This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/KTOGyEIzZTvz0cK9QLa-fpUPjxQ.roa File: KTOGyEIzZTvz0cK9QLa-fpUPjxQ.roa (raw, json) Hash identifier: QEovE649tWS9gIrwPoqmHnxEiPeuGa3E2iwZoAPFly4= Subject key identifier: 29:33:86:C8:42:33:65:3B:F3:D1:C2:BD:40:B6:BE:7E:95:0F:8F:14 Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019B7AC928E3DCB72287D4E7D91BB04B3906 Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/KTOGyEIzZTvz0cK9QLa-fpUPjxQ.roa Signing time: Thu 01 Jan 2026 18:19:22 +0000 ROA not before: Thu 01 Jan 2026 18:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202965 IP address blocks: 178.175.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:28:e3:dc:b7:22:87:d4:e7:d9:1b:b0:4b:39:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Jan 1 18:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=293386c84233653bf3d1c2bd40b6be7e950f8f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:e3:42:d5:d4:4f:d9:e0:61:bf:c0:89:44: 9a:b1:8d:55:61:ca:7f:c4:77:90:8a:24:bc:e1:af: ef:b0:a2:20:2a:ed:70:19:67:36:4c:ad:55:47:8a: 57:8b:43:03:f9:89:a2:21:a2:06:02:c1:ba:7c:e0: fb:f0:ff:20:1e:2d:dc:89:f4:b9:7c:d3:49:31:cc: ef:8d:7a:05:2a:96:8f:8b:1b:64:17:bf:1d:dc:9a: 1b:2c:55:b3:07:91:11:ec:9a:d1:a8:bc:6d:b1:c5: 88:4b:ec:c6:9b:63:4f:ae:25:0b:ce:69:42:6e:ea: a4:78:73:ad:ba:6a:79:7a:a8:ba:9c:c4:3c:70:8c: 11:85:1b:e0:27:c6:b1:68:61:36:6f:58:4e:16:02: b1:da:59:0f:3f:41:fa:82:d1:eb:2a:cc:88:a4:6d: 89:10:6c:40:e7:63:08:af:88:85:85:ca:df:06:74: 5f:ac:83:a1:3d:78:38:0b:cb:fe:61:40:67:c0:60: 7b:04:87:ac:0a:dc:f1:2f:e8:98:03:d1:9c:9e:6e: 7c:36:ee:3c:ac:a0:cd:ea:3f:16:57:13:95:98:77: 05:72:22:57:bf:7d:d3:e4:e2:0e:3e:a6:e2:74:38: c4:0d:57:cd:f4:81:a8:15:95:40:a5:88:ad:44:ec: 98:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:33:86:C8:42:33:65:3B:F3:D1:C2:BD:40:B6:BE:7E:95:0F:8F:14 X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/KTOGyEIzZTvz0cK9QLa-fpUPjxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.175.151.0/24 Signature Algorithm: sha256WithRSAEncryption b0:26:93:4e:2d:0a:8c:1a:db:a1:55:55:5e:58:55:ec:e4:d6: ff:c6:07:2a:83:eb:07:72:04:3b:a5:ad:a0:25:94:f0:93:47: 74:07:e5:f6:76:68:87:0c:6b:44:10:0d:9a:d9:b1:d3:96:fe: e2:72:ce:db:97:34:e8:72:da:ec:9d:c9:dd:8b:5e:db:29:ff: 0c:be:7e:04:3b:ed:b2:aa:46:d3:97:ca:60:76:9f:36:7e:df: 7e:e8:6d:58:5b:61:ea:bc:6e:a6:9a:08:4a:fd:d5:aa:ca:4e: 73:32:33:72:88:ee:30:83:4d:80:74:18:6e:65:89:5c:ba:08: de:f7:3f:5a:df:57:0a:4e:44:b8:65:fb:e0:91:d1:29:a6:48: 8d:1d:cb:4c:58:6b:94:be:ef:9a:18:8c:56:00:53:fe:52:c9: 8c:4f:d4:75:82:10:03:53:33:e1:1a:a4:ba:48:26:95:7e:24: ba:ff:13:88:1e:ab:ee:28:79:a5:ee:b9:61:9b:9a:9e:7b:9e: c9:91:36:9f:cb:34:2f:38:c3:70:be:85:27:3e:21:30:69:60: 9b:d7:be:5d:28:2e:4c:d3:18:48:64:06:e1:c6:4f:62:af:dd: 73:26:43:10:ad:d8:fb:12:f3:55:33:d8:fd:6e:df:d1:38:e8: bf:1b:d2:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6ySjj3Lcih9Tn2RuwSzkGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjYwMTAxMTgxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTMzODZjODQyMzM2NTNiZjNkMWMyYmQ0MGI2YmU3ZTk1MGY4ZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU3jQtXUT9ngYb/AiUSasY1VYcp/ xHeQiiS84a/vsKIgKu1wGWc2TK1VR4pXi0MD+YmiIaIGAsG6fOD78P8gHi3cifS5 fNNJMczvjXoFKpaPixtkF78d3JobLFWzB5ER7JrRqLxtscWIS+zGm2NPriULzmlC buqkeHOtump5eqi6nMQ8cIwRhRvgJ8axaGE2b1hOFgKx2lkPP0H6gtHrKsyIpG2J EGxA52MIr4iFhcrfBnRfrIOhPXg4C8v+YUBnwGB7BIesCtzxL+iYA9Gcnm58Nu48 rKDN6j8WVxOVmHcFciJXv33T5OIOPqbidDjEDVfN9IGoFZVApYitROyYAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCkzhshCM2U789HCvUC2vn6VD48UMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvS1RPR3lFSXpaVHZ6MGNLOVFMYS1mcFVQanhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsq+XMA0G CSqGSIb3DQEBCwUAA4IBAQCwJpNOLQqMGtuhVVVeWFXs5Nb/xgcqg+sHcgQ7pa2g JZTwk0d0B+X2dmiHDGtEEA2a2bHTlv7ics7blzToctrsncndi17bKf8Mvn4EO+2y qkbTl8pgdp82ft9+6G1YW2HqvG6mmghK/dWqyk5zMjNyiO4wg02AdBhuZYlcugje 9z9a31cKTkS4ZfvgkdEppkiNHctMWGuUvu+aGIxWAFP+UsmMT9R1ghADUzPhGqS6 SCaVfiS6/xOIHqvuKHml7rlhm5qee57JkTafyzQvOMNwvoUnPiEwaWCb175dKC5M 0xhIZAbhxk9ir91zJkMQrdj7EvNVM9j9bt/ROOi/G9LD -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:28 2026 by rpki-client