This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/KB9udzypgop75BxFv1yBtlWHqDs.roa File: KB9udzypgop75BxFv1yBtlWHqDs.roa (raw, json) Hash identifier: DpZghEkB4Rb9dNqqY0ep9k8gs2Gh29rPXbLQDAmuPgU= Subject key identifier: 28:1F:6E:77:3C:A9:82:8A:7B:E4:1C:45:BF:5C:81:B6:55:87:A8:3B Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e Certificate serial: 019B78A2C12284E0FE8F592177C27BD281F5 Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/KB9udzypgop75BxFv1yBtlWHqDs.roa Signing time: Thu 01 Jan 2026 08:18:10 +0000 ROA not before: Thu 01 Jan 2026 08:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8638 IP address blocks: 87.123.208.0/22 maxlen: 22 89.27.161.0/24 maxlen: 24 89.247.220.0/24 maxlen: 24 94.134.81.0/24 maxlen: 24 2001:1438:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c1:22:84:e0:fe:8f:59:21:77:c2:7b:d2:81:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e Validity Not Before: Jan 1 08:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=281f6e773ca9828a7be41c45bf5c81b65587a83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:df:29:59:6c:3d:d8:f2:af:cd:05:07:84: 00:b2:d5:0f:f7:70:9f:27:19:0d:6e:9b:a2:64:95: bb:a5:cf:58:e8:34:21:a8:5b:47:06:92:c0:b3:21: 06:eb:e4:54:63:cd:58:ea:77:58:a2:10:a3:a7:1c: 85:2a:3d:0d:29:85:3c:5b:3a:ad:09:df:99:2d:53: e8:79:89:49:f9:1f:4f:7d:84:3e:a6:ae:53:78:08: b3:a1:5b:cb:95:f2:bb:b8:d4:b4:38:6d:76:0f:fa: 4e:00:65:a7:1f:01:bd:b3:37:be:de:00:a8:94:3f: 08:a3:9b:fc:e7:b5:bd:62:bf:54:af:05:c5:ba:30: d9:2b:21:8b:70:a9:67:e3:97:b2:87:ab:11:09:c4: 9f:40:ed:41:8b:6b:2a:80:65:f7:16:2c:fe:33:b5: 98:cd:f4:26:3c:83:2a:3e:17:34:9a:00:8a:f1:93: 5c:ef:36:2a:09:da:d8:2d:a0:3b:f0:8d:09:3a:ac: 45:a3:a4:df:8c:f9:0d:32:cb:f8:cc:5e:55:92:f2: a8:07:00:48:5a:7b:4d:7a:20:b9:22:44:78:10:a2: 13:18:00:60:a2:1d:a0:c0:10:2e:89:2f:22:db:9a: db:70:9b:ac:6c:5f:2d:7d:18:e8:f5:e8:7b:44:c0: 25:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1F:6E:77:3C:A9:82:8A:7B:E4:1C:45:BF:5C:81:B6:55:87:A8:3B X509v3 Authority Key Identifier: keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/KB9udzypgop75BxFv1yBtlWHqDs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.123.208.0/22 89.27.161.0/24 89.247.220.0/24 94.134.81.0/24 IPv6: 2001:1438:f000::/36 Signature Algorithm: sha256WithRSAEncryption 9d:11:10:3e:e0:2c:74:a3:75:b7:9f:55:00:40:bf:69:a1:ad: f9:04:c9:aa:ed:7a:af:c7:91:ab:02:40:7f:ae:90:63:27:ec: bc:89:f6:44:bd:a5:97:34:b5:90:f4:01:ef:fc:ad:b3:77:9f: 08:f5:14:65:4a:70:af:de:d2:0c:0f:10:73:ad:65:5a:7a:2e: 1f:1e:05:65:75:49:89:f9:db:c4:47:33:a0:7c:47:5b:56:e2: f5:89:6f:da:85:b7:3a:d1:3c:c7:f5:2f:72:91:4f:52:a8:d8: 9b:46:b1:18:29:74:43:88:56:48:d7:6a:3a:04:0c:2a:3b:ce: fe:d5:9b:a4:7e:9b:fb:d5:71:0c:cf:ed:bb:9d:47:39:09:3f: d8:ba:f1:99:67:e1:14:b5:07:26:e6:dc:61:8d:fe:23:61:b5: ad:dc:92:ea:20:a2:42:b6:b6:c9:eb:13:e1:0f:40:3f:fb:b1: f4:11:a1:82:31:00:c7:ad:43:b2:76:fa:1a:2f:fa:5b:50:4d: f6:84:c9:fa:dd:56:f7:14:b7:34:d4:d2:fd:2b:44:bd:76:83: f9:8a:05:0a:d0:db:bb:a4:11:ac:bb:23:c1:e5:ed:83:d9:c5: 6d:65:27:19:b3:00:ec:ea:1f:13:ac:bf:b4:dd:32:c3:09:11: 42:0f:c8:f4 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt4osEihOD+j1khd8J70oH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZDFhMTM1M2Y3ZjhiNTA1ZmM5ODc1MGU4Njc4N2Y0ZTA0 NjQzMmUwHhcNMjYwMTAxMDgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODFmNmU3NzNjYTk4MjhhN2JlNDFjNDViZjVjODFiNjU1ODdhODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEXfKVlsPdjyr80FB4QAstUP93Cf JxkNbpuiZJW7pc9Y6DQhqFtHBpLAsyEG6+RUY81Y6ndYohCjpxyFKj0NKYU8Wzqt Cd+ZLVPoeYlJ+R9PfYQ+pq5TeAizoVvLlfK7uNS0OG12D/pOAGWnHwG9sze+3gCo lD8Io5v857W9Yr9UrwXFujDZKyGLcKln45eyh6sRCcSfQO1Bi2sqgGX3Fiz+M7WY zfQmPIMqPhc0mgCK8ZNc7zYqCdrYLaA78I0JOqxFo6TfjPkNMsv4zF5VkvKoBwBI WntNeiC5IkR4EKITGABgoh2gwBAuiS8i25rbcJusbF8tfRjo9eh7RMAlRQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFCgfbnc8qYKKe+QcRb9cgbZVh6g7MB8GA1UdIwQY MBaAFAHRoTU/f4tQX8mHUOhnh/TgRkMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEt NjQzYTQxNTlhYjQ2LzEvS0I5dWR6eXBnb3A3NUJ4RnYxeUJ0bFdIcURzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEtNjQzYTQxNTlhYjQ2 LzEvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQCV3vQAwQA WRuhAwQAWffcAwQAXoZRMA4EAgACMAgDBgQgARQ48DANBgkqhkiG9w0BAQsFAAOC AQEAnREQPuAsdKN1t59VAEC/aaGt+QTJqu16r8eRqwJAf66QYyfsvIn2RL2llzS1 kPQB7/yts3efCPUUZUpwr97SDA8Qc61lWnouHx4FZXVJifnbxEczoHxHW1bi9Ylv 2oW3OtE8x/UvcpFPUqjYm0axGCl0Q4hWSNdqOgQMKjvO/tWbpH6b+9VxDM/tu51H OQk/2LrxmWfhFLUHJubcYY3+I2G1rdyS6iCiQra2yesT4Q9AP/ux9BGhgjEAx61D snb6Gi/6W1BN9oTJ+t1W9xS3NNTS/StEvXaD+YoFCtDbu6QRrLsjweXtg9nFbWUn GbMA7OofE6y/tN0ywwkRQg/I9A== -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:30 2026 by rpki-client