This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/RkYKbdX8YWW1g1REm_cJUS7GYP8.roa File: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (raw, json) Hash identifier: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s= Subject key identifier: 46:46:0A:6D:D5:FC:61:65:B5:83:54:44:9B:F7:09:51:2E:C6:60:FF Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019B7C806004D1228C8A470235D014B89A57 Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/RkYKbdX8YWW1g1REm_cJUS7GYP8.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29076 IP address blocks: 94.159.71.0/24 maxlen: 24 94.159.84.0/24 maxlen: 24 94.159.87.0/24 maxlen: 24 94.159.94.0/24 maxlen: 24 94.159.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:60:04:d1:22:8c:8a:47:02:35:d0:14:b8:9a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46460a6dd5fc6165b58354449bf709512ec660ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:64:6f:3f:cd:03:9a:a1:4f:9d:c0:1a:ca:9e: ab:94:40:42:8b:b6:20:e6:5d:88:f3:23:3c:d1:3a: ae:1c:ff:63:54:37:f5:6b:48:d9:82:e3:92:32:f0: 7b:ea:61:59:46:37:b9:e8:46:cc:73:d2:f0:36:01: 13:1a:bb:2a:8d:b4:22:c0:08:0d:84:c0:6b:1f:3e: e6:25:6e:5a:e1:a2:6f:b7:9c:78:b4:f6:0e:3c:90: 09:f3:7a:09:dc:c6:b4:f8:70:b8:1b:6b:fe:25:46: bf:62:60:df:ba:7e:2b:4a:b7:3c:cc:98:31:01:44: de:c7:47:67:74:4d:2b:b0:44:27:8f:1c:29:dc:e8: f9:f6:95:e1:62:5d:2a:fd:76:d0:59:cf:d3:60:e6: 07:d7:4c:9e:8f:48:f3:07:e7:a6:f1:2c:f3:31:13: ba:f2:42:0c:1e:40:c1:ad:a3:df:4f:c4:2e:eb:9d: b6:32:95:43:2d:a0:c6:78:db:9d:75:7c:7f:c7:dd: 9f:05:19:eb:6d:5b:ec:89:af:ce:1d:c5:1d:7b:be: da:25:59:79:40:b0:8d:8a:e0:38:03:84:50:62:65: 68:ae:15:c6:fe:74:c1:f2:62:3e:39:e8:58:63:dc: 23:3c:3a:38:19:7a:19:fa:3d:c1:d9:58:a2:ef:7c: 55:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:46:0A:6D:D5:FC:61:65:B5:83:54:44:9B:F7:09:51:2E:C6:60:FF X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/RkYKbdX8YWW1g1REm_cJUS7GYP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.159.71.0/24 94.159.84.0/24 94.159.87.0/24 94.159.94.0/23 Signature Algorithm: sha256WithRSAEncryption b4:0e:a1:91:4c:1f:b5:9e:21:f7:12:2a:25:6d:83:e6:35:82: 49:1b:b8:51:c1:43:2f:9e:81:ec:ed:62:21:31:79:4a:e0:66: 2f:86:79:7b:66:94:f9:a9:18:17:23:ff:d0:81:04:86:6a:9a: dd:70:8e:55:ef:15:b0:75:82:7a:34:de:2d:b4:ac:29:da:50: 1f:6d:7a:37:7a:96:e9:8d:0c:3f:bc:0a:6d:80:eb:55:31:b5: 9a:34:98:65:07:78:97:60:21:6a:2c:f2:9e:43:7c:4d:1e:f8: 67:5b:e2:4a:ad:fb:12:91:aa:47:b9:41:69:5f:3f:68:af:3e: 58:23:d2:e3:d4:9d:d6:48:f2:ed:29:8c:22:f8:17:dc:45:d5: 49:06:6c:de:03:85:23:35:3a:dc:25:cc:5a:43:e7:32:e7:69: b3:59:5f:8d:bd:e8:f9:18:fa:f3:2a:77:d6:54:69:be:68:7f: 25:0e:7b:ca:5e:7f:91:2f:c8:ea:fb:49:76:47:ac:49:d5:1f: 91:32:7f:ec:07:a8:aa:35:4f:33:de:a1:17:26:f8:bd:39:84: 99:07:0c:d8:4e:7f:21:a5:2b:a5:aa:1d:a4:e5:7e:f7:b7:8b: 9c:c9:8f:b9:5c:c6:2f:f9:22:70:d8:57:19:de:72:9a:aa:a8: 92:6f:58:76 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8gGAE0SKMikcCNdAUuJpXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjQ2MGE2ZGQ1ZmM2MTY1YjU4MzU0NDQ5YmY3MDk1MTJlYzY2MGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2RvP80DmqFPncAayp6rlEBCi7Yg 5l2I8yM80TquHP9jVDf1a0jZguOSMvB76mFZRje56EbMc9LwNgETGrsqjbQiwAgN hMBrHz7mJW5a4aJvt5x4tPYOPJAJ83oJ3Ma0+HC4G2v+JUa/YmDfun4rSrc8zJgx AUTex0dndE0rsEQnjxwp3Oj59pXhYl0q/XbQWc/TYOYH10yej0jzB+em8SzzMRO6 8kIMHkDBraPfT8Qu6522MpVDLaDGeNuddXx/x92fBRnrbVvsia/OHcUde77aJVl5 QLCNiuA4A4RQYmVorhXG/nTB8mI+OehYY9wjPDo4GXoZ+j3B2Vii73xVPQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEZGCm3V/GFltYNURJv3CVEuxmD/MB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvUmtZS2JkWDhZV1cxZzFSRW1fY0pVUzdHWVA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXp9HAwQA Xp9UAwQAXp9XAwQBXp9eMA0GCSqGSIb3DQEBCwUAA4IBAQC0DqGRTB+1niH3Eiol bYPmNYJJG7hRwUMvnoHs7WIhMXlK4GYvhnl7ZpT5qRgXI//QgQSGaprdcI5V7xWw dYJ6NN4ttKwp2lAfbXo3epbpjQw/vAptgOtVMbWaNJhlB3iXYCFqLPKeQ3xNHvhn W+JKrfsSkapHuUFpXz9orz5YI9Lj1J3WSPLtKYwi+BfcRdVJBmzeA4UjNTrcJcxa Q+cy52mzWV+Nvej5GPrzKnfWVGm+aH8lDnvKXn+RL8jq+0l2R6xJ1R+RMn/sB6iq NU8z3qEXJvi9OYSZBwzYTn8hpSulqh2k5X73t4ucyY+5XMYv+SJw2FcZ3nKaqqiS b1h2 -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:22 2026 by rpki-client