This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/k7az-_BtbKLYLi41aEKLRIvNmoc.roa File: k7az-_BtbKLYLi41aEKLRIvNmoc.roa (raw, json) Hash identifier: B7UITnspL1Od2jE72rx43sMNx/qWRzT0FVRuVA3nuP8= Subject key identifier: 93:B6:B3:FB:F0:6D:6C:A2:D8:2E:2E:35:68:42:8B:44:8B:CD:9A:87 Certificate issuer: /CN=a61ada61202413cd8fca2f49742527ad021f9676 Certificate serial: 019B7CEDEAE7E0F7B0C1237D027CDE67FA06 Authority key identifier: A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/k7az-_BtbKLYLi41aEKLRIvNmoc.roa Signing time: Fri 02 Jan 2026 04:18:45 +0000 ROA not before: Fri 02 Jan 2026 04:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395184 IP address blocks: 185.38.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ea:e7:e0:f7:b0:c1:23:7d:02:7c:de:67:fa:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a61ada61202413cd8fca2f49742527ad021f9676 Validity Not Before: Jan 2 04:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93b6b3fbf06d6ca2d82e2e3568428b448bcd9a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:15:31:86:b6:8b:68:80:ab:ea:d6:50:7e:39: 6d:d6:00:bd:b7:2d:f4:8d:7b:53:cc:7c:66:fc:b5: d6:99:6b:9d:da:ce:d1:44:f2:c2:03:75:4c:c2:ce: 4a:6c:e9:3b:49:53:bd:bb:10:eb:28:69:41:25:73: e3:06:99:6c:71:17:ba:3a:cf:35:2c:a3:d1:68:1a: af:0d:30:eb:ef:33:2e:af:4d:85:4a:e1:71:f8:f8: 79:ee:9a:ca:29:7c:a1:fd:d1:f9:83:aa:a4:4f:32: 57:d6:aa:a4:a1:80:e8:24:31:c5:d6:83:85:76:af: 0f:27:d8:ea:d2:13:36:9c:b4:ce:3c:7c:16:38:03: e2:52:f3:94:e0:86:3d:82:97:0d:2e:12:be:54:51: 8a:75:09:d9:4d:a3:dc:9c:d3:5e:cf:2c:a3:b5:fd: bd:c7:8f:af:09:53:bd:71:c9:09:4b:27:b0:04:9e: 81:0b:25:92:05:fb:d2:72:31:00:b4:f8:ea:b5:61: 4b:76:8a:98:18:7d:04:bf:e4:c1:d7:e2:14:36:6a: 95:82:c8:23:e5:74:e6:18:c9:93:39:0e:d1:ff:e7: eb:44:84:63:65:21:df:bc:d0:60:be:ee:92:2e:94: ca:2a:e9:a7:77:24:0d:a4:01:d5:d6:7d:02:cb:4a: 1f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B6:B3:FB:F0:6D:6C:A2:D8:2E:2E:35:68:42:8B:44:8B:CD:9A:87 X509v3 Authority Key Identifier: keyid:A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/k7az-_BtbKLYLi41aEKLRIvNmoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.240.0/24 Signature Algorithm: sha256WithRSAEncryption 84:b2:a5:88:ef:37:42:6c:70:1c:48:85:5d:b9:b6:8a:7c:a1: cd:e5:e6:9f:d0:77:4f:8d:7f:cd:1c:de:b6:f0:fa:12:67:89: c2:12:41:fc:e8:39:de:b6:07:5a:d6:01:75:d8:79:c7:1b:03: d2:e7:6c:34:d3:f3:bd:c5:1a:2e:ec:72:11:eb:cd:00:81:47: f9:15:49:0f:cb:d4:ce:79:3c:e2:78:22:24:21:3e:3e:fd:1c: 87:fe:1f:80:a3:06:9c:34:30:1a:e3:10:09:e3:c2:59:fb:9a: b3:76:27:c4:e6:3a:fa:30:55:06:aa:20:e1:9b:05:44:a9:e4: 9e:1c:59:87:28:f1:3f:42:5e:38:6c:4a:e2:62:df:e0:55:49: af:6b:6d:7f:62:2a:fa:04:53:a5:55:c4:02:90:c3:24:71:c6: 90:c5:7e:30:ff:75:fe:0d:45:37:90:7a:27:61:88:ef:27:4c: 26:bb:b8:c3:d6:a6:dd:98:e6:52:7e:c4:58:38:3d:32:24:c6: 08:0d:68:3a:44:f0:fc:3a:28:9a:8f:2a:be:6d:4b:80:1e:57: 8c:29:76:15:23:a1:f1:22:8b:69:f1:52:01:5e:0f:ca:08:0f: a0:bc:74:2f:ca:22:3a:d5:0e:61:ee:0b:e3:80:1a:64:03:74: ba:27:ad:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ern4PewwSN9AnzeZ/oGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MWFkYTYxMjAyNDEzY2Q4ZmNhMmY0OTc0MjUyN2FkMDIx Zjk2NzYwHhcNMjYwMTAyMDQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2I2YjNmYmYwNmQ2Y2EyZDgyZTJlMzU2ODQyOGI0NDhiY2Q5YTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixUxhraLaICr6tZQfjlt1gC9ty30 jXtTzHxm/LXