This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/K0vidJ7tM2mKOKZRaF9LzxYTcOY.roa File: K0vidJ7tM2mKOKZRaF9LzxYTcOY.roa (raw, json) Hash identifier: j1Pyv97hL7TS1MOu3SXdm7zFyMsZ0tV3SkgI1mKBoHI= Subject key identifier: 2B:4B:E2:74:9E:ED:33:69:8A:38:A6:51:68:5F:4B:CF:16:13:70:E6 Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0 Certificate serial: 019B7F15381C2BE47998C049A505937EBC35 Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/K0vidJ7tM2mKOKZRaF9LzxYTcOY.roa Signing time: Fri 02 Jan 2026 14:20:55 +0000 ROA not before: Fri 02 Jan 2026 14:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48506 IP address blocks: 178.76.64.0/21 maxlen: 24 178.76.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:38:1c:2b:e4:79:98:c0:49:a5:05:93:7e:bc:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0 Validity Not Before: Jan 2 14:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b4be2749eed33698a38a651685f4bcf161370e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:29:a0:fb:32:63:07:0b:55:9e:37:68:7f:46: 3e:e8:4d:5f:7a:c0:23:ac:9b:5e:0c:93:d3:76:67: 37:b5:71:6e:ea:9c:f9:99:b5:12:15:a7:8b:11:4e: 75:91:3c:8c:01:d6:3a:cf:85:41:52:1e:9a:2f:e2: b5:58:12:8b:86:a9:38:ee:b8:dd:60:7c:20:ae:c7: 10:2a:f4:12:9e:55:ff:44:c4:c4:48:14:6d:08:c3: 50:c4:5b:9f:90:04:b8:0a:b1:45:31:b2:fc:2b:7d: 4f:b8:ff:cb:07:bd:32:bf:af:6c:3b:da:2e:7f:da: cf:72:ef:bd:40:eb:ab:8d:1d:5f:63:02:9d:19:21: 57:6f:5e:4d:ad:cd:08:80:74:b9:6e:6a:5d:b7:a8: d5:ad:55:80:48:28:10:09:f7:82:2b:07:7e:37:30: 34:15:88:a8:dc:5d:88:a5:fa:95:8e:5f:11:34:8b: e5:89:58:cc:00:98:4d:ca:d4:9d:ac:0c:e3:8e:5a: 78:68:be:ef:6f:21:7f:9f:6d:da:56:59:6f:2e:d4: 80:79:c2:8c:89:fc:58:6b:01:1a:17:62:da:f7:55: ed:22:dc:df:af:9d:32:32:3e:c1:72:a1:00:7f:ef: 70:c8:d4:69:c5:77:89:78:4d:41:f2:a2:d6:8a:75: cb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4B:E2:74:9E:ED:33:69:8A:38:A6:51:68:5F:4B:CF:16:13:70:E6 X509v3 Authority Key Identifier: keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/K0vidJ7tM2mKOKZRaF9LzxYTcOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.76.64.0-178.76.75.255 Signature Algorithm: sha256WithRSAEncryption c3:02:7e:74:7d:66:b2:d4:2b:58:59:5e:3d:90:e2:6e:c4:33: c4:24:a2:29:ba:6b:20:d7:e1:65:d4:68:19:96:2a:31:3a:a4: 61:60:d5:36:c1:4e:15:aa:0f:81:35:0e:8b:a2:d5:c6:d5:1a: 64:26:c7:1b:ab:8c:6a:71:4a:5f:28:f5:52:28:88:bc:eb:ec: 56:1a:bb:c1:cf:bb:68:a5:2d:dc:29:bf:27:3f:cf:02:2a:2d: 8c:80:7b:b0:3a:ec:dc:cc:5e:d6:6f:a3:27:05:81:6f:0b:c7: d2:07:6a:30:af:92:22:45:29:22:cf:c1:d8:d4:f6:41:15:00: 2c:79:ec:00:1e:56:6c:3b:92:9a:2c:1f:e6:8a:24:e1:8d:ec: ff:31:07:a4:cb:5a:99:e6:dd:70:41:a8:fe:2c:7d:81:eb:e3: 6b:c3:b8:13:63:f1:39:bf:1d:27:e8:84:77:8d:c0:58:23:b5: ec:4b:29:1b:d4:b1:a4:66:6e:a6:03:2b:ab:bb:fd:6f:7a:db: 46:06:94:46:27:72:27:a5:c7:46:fc:0d:c7:7a:db:d1:f9:76: a8:27:02:97:81:24:19:3f:0c:5f:fd:a8:af:39:c4:be:6e:67: 1f:5d:51:c9:18:14:08:c7:fc:3f:30:a9:58:77:ba:46:09:4e: 5d:e7:50:14 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/FTgcK+R5mMBJpQWTfrw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZWIxMDQ0NjNlOTIwYjQ1NTQyYjZhZjFhMjdkNTk1MGU4 NmU5YTAwHhcNMjYwMTAyMTQyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjRiZTI3NDllZWQzMzY5OGEzOGE2NTE2ODVmNGJjZjE2MTM3MGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3img+zJjBwtVnjdof0Y+6E1fesAj rJteDJPTdmc3tXFu6pz5mbUSFaeLEU51kTyMAdY6z4VBUh6aL+K1WBKLhqk47rjd YHwgrscQKvQSnlX/RMTESBRtCMNQxFufkAS4CrFFMbL8K31PuP/LB70yv69sO9ou f9rPcu+9QOurjR1fYwKdGSFXb15Nrc0IgHS5bmpdt6jVrVWASCgQCfeCKwd+NzA0 FYio3F2IpfqVjl8RNIvliVjMAJhNytSdrAzjjlp4aL7vbyF/n23aVllvLtSAecKM ifxYawEaF2La91XtItzfr50yMj7BcqEAf+9wyNRpxXeJeE1B8qLWinXLtwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCtL4nSe7TNpijimUWhfS88WE3DmMB8GA1UdIwQY MBaAFD3rEERj6SC0VUK2rxon1ZUOhumgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMt MTE5ZDhiZjcxN2JiLzEvSzB2aWRKN3RNMm1LT0taUmFGOUx6eFlUY09ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMtMTE5ZDhiZjcxN2Ji LzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAayTEAD BAKyTEgwDQYJKoZIhvcNAQELBQADggEBAMMCfnR9ZrLUK1hZXj2Q4m7EM8Qkoim6 ayDX4WXUaBmWKjE6pGFg1TbBThWqD4E1Doui1cbVGmQmxxurjGpxSl8o9VIoiLzr 7FYau8HPu2ilLdwpvyc/zwIqLYyAe7A67NzMXtZvoycFgW8Lx9IHajCvkiJFKSLP wdjU9kEVACx57AAeVmw7kposH+aKJOGN7P8xB6TLWpnm3XBBqP4sfYHr42vDuBNj 8Tm/HSfohHeNwFgjtexLKRvUsaRmbqYDK6u7/W9620YGlEYncielx0b8Dcd629H5 dqgnApeBJBk/DF/9qK85xL5uZx9dUckYFAjH/D8wqVh3ukYJTl3nUBQ= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:05 2026 by rpki-client