This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/KdqxPru-n3hoW07_Ia_EY5qo-gs.roa File: KdqxPru-n3hoW07_Ia_EY5qo-gs.roa (raw, json) Hash identifier: nHBt8Iolo72XzLdo8e8Ep2RH7UXsZGR1GpAo5yUz4DM= Subject key identifier: 29:DA:B1:3E:BB:BE:9F:78:68:5B:4E:FF:21:AF:C4:63:9A:A8:FA:0B Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4 Certificate serial: 019B77C69A5D79B4D8CE92E0BAB4A90769A3 Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/KdqxPru-n3hoW07_Ia_EY5qo-gs.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50126 IP address blocks: 77.232.144.0/24 maxlen: 24 77.232.145.0/24 maxlen: 24 77.232.146.0/24 maxlen: 24 77.232.147.0/24 maxlen: 24 77.232.148.0/22 maxlen: 22 77.232.152.0/24 maxlen: 24 77.232.153.0/24 maxlen: 24 77.232.154.0/24 maxlen: 24 77.232.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9a:5d:79:b4:d8:ce:92:e0:ba:b4:a9:07:69:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29dab13ebbbe9f78685b4eff21afc4639aa8fa0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:64:16:03:87:b0:ba:47:bf:a2:6f:27:1d:9f: 86:41:30:b3:dc:d7:58:df:ae:b0:57:de:99:ac:63: a5:3f:43:2d:e2:0d:08:28:37:d3:0d:5b:b7:8c:0e: ed:49:fa:2a:39:dc:a9:d7:61:b7:25:28:3e:9b:e0: 39:87:a8:bd:36:30:a9:1b:42:75:7f:9e:1b:4a:10: 48:1e:d9:08:d4:bc:6d:b7:b2:73:49:c6:4e:72:89: e0:d7:a7:76:76:45:43:17:a3:ed:3f:e4:a3:83:16: 49:0f:23:10:e3:7c:14:ce:ef:01:4b:9e:15:84:dd: 41:c5:69:b6:c8:2b:b0:72:5e:83:5b:be:df:f3:26: 09:fa:a2:bc:74:83:a0:50:a2:33:84:c3:5c:88:6b: 09:c3:ab:ac:6b:47:59:70:fd:31:c8:96:5e:b5:0a: 16:75:f2:da:e3:da:9f:22:df:52:23:89:68:9a:48: 1b:01:c8:28:77:7e:ed:a3:5b:73:89:dc:ef:fc:4f: 23:f8:5b:63:4f:42:45:f8:54:b6:6c:13:59:34:92: e4:66:ca:b6:ba:45:99:45:43:59:79:57:0b:88:b8: 02:68:a4:d2:ca:c9:1f:9b:00:c4:ae:fe:4a:e5:e5: 0b:c8:c0:86:82:34:c4:31:fa:46:0c:aa:90:87:b0: 9a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DA:B1:3E:BB:BE:9F:78:68:5B:4E:FF:21:AF:C4:63:9A:A8:FA:0B X509v3 Authority Key Identifier: keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/KdqxPru-n3hoW07_Ia_EY5qo-gs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.232.144.0-77.232.155.255 Signature Algorithm: sha256WithRSAEncryption 6a:fe:8f:ca:99:cf:4f:0c:10:9d:94:ea:36:dc:0b:49:ae:7f: ce:0f:64:3c:1c:6b:22:64:03:0f:9a:76:df:0d:5a:c8:e6:b5: 24:8c:c7:a3:cf:55:3d:fe:4f:ca:da:da:64:e2:53:13:6c:d2: 28:7c:aa:ea:ab:4b:26:5f:2b:81:cb:69:f6:1c:6c:ac:2d:3c: fe:a3:6d:5e:26:fb:41:69:8b:d5:25:a1:53:8b:2b:16:54:83: 22:50:29:a0:71:a9:dd:f7:c6:54:61:bb:40:0e:16:05:f5:0a: f8:7d:f5:71:3a:a7:1f:7a:ce:56:ae:13:48:48:10:d3:00:fd: 44:aa:ff:6f:da:59:b6:aa:24:1c:d2:da:fe:d0:67:18:91:1f: 42:c6:9c:9f:f7:65:a6:87:ab:2e:04:6c:cb:80:90:07:6a:7d: 71:d9:a9:e9:68:5d:77:43:ec:49:56:0d:2a:cd:61:50:cc:ea: 23:72:23:d4:7f:c1:c5:00:bf:74:79:9b:7d:ad:59:29:6e:07: 1d:b6:a7:bb:2c:f4:6a:4c:10:6a:8b:c9:1b:c5:57:7c:45:8d: 92:7b:43:01:8b:57:e0:e4:68:24:46:f0:69:87:24:7f:1b:37: 82:3a:5e:41:b4:3a:cb:2a:22:b7:3e:c2:52:86:4b:bd:9c:b7: 67:89:50:8c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xppdebTYzpLgurSpB2mjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDRlNjQxZTU1YTQ4YWVlMDE0MWUyYzBkMjYyMjcxMDJj YWE2ZDQwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWRhYjEzZWJiYmU5Zjc4Njg1YjRlZmYyMWFmYzQ2MzlhYThmYTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WQWA4ewuke/om8nHZ+GQTCz3NdY 366wV96ZrGOlP0Mt4g0IKDfTDVu3jA7tSfoqOdyp12G3JSg+m+A5h6i9NjCpG0J1 f54bShBIHtkI1Lxtt7JzScZOcong16d2dkVDF6PtP+SjgxZJDyMQ43wUzu8BS54V hN1BxWm2yCuwcl6DW77f8yYJ+qK8dIOgUKIzhMNciGsJw6usa0dZcP0xyJZetQoW dfLa49qfIt9SI4lomkgbAcgod37to1tzidzv/E8j+FtjT0JF+FS2bBNZNJLkZsq2 ukWZRUNZeVcLiLgCaKTSyskfmwDErv5K5eULyMCGgjTEMfpGDKqQh7CaxwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCnasT67vp94aFtO/yGvxGOaqPoLMB8GA1UdIwQY MBaAFNUE5kHlWkiu4BQeLA0mInECyqbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMDFmMzUtMmNjYS00ZTVhLTgyOGEt NmJmZmNiN2MwZjBhLzEvS2RxeFBydS1uM2hvVzA3X0lhX0VZNXFvLWdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mMDFmMzUtMmNjYS00ZTVhLTgyOGEtNmJmZmNiN2MwZjBh LzEvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARN6JAD BAJN6JgwDQYJKoZIhvcNAQELBQADggEBAGr+j8qZz08MEJ2U6jbcC0muf84PZDwc ayJkAw+adt8NWsjmtSSMx6PPVT3+T8ra2mTiUxNs0ih8quqrSyZfK4HLafYcbKwt PP6jbV4m+0Fpi9UloVOLKxZUgyJQKaBxqd33xlRhu0AOFgX1Cvh99XE6px96zlau E0hIENMA/USq/2/aWbaqJBzS2v7QZxiRH0LGnJ/3ZaaHqy4EbMuAkAdqfXHZqelo XXdD7ElWDSrNYVDM6iNyI9R/wcUAv3R5m32tWSluBx22p7ss9GpMEGqLyRvFV3xF jZJ7QwGLV+DkaCRG8GmHJH8bN4I6XkG0OssqIrc+wlKGS72ct2eJUIw= -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:23 2026 by rpki-client