This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/kZtpL4cIBGn_KpJB4nMiWVoW6cg.roa File: kZtpL4cIBGn_KpJB4nMiWVoW6cg.roa (raw, json) Hash identifier: nDgSl9VEJ3ihdK5aLMHP6iSjzCqJfCfn1TUVCjxV13k= Subject key identifier: 91:9B:69:2F:87:08:04:69:FF:2A:92:41:E2:73:22:59:5A:16:E9:C8 Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f Certificate serial: 019B7834A305F77B6FD88E2931280E468C16 Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/kZtpL4cIBGn_KpJB4nMiWVoW6cg.roa Signing time: Thu 01 Jan 2026 06:17:53 +0000 ROA not before: Thu 01 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207879 IP address blocks: 93.127.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a3:05:f7:7b:6f:d8:8e:29:31:28:0e:46:8c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f Validity Not Before: Jan 1 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=919b692f87080469ff2a9241e27322595a16e9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:c5:77:64:ea:14:5c:33:fb:ea:6b:95:84: 9f:48:3a:a1:6c:6b:bb:b0:4d:a9:51:65:69:d0:b7: f2:8d:31:25:5b:63:47:b6:c3:9d:98:6e:90:17:3c: 84:3c:b8:4c:f3:a0:7a:bb:eb:e9:60:9e:ed:d6:94: 79:74:9c:66:25:7f:04:2f:f4:3d:5e:df:f7:b2:40: ef:2c:32:a6:50:1f:35:90:bc:1c:11:2f:05:6d:7d: f6:09:25:d6:28:e6:e5:65:ce:7e:c3:96:d4:e7:24: 3c:62:b0:0e:a3:70:62:bb:bf:df:7e:e7:97:7a:14: 2a:60:a0:05:1c:a1:1a:c9:10:cb:2d:fc:ec:21:29: 78:d5:e5:c7:a2:fb:02:f3:fe:83:a4:b5:ad:f7:38: ee:61:6e:eb:89:47:b7:55:ac:18:f2:0b:2c:4f:a4: e1:70:10:e6:61:85:5a:ff:16:47:54:b9:84:dd:3d: 11:e5:a5:ee:26:21:90:88:36:ae:a6:59:d4:f3:6c: 42:ca:2f:ef:47:f4:c8:c8:a5:1e:10:f7:07:fe:55: 63:41:f1:92:a5:de:6e:3f:bb:ea:5a:7a:c3:8b:61: 25:c1:52:79:6e:3d:da:b2:0f:c2:d6:7d:ad:e8:df: 49:4d:04:93:e6:03:25:6d:ed:54:c1:6c:35:ee:16: 6f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9B:69:2F:87:08:04:69:FF:2A:92:41:E2:73:22:59:5A:16:E9:C8 X509v3 Authority Key Identifier: keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/kZtpL4cIBGn_KpJB4nMiWVoW6cg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.127.158.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:6b:ba:5f:c1:78:b9:7a:8b:ef:3f:b7:dd:2d:f3:7a:43:60: d3:65:76:f6:e6:f3:bd:f4:fe:2b:2f:a8:be:2c:a5:4b:ff:cf: cf:8a:fe:bc:6e:4f:4d:44:eb:d6:0f:a1:57:bb:c9:3f:40:45: a9:7d:4f:48:d1:e4:40:f6:8d:1b:66:2e:9e:39:fd:df:c7:20: 2e:6f:04:ff:a7:44:38:87:bf:2e:47:f1:fc:e0:4a:bc:8b:a7: 9b:21:bc:db:db:0f:2a:13:fa:f2:42:3f:79:31:b5:92:18:b2: 29:45:7a:ba:c8:8d:e7:c7:4d:9c:f5:04:05:f2:37:cc:06:e1: c0:d3:4b:36:31:ee:92:9b:4b:51:0b:17:17:c2:61:73:c7:8b: 9b:1e:aa:51:e1:e9:08:13:60:7f:2b:7d:f6:d1:b9:03:af:6a: 25:17:32:d2:7a:23:a1:1c:1e:57:43:ee:38:57:e3:67:10:52: 40:dd:68:43:a4:fb:8d:7d:da:c8:9d:37:68:11:79:49:2a:60: 1e:df:be:8a:19:57:b2:a5:79:64:5d:3f:94:3c:13:5f:99:1a: 24:49:a3:85:36:e6:a3:0a:87:1f:99:0a:4a:ff:ef:9d:1e:d0: a5:d7:21:27:9a:d5:8a:c4:b7:d0:fb:92:09:ab:2b:f8:28:7a: bc:c5:02:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKMF93tv2I4pMSgORowWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2 ZGRlNmYwHhcNMjYwMTAxMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTliNjkyZjg3MDgwNDY5ZmYyYTkyNDFlMjczMjI1OTVhMTZlOWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx7Fd2TqFFwz++prlYSfSDqhbGu7 sE2pUWVp0LfyjTElW2NHtsOdmG6QFzyEPLhM86B6u+vpYJ7t1pR5dJxmJX8EL/Q9 Xt/3skDvLDKmUB81kLwcES8FbX32CSXWKOblZc5+w5bU5yQ8YrAOo3Biu7/ffueX ehQqYKAFHKEayRDLLfzsISl41eXHovsC8/6DpLWt9zjuYW7riUe3VawY8gssT6Th cBDmYYVa/xZHVLmE3T0R5aXuJiGQiDauplnU82xCyi/vR/TIyKUeEPcH/lVjQfGS pd5uP7vqWnrDi2ElwVJ5bj3asg/C1n2t6N9JTQST5gMlbe1UwWw17hZvJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJGbaS+HCARp/yqSQeJzIllaFunIMB8GA1UdIwQY MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt NDQxNDU1OGZkY2JiLzEva1p0cEw0Y0lCR25fS3BKQjRuTWlXVm9XNmNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXX+eMA0G CSqGSIb3DQEBCwUAA4IBAQCba7pfwXi5eovvP7fdLfN6Q2DTZXb25vO99P4rL6i+ LKVL/8/Piv68bk9NROvWD6FXu8k/QEWpfU9I0eRA9o0bZi6eOf3fxyAubwT/p0Q4 h78uR/H84Eq8i6ebIbzb2w8qE/ryQj95MbWSGLIpRXq6yI3nx02c9QQF8jfMBuHA 00s2Me6Sm0tRCxcXwmFzx4ubHqpR4ekIE2B/K3320bkDr2olFzLSeiOhHB5XQ+44 V+NnEFJA3WhDpPuNfdrInTdoEXlJKmAe376KGVeypXlkXT+UPBNfmRokSaOFNuaj CocfmQpK/++dHtCl1yEnmtWKxLfQ+5IJqyv4KHq8xQKe -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:47 2026 by rpki-client