This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa File: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (raw, json) Hash identifier: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE= Subject key identifier: 91:40:F7:8C:40:1B:00:60:0A:0D:7D:A7:BF:5C:F3:8E:A8:ED:32:B4 Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019B79ECF71A6158FDEC223183673ECF9DA2 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa Signing time: Thu 01 Jan 2026 14:18:51 +0000 ROA not before: Thu 01 Jan 2026 14:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205405 IP address blocks: 145.14.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f7:1a:61:58:fd:ec:22:31:83:67:3e:cf:9d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Jan 1 14:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9140f78c401b00600a0d7da7bf5cf38ea8ed32b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:ef:6a:01:d9:c2:e8:59:8d:4a:6f:06:5c: 78:7e:ab:6d:0a:fc:ad:7f:26:95:2f:11:10:aa:f5: 46:c3:f8:66:3a:b6:f6:7a:15:e1:46:f2:b5:f5:dd: 7b:68:5b:21:3d:c3:86:89:21:c0:aa:c6:f7:93:80: 89:f2:56:e8:3f:21:70:4a:dc:99:35:90:ef:a5:c5: 00:b7:7d:48:6e:61:87:9e:08:b8:1b:d7:7a:8c:4b: ab:be:c2:8f:4c:98:38:25:2d:f1:a2:03:ce:e7:f4: 2f:78:7e:52:e7:17:e0:89:9d:e2:a1:71:38:a8:c1: 83:67:bd:45:6f:b3:00:75:b2:82:e2:a4:b6:2b:cd: cb:87:5d:ed:d9:74:66:e3:b5:da:da:36:b3:89:41: 92:a5:2a:37:df:73:26:93:3a:ac:ed:a2:e7:f7:72: 3c:86:fb:c5:79:9f:5a:1d:7f:9b:49:3d:8c:21:70: fb:35:65:9c:83:e7:7d:a5:63:be:17:26:51:d6:34: d4:45:1b:9c:18:67:0d:40:13:64:fb:03:cc:23:25: ed:13:e8:0c:1b:78:94:59:37:1e:9f:f9:cd:3b:a7: 1f:5e:e3:c7:e5:47:b7:fb:dc:0a:43:8e:c4:96:38: 98:f5:13:63:da:3e:d8:1d:fb:34:d9:6a:3b:5c:83: 37:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:40:F7:8C:40:1B:00:60:0A:0D:7D:A7:BF:5C:F3:8E:A8:ED:32:B4 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.14.4.0/24 Signature Algorithm: sha256WithRSAEncryption 84:b1:16:8d:d7:94:d2:65:50:42:8e:d8:45:bb:e6:82:d1:45: c8:0a:5d:69:dd:87:73:2c:79:94:ea:82:4d:5b:1e:db:f1:de: d2:52:97:83:e3:49:98:9f:a9:a4:c3:79:23:47:78:c0:1b:cf: 34:bd:0e:43:11:9e:69:bc:3c:4e:98:8a:f1:03:13:95:b4:e3: c4:4e:5a:10:49:52:7a:f4:5e:56:9c:bf:59:22:eb:0c:10:61: ef:67:a9:c7:2d:e5:a5:1f:99:b7:f1:11:41:fe:19:04:89:19: 6b:07:00:fa:40:8b:08:f1:60:56:0a:9c:20:6b:39:24:28:ec: 4b:50:73:4d:e2:48:39:0e:4d:64:00:d6:33:db:87:b8:84:43: bb:4f:27:b0:dd:a2:d4:46:15:46:9f:42:89:6f:5b:11:f5:e6: 8d:65:e5:c0:58:ab:de:4a:70:51:81:d8:b6:ac:c3:e5:c9:5e: 42:dc:01:bf:07:0a:00:6d:d3:c2:03:35:fc:04:12:b5:d1:17: 86:9a:91:9c:2c:10:21:b9:f4:61:2f:bd:50:2e:66:4e:c6:fa: 23:7e:44:29:b4:16:56:39:92:0b:74:d2:9a:96:59:db:7f:15: a6:3b:bd:cf:ad:91:fc:19:38:35:32:a2:f5:d4:e9:6b:d6:89: c3:0b:88:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57PcaYVj97CIxg2c+z52iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwMTAxMTQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTQwZjc4YzQwMWIwMDYwMGEwZDdkYTdiZjVjZjM4ZWE4ZWQzMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm3vagHZwuhZjUpvBlx4fqttCvyt fyaVLxEQqvVGw/hmOrb2ehXhRvK19d17aFshPcOGiSHAqsb3k4CJ8lboPyFwStyZ NZDvpcUAt31IbmGHngi4G9d6jEurvsKPTJg4JS3xogPO5/QveH5S5xfgiZ3ioXE4 qMGDZ71Fb7MAdbKC4qS2K83Lh13t2XRm47Xa2jaziUGSpSo333Mmkzqs7aLn93I8 hvvFeZ9aHX+bST2MIXD7NWWcg+d9pWO+FyZR1jTURRucGGcNQBNk+wPMIyXtE+gM G3iUWTcen/nNO6cfXuPH5Ue3+9wKQ47EljiY9RNj2j7YHfs02Wo7XIM3XQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJFA94xAGwBgCg19p79c846o7TK0MB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEva1VEM2pFQWJBR0FLRFgybnYxenpqcWp0TXJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkQ4EMA0G CSqGSIb3DQEBCwUAA4IBAQCEsRaN15TSZVBCjthFu+aC0UXICl1p3YdzLHmU6oJN Wx7b8d7SUpeD40mYn6mkw3kjR3jAG880vQ5DEZ5pvDxOmIrxAxOVtOPETloQSVJ6 9F5WnL9ZIusMEGHvZ6nHLeWlH5m38RFB/hkEiRlrBwD6QIsI8WBWCpwgazkkKOxL UHNN4kg5Dk1kANYz24e4hEO7Tyew3aLURhVGn0KJb1sR9eaNZeXAWKveSnBRgdi2 rMPlyV5C3AG/BwoAbdPCAzX8BBK10ReGmpGcLBAhufRhL71QLmZOxvojfkQptBZW OZILdNKallnbfxWmO73PrZH8GTg1MqL11Olr1onDC4jJ -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:46 2026 by rpki-client