This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KHlJZZnCyFVts7-_2wXUL5Aw-lE.roa File: KHlJZZnCyFVts7-_2wXUL5Aw-lE.roa (raw, json) Hash identifier: nbrmEh4FKV6YY4WpO222giR0t5BFWdmO3yGL+ZBZkM8= Subject key identifier: 28:79:49:65:99:C2:C8:55:6D:B3:BF:BF:DB:05:D4:2F:90:30:FA:51 Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Certificate serial: 019B7AC7EB154ECE9E56980293FB156836D6 Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KHlJZZnCyFVts7-_2wXUL5Aw-lE.roa Signing time: Thu 01 Jan 2026 18:18:00 +0000 ROA not before: Thu 01 Jan 2026 18:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1653 IP address blocks: 145.98.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:eb:15:4e:ce:9e:56:98:02:93:fb:15:68:36:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Validity Not Before: Jan 1 18:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2879496599c2c8556db3bfbfdb05d42f9030fa51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:79:5d:ab:97:5c:9d:c7:b2:68:7a:92:d1:b4: 7a:36:39:8c:99:78:80:8e:56:d7:11:16:36:49:b6: 7e:ec:99:9b:24:6e:35:45:d2:ab:df:e2:32:3e:15: b5:82:a8:ce:7e:65:d8:51:28:46:fb:ab:ff:46:ae: 16:ef:f4:8d:5a:3a:ef:31:a2:82:12:98:6f:af:da: 7f:49:14:d4:cc:66:07:11:63:30:d9:c3:42:43:8b: 4b:ca:df:bc:21:ce:7d:d5:38:72:bf:09:36:ea:15: 42:d4:b4:d8:4a:7f:fc:e2:42:2e:7c:70:88:d9:99: 0f:c6:3e:d0:a6:70:a3:0d:64:43:45:aa:e9:6a:6b: cd:39:d7:2b:0f:45:e5:82:3a:3e:68:0c:66:a8:be: 8b:a0:0d:c3:40:b6:00:c3:8a:3d:4d:c1:c5:99:84: 05:68:b6:6d:7a:19:cd:1b:d3:7c:9c:d3:3d:1a:77: 2a:c1:4a:a4:37:80:08:37:e8:0f:b9:bc:2b:b1:2c: a7:01:86:4a:54:7c:6e:c6:d1:aa:0b:d2:b5:cc:9c: 20:ee:5d:2d:bc:da:b4:4a:8b:4e:c6:bc:6b:81:78: 5f:6f:d7:96:a4:c0:0e:d1:0f:83:f8:b2:5d:57:f1: 21:76:0a:57:33:50:3a:39:76:55:13:dd:cb:31:c9: f7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:79:49:65:99:C2:C8:55:6D:B3:BF:BF:DB:05:D4:2F:90:30:FA:51 X509v3 Authority Key Identifier: keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KHlJZZnCyFVts7-_2wXUL5Aw-lE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.98.16.0/24 Signature Algorithm: sha256WithRSAEncryption 11:2d:d6:54:4e:c9:37:76:92:bb:b7:b4:e9:75:e4:f6:c6:fe: 99:03:f4:ce:ae:e3:6e:e5:e1:03:f8:9a:9d:b9:f0:75:fe:b5: 58:dd:27:87:58:13:c2:22:ea:df:04:5a:7a:6e:c7:fa:ac:00: 48:cd:89:11:f4:5c:6e:b0:47:22:79:f9:f4:23:1e:e3:22:0b: 9e:9c:ee:11:7f:40:8f:5b:b9:fd:da:bd:36:e9:62:e6:53:5b: 76:68:9f:bf:5e:4a:8c:51:9a:4e:a9:3b:cc:03:3f:ce:5c:66: 6a:b8:df:6f:e1:78:28:73:3e:04:eb:12:e3:cd:7d:dc:0f:ad: cf:e3:c5:45:be:d1:10:ab:53:11:eb:57:3b:eb:bb:41:b7:d8: 73:62:65:60:47:aa:d7:a9:f2:69:06:67:e7:69:0d:5a:57:d2: a7:86:57:08:88:43:98:2c:60:55:6e:e4:70:c0:d9:2e:9f:34: ac:85:c3:d8:47:d5:ec:81:dc:8c:ca:05:80:d2:93:a2:cd:03: f9:84:dc:30:5d:53:44:3c:bf:35:17:8d:b8:2d:dc:90:af:b1: 59:f9:a4:f7:61:59:b5:ef:b9:db:44:58:63:b2:09:d6:7c:b0: af:27:1c:37:c8:0d:49:bc:f6:e2:a4:99:2f:32:62:7e:99:c2: 55:56:56:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+sVTs6eVpgCk/sVaDbWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm NDUyM2UwHhcNMjYwMTAxMTgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODc5NDk2NTk5YzJjODU1NmRiM2JmYmZkYjA1ZDQyZjkwMzBmYTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHldq5dcnceyaHqS0bR6NjmMmXiA jlbXERY2SbZ+7JmbJG41RdKr3+IyPhW1gqjOfmXYUShG+6v/Rq4W7/SNWjrvMaKC Ephvr9p/SRTUzGYHEWMw2cNCQ4tLyt+8Ic591Thyvwk26hVC1LTYSn/84kIufHCI 2ZkPxj7QpnCjDWRDRarpamvNOdcrD0Xlgjo+aAxmqL6LoA3DQLYAw4o9TcHFmYQF aLZtehnNG9N8nNM9GncqwUqkN4AIN+gPubwrsSynAYZKVHxuxtGqC9K1zJwg7l0t vNq0SotOxrxrgXhfb9eWpMAO0Q+D+LJdV/EhdgpXM1A6OXZVE93LMcn3+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCh5SWWZwshVbbO/v9sF1C+QMPpRMB8GA1UdIwQY MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt NTQ4NjFmMjMyNDlkLzEvS0hsSlpabkN5RlZ0czctXzJ3WFVMNUF3LWxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkWIQMA0G CSqGSIb3DQEBCwUAA4IBAQARLdZUTsk3dpK7t7TpdeT2xv6ZA/TOruNu5eED+Jqd ufB1/rVY3SeHWBPCIurfBFp6bsf6rABIzYkR9FxusEciefn0Ix7jIguenO4Rf0CP W7n92r026WLmU1t2aJ+/XkqMUZpOqTvMAz/OXGZquN9v4Xgocz4E6xLjzX3cD63P 48VFvtEQq1MR61c767tBt9hzYmVgR6rXqfJpBmfnaQ1aV9KnhlcIiEOYLGBVbuRw wNkunzSshcPYR9XsgdyMygWA0pOizQP5hNwwXVNEPL81F424LdyQr7FZ+aT3YVm1 77nbRFhjsgnWfLCvJxw3yA1JvPbipJkvMmJ+mcJVVlaa -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:15 2026 by rpki-client