This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/KoVt6Xy7gkv7j_38ctTdwANrLe0.roa File: KoVt6Xy7gkv7j_38ctTdwANrLe0.roa (raw, json) Hash identifier: f72VqLp88rf5xfXfyl+PJYk0ViN53QtQMBfU74Y077U= Subject key identifier: 2A:85:6D:E9:7C:BB:82:4B:FB:8F:FD:FC:72:D4:DD:C0:03:6B:2D:ED Certificate issuer: /CN=75ea894ee05775e0ef061d086ca252147f5c91de Certificate serial: 019B797E3DFBEB5CD0AB7009F34CEEA6EBB9 Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/KoVt6Xy7gkv7j_38ctTdwANrLe0.roa Signing time: Thu 01 Jan 2026 12:17:55 +0000 ROA not before: Thu 01 Jan 2026 12:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57795 IP address blocks: 45.154.45.0/24 maxlen: 24 45.154.46.0/24 maxlen: 24 185.74.184.0/24 maxlen: 24 185.74.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:3d:fb:eb:5c:d0:ab:70:09:f3:4c:ee:a6:eb:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de Validity Not Before: Jan 1 12:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a856de97cbb824bfb8ffdfc72d4ddc0036b2ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2d:6e:0f:8e:6d:29:00:d1:68:2b:80:90:66: c5:55:30:cc:ad:6c:07:bd:6e:cf:b6:e8:c1:ab:1c: 42:fa:9a:5b:eb:b3:79:e0:18:88:1e:1c:61:e5:88: 9c:76:f0:17:f4:bb:be:4a:f3:ad:25:15:1c:e5:dd: 0d:39:61:e2:91:51:db:f8:e3:99:b4:89:ba:30:ea: 7c:74:ce:20:35:e4:93:e6:43:f2:dc:1d:d0:b1:1b: 75:2e:58:a6:98:f5:4e:a1:b9:65:27:97:ca:77:a5: c3:f3:63:18:e6:a8:e2:a5:33:70:48:0f:9c:25:cd: 77:d8:54:ce:cc:26:a1:c5:fd:c8:26:93:8a:84:c9: 9b:7e:85:17:c0:61:c8:6a:c2:3b:5b:65:89:98:ac: a6:e9:30:29:b6:ac:9b:38:76:a6:71:80:3c:4e:cf: ad:3c:12:e3:39:bf:e3:6b:bc:46:4e:c7:89:f0:44: 40:19:b1:f5:e6:c6:37:99:b5:9a:02:00:4c:31:a1: eb:4b:3a:2f:8f:8c:22:b8:6c:23:7f:dc:ab:17:56: a5:4d:eb:97:c6:88:80:50:13:c1:88:7e:5a:23:ac: 9e:b8:8a:60:2d:59:84:7c:51:1f:21:b4:8e:00:3a: 01:2e:4e:1b:ba:e8:22:49:27:93:ad:71:91:96:b6: 30:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:85:6D:E9:7C:BB:82:4B:FB:8F:FD:FC:72:D4:DD:C0:03:6B:2D:ED X509v3 Authority Key Identifier: keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/KoVt6Xy7gkv7j_38ctTdwANrLe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.45.0-45.154.46.255 185.74.184.0/23 Signature Algorithm: sha256WithRSAEncryption 27:2d:47:a2:47:0e:be:38:2f:20:56:fb:4b:57:50:2a:c7:92: 6a:21:de:a6:21:55:55:0f:04:a4:c6:5d:26:75:82:47:3b:9c: 83:bf:da:c1:ea:8d:7a:cd:f7:ba:a8:f3:53:26:2c:6f:f2:d1: