This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/kprspPA2Qu5boxnWzJ_lU9Ab0AE.roa File: kprspPA2Qu5boxnWzJ_lU9Ab0AE.roa (raw, json) Hash identifier: gEFYkhBGdlaWlWOzwy8lZShF5geJiJozavQlsbuA1Tk= Subject key identifier: 92:9A:EC:A4:F0:36:42:EE:5B:A3:19:D6:CC:9F:E5:53:D0:1B:D0:01 Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d Certificate serial: 019B7E376B615070C393AFF6D2014450FD7C Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/kprspPA2Qu5boxnWzJ_lU9Ab0AE.roa Signing time: Fri 02 Jan 2026 10:18:39 +0000 ROA not before: Fri 02 Jan 2026 10:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12684 IP address blocks: 84.235.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:6b:61:50:70:c3:93:af:f6:d2:01:44:50:fd:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d Validity Not Before: Jan 2 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=929aeca4f03642ee5ba319d6cc9fe553d01bd001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bf:75:8a:c9:36:9c:f0:82:fd:ad:cc:ce:24: 89:d7:d8:e1:93:c6:92:fb:69:fb:e3:6c:2c:a8:55: c1:c2:c7:ac:08:7f:74:ce:7c:2f:bf:e2:9c:f4:28: 7e:07:48:c5:8d:7d:ce:72:3e:be:3b:cf:24:4f:02: f8:34:6e:b4:e8:c1:5b:96:5b:78:4c:6d:93:9b:aa: 26:16:ad:4a:42:ee:24:23:eb:99:9f:2e:a7:c3:d9: bd:e4:6b:98:e5:48:eb:f2:04:94:38:7b:ab:36:a0: db:d8:f1:df:26:3a:2e:cc:42:16:d7:f7:bc:54:b2: bb:d1:46:94:f9:44:b6:9b:90:8a:e4:2d:9f:01:7f: 53:0f:29:cd:41:2b:c7:0d:a8:11:02:a2:4a:c3:33: 62:a5:8b:ce:e4:46:42:d6:9c:f2:5c:c4:ac:d2:49: 63:a6:d1:35:2e:d2:bf:cb:75:d0:e3:34:67:69:1d: ed:be:90:27:06:23:2a:6d:59:22:e4:88:cf:cd:8e: cd:29:eb:ab:d7:13:b1:b4:37:31:95:00:37:63:b1: 9e:1d:70:f3:a7:1b:6d:ba:6d:57:a8:73:28:b5:31: 8f:c7:0d:ba:33:51:29:7b:e9:42:72:70:00:3e:42: 44:8f:b4:7e:15:4c:59:23:a8:ee:c3:34:1b:8a:9a: 10:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9A:EC:A4:F0:36:42:EE:5B:A3:19:D6:CC:9F:E5:53:D0:1B:D0:01 X509v3 Authority Key Identifier: keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/kprspPA2Qu5boxnWzJ_lU9Ab0AE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.235.141.0/24 Signature Algorithm: sha256WithRSAEncryption 14:6c:3d:f1:46:3c:0d:56:26:83:5b:ca:fb:6e:73:4e:94:33: 61:71:ce:76:f1:27:e4:d4:5e:4d:83:a0:33:d9:93:8a:4d:24: 6c:a5:ba:fb:d4:f2:18:67:2e:c6:25:bc:c3:16:38:11:25:f8: 30:ef:5d:59:c6:85:33:3e:ae:de:07:89:26:f3:17:1d:ff:5c: dc:35:3d:86:03:6e:20:a4:39:3f:6a:08:fa:c4:9a:76:89:16: 4f:c6:57:97:bf:85:3e:a4:3b:1e:02:b2:b2:d7:0f:dd:fe:07: 6c:ce:5d:7e:63:c1:8d:f9:cf:94:c5:06:ff:74:0b:4e:2c:0c: 29:e3:b2:d2:f3:96:15:4a:41:04:82:b8:1a:a0:c6:b4:89:b5: d7:e3:1b:74:ab:5f:94:53:39:32:d4:7d:b6:88:c5:14:30:13: eb:f7:16:38:99:89:f5:be:7a:4d:38:84:09:d6:b7:c8:7c:78: 45:d9:7b:07:30:82:09:a4:7e:43:87:cc:10:bf:6a:25:e0:c0: e2:d7:a2:01:12:92:70:ab:9f:7f:33:87:5b:4c:aa:e8:c8:d7: c6:3e:d5:65:01:a7:e6:63:8e:69:d5:07:c4:80:9d:85:e9:dc: 05:40:9c:48:7a:4b:41:8b:69:e2:75:cf:c5:6f:b6:85:28:d4: 98:06:5d:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N2thUHDDk6/20gFEUP18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzN2M4MzQ0N2QxNzE4MzM4MGY0ODliYzk0NmM4YjllMzAw ZmZiMWQwHhcNMjYwMTAyMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjlhZWNhNGYwMzY0MmVlNWJhMzE5ZDZjYzlmZTU1M2QwMWJkMDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL91isk2nPCC/a3MziSJ19jhk8aS +2n742wsqFXBwsesCH90znwvv+Kc9Ch+B0jFjX3Ocj6+O88kTwL4NG606MFbllt4 TG2Tm6omFq1KQu4kI+uZny6nw9m95GuY5Ujr8gSUOHurNqDb2PHfJjouzEIW1/e8 VLK70UaU+US2m5CK5C2fAX9TDynNQSvHDagRAqJKwzNipYvO5EZC1pzyXMSs0klj ptE1LtK/y3XQ4zRnaR3tvpAnBiMqbVki5IjPzY7NKeur1xOxtDcxlQA3Y7GeHXDz pxttum1XqHMotTGPxw26M1Epe+lCcnAAPkJEj7R+FUxZI6juwzQbipoQawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJKa7KTwNkLuW6MZ1syf5VPQG9ABMB8GA1UdIwQY MBaAFCN8g0R9FxgzgPSJvJRsi54wD/sdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEt OGIzMzcyMjM0ZGMwLzEva3Byc3BQQTJRdTVib3huV3pKX2xVOUFiMEFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEtOGIzMzcyMjM0ZGMw LzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVOuNMA0G CSqGSIb3DQEBCwUAA4IBAQAUbD3xRjwNViaDW8r7bnNOlDNhcc528Sfk1F5Ng6Az 2ZOKTSRspbr71PIYZy7GJbzDFjgRJfgw711ZxoUzPq7eB4km8xcd/1zcNT2GA24g pDk/agj6xJp2iRZPxleXv4U+pDseArKy1w/d/gdszl1+Y8GN+c+UxQb/dAtOLAwp 47LS85YVSkEEgrgaoMa0ibXX4xt0q1+UUzky1H22iMUUMBPr9xY4mYn1vnpNOIQJ 1rfIfHhF2XsHMIIJpH5Dh8wQv2ol4MDi16IBEpJwq59/M4dbTKroyNfGPtVlAafm Y45p1QfEgJ2F6dwFQJxIektBi2nidc/Fb7aFKNSYBl1d -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:43 2026 by rpki-client