This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/KTJFZr1xtpQ8-frT_jFT89SQ72c.roa File: KTJFZr1xtpQ8-frT_jFT89SQ72c.roa (raw, json) Hash identifier: WbWct24W8oqzng3bdQSTUDncPy4VwnTdLlu7fw9RLZ0= Subject key identifier: 29:32:45:66:BD:71:B6:94:3C:F9:FA:D3:FE:31:53:F3:D4:90:EF:67 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019B7D5BED61E623913EF7D1ACB1FCAFF10C Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/KTJFZr1xtpQ8-frT_jFT89SQ72c.roa Signing time: Fri 02 Jan 2026 06:18:55 +0000 ROA not before: Fri 02 Jan 2026 06:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208626 IP address blocks: 95.181.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ed:61:e6:23:91:3e:f7:d1:ac:b1:fc:af:f1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Jan 2 06:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29324566bd71b6943cf9fad3fe3153f3d490ef67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:72:fe:f1:ca:e1:50:b2:6e:46:f7:05:38: 45:3e:07:2e:f5:29:25:38:cd:90:4d:f7:03:bb:07: 05:08:83:bf:52:47:b5:c8:48:38:ab:55:df:41:d9: 9f:78:2f:83:85:15:ca:af:a4:ef:f5:a7:88:d4:44: 16:8d:94:2c:d2:0d:83:50:4e:05:c7:81:02:ad:94: d2:5c:bb:ed:82:7f:24:f4:27:07:47:60:ef:d8:13: 6f:24:db:d8:9d:87:a1:d7:34:a0:7d:b1:da:11:57: 85:1c:ad:54:c9:47:fd:d3:73:f3:d5:ad:5e:f4:7f: da:b8:a0:0f:26:bc:78:33:e3:d8:6d:07:c5:3e:cf: 80:a8:e9:ac:c7:58:56:d6:ff:87:42:e0:8b:ee:a3: 09:1d:c1:20:da:79:ac:49:ab:9e:c7:57:5e:0f:02: 4d:3b:15:04:1c:18:01:1e:47:c9:bc:7e:0e:2b:75: ed:09:87:75:c8:ef:e5:db:4b:ca:b6:9e:8d:72:5b: b0:5a:ea:fb:c5:49:02:5f:10:e1:f3:6f:dd:4a:3a: d1:09:f0:c5:cf:74:3b:fd:4f:12:f9:32:7e:1a:d4: de:20:09:9f:16:8f:5f:9e:2c:21:9f:3e:82:ee:62: e4:1f:dd:cb:98:8f:12:e7:f3:ad:c4:cd:16:27:72: 71:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:32:45:66:BD:71:B6:94:3C:F9:FA:D3:FE:31:53:F3:D4:90:EF:67 X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/KTJFZr1xtpQ8-frT_jFT89SQ72c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.181.164.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:6f:b9:7e:ce:49:8c:2f:20:f6:b2:25:5a:2a:99:dd:c7:02: 34:e1:51:fa:cd:f4:3a:09:d4:e2:bb:3c:e7:79:7b:d1:01:95: 5f:46:24:d9:20:39:98:84:b4:7d:2a:f8:61:6d:96:60:b6:0d: f7:1d:22:1c:a7:57:a8:fe:78:db:53:cf:6c:92:b6:f2:69:9f: e6:ce:db:7a:6d:ea:13:ce:a5:9c:6d:80:2c:97:15:0c:e3:5c: c6:75:5c:c3:07:f9:e3:9a:b4:59:f9:a4:ed:95:ae:62:50:d4: c2:0a:7b:ff:c1:6e:69:80:c8:75:7c:fd:d5:72:63:52:d3:6a: ea:fd:a0:ca:f3:38:db:c2:bd:4f:ba:d3:c2:00:d2:45:61:3b: ce:00:55:da:7c:a8:44:9d:0a:04:23:65:ba:a8:6d:8f:77:4d: 60:83:0f:c7:6b:fb:3e:38:d2:8f:88:c8:56:37:1d:20:31:fe: cd:74:59:ab:13:82:63:26:f4:b2:78:a4:9a:f2:7a:3a:2a:5e: 17:f8:89:9e:2d:8d:9e:93:81:10:95:4d:ed:0c:64:04:21:7f: c7:3e:3f:ab:f6:dc:ee:53:63:6b:9c:2f:7d:05:00:9e:0f:1d: f4:ee:75:30:1b:56:67:07:c3:ce:1a:a5:63:8a:9c:72:64:6f: 33:76:35:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W+1h5iORPvfRrLH8r/EMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjYwMTAyMDYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTMyNDU2NmJkNzFiNjk0M2NmOWZhZDNmZTMxNTNmM2Q0OTBlZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8dy/vHK4VCybkb3BThFPgcu9Skl OM2QTfcDuwcFCIO/Uke1yEg4q1XfQdmfeC+DhRXKr6Tv9aeI1EQWjZQs0g2DUE4F x4ECrZTSXLvtgn8k9CcHR2Dv2BNvJNvYnYeh1zSgfbHaEVeFHK1UyUf903Pz1a1e 9H/auKAPJrx4M+PYbQfFPs+AqOmsx1hW1v+HQuCL7qMJHcEg2nmsSauex1deDwJN OxUEHBgBHkfJvH4OK3XtCYd1yO/l20vKtp6NcluwWur7xUkCXxDh82/dSjrRCfDF z3Q7/U8S+TJ+GtTeIAmfFo9fniwhnz6C7mLkH93LmI8S5/OtxM0WJ3JxUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCkyRWa9cbaUPPn60/4xU/PUkO9nMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvS1RKRlpyMXh0cFE4LWZyVF9qRlQ4OVNRNzJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX7WkMA0G CSqGSIb3DQEBCwUAA4IBAQAvb7l+zkmMLyD2siVaKpndxwI04VH6zfQ6CdTiuzzn eXvRAZVfRiTZIDmYhLR9KvhhbZZgtg33HSIcp1eo/njbU89skrbyaZ/mztt6beoT zqWcbYAslxUM41zGdVzDB/njmrRZ+aTtla5iUNTCCnv/wW5pgMh1fP3VcmNS02rq /aDK8zjbwr1PutPCANJFYTvOAFXafKhEnQoEI2W6qG2Pd01ggw/Ha/s+ONKPiMhW Nx0gMf7NdFmrE4JjJvSyeKSa8no6Kl4X+ImeLY2ek4EQlU3tDGQEIX/HPj+r9tzu U2NrnC99BQCeDx307nUwG1ZnB8POGqVjipxyZG8zdjWD -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:58 2026 by rpki-client