iN9CSnvElSK8R5 2LuoyjBq1IvgUre6M4M7+JbzYtK44yDx/HX9D0MRf1q1 -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:42 2026 by rpki-client