This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/KHpN6RsIT8Yzm-xw6bcYpCXAZOw.roa File: KHpN6RsIT8Yzm-xw6bcYpCXAZOw.roa (raw, json) Hash identifier: Gk34if2dhZULdLD9MtyJCGYKzpai4oG9h76wWHnC34Y= Subject key identifier: 28:7A:4D:E9:1B:08:4F:C6:33:9B:EC:70:E9:B7:18:A4:25:C0:64:EC Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Certificate serial: 019B7CED4CBA14277D8ADBE08034FF9C49EF Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/KHpN6RsIT8Yzm-xw6bcYpCXAZOw.roa Signing time: Fri 02 Jan 2026 04:18:04 +0000 ROA not before: Fri 02 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207579 IP address blocks: 62.122.229.0/24 maxlen: 24 185.210.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4c:ba:14:27:7d:8a:db:e0:80:34:ff:9c:49:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Validity Not Before: Jan 2 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=287a4de91b084fc6339bec70e9b718a425c064ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:58:99:81:9b:3e:04:23:3b:e3:55:35:2e:ab: a7:64:68:82:99:94:69:c2:4b:d9:e9:e3:f5:8b:ef: fa:e2:9b:91:a2:b8:ef:69:3d:87:d6:b0:40:19:f8: 78:bb:ef:55:20:e8:67:2f:fa:70:f4:fe:f7:21:1f: ca:b1:d7:4b:9f:2b:e7:b6:6a:fc:35:6b:c3:13:e8: 0b:09:de:cd:79:b6:4a:70:ec:9b:7d:66:b2:e5:42: ba:0e:9c:af:ba:32:6d:87:51:c9:08:cf:9a:60:a9: 20:fd:bb:09:ea:c9:04:50:1c:c0:5b:7f:40:7d:c5: f9:4e:d8:c2:05:c3:3e:0e:6b:01:13:06:dc:1f:f4: f9:fd:96:f3:08:00:db:b5:b7:bb:5c:48:1d:7a:fe: 35:89:e5:49:78:2a:af:68:a9:7d:6d:b8:bd:c4:7b: 5a:c3:0b:41:a5:81:6e:e2:93:cd:e4:02:a5:4b:fb: f9:cb:a4:95:b4:86:b7:43:12:b6:4f:a8:c8:79:c7: aa:88:86:81:ac:76:23:df:73:ef:85:6a:5f:3a:9f: 18:e3:99:55:39:a2:83:3f:b5:8c:93:7f:de:24:1a: 25:5b:20:f4:b8:d4:78:bb:31:4f:ed:18:ca:a7:df: 14:4d:55:31:ad:43:b6:0e:1e:67:91:99:3e:45:76: bf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7A:4D:E9:1B:08:4F:C6:33:9B:EC:70:E9:B7:18:A4:25:C0:64:EC X509v3 Authority Key Identifier: keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/KHpN6RsIT8Yzm-xw6bcYpCXAZOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.122.229.0/24 185.210.194.0/24 Signature Algorithm: sha256WithRSAEncryption 81:71:ee:ac:eb:2f:d3:5c:75:c2:f7:7d:89:8b:d3:34:51:72: c7:de:56:f5:71:27:2a:cb:d1:f8:c9:dd:ed:e9:2b:a7:51:f4: 1d:24:bf:c5:a3:ff:d0:e4:23:69:67:52:88:cd:2e:16:c8:47: f4:33:c3:0c:d1:e0:dd:5d:f5:03:27:a5:67:65:ce:14:ed:f8: 91:fe:6f:0a:c6:28:bf:78:2e:32:88:95:f4:8d:41:7e:48:cc: bc:13:41:39:98:c7:04:fa:56:4f:a4:04:18:e0:0f:48:3e:2a: 8e:51:c1:64:33:8f:f2:14:dc:83:c2:25:e7:ab:db:02:a6:3d: ed:cb:06:56:53:86:f3:de:f1:4d:29:76:aa:56:ab:76:c4:07: b1:f4:7a:c8:96:7b:a3:2f:5a:bc:a5:b7:21:89:ce:b7:af:d5: f3:ff:ea:97:b1:7b:8e:a0:5f:56:e4:49:32:72:27:2d:47:7c: 55:3f:84:e0:66:ca:05:50:c4:35:fb:94:3a:46:0d:63:97:06: 9c:f2:e8:1a:3c:8a:b5:e0:6c:da:3a:4d:c7:9c:bd:fa:f2:0b: 74:39:93:ce:aa:de:1f:f7:82:4e:94:3e:61:df:74:86:6e:5d: de:e9:06:ac:75:d6:e2:2f:ba:b0:03:9c:0a:2d:48:ad:ce:60: 5b:6a:93:36 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87Uy6FCd9itvggDT/nEnvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NzAyMWRjZGY0NGI2YWZkZDM4MTA1NDdjNTVhNzliZDFh OWZhM2IwHhcNMjYwMTAyMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODdhNGRlOTFiMDg0ZmM2MzM5YmVjNzBlOWI3MThhNDI1YzA2NGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFiZgZs+BCM741U1LqunZGiCmZRp wkvZ6eP1i+/64puRorjvaT2H1rBAGfh4u+9VIOhnL/pw9P73IR/KsddLnyvntmr8 NWvDE+gLCd7NebZKcOybfWay5UK6DpyvujJth1HJCM+aYKkg/bsJ6skEUBzAW39A fcX5TtjCBcM+DmsBEwbcH/T5/ZbzCADbtbe7XEgdev41ieVJeCqvaKl9bbi9xHta wwtBpYFu4pPN5AKlS/v5y6SVtIa3QxK2T6jIeceqiIaBrHYj33PvhWpfOp8Y45lV OaKDP7WMk3/eJBolWyD0uNR4uzFP7RjKp98UTVUxrUO2Dh5nkZk+RXa/OwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCh6TekbCE/GM5vscOm3GKQlwGTsMB8GA1UdIwQY MBaAFFdwIdzfRLav3TgQVHxVp5vRqfo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQt YzkwN2FlMWMyMTFlLzEvS0hwTjZSc0lUOFl6bS14dzZiY1lwQ1hBWk93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQtYzkwN2FlMWMyMTFl LzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPnrlAwQA udLCMA0GCSqGSIb3DQEBCwUAA4IBAQCBce6s6y/TXHXC932Ji9M0UXLH3lb1cScq y9H4yd3t6SunUfQdJL/Fo//Q5CNpZ1KIzS4WyEf0M8MM0eDdXfUDJ6VnZc4U7fiR /m8Kxii/eC4yiJX0jUF+SMy8E0E5mMcE+lZPpAQY4A9IPiqOUcFkM4/yFNyDwiXn q9sCpj3tywZWU4bz3vFNKXaqVqt2xAex9HrIlnujL1q8pbchic63r9Xz/+qXsXuO oF9W5EkycictR3xVP4TgZsoFUMQ1+5Q6Rg1jlwac8ugaPIq14GzaOk3HnL368gt0 OZPOqt4f94JOlD5h33SGbl3e6QasddbiL7qwA5wKLUitzmBbapM2 -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:35 2026 by rpki-client