This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/K_nPRyyftR4ZBlRYe5o2Y5tUvJI.roa File: K_nPRyyftR4ZBlRYe5o2Y5tUvJI.roa (raw, json) Hash identifier: q4zqaL21M35s9vhO9oi9xK7MF0lYvuEB0k/Aafia0Vg= Subject key identifier: 2B:F9:CF:47:2C:9F:B5:1E:19:06:54:58:7B:9A:36:63:9B:54:BC:92 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B77C66CA9FF919169D8B53FC186775576 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/K_nPRyyftR4ZBlRYe5o2Y5tUvJI.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48529 IP address blocks: 212.66.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6c:a9:ff:91:91:69:d8:b5:3f:c1:86:77:55:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bf9cf472c9fb51e190654587b9a36639b54bc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:db:68:5c:a7:8b:0d:58:73:a3:33:aa:1f:a8: 2f:a7:55:98:b1:05:34:41:1d:91:de:d4:49:29:75: 6e:e3:69:49:74:cd:b1:2a:f1:28:79:f8:f3:92:69: 9a:e9:b8:ca:1a:d5:b0:fd:f6:ac:c2:83:64:ee:88: 3a:be:05:c9:f7:85:e8:05:cf:d1:70:89:6f:93:b2: ea:fb:41:d5:d1:c5:2c:44:49:a2:74:b4:6e:ce:5c: 34:0f:b3:25:ab:d8:3c:51:c8:a2:a7:03:ff:de:74: 80:82:de:3a:57:3d:66:60:8b:99:57:34:65:54:96: 77:28:b4:11:f8:2e:17:87:48:09:ef:fa:cb:03:37: 6d:5c:91:29:59:9a:77:ae:d2:e0:3c:e1:9f:93:42: bf:30:66:f6:27:a3:3d:c7:c5:76:79:dc:a1:83:d2: 2e:8c:4f:a4:2f:a1:e2:4e:e9:40:4d:8f:e0:ce:df: bb:ea:3f:95:6d:7c:c6:72:88:dc:5a:9d:ec:65:ee: 91:69:e7:08:81:53:0e:9d:1e:20:91:e3:e2:fc:f0: 1b:5a:d1:67:c5:90:8c:ce:76:3c:9d:eb:9f:cb:65: 11:84:7a:64:e8:3e:03:3f:3c:72:96:55:9a:87:b8: c2:17:68:d2:b2:e5:76:70:cc:ac:ee:d3:64:36:65: dc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F9:CF:47:2C:9F:B5:1E:19:06:54:58:7B:9A:36:63:9B:54:BC:92 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/K_nPRyyftR4ZBlRYe5o2Y5tUvJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.66.48.0/24 Signature Algorithm: sha256WithRSAEncryption 04:40:ad:fc:34:42:90:ca:f1:34:1a:67:0f:08:19:fe:33:b7: de:fa:52:07:f4:f8:9d:a5:68:94:fa:fc:83:8d:37:32:4d:08: d0:41:dd:77:7b:0d:ee:31:b6:56:20:8b:31:47:eb:bc:82:2b: 45:85:1c:dd:31:96:da:7e:d4:b0:79:8e:c4:02:59:9e:97:e0: a5:4e:3a:3f:25:86:61:8d:7a:d1:cf:ab:3c:12:92:b1:f4:61: dd:a3:98:24:0c:23:59:fd:75:e7:27:d9:f7:93:ff:e1:34:be: ad:d8:8f:bb:6b:1b:ff:4d:0c:92:7b:40:da:fc:57:1b:cc:2f: c1:7c:df:53:2f:04:85:db:84:52:85:0d:b7:5c:97:87:09:b4: 9e:4e:82:6d:5a:96:62:00:5e:ef:de:c5:c7:d9:4d:9f:df:13: d5:cc:d6:67:80:90:56:65:70:f5:04:30:0d:6e:5a:92:4e:fe: 8d:92:e1:9c:77:fd:d2:a7:45:74:5b:ff:d1:86:b0:c6:67:a6: da:35:e6:e8:71:d0:79:ac:fd:24:a5:f7:8a:ab:03:e3:a8:48: bd:95:34:89:08:9b:46:a4:d5:e2:90:90:c4:65:36:f7:e3:2e: 44:b4:ea:2d:b5:58:2b:7c:c2:34:a0:0d:52:b0:3d:fc:de:c7: 23:2f:40:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmyp/5GRadi1P8GGd1V2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmY5Y2Y0NzJjOWZiNTFlMTkwNjU0NTg3YjlhMzY2MzliNTRiYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9toXKeLDVhzozOqH6gvp1WYsQU0 QR2R3tRJKXVu42lJdM2xKvEoefjzkmma6bjKGtWw/faswoNk7og6vgXJ94XoBc/R cIlvk7Lq+0HV0cUsREmidLRuzlw0D7Mlq9g8UciipwP/3nSAgt46Vz1mYIuZVzRl VJZ3KLQR+C4Xh0gJ7/rLAzdtXJEpWZp3rtLgPOGfk0K/MGb2J6M9x8V2edyhg9Iu jE+kL6HiTulATY/gzt+76j+VbXzGcojcWp3sZe6RaecIgVMOnR4gkePi/PAbWtFn xZCMznY8neufy2URhHpk6D4DPzxyllWah7jCF2jSsuV2cMys7tNkNmXc5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCv5z0csn7UeGQZUWHuaNmObVLySMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvS19uUFJ5eWZ0UjRaQmxSWWU1bzJZNXRVdkpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EIwMA0G CSqGSIb3DQEBCwUAA4IBAQAEQK38NEKQyvE0GmcPCBn+M7fe+lIH9PidpWiU+vyD jTcyTQjQQd13ew3uMbZWIIsxR+u8gitFhRzdMZbaftSweY7EAlmel+ClTjo/JYZh jXrRz6s8EpKx9GHdo5gkDCNZ/XXnJ9n3k//hNL6t2I+7axv/TQySe0Da/FcbzC/B fN9TLwSF24RShQ23XJeHCbSeToJtWpZiAF7v3sXH2U2f3xPVzNZngJBWZXD1BDAN blqSTv6NkuGcd/3Sp0V0W//RhrDGZ6baNebocdB5rP0kpfeKqwPjqEi9lTSJCJtG pNXikJDEZTb34y5EtOottVgrfMI0oA1SsD383scjL0A0 -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:21 2026 by rpki-client