This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/KUHx3ayNONwdDal8P1rCaD4mtnk.roa File: KUHx3ayNONwdDal8P1rCaD4mtnk.roa (raw, json) Hash identifier: N5ssvc6mFE3oKdbXMelVtQYqMLwX8RX/tP6NS6QKcto= Subject key identifier: 29:41:F1:DD:AC:8D:38:DC:1D:0D:A9:7C:3F:5A:C2:68:3E:26:B6:79 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C687F894F2477AF257FCA35AB074D4 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/KUHx3ayNONwdDal8P1rCaD4mtnk.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44717 IP address blocks: 78.136.66.0/23 maxlen: 23 93.119.30.0/23 maxlen: 23 151.237.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:87:f8:94:f2:47:7a:f2:57:fc:a3:5a:b0:74:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2941f1ddac8d38dc1d0da97c3f5ac2683e26b679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:65:34:39:f7:a9:57:d8:41:43:c7:73:b3:be: b9:6d:44:b8:28:e9:ae:d4:91:c6:81:65:4c:36:1d: 38:c7:c9:0d:1a:b9:e9:50:99:82:d9:6f:ad:6b:e5: ed:06:70:08:88:f4:3a:d8:a4:70:db:9b:91:45:ba: 2b:1c:43:f1:5f:4a:e8:c0:9a:e7:c6:ee:a5:14:8b: 37:55:16:bd:55:7a:46:2e:78:ca:da:96:8e:30:a7: 05:5f:a0:dd:a4:a2:07:09:65:a6:d6:0c:bd:10:53: 48:c6:80:18:da:a0:a4:81:34:e9:13:f5:cb:69:5b: 58:87:4f:bd:23:ae:85:8d:76:13:2e:5a:50:73:57: a7:a5:46:f9:73:f2:9b:3d:9c:74:33:dd:9c:5d:09: 0e:aa:25:ad:88:29:42:7b:74:c3:65:ba:29:ff:74: 40:27:c4:7f:77:3d:b9:2c:7e:36:a7:21:4e:1e:12: 5c:83:02:19:3c:c6:48:61:96:e9:18:ff:d1:fb:be: 02:1d:d4:b4:d6:ce:47:2a:70:22:1a:f9:20:69:d8: 18:ea:86:80:23:f7:36:80:09:74:b2:bb:c4:a1:68: 9b:26:ed:c2:98:61:c9:a5:08:8a:72:5a:10:aa:88: f5:01:2d:99:ca:2e:55:3e:cd:84:c7:97:9d:4b:f4: d6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:41:F1:DD:AC:8D:38:DC:1D:0D:A9:7C:3F:5A:C2:68:3E:26:B6:79 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/KUHx3ayNONwdDal8P1rCaD4mtnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.136.66.0/23 93.119.30.0/23 151.237.204.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:53:0f:38:0e:2b:d3:e5:58:e3:8d:c9:67:78:d1:d3:7d:a1: 34:f8:4b:a8:93:95:5a:98:51:b2:b3:13:41:a1:71:68:78:96: 2d:87:58:49:2f:2f:e5:ca:9a:94:a4:3d:f3:72:e4:87:20:23: ea:da:fa:38:16:cc:80:af:e0:59:71:5b:1f:6d:87:15:fd:37: 05:eb:d9:4e:fd:4c:0a:c3:7f:13:d1:bd:9c:6f:3d:c9:60:dc: cb:c4:f6:69:14:66:44:80:f7:2e:d8:45:f7:ad:bd:06:ce:6d: 1c:8a:4a:5a:a7:8b:6d:2a:3f:23:34:68:53:80:ef:8f:bc:1c: fe:73:b9:41:dc:10:db:51:fa:6b:77:eb:02:5a:3a:2a:42:fe: f2:f4:e5:78:4f:ba:45:da:7a:95:bf:e8:bb:91:21:ec:a6:45: 37:71:ca:45:fa:9f:dd:39:e2:55:1f:0a:b9:85:9d:86:b6:7c: 1d:a1:95:4f:e4:86:37:f3:d3:3e:8e:64:f6:92:59:e5:4f:65: 28:78:d8:6d:b8:74:53:d2:35:01:bf:fd:fe:13:1b:06:c3:a4: 9b:2a:fd:85:cc:96:85:bb:9c:38:ab:92:c9:f2:ab:87:52:27: 7d:ad:ae:62:20:77:dd:e2:cc:19:d5:42:d9:e4:21:49:96:b6: 5a:36:c6:f4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xof4lPJHevJX/KNasHTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTQxZjFkZGFjOGQzOGRjMWQwZGE5N2MzZjVhYzI2ODNlMjZiNjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2U0OfepV9hBQ8dzs765bUS4KOmu 1JHGgWVMNh04x8kNGrnpUJmC2W+ta+XtBnAIiPQ62KRw25uRRborHEPxX0rowJrn xu6lFIs3VRa9VXpGLnjK2paOMKcFX6DdpKIHCWWm1gy9EFNIxoAY2qCkgTTpE/XL aVtYh0+9I66FjXYTLlpQc1enpUb5c/KbPZx0M92cXQkOqiWtiClCe3TDZbop/3RA J8R/dz25LH42pyFOHhJcgwIZPMZIYZbpGP/R+74CHdS01s5HKnAiGvkgadgY6oaA I/c2gAl0srvEoWibJu3CmGHJpQiKcloQqoj1AS2Zyi5VPs2Ex5edS/TWyQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFClB8d2sjTjcHQ2pfD9awmg+JrZ5MB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvS1VIeDNheU5PTndkRGFsOFAxckNhRDRtdG5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBTohCAwQB XXceAwQBl+3MMA0GCSqGSIb3DQEBCwUAA4IBAQAKUw84DivT5VjjjclneNHTfaE0 +Euok5VamFGysxNBoXFoeJYth1hJLy/lypqUpD3zcuSHICPq2vo4FsyAr+BZcVsf bYcV/TcF69lO/UwKw38T0b2cbz3JYNzLxPZpFGZEgPcu2EX3rb0Gzm0cikpap4tt Kj8jNGhTgO+PvBz+c7lB3BDbUfprd+sCWjoqQv7y9OV4T7pF2nqVv+i7kSHspkU3 ccpF+p/dOeJVHwq5hZ2GtnwdoZVP5IY389M+jmT2klnlT2UoeNhtuHRT0jUBv/3+ ExsGw6SbKv2FzJaFu5w4q5LJ8quHUid9ra5iIHfd4swZ1ULZ5CFJlrZaNsb0 -----END CERTIFICATE-----Generated at Sun Jan 25 10:10:39 2026 by rpki-client