This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/KoVutq_X-hbyyiE4agG4FTzOf0w.roa File: KoVutq_X-hbyyiE4agG4FTzOf0w.roa (raw, json) Hash identifier: IxlRei0uC7ziEeb5GLb2cYAA8ujLZ81mwnQyJ2ROxvU= Subject key identifier: 2A:85:6E:B6:AF:D7:FA:16:F2:CA:21:38:6A:01:B8:15:3C:CE:7F:4C Certificate issuer: /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97 Certificate serial: 019B7758D056A9EDFEB715E60A04522035FD Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/KoVutq_X-hbyyiE4agG4FTzOf0w.roa Signing time: Thu 01 Jan 2026 02:17:47 +0000 ROA not before: Thu 01 Jan 2026 02:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39444 IP address blocks: 46.30.200.0/21 maxlen: 24 185.204.104.0/22 maxlen: 24 185.204.106.0/24 maxlen: 24 2a03:2680::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d0:56:a9:ed:fe:b7:15:e6:0a:04:52:20:35:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97 Validity Not Before: Jan 1 02:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a856eb6afd7fa16f2ca21386a01b8153cce7f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:4f:66:af:2e:7b:a7:45:a1:7f:fb:24:87: d2:6d:19:dd:3b:94:09:c5:4e:1d:64:ab:f0:bf:4b: 3e:d1:f7:b1:58:6b:87:b0:67:6b:01:0a:8a:17:f6: 74:ab:bf:e7:7b:4d:f6:32:d1:f0:39:13:9d:65:39: 2c:df:64:62:d7:d9:c4:4a:35:43:f8:19:f1:a9:ff: 63:21:a2:50:8e:c2:4c:1d:64:47:9f:7a:72:7e:cc: 01:39:6e:f7:23:c7:e9:fa:86:e0:46:85:ce:01:c3: 7e:40:d5:ba:54:a4:88:7f:ac:6c:a6:f6:9a:9e:7b: 6e:10:43:32:c2:e2:e1:ad:6e:53:32:4c:40:68:8e: c6:8b:4f:9f:97:b5:3f:50:85:d4:e7:a6:b2:90:e1: 5f:bd:8f:8b:b0:ca:e9:fe:d1:cb:ff:ec:7c:a9:5c: fd:87:fe:12:43:5e:87:d7:ea:f2:29:33:db:f2:1a: ef:b6:fc:f0:fd:a8:cd:36:5b:d5:d5:37:b0:43:f9: f0:98:28:d2:d7:99:f5:f8:ec:65:82:58:8d:8d:4e: 43:00:c9:63:98:be:a2:d9:c3:44:d7:a4:ee:12:98: 32:f4:d5:ae:a4:43:d3:5b:50:58:78:76:3f:2d:eb: 3f:2b:e3:a0:e9:35:7d:42:72:78:41:69:e8:f9:58: 6e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:85:6E:B6:AF:D7:FA:16:F2:CA:21:38:6A:01:B8:15:3C:CE:7F:4C X509v3 Authority Key Identifier: keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/KoVutq_X-hbyyiE4agG4FTzOf0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.200.0/21 185.204.104.0/22 IPv6: 2a03:2680::/32 Signature Algorithm: sha256WithRSAEncryption 86:ce:e8:f8:b7:a9:c0:62:f5:71:43:1c:c6:07:51:d1:f1:02: 52:a1:4e:ee:ca:dd:11:60:59:79:10:eb:94:0a:10:bf:b3:7c: 55:4e:77:82:06:43:5e:29:7c:6e:9f:b3:0f:84:4e:fc:da:ce: 94:1a:38:09:f4:c1:f0:8c:2f:94:3f:92:85:36:91:83:03:fd: 9f:3c:0d:65:58:35:e7:8d:ef:55:fe:11:06:ed:43:e3:92:72: 4d:b3:0c:94:45:71:46:8f:d6:b9:45:a9:e5:c2:36:aa:8d:9d: 9c:9e:9d:26:8a:6b:51:d6:e3:a6:be:6f:79:0b:4f:ed:c2:1b: 66:15:ac:b6:d0:ea:00:8c:2e:9b:0b:1e:4e:c5:6f:73:82:a5: 1e:28:5a:0d:c3:6a:0f:71:63:ed:4e:dc:f3:76:c4:57:56:c2: 98:96:7a:10:6c:35:c2:16:f0:a5:73:d5:93:06:94:40:06:21: f4:a0:53:17:94:87:0f:5e:76:b8:ef:91:32:27:8a:e0:3f:4c: 10:af:0e:0c:22:d8:73:50:33:02:2b:72:52:06:4f:5e:51:a8: 5b:5f:e4:17:85:43:63:28:9d:c8:37:8d:6b:62:61:c8:d4:2b: 91:6f:aa:0c:6e:bf:0e:e1:22:8f:09:a3:ed:cb:27:dd:19:31: fd:5b:28:5e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WNBWqe3+txXmCgRSIDX9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwODEyYmRkZGJiMjM5YmU2MzlkYzc1ZGNkMmUyOTZjNGZj ZjRhOTcwHhcNMjYwMTAxMDIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTg1NmViNmFmZDdmYTE2ZjJjYTIxMzg2YTAxYjgxNTNjY2U3ZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq1PZq8ue6dFoX/7JIfSbRndO5QJ xU4dZKvwv0s+0fexWGuHsGdrAQqKF/Z0q7/ne032MtHwOROdZTks32Ri19nESjVD +Bnxqf9jIaJQjsJMHWRHn3pyfswBOW73I8fp+obgRoXOAcN+QNW6VKSIf6xspvaa nntuEEMywuLhrW5TMkxAaI7Gi0+fl7U/UIXU56aykOFfvY+LsMrp/tHL/+x8qVz9 h/4SQ16H1+ryKTPb8hrvtvzw/ajNNlvV1TewQ/nwmCjS15n1+OxlgliNjU5DAMlj mL6i2cNE16TuEpgy9NWupEPTW1BYeHY/Les/K+Og6TV9QnJ4QWno+VhuHQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCqFbrav1/oW8sohOGoBuBU8zn9MMB8GA1UdIwQY MBaAFOCBK93bsjm+Y53HXc0uKWxPz0qXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xZjY4YTgtNDlkZC00MTJiLWJiYTkt MGJmNTM5YjNiNzE0LzEvS29WdXRxX1gtaGJ5eWlFNGFnRzRGVHpPZjB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xZjY4YTgtNDlkZC00MTJiLWJiYTktMGJmNTM5YjNiNzE0 LzEvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLh7IAwQC ucxoMA0EAgACMAcDBQAqAyaAMA0GCSqGSIb3DQEBCwUAA4IBAQCGzuj4t6nAYvVx QxzGB1HR8QJSoU7uyt0RYFl5EOuUChC/s3xVTneCBkNeKXxun7MPhE782s6UGjgJ 9MHwjC+UP5KFNpGDA/2fPA1lWDXnje9V/hEG7UPjknJNswyURXFGj9a5Ranlwjaq jZ2cnp0mimtR1uOmvm95C0/twhtmFay20OoAjC6bCx5OxW9zgqUeKFoNw2oPcWPt TtzzdsRXVsKYlnoQbDXCFvClc9WTBpRABiH0oFMXlIcPXna475EyJ4rgP0wQrw4M IthzUDMCK3JSBk9eUahbX+QXhUNjKJ3IN41rYmHI1CuRb6oMbr8O4SKPCaPtyyfd GTH9Wyhe -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:48 2026 by rpki-client