This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/krZVBDiWkvm4PD1vJnwzxrmFRBs.roa File: krZVBDiWkvm4PD1vJnwzxrmFRBs.roa (raw, json) Hash identifier: U9k/zcmCxVKcnCozIhgmcwJH3uFDUp/Q9q36sgU5rBk= Subject key identifier: 92:B6:55:04:38:96:92:F9:B8:3C:3D:6F:26:7C:33:C6:B9:85:44:1B Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d Certificate serial: 019B7EA74498E8F60107DD5FACF180B82652 Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/krZVBDiWkvm4PD1vJnwzxrmFRBs.roa Signing time: Fri 02 Jan 2026 12:20:49 +0000 ROA not before: Fri 02 Jan 2026 12:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44558 IP address blocks: 45.130.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:44:98:e8:f6:01:07:dd:5f:ac:f1:80:b8:26:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d Validity Not Before: Jan 2 12:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92b65504389692f9b83c3d6f267c33c6b985441b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:31:fb:9c:35:34:bc:e6:92:01:e9:13:39:ec: 83:e2:2d:7c:e9:14:16:63:11:0f:51:df:b4:0e:f4: 5c:d5:04:80:9a:73:60:96:99:dd:70:39:74:e1:d3: 22:21:57:2c:33:40:ad:0e:d9:e7:e3:2a:51:7b:1a: 37:2c:3b:7a:ce:ec:aa:8a:2c:e2:72:c0:7b:62:36: 4a:39:fc:62:37:ec:f3:ab:f3:ee:97:0f:37:50:ca: 3c:58:e9:09:b3:1a:d4:3e:1b:42:43:d2:f4:d1:03: fa:df:fe:c0:a4:be:0a:26:84:bf:69:f7:1f:96:b1: b3:c0:26:b0:cb:1d:d4:20:fd:45:36:e6:46:a3:b4: 42:34:21:ac:85:ec:aa:d4:92:9b:c0:d7:2c:6c:53: f5:2e:da:43:ad:e9:dd:bb:bf:49:36:f0:2f:19:38: 8f:e6:6d:3b:e7:13:d7:6b:e1:94:b8:26:7f:ac:1a: 7f:31:2c:23:f6:d8:3e:39:fb:e6:5b:4f:c9:2c:73: ea:6f:96:ef:05:d2:12:f7:36:ef:be:e6:e3:18:7e: 9a:d4:39:ab:44:6a:6f:28:e6:69:af:1a:b6:9c:91: 5c:c7:87:23:9b:a0:23:9b:d5:97:23:03:e5:d1:12: fb:ee:35:b5:2c:d0:a6:6e:1a:5f:a0:ea:02:5f:dd: 81:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B6:55:04:38:96:92:F9:B8:3C:3D:6F:26:7C:33:C6:B9:85:44:1B X509v3 Authority Key Identifier: keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/krZVBDiWkvm4PD1vJnwzxrmFRBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.156.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:4d:f2:ca:76:7f:4c:92:0d:6d:12:5a:a2:0a:b3:f8:02:af: 5b:ae:c9:05:41:02:0c:e2:c4:78:17:30:04:a7:c8:2c:30:60: 2e:24:c9:0d:fb:b0:2f:e4:53:19:c7:f1:01:55:a5:b5:80:93: f3:6f:0a:17:26:70:20:4b:39:c3:ce:06:92:6a:7c:01:3d:a7: fd:7a:32:99:1b:d9:66:03:d9:d8:3d:bf:23:67:ad:9f:45:11: a2:01:33:eb:7b:f2:54:53:dd:2c:c2:65:04:de:b3:f7:1d:c2: dc:d6:29:7c:a4:bb:fa:99:27:f2:c4:a0:b9:bc:e7:6c:dc:f1: cc:85:0a:8d:7d:aa:57:d1:bc:61:bf:ae:c6:49:6c:23:37:8c: 3a:0b:a7:f0:ad:c3:9c:c2:2a:5d:7e:54:4b:6d:e5:0d:77:ee: e5:c7:8e:86:31:e9:41:c7:ef:8b:2f:db:19:e7:08:a0:74:14: 00:ba:51:63:93:85:fc:61:f0:cb:e7:39:d7:ec:f7:f1:61:09: 73:69:7d:71:bd:f7:60:3a:0d:46:d6:33:77:9b:4a:cc:b4:53: 6e:3b:76:4e:db:c5:2d:dd:3b:15:cd:70:5e:62:af:62:97:30: 1f:de:42:dc:70:6e:b0:91:79:e9:bf:c3:e8:74:f7:08:22:6d: 20:5a:d0:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p0SY6PYBB91frPGAuCZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZjkyZDkzNjhhMDlhZDM2ZjdhNTdlZGZiZDBhMDVkOWZk NDBlMWQwHhcNMjYwMTAyMTIyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmI2NTUwNDM4OTY5MmY5YjgzYzNkNmYyNjdjMzNjNmI5ODU0NDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzH7nDU0vOaSAekTOeyD4i186RQW YxEPUd+0DvRc1QSAmnNglpndcDl04dMiIVcsM0CtDtnn4ypRexo3LDt6zuyqiizi csB7YjZKOfxiN+zzq/Pulw83UMo8WOkJsxrUPhtCQ9L00QP63/7ApL4KJoS/afcf lrGzwCawyx3UIP1FNuZGo7RCNCGsheyq1JKbwNcsbFP1LtpDrendu79JNvAvGTiP 5m075xPXa+GUuCZ/rBp/MSwj9tg+OfvmW0/JLHPqb5bvBdIS9zbvvubjGH6a1Dmr RGpvKOZprxq2nJFcx4cjm6Ajm9WXIwPl0RL77jW1LNCmbhpfoOoCX92BHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJK2VQQ4lpL5uDw9byZ8M8a5hUQbMB8GA1UdIwQY MBaAFO/5LZNooJrTb3pX7fvQoF2f1A4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQt NDAwNDE3Yzk3MTdlLzEva3JaVkJEaVdrdm00UEQxdkpud3p4cm1GUkJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQtNDAwNDE3Yzk3MTdl LzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYKcMA0G CSqGSIb3DQEBCwUAA4IBAQAaTfLKdn9Mkg1tElqiCrP4Aq9brskFQQIM4sR4FzAE p8gsMGAuJMkN+7Av5FMZx/EBVaW1gJPzbwoXJnAgSznDzgaSanwBPaf9ejKZG9lm A9nYPb8jZ62fRRGiATPre/JUU90swmUE3rP3HcLc1il8pLv6mSfyxKC5vOds3PHM hQqNfapX0bxhv67GSWwjN4w6C6fwrcOcwipdflRLbeUNd+7lx46GMelBx++LL9sZ 5wigdBQAulFjk4X8YfDL5znX7PfxYQlzaX1xvfdgOg1G1jN3m0rMtFNuO3ZO28Ut 3TsVzXBeYq9ilzAf3kLccG6wkXnpv8PodPcIIm0gWtC0 -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:15 2026 by rpki-client