This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/g_krh2ESB_0CpH3X6c12x1Dfbqg.roa File: g_krh2ESB_0CpH3X6c12x1Dfbqg.roa (raw, json) Hash identifier: EfhK3NmIgregmf9bIOM14t/sj8oiobS2Jp9vfQj5TVg= Subject key identifier: 83:F9:2B:87:61:12:07:FD:02:A4:7D:D7:E9:CD:76:C7:50:DF:6E:A8 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019A871035E7E9800BE0E50793D201AC1D95 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/g_krh2ESB_0CpH3X6c12x1Dfbqg.roa Signing time: Sat 15 Nov 2025 10:29:37 +0000 ROA not before: Sat 15 Nov 2025 10:29:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 185.157.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:87:10:35:e7:e9:80:0b:e0:e5:07:93:d2:01:ac:1d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Nov 15 10:29:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=83f92b87611207fd02a47dd7e9cd76c750df6ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:77:40:e1:77:c8:15:97:28:5e:77:95:02: 5a:37:c1:2f:83:16:eb:ea:df:aa:ec:12:89:c8:fa: 2f:fc:cd:c7:eb:4b:3f:cf:c5:be:66:22:f6:56:4c: 1c:04:71:07:cf:93:54:87:b5:44:72:a6:a2:18:76: 91:56:83:ac:dc:d1:e9:89:62:1c:d6:bb:a2:3c:51: f9:02:a0:f3:3b:98:72:91:4b:35:68:13:9b:3c:d5: 41:00:dd:5f:6e:d5:ed:aa:a5:e3:75:7f:a1:e3:5b: 31:0c:13:12:15:74:a5:cc:57:52:0b:52:74:14:8b: b9:ef:cc:bf:f3:69:83:81:51:43:09:86:26:3e:1e: 3e:07:e4:48:39:14:ad:3e:cf:87:48:f3:56:43:2b: e5:c2:34:68:60:f7:a4:70:86:80:dc:6d:4c:8a:c0: 9f:00:c9:82:bf:42:c7:f3:05:0c:81:c5:23:dd:73: 00:00:e1:1f:40:3e:4b:9c:d0:08:ce:34:09:f7:cb: 28:fa:ea:ab:b6:aa:b8:e5:a8:a8:de:8f:d2:aa:36: d0:ee:69:d2:d9:df:7f:8c:d9:58:8c:eb:ef:14:c9: fa:f1:66:54:fb:dc:45:e5:36:e4:b8:21:96:d8:df: 7a:55:39:c1:49:42:40:a4:37:9c:ab:8a:16:9c:26: 97:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F9:2B:87:61:12:07:FD:02:A4:7D:D7:E9:CD:76:C7:50:DF:6E:A8 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/g_krh2ESB_0CpH3X6c12x1Dfbqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.46.0/24 Signature Algorithm: sha256WithRSAEncryption 87:2b:b8:88:ae:3c:fc:d4:ef:b5:6c:75:ef:08:7a:b9:5b:46: c0:6d:97:8f:74:1b:80:f6:f6:74:88:82:cd:94:fa:96:1d:f4: c0:a6:8e:89:bb:5e:0a:5c:67:61:7b:2f:65:6f:b7:8e:7c:b6: 4a:8c:35:e8:51:5a:19:a3:e1:26:79:26:c4:d6:72:16:a1:c0: 15:96:59:4e:77:45:14:08:08:43:0c:ed:03:dd:e5:3a:d4:53: d4:6e:5d:f6:db:18:bf:8b:ab:36:20:71:80:6b:2d:86:bb:3d: 77:7a:71:0d:11:4a:a8:34:78:58:af:a7:15:1b:bb:2a:c8:75: 50:df:88:f1:9a:49:81:93:39:e2:0b:ef:b8:de:5e:f7:14:cc: d4:92:32:4a:d2:95:da:70:0e:d2:9b:e3:b9:6a:bf:c8:0a:26: b1:d4:57:7f:28:ad:49:3d:f1:cd:c9:30:8c:7a:f8:c4:6e:88: 19:46:51:60:09:7c:6e:4e:43:03:e9:79:aa:85:0c:6a:d7:69: 45:3a:55:fe:ba:98:56:ba:65:0d:eb:90:f3:ce:f1:a1:ed:af: 98:cd:10:83:eb:41:32:93:fd:5d:b4:70:1a:bb:1c:5e:72:b8: b2:2f:05:51:23:00:73:b9:e1:a8:f7:cc:66:03:0e:46:bc:82: 7a:1c:7d:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqHEDXn6YAL4OUHk9IBrB2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjUxMTE1MTAyOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2Y5MmI4NzYxMTIwN2ZkMDJhNDdkZDdlOWNkNzZjNzUwZGY2ZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUB3QOF3yBWXKF53lQJaN8Evgxbr 6t+q7BKJyPov/M3H60s/z8W+ZiL2VkwcBHEHz5NUh7VEcqaiGHaRVoOs3NHpiWIc 1ruiPFH5AqDzO5hykUs1aBObPNVBAN1fbtXtqqXjdX+h41sxDBMSFXSlzFdSC1J0 FIu578y/82mDgVFDCYYmPh4+B+RIORStPs+HSPNWQyvlwjRoYPekcIaA3G1MisCf AMmCv0LH8wUMgcUj3XMAAOEfQD5LnNAIzjQJ98so+uqrtqq45aio3o/SqjbQ7mnS 2d9/jNlYjOvvFMn68WZU+9xF5TbkuCGW2N96VTnBSUJApDecq4oWnCaXYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIP5K4dhEgf9AqR91+nNdsdQ326oMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvZ19rcmgyRVNCXzBDcEgzWDZjMTJ4MURmYnFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ0uMA0G CSqGSIb3DQEBCwUAA4IBAQCHK7iIrjz81O+1bHXvCHq5W0bAbZePdBuA9vZ0iILN lPqWHfTApo6Ju14KXGdhey9lb7eOfLZKjDXoUVoZo+EmeSbE1nIWocAVlllOd0UU CAhDDO0D3eU61FPUbl322xi/i6s2IHGAay2Guz13enENEUqoNHhYr6cVG7sqyHVQ 34jxmkmBkzniC++43l73FMzUkjJK0pXacA7Sm+O5ar/ICiax1Fd/KK1JPfHNyTCM evjEbogZRlFgCXxuTkMD6XmqhQxq12lFOlX+uphWumUN65DzzvGh7a+YzRCD60Ey k/1dtHAauxxecriyLwVRIwBzueGo98xmAw5GvIJ6HH1E -----END CERTIFICATE-----Generated at Sat Dec 6 13:10:58 2025 by rpki-client