This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/KURPEp6jMQodajQ77Z6XAtz4O1E.roa File: KURPEp6jMQodajQ77Z6XAtz4O1E.roa (raw, json) Hash identifier: Qva6JxwibtpEndPVzrtUr/6puuw1FiwcQJgZaNSx7kE= Subject key identifier: 29:44:4F:12:9E:A3:31:0A:1D:6A:34:3B:ED:9E:97:02:DC:F8:3B:51 Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B79100D363C47BD7AEF535C9689A43615 Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/KURPEp6jMQodajQ77Z6XAtz4O1E.roa Signing time: Thu 01 Jan 2026 10:17:33 +0000 ROA not before: Thu 01 Jan 2026 10:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216384 IP address blocks: 45.88.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0d:36:3c:47:bd:7a:ef:53:5c:96:89:a4:36:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29444f129ea3310a1d6a343bed9e9702dcf83b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5a:2a:b6:da:74:4c:e8:f4:dc:db:6b:7f:26: d8:f8:bc:b6:9c:34:18:70:88:b6:76:e0:cb:85:b7: fb:99:e2:f0:99:f6:87:43:0c:be:b4:1a:92:5f:de: 20:81:45:ab:ad:4b:6b:07:87:2e:0b:d1:f6:73:88: 0d:6b:ca:c8:8b:a8:01:e6:bc:36:53:93:eb:60:d3: 5e:e2:6f:43:8f:c2:68:bb:1e:e2:25:c9:fa:e4:23: f7:95:e4:1f:fd:b0:28:82:f5:df:9c:eb:59:99:0c: 5a:2f:8e:cb:96:e1:3e:22:d9:0c:2e:24:ba:83:4c: ab:06:22:f7:6d:a9:8f:f7:b9:c5:eb:cc:2c:a6:16: 55:9a:56:cd:09:c5:15:1f:77:1a:2f:75:18:f3:bd: 4e:ce:6f:e9:ff:04:2a:25:80:84:c0:4a:03:d5:ee: 45:f0:46:94:71:67:a4:c6:39:0f:ac:56:75:51:2d: 15:3d:c2:24:82:7c:02:51:88:c7:3c:1f:26:72:f2: f9:0b:94:b0:1c:7c:55:5e:36:88:de:3b:ba:52:6c: da:56:3b:4b:d9:b4:95:c0:5d:05:1d:30:0d:2d:03: 5c:4c:53:fe:2e:21:32:a2:bb:0b:56:8b:cd:52:8e: 04:83:c4:d1:ad:6a:76:90:a0:08:e4:f5:b8:91:d8: d7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:44:4F:12:9E:A3:31:0A:1D:6A:34:3B:ED:9E:97:02:DC:F8:3B:51 X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/KURPEp6jMQodajQ77Z6XAtz4O1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.159.0/24 Signature Algorithm: sha256WithRSAEncryption 95:27:4d:a9:c4:e7:d7:b2:59:f5:58:39:91:ea:26:4e:c0:a9: 42:17:41:be:c7:5b:25:11:35:38:d3:a9:db:c2:66:00:d6:65: 6e:07:3a:d9:88:f4:0a:25:97:c3:c4:11:f4:92:4f:4f:a6:4a: 0a:ec:0a:9e:b4:34:94:87:8a:81:66:88:1b:99:21:af:d0:e5: b5:9e:65:61:2b:1c:2d:38:6f:b7:73:5c:43:28:9d:4c:50:8e: 44:65:3f:3f:25:da:0d:40:40:db:a6:b1:c3:bd:7f:64:ec:7b: f2:7a:61:50:83:60:93:b8:4e:40:c7:61:2f:14:9e:7b:1d:18: 83:73:04:44:7d:cd:5d:d4:bd:1a:70:df:77:38:32:5f:79:37: ec:f9:87:9d:e1:3e:a7:07:cb:08:85:50:46:3d:49:23:7a:6e: 15:d1:6f:e2:63:e2:d7:5d:71:7d:2f:ee:36:f7:ea:ba:53:58: e7:96:67:c0:e9:e2:a8:64:4d:60:65:94:38:76:0c:63:ec:49: 3c:f1:69:af:21:18:5c:5f:53:d2:d2:17:d5:89:cc:db:67:0c: f0:f6:1d:56:32:06:3b:1a:56:85:d7:4c:d8:f1:e5:dc:7c:96: fc:95:f8:fb:42:03:6b:0e:67:61:22:08:fe:fc:58:c4:e6:4b: 9a:ed:c5:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EA02PEe9eu9TXJaJpDYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTQ0NGYxMjllYTMzMTBhMWQ2YTM0M2JlZDllOTcwMmRjZjgzYjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVoqttp0TOj03NtrfybY+Ly2nDQY cIi2duDLhbf7meLwmfaHQwy+tBqSX94ggUWrrUtrB4cuC9H2c4gNa8rIi6gB5rw2 U5PrYNNe4m9Dj8Joux7iJcn65CP3leQf/bAogvXfnOtZmQxaL47LluE+ItkMLiS6 g0yrBiL3bamP97nF68wsphZVmlbNCcUVH3caL3UY871Ozm/p/wQqJYCEwEoD1e5F 8EaUcWekxjkPrFZ1US0VPcIkgnwCUYjHPB8mcvL5C5SwHHxVXjaI3ju6UmzaVjtL 2bSVwF0FHTANLQNcTFP+LiEyorsLVovNUo4Eg8TRrWp2kKAI5PW4kdjX3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFClETxKeozEKHWo0O+2elwLc+DtRMB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvS1VSUEVwNmpNUW9kYWpRNzdaNlhBdHo0TzFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVifMA0G CSqGSIb3DQEBCwUAA4IBAQCVJ02pxOfXsln1WDmR6iZOwKlCF0G+x1slETU406nb wmYA1mVuBzrZiPQKJZfDxBH0kk9PpkoK7AqetDSUh4qBZogbmSGv0OW1nmVhKxwt OG+3c1xDKJ1MUI5EZT8/JdoNQEDbprHDvX9k7HvyemFQg2CTuE5Ax2EvFJ57HRiD cwREfc1d1L0acN93ODJfeTfs+Yed4T6nB8sIhVBGPUkjem4V0W/iY+LXXXF9L+42 9+q6U1jnlmfA6eKoZE1gZZQ4dgxj7Ek88WmvIRhcX1PS0hfViczbZwzw9h1WMgY7 GlaF10zY8eXcfJb8lfj7QgNrDmdhIgj+/FjE5kua7cXs -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:26 2026 by rpki-client