This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/KP9ZK8Mm0n7oCIGFwbCMB_IJtD4.roa File: KP9ZK8Mm0n7oCIGFwbCMB_IJtD4.roa (raw, json) Hash identifier: 9E7/dOsgEeSFLc8nXYfohFpko6PoMkA7jZYSR5wWOOU= Subject key identifier: 28:FF:59:2B:C3:26:D2:7E:E8:08:81:85:C1:B0:8C:07:F2:09:B4:3E Certificate issuer: /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe Certificate serial: 019B7BA3211977CE84942E6096393DD8B2C5 Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/KP9ZK8Mm0n7oCIGFwbCMB_IJtD4.roa Signing time: Thu 01 Jan 2026 22:17:27 +0000 ROA not before: Thu 01 Jan 2026 22:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13030 IP address blocks: 91.228.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:21:19:77:ce:84:94:2e:60:96:39:3d:d8:b2:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe Validity Not Before: Jan 1 22:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28ff592bc326d27ee8088185c1b08c07f209b43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e1:a6:05:11:dc:8f:33:c8:be:86:32:19:8b: ac:8d:f1:ea:2a:03:5c:af:cf:4d:8d:b9:f6:c9:15: 92:48:56:58:11:73:79:df:12:13:b1:63:9a:68:ea: cc:77:05:f7:8d:31:f7:75:a4:ad:df:a8:f5:a5:5b: 12:87:23:46:88:c4:b2:f1:33:c7:9b:f1:c6:65:94: 8c:75:37:e9:30:2f:c3:c9:ee:ab:e9:bf:6f:23:08: fe:b0:b4:e1:42:cc:43:23:7d:13:65:22:ae:da:e0: 80:97:aa:57:eb:3d:fe:9f:42:5f:bb:23:f0:19:41: 14:56:f2:7a:8c:67:7b:e2:fa:14:44:de:f6:d7:41: e6:c9:af:05:69:58:05:74:39:41:2a:4f:58:17:cc: a2:5d:39:5e:a3:da:3d:13:30:fc:45:d5:a4:4e:d3: 6c:2d:2b:5e:9f:a0:e2:72:7b:e0:a8:67:9f:b7:2c: 81:22:e7:09:95:d3:87:36:a4:40:d1:ce:87:f4:7f: 83:e8:3e:56:79:d3:fd:a8:29:64:e0:8a:83:f7:08: 47:9c:95:c3:e2:4b:05:8e:2c:c0:30:7c:f0:92:84: 75:5d:88:d8:91:07:66:e9:4b:f9:75:36:d7:55:ce: c0:cb:81:8f:4a:b5:f9:69:64:d4:b7:f2:9a:9b:e0: cf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FF:59:2B:C3:26:D2:7E:E8:08:81:85:C1:B0:8C:07:F2:09:B4:3E X509v3 Authority Key Identifier: keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/KP9ZK8Mm0n7oCIGFwbCMB_IJtD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.60.0/23 Signature Algorithm: sha256WithRSAEncryption 36:85:2f:fa:69:46:16:a3:7e:29:61:0f:38:e6:cb:78:48:84: 11:62:b3:2b:11:ca:32:bc:12:22:de:b1:12:21:55:6a:01:58: 2c:3a:28:0a:2a:c8:a5:81:29:db:de:60:a2:f4:e3:02:dc:07: 5b:0d:c4:dc:91:8a:8d:2b:63:bd:c4:26:d3:4f:7c:f6:20:2c: 67:e7:15:3f:cc:02:83:75:2e:68:b7:cb:71:4f:a0:58:d3:73: e1:53:c7:85:e5:38:7b:a1:16:f0:7c:a5:87:88:95:21:91:eb: 37:cc:43:86:49:08:7c:42:3b:e6:56:2f:48:80:89:a6:08:62: 74:bb:56:ea:15:91:84:f7:1a:46:fc:d0:13:91:da:7c:c0:cc: 16:1d:02:fe:f7:87:57:de:e6:58:36:61:6c:b0:40:01:9d:2c: 32:7c:7a:6d:f3:7b:10:8d:a3:c9:e7:53:de:26:d0:57:ef:c2: ba:33:15:29:b8:31:14:16:53:1b:26:ee:a2:6a:93:2a:3b:e5: 1f:71:ea:a3:ee:80:2b:28:65:68:fb:f5:96:1b:4b:b8:8c:44: bc:90:73:95:d3:20:12:be:29:e5:50:d9:e9:6f:dd:08:c2:05: 9b:a8:0f:ea:7d:fd:3b:2c:6d:c9:79:a5:98:f7:5e:15:c6:b5: 39:0e:f3:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oyEZd86ElC5gljk92LLFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMTFhZTIzYTNlOWM4YmM2ZjVhNzljNzE1ZmE5OWE3OGNm ODVkZmUwHhcNMjYwMTAxMjIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGZmNTkyYmMzMjZkMjdlZTgwODgxODVjMWIwOGMwN2YyMDliNDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweGmBRHcjzPIvoYyGYusjfHqKgNc r89Njbn2yRWSSFZYEXN53xITsWOaaOrMdwX3jTH3daSt36j1pVsShyNGiMSy8TPH m/HGZZSMdTfpMC/Dye6r6b9vIwj+sLThQsxDI30TZSKu2uCAl6pX6z3+n0JfuyPw GUEUVvJ6jGd74voURN7210Hmya8FaVgFdDlBKk9YF8yiXTleo9o9EzD8RdWkTtNs LSten6DicnvgqGeftyyBIucJldOHNqRA0c6H9H+D6D5WedP9qClk4IqD9whHnJXD 4ksFjizAMHzwkoR1XYjYkQdm6Uv5dTbXVc7Ay4GPSrX5aWTUt/Kam+DPFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCj/WSvDJtJ+6AiBhcGwjAfyCbQ+MB8GA1UdIwQY MBaAFLoRriOj6ci8b1p5xxX6maeM+F3+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWhHdUk2UHB5THh2V25uSEZmcVpwNHo0WGY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZWE2MzYtZWMxMS00MTU5LWIyNGIt YjFlMGRkMmJmNWM3LzEvS1A5Wks4TW0wbjdvQ0lHRndiQ01CX0lKdEQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85ZWE2MzYtZWMxMS00MTU5LWIyNGItYjFlMGRkMmJmNWM3 LzEvdWhHdUk2UHB5THh2V25uSEZmcVpwNHo0WGY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+Q8MA0G CSqGSIb3DQEBCwUAA4IBAQA2hS/6aUYWo34pYQ845st4SIQRYrMrEcoyvBIi3rES IVVqAVgsOigKKsilgSnb3mCi9OMC3AdbDcTckYqNK2O9xCbTT3z2ICxn5xU/zAKD dS5ot8txT6BY03PhU8eF5Th7oRbwfKWHiJUhkes3zEOGSQh8QjvmVi9IgImmCGJ0 u1bqFZGE9xpG/NATkdp8wMwWHQL+94dX3uZYNmFssEABnSwyfHpt83sQjaPJ51Pe JtBX78K6MxUpuDEUFlMbJu6iapMqO+Ufceqj7oArKGVo+/WWG0u4jES8kHOV0yAS vinlUNnpb90IwgWbqA/qff07LG3JeaWY914VxrU5DvNb -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:48 2026 by rpki-client