This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa File: K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa (raw, json) Hash identifier: UtI+N3jVMIi1MfArZauCcNJH+3Px9d37UixMPUZOoTo= Subject key identifier: 2B:E4:A7:AB:1F:E0:FE:C1:F8:3A:4A:32:52:F3:45:B6:5C:57:E9:D6 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019B7D5C4560862AC370A3D112449317175A Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa Signing time: Fri 02 Jan 2026 06:19:17 +0000 ROA not before: Fri 02 Jan 2026 06:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56435 IP address blocks: 212.86.103.0/24 maxlen: 24 212.86.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:45:60:86:2a:c3:70:a3:d1:12:44:93:17:17:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Jan 2 06:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2be4a7ab1fe0fec1f83a4a3252f345b65c57e9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f2:29:02:65:7e:dc:a6:ed:c2:94:c8:b7:6b: da:65:e3:28:59:ce:69:c8:6a:45:16:53:f1:6d:ad: bd:97:d9:f9:e0:c7:a7:70:75:ec:35:4f:91:10:bb: 6e:a3:9e:6e:92:aa:81:76:4d:cf:e2:ed:a4:e5:ee: 13:ed:81:dd:a8:ad:b8:0f:2d:dc:f2:8a:84:11:ae: a9:24:6f:ef:11:3c:81:d6:cd:bc:ff:cc:6b:5e:8a: d8:37:36:8f:a5:7f:8b:ac:45:aa:16:f1:19:18:46: b1:13:80:a3:7e:19:d3:6c:14:20:ab:aa:f6:82:e7: 44:a3:fd:f0:6f:cb:4a:4b:da:68:09:9b:38:13:89: 07:f6:e4:e7:5c:bd:a6:6a:80:19:0b:d8:18:65:e0: bd:3a:36:4a:60:6a:cf:ec:15:e4:c8:58:90:f0:3c: 51:b2:9e:a2:d3:db:99:d3:8f:2c:1c:c6:63:7f:4d: c1:78:fd:5f:21:0e:4d:94:56:72:00:89:6f:c6:47: 60:e8:87:dd:c1:d8:39:ce:76:da:44:82:73:43:64: b7:4f:eb:1a:11:5d:33:5c:57:6f:e7:88:75:ba:a9: 16:e9:b3:3a:c9:65:c3:ac:82:0e:a3:81:94:1a:63: 4a:3d:09:9e:19:f3:1b:5c:e7:13:91:a6:86:e6:86: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E4:A7:AB:1F:E0:FE:C1:F8:3A:4A:32:52:F3:45:B6:5C:57:E9:D6 X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.86.103.0/24 212.86.112.0/24 Signature Algorithm: sha256WithRSAEncryption 11:0e:42:8d:33:27:5d:8f:dd:c5:7d:a9:19:d6:6a:d2:50:57: 88:2b:95:cf:63:07:95:01:a2:b2:a0:72:01:ac:8f:38:e5:7f: 08:65:5e:7c:55:7a:3f:fb:e8:eb:74:43:d7:9e:ea:32:d1:88: bc:b3:7b:25:07:0d:b8:00:d3:f9:9d:57:7f:f1:83:3b:64:c4: d9:80:55:df:cf:5d:2c:2d:bb:93:35:a6:a9:12:1c:80:cc:9c: e1:82:53:ad:e2:10:c5:7c:99:bc:32:5f:4e:64:8b:e1:74:f4: c7:0a:d5:96:f9:3a:d2:46:53:13:e8:aa:65:f3:d6:7b:f4:22: 57:44:05:5c:58:2e:b1:38:05:65:a3:c8:92:96:d3:12:b8:11: d0:4f:b6:9d:3b:41:8b:52:8e:3d:91:71:14:8a:36:bc:b7:a2: 36:3d:c5:da:59:15:0f:a5:83:37:f0:f5:f0:5b:13:c1:ad:62: b0:59:f5:6f:35:ff:79:98:8b:65:49:61:12:15:4a:d0:15:af: bf:df:b9:b5:95:6e:e6:5e:9c:0a:cc:36:3f:1c:dd:48:d1:82: a8:af:66:f3:32:b4:eb:9c:08:17:c5:ab:b3:28:92:db:fd:a9: e5:50:0c:a8:68:f9:c2:0c:13:c9:3d:11:f3:24:e7:94:c3:45: 2a:4c:66:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XEVghirDcKPREkSTFxdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwMTAyMDYxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmU0YTdhYjFmZTBmZWMxZjgzYTRhMzI1MmYzNDViNjVjNTdlOWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvIpAmV+3KbtwpTIt2vaZeMoWc5p yGpFFlPxba29l9n54MencHXsNU+RELtuo55ukqqBdk3P4u2k5e4T7YHdqK24Dy3c 8oqEEa6pJG/vETyB1s28/8xrXorYNzaPpX+LrEWqFvEZGEaxE4CjfhnTbBQgq6r2 gudEo/3wb8tKS9poCZs4E4kH9uTnXL2maoAZC9gYZeC9OjZKYGrP7BXkyFiQ8DxR sp6i09uZ048sHMZjf03BeP1fIQ5NlFZyAIlvxkdg6Ifdwdg5znbaRIJzQ2S3T+sa EV0zXFdv54h1uqkW6bM6yWXDrIIOo4GUGmNKPQmeGfMbXOcTkaaG5oactwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCvkp6sf4P7B+DpKMlLzRbZcV+nWMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvSy1TbnF4X2dfc0g0T2tveVV2TkZ0bHhYNmRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1FZnAwQA 1FZwMA0GCSqGSIb3DQEBCwUAA4IBAQARDkKNMyddj93FfakZ1mrSUFeIK5XPYweV AaKyoHIBrI845X8IZV58VXo/++jrdEPXnuoy0Yi8s3slBw24ANP5nVd/8YM7ZMTZ gFXfz10sLbuTNaapEhyAzJzhglOt4hDFfJm8Ml9OZIvhdPTHCtWW+TrSRlMT6Kpl 89Z79CJXRAVcWC6xOAVlo8iSltMSuBHQT7adO0GLUo49kXEUija8t6I2PcXaWRUP pYM38PXwWxPBrWKwWfVvNf95mItlSWESFUrQFa+/37m1lW7mXpwKzDY/HN1I0YKo r2bzMrTrnAgXxauzKJLb/anlUAyoaPnCDBPJPRHzJOeUw0UqTGax -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:40 2026 by rpki-client