This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KzeOr0HeJNbNwo4s3g9mWmjpkTU.roa File: KzeOr0HeJNbNwo4s3g9mWmjpkTU.roa (raw, json) Hash identifier: QzXTaxlf0mV707yWkonZkwchkxdWzaUqVpP0uO08ykk= Subject key identifier: 2B:37:8E:AF:41:DE:24:D6:CD:C2:8E:2C:DE:0F:66:5A:68:E9:91:35 Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Certificate serial: 019B7AC7EC2AC77607E6D2B10C74C3255850 Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KzeOr0HeJNbNwo4s3g9mWmjpkTU.roa Signing time: Thu 01 Jan 2026 18:18:01 +0000 ROA not before: Thu 01 Jan 2026 18:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2687 IP address blocks: 145.30.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ec:2a:c7:76:07:e6:d2:b1:0c:74:c3:25:58:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Validity Not Before: Jan 1 18:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b378eaf41de24d6cdc28e2cde0f665a68e99135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:62:e7:f8:5e:05:88:d6:b3:45:a0:e1:c7: 3f:ca:8e:8b:4c:2f:5d:57:79:8a:5c:23:8f:13:9f: d7:0c:5c:5e:4a:6f:3c:48:13:ef:4b:f4:66:ef:b4: 4c:9a:f0:cf:29:b1:d0:d8:26:1a:70:de:80:55:13: 13:cb:45:9d:11:51:96:28:6c:ab:bd:f6:62:f9:ec: 1b:4d:fc:bd:8d:07:b3:e9:26:3e:f9:c5:11:d4:52: 4a:4a:7f:f5:e9:23:e5:e5:91:e1:1d:56:0f:c4:22: da:e5:46:1b:07:a8:50:e8:43:50:05:b2:d0:17:6a: a0:8e:fd:49:65:2c:4b:63:2c:1a:09:7a:26:dc:22: 94:8a:78:08:c5:94:5e:c6:fe:f1:20:49:64:bf:97: 5c:2c:06:3c:0f:6f:79:a3:c2:93:d0:22:47:b7:fe: 07:b3:39:9b:ce:86:12:89:c5:7e:1e:38:30:27:1b: 56:3d:d8:f0:eb:49:cb:fe:36:a4:4d:ea:15:c2:3f: 85:b9:76:19:70:2a:95:d2:5e:e0:32:0d:27:f4:31: e1:29:5b:2e:76:52:c4:6f:3d:7b:02:67:91:91:90: 32:06:3a:42:75:ce:a2:46:6d:a1:7e:c6:84:e2:d4: 96:1f:31:71:1e:69:ca:4e:c4:83:80:bb:e1:2e:32: 61:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:37:8E:AF:41:DE:24:D6:CD:C2:8E:2C:DE:0F:66:5A:68:E9:91:35 X509v3 Authority Key Identifier: keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KzeOr0HeJNbNwo4s3g9mWmjpkTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.30.226.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:d9:82:0d:28:9c:2d:0e:51:54:89:06:07:1c:59:e3:50:db: 6f:28:52:4b:79:26:3c:28:8a:61:0d:07:a6:dc:9a:4c:30:4b: 24:20:73:34:00:3f:ee:2e:70:e0:5b:25:5e:1c:a4:df:34:f9: 3e:22:0c:14:d3:f3:0d:c9:23:90:e4:b9:14:4c:50:3c:af:bb: ad:14:45:af:f3:cd:dd:cc:ea:60:6c:67:9d:3e:53:9c:0f:ad: fb:29:3e:d7:6c:07:47:cc:bd:a5:4b:49:44:09:d8:6a:f1:f6: cc:06:28:28:4e:a2:7d:5f:11:ee:31:5a:16:3e:f1:53:e1:7a: 9d:a9:49:27:8f:a2:79:65:8e:29:8f:53:75:a6:48:65:9b:fc: 88:dc:e7:a6:38:1f:c4:7c:07:4c:8d:aa:df:89:77:f1:50:15: 9e:8a:77:e4:38:14:68:f5:3d:27:c1:4f:fe:ab:3a:44:e3:d3: 1f:12:02:9d:f1:71:dd:f2:76:1e:dd:08:65:29:d9:37:d1:47: 4c:86:8b:f7:b6:b3:e5:ab:21:17:79:9d:c1:0b:db:66:4b:ba: f8:8a:13:7a:3e:51:48:03:c5:de:3c:a3:5c:cd:89:26:91:65: a8:e3:5e:b3:0c:a3:d2:78:29:30:c0:1c:49:c2:32:55:59:88: 31:6f:9b:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+wqx3YH5tKxDHTDJVhQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm NDUyM2UwHhcNMjYwMTAxMTgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjM3OGVhZjQxZGUyNGQ2Y2RjMjhlMmNkZTBmNjY1YTY4ZTk5MTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbFi5/heBYjWs0Wg4cc/yo6LTC9d V3mKXCOPE5/XDFxeSm88SBPvS/Rm77RMmvDPKbHQ2CYacN6AVRMTy0WdEVGWKGyr vfZi+ewbTfy9jQez6SY++cUR1FJKSn/16SPl5ZHhHVYPxCLa5UYbB6hQ6ENQBbLQ F2qgjv1JZSxLYywaCXom3CKUingIxZRexv7xIElkv5dcLAY8D295o8KT0CJHt/4H szmbzoYSicV+HjgwJxtWPdjw60nL/jakTeoVwj+FuXYZcCqV0l7gMg0n9DHhKVsu dlLEbz17AmeRkZAyBjpCdc6iRm2hfsaE4tSWHzFxHmnKTsSDgLvhLjJhDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCs3jq9B3iTWzcKOLN4PZlpo6ZE1MB8GA1UdIwQY MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt NTQ4NjFmMjMyNDlkLzEvS3plT3IwSGVKTmJOd280czNnOW1XbWpwa1RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkR7iMA0G CSqGSIb3DQEBCwUAA4IBAQBa2YINKJwtDlFUiQYHHFnjUNtvKFJLeSY8KIphDQem 3JpMMEskIHM0AD/uLnDgWyVeHKTfNPk+IgwU0/MNySOQ5LkUTFA8r7utFEWv883d zOpgbGedPlOcD637KT7XbAdHzL2lS0lECdhq8fbMBigoTqJ9XxHuMVoWPvFT4Xqd qUknj6J5ZY4pj1N1pkhlm/yI3OemOB/EfAdMjarfiXfxUBWeinfkOBRo9T0nwU/+ qzpE49MfEgKd8XHd8nYe3QhlKdk30UdMhov3trPlqyEXeZ3BC9tmS7r4ihN6PlFI A8XePKNczYkmkWWo416zDKPSeCkwwBxJwjJVWYgxb5sr -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:07 2026 by rpki-client