This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/KzL1NrpF1fIv1UZ-w1843U42opY.roa File: KzL1NrpF1fIv1UZ-w1843U42opY.roa (raw, json) Hash identifier: e/MBTifLcIfwIpz3DnQOZZoxAp3TFvcIxij/7Ilh7dM= Subject key identifier: 2B:32:F5:36:BA:45:D5:F2:2F:D5:46:7E:C3:5F:38:DD:4E:36:A2:96 Certificate issuer: /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d Certificate serial: 019B77C73A68763002BCBED42A78D15E193B Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/KzL1NrpF1fIv1UZ-w1843U42opY.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 91.240.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3a:68:76:30:02:bc:be:d4:2a:78:d1:5e:19:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b32f536ba45d5f22fd5467ec35f38dd4e36a296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e0:73:83:94:3d:90:f6:15:f0:bd:76:92:08: b8:3c:9a:be:b3:8e:e8:d6:02:12:0a:11:5e:69:c0: b5:ec:06:de:c1:48:a0:d7:04:1f:92:f4:a6:50:8d: f3:60:c1:f3:23:fa:a4:4d:b4:21:c5:57:db:b3:ef: 93:f6:05:f1:59:0d:45:b1:60:9a:79:79:2e:b7:bb: 28:02:87:78:a9:de:67:7a:30:a0:74:49:0c:2f:85: 8e:14:14:c1:36:27:76:fd:f4:9b:30:54:5e:7f:27: 15:b1:7d:9f:1d:82:82:64:ae:b0:30:d4:06:96:8c: ce:60:a5:2f:e5:e2:3a:12:d8:3c:11:33:5e:c8:c7: 0b:b1:d5:02:9e:7b:d9:f0:6b:0a:86:e2:10:be:2c: 21:23:67:9d:d1:90:0e:97:28:24:be:5d:7a:04:91: 52:8c:9c:6a:90:88:7d:be:d5:48:13:a5:f6:7a:af: 42:cd:55:23:fb:77:b7:93:12:fb:b5:e2:52:59:e7: 84:af:29:82:2e:c0:2f:b1:cb:a0:5d:9a:98:40:db: 27:a3:7d:51:2c:cc:ef:6b:be:13:cf:69:f5:a7:25: c6:4c:4b:64:3b:ff:2c:86:24:2f:24:ee:1e:8e:b9: dc:f2:5f:fc:df:48:3e:18:29:88:f0:c6:1d:4f:e4: f5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:32:F5:36:BA:45:D5:F2:2F:D5:46:7E:C3:5F:38:DD:4E:36:A2:96 X509v3 Authority Key Identifier: keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/KzL1NrpF1fIv1UZ-w1843U42opY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.95.0/24 Signature Algorithm: sha256WithRSAEncryption ce:5b:fa:38:1c:9e:6c:9b:86:b2:e9:58:eb:da:64:45:01:b8: 86:d0:11:70:20:15:7d:78:70:62:66:34:23:c2:7b:8d:8b:d2: 4f:27:39:d1:d1:ae:ff:d2:2e:1c:79:41:bb:5f:e6:dc:a4:96: 02:bb:08:cc:4a:8f:c9:bc:db:bf:ab:5d:44:99:e5:62:b5:71: ad:d2:d0:52:22:32:ef:c7:0d:ff:f0:9d:39:5f:12:7e:f7:5e: 5f:52:ac:f6:92:e8:e0:f7:be:14:69:d9:24:04:94:fe:b9:00: 72:19:f5:b6:4b:79:59:d6:b1:e7:e8:3d:a2:db:75:80:fa:a6: 10:85:17:c3:52:e4:d8:96:89:df:0f:b3:54:32:94:a5:c5:18: 92:72:9e:ea:e0:03:e3:c1:ee:fa:3a:5f:2a:c8:a3:5b:16:96: ac:34:5c:39:b7:07:54:e1:e7:04:04:a6:6d:07:a1:ae:c0:0a: 26:46:18:8e:17:f0:14:d6:47:37:9a:b1:26:b7:c8:81:7e:8e: f3:41:be:45:c1:c5:f6:3e:8a:37:67:d5:7e:84:a3:56:89:0a: 3e:fd:7f:ae:12:70:74:83:d1:87:25:cc:fb:1e:65:34:07:aa: 5e:6a:9a:0e:87:e6:aa:3b:85:99:e8:b0:d3:3e:9c:33:02:58: 10:e1:cd:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xzpodjACvL7UKnjRXhk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MGU3MjM3ZjE0NTlhZmY0ZDVhZTA5NGJkMmM4NTI1NmUy ZTJlM2QwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjMyZjUzNmJhNDVkNWYyMmZkNTQ2N2VjMzVmMzhkZDRlMzZhMjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OBzg5Q9kPYV8L12kgi4PJq+s47o 1gISChFeacC17AbewUig1wQfkvSmUI3zYMHzI/qkTbQhxVfbs++T9gXxWQ1FsWCa eXkut7soAod4qd5nejCgdEkML4WOFBTBNid2/fSbMFRefycVsX2fHYKCZK6wMNQG lozOYKUv5eI6Etg8ETNeyMcLsdUCnnvZ8GsKhuIQviwhI2ed0ZAOlygkvl16BJFS jJxqkIh9vtVIE6X2eq9CzVUj+3e3kxL7teJSWeeErymCLsAvscugXZqYQNsno31R LMzva74Tz2n1pyXGTEtkO/8shiQvJO4ejrnc8l/830g+GCmI8MYdT+T1ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCsy9Ta6RdXyL9VGfsNfON1ONqKWMB8GA1UdIwQY MBaAFMUOcjfxRZr/TVrglL0shSVuLi49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wMzY1MGMtZDdiYi00ZjEzLWIyMDAt NTBkMDE4YmIwYmY2LzEvS3pMMU5ycEYxZkl2MVVaLXcxODQzVTQyb3BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wMzY1MGMtZDdiYi00ZjEzLWIyMDAtNTBkMDE4YmIwYmY2 LzEveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/BfMA0G CSqGSIb3DQEBCwUAA4IBAQDOW/o4HJ5sm4ay6Vjr2mRFAbiG0BFwIBV9eHBiZjQj wnuNi9JPJznR0a7/0i4ceUG7X+bcpJYCuwjMSo/JvNu/q11EmeVitXGt0tBSIjLv xw3/8J05XxJ+915fUqz2kujg974UadkkBJT+uQByGfW2S3lZ1rHn6D2i23WA+qYQ hRfDUuTYlonfD7NUMpSlxRiScp7q4APjwe76Ol8qyKNbFpasNFw5twdU4ecEBKZt B6GuwAomRhiOF/AU1kc3mrEmt8iBfo7zQb5FwcX2Poo3Z9V+hKNWiQo+/X+uEnB0 g9GHJcz7HmU0B6peapoOh+aqO4WZ6LDTPpwzAlgQ4c15 -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:20 2026 by rpki-client