f8:ae:41:79:f5:0d:ce:ed:a2:bc:ad:df:0a:7a:2a:03:e7:bf: 6e:8d:00:71:52:b6:b2:da:18:d7:f3:b0:98:84:5e:fb:a9:28: 9f:1b:2e:51:43:9e:52:0c:77:ce:50:a1:52:6a:bb:ba:1f:05: 45:67:da:09:6f:fe:c8:8a:e1:f4:41:ed:27:1c:32:b8:b3:24: 25:bc:9f:d9:39:0a:09:f6:1f:13:7d:7c:13:a2:09:43:93:d7: e1:bb:e3:2e:7d:e1:df:b4:d4:dd:17:65:fa:f7:e5:df:11:c3: 71:fb:a6:12:43:d7:ce:82:e5:71:08:fc:3e:c9:7e:eb:f5:26: 23:ef:13:3a:5e:7d:58:a6:23:07:9d:f4:99:5e:83:79:76:f6: 91:cc:cb:7e:9a:97:96:26:12:8b:4f:64:8a:65:ee:c8:51:67: 0a:02:c6:bb:08:b9:3c:ec:6a:b9:cc:82:01:3d:14:6b:d8:ec: 5c:1d:40:98:95:ee:86:31:dd:68:d8:ac:80:f2:0d:3a:e1:07: 10:0c:4c:e9 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5fj3761zQq3AJ80zupuu5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZWE4OTRlZTA1Nzc1ZTBlZjA2MWQwODZjYTI1MjE0N2Y1 YzkxZGUwHhcNMjYwMTAxMTIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTg1NmRlOTdjYmI4MjRiZmI4ZmZkZmM3MmQ0ZGRjMDAzNmIyZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi1uD45tKQDRaCuAkGbFVTDMrWwH vW7PtujBqxxC+ppb67N54BiIHhxh5YicdvAX9Lu+SvOtJRUc5d0NOWHikVHb+OOZ tIm6MOp8dM4gNeST5kPy3B3QsRt1LlimmPVOobllJ5fKd6XD82MY5qjipTNwSA+c Jc132FTOzCahxf3IJpOKhMmbfoUXwGHIasI7W2WJmKym6TAptqybOHamcYA8Ts+t PBLjOb/ja7xGTseJ8ERAGbH15sY3mbWaAgBMMaHrSzovj4wiuGwjf9yrF1alTeuX xoiAUBPBiH5aI6yeuIpgLVmEfFEfIbSOADoBLk4buugiSSeTrXGRlrYwIQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCqFbel8u4JL+4/9/HLU3cADay3tMB8GA1UdIwQY MBaAFHXqiU7gV3Xg7wYdCGyiUhR/XJHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGVxSlR1QlhkZUR2QmgwSWJLSlNGSDlja2Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xY2RjZTItYTNmOC00NGI2LWI1ZTEt YjdmMjk4NGViNjUzLzEvS29WdDZYeTdna3Y3al8zOGN0VGR3QU5yTGUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xY2RjZTItYTNmOC00NGI2LWI1ZTEtYjdmMjk4NGViNjUz LzEvZGVxSlR1QlhkZUR2QmgwSWJLSlNGSDlja2Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAtmi0D BAAtmi4DBAG5SrgwDQYJKoZIhvcNAQELBQADggEBACctR6JHDr44LyBW+0tXUCrH kmoh3qYhVVUPBKTGXSZ1gkc7nIO/2sHqjXrN97qo81MmLG/y0fiuQXn1Dc7toryt 3wp6KgPnv26NAHFStrLaGNfzsJiEXvupKJ8bLlFDnlIMd85QoVJqu7ofBUVn2glv /siK4fRB7SccMrizJCW8n9k5Cgn2HxN9fBOiCUOT1+G74y594d+01N0XZfr35d8R w3H7phJD186C5XEI/D7Jfuv1JiPvEzpefVimIwed9Jleg3l29pHMy36al5YmEotP ZIpl7shRZwoCxrsIuTzsarnMggE9FGvY7FwdQJiV7oYx3WjYrIDyDTrhBxAMTOk= -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:30 2026 by rpki-client