This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/KfqVkTkqnmoPhL5oJS5g13WidJI.roa File: KfqVkTkqnmoPhL5oJS5g13WidJI.roa (raw, json) Hash identifier: QmfHVkr3ykcD5JWpsMGcti3WuJANdLbEdzcIBfArih0= Subject key identifier: 29:FA:95:91:39:2A:9E:6A:0F:84:BE:68:25:2E:60:D7:75:A2:74:92 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2CA364B0A00159418CEF49E4D6D6B Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/KfqVkTkqnmoPhL5oJS5g13WidJI.roa Signing time: Thu 01 Jan 2026 08:18:13 +0000 ROA not before: Thu 01 Jan 2026 08:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 81.22.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ca:36:4b:0a:00:15:94:18:ce:f4:9e:4d:6d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29fa9591392a9e6a0f84be68252e60d775a27492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6e:4e:e9:25:5c:d9:0f:3d:21:ef:6d:ba:b9: d8:76:79:4d:27:79:df:51:92:cb:39:f4:ab:63:c9: 35:d7:80:1a:da:90:d2:8b:6f:ff:8b:7c:c7:82:1b: c4:fc:5e:b1:18:7a:ba:48:6b:6d:9d:f8:96:23:65: 9a:b8:a5:fa:ac:2a:84:3d:f2:cb:2b:fa:7e:21:79: 40:bc:35:4f:e6:ca:71:a3:c0:48:4d:49:ea:06:8b: 88:f7:37:2f:5e:6f:3c:cd:68:c2:1c:cd:24:99:1e: 9b:e3:49:a8:67:32:30:ae:ed:26:df:79:2e:97:f5: 90:3b:53:08:87:15:5b:a7:df:5d:b7:13:db:c8:89: 1b:d6:4d:38:47:09:48:78:36:94:b9:c4:1a:1f:7b: 62:a6:5e:01:b6:a0:63:58:c1:6d:5a:4e:70:de:67: 3d:8e:0e:8c:56:d5:b4:b2:bd:7e:82:59:4f:70:37: 21:0d:c7:0c:60:9d:20:8d:33:ea:24:53:a1:b5:cc: 11:72:ea:df:85:69:b4:41:0c:96:31:8f:82:71:83: e0:e6:c0:cf:f6:7c:ba:01:c2:d9:e6:b4:23:c1:61: de:96:91:27:24:46:f3:0c:dc:5b:01:12:87:cb:94: c9:25:da:9c:55:f1:cb:74:6c:e7:e3:6a:5f:93:0f: 5a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FA:95:91:39:2A:9E:6A:0F:84:BE:68:25:2E:60:D7:75:A2:74:92 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/KfqVkTkqnmoPhL5oJS5g13WidJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.134.0/24 Signature Algorithm: sha256WithRSAEncryption a1:72:bb:f8:d7:77:90:81:f8:bf:db:25:42:77:ea:d8:b1:3f: 07:07:53:89:2a:99:e5:32:44:e6:59:5f:f5:c2:93:d3:d0:b5: 79:5a:20:4b:7c:3b:a2:46:b7:61:07:e1:cf:fc:75:48:48:c0: ad:dc:57:51:97:18:3d:01:f8:55:bd:10:e2:e9:5d:9a:3c:41: b4:bc:2d:c6:9c:cc:56:be:6a:44:a2:eb:5c:7d:b0:fc:0e:0c: 16:28:35:95:3a:19:37:ff:1a:cf:ce:fd:59:b5:8a:e7:05:cf: bc:2a:ca:7e:50:5b:38:0a:2e:50:df:c6:56:88:c4:9e:fe:ac: de:c3:d7:e8:ae:70:db:92:e5:99:d6:a0:7b:b6:38:49:db:53: 1d:97:13:2b:00:ef:23:47:ce:51:57:e2:da:eb:e8:76:4e:1e: 5b:64:a6:4c:b2:92:17:94:62:0b:86:00:78:a1:18:e4:ef:a0: 97:2e:a7:32:07:21:bc:39:f2:9d:19:3a:99:b3:b3:55:c7:28: 77:69:56:cf:2a:4f:88:82:24:d9:c9:8c:59:c3:ce:5d:aa:8f: d0:9c:8a:d2:74:e0:74:4d:61:fa:23:90:ee:be:28:10:41:ba: 68:bd:cb:d4:5a:24:74:42:12:52:8b:64:ba:ad:46:4a:69:d9: f9:b5:0e:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oso2SwoAFZQYzvSeTW1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWZhOTU5MTM5MmE5ZTZhMGY4NGJlNjgyNTJlNjBkNzc1YTI3NDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW5O6SVc2Q89Ie9turnYdnlNJ3nf UZLLOfSrY8k114Aa2pDSi2//i3zHghvE/F6xGHq6SGttnfiWI2WauKX6rCqEPfLL K/p+IXlAvDVP5spxo8BITUnqBouI9zcvXm88zWjCHM0kmR6b40moZzIwru0m33ku l/WQO1MIhxVbp99dtxPbyIkb1k04RwlIeDaUucQaH3tipl4BtqBjWMFtWk5w3mc9 jg6MVtW0sr1+gllPcDchDccMYJ0gjTPqJFOhtcwRcurfhWm0QQyWMY+CcYPg5sDP 9ny6AcLZ5rQjwWHelpEnJEbzDNxbARKHy5TJJdqcVfHLdGzn42pfkw9abQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCn6lZE5Kp5qD4S+aCUuYNd1onSSMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvS2ZxVmtUa3FubW9QaEw1b0pTNWcxM1dpZEpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaGMA0G CSqGSIb3DQEBCwUAA4IBAQChcrv413eQgfi/2yVCd+rYsT8HB1OJKpnlMkTmWV/1 wpPT0LV5WiBLfDuiRrdhB+HP/HVISMCt3FdRlxg9AfhVvRDi6V2aPEG0vC3GnMxW vmpEoutcfbD8DgwWKDWVOhk3/xrPzv1ZtYrnBc+8Ksp+UFs4Ci5Q38ZWiMSe/qze w9fornDbkuWZ1qB7tjhJ21MdlxMrAO8jR85RV+La6+h2Th5bZKZMspIXlGILhgB4 oRjk76CXLqcyByG8OfKdGTqZs7NVxyh3aVbPKk+IgiTZyYxZw85dqo/QnIrSdOB0 TWH6I5DuvigQQbpovcvUWiR0QhJSi2S6rUZKadn5tQ61 -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:58 2026 by rpki-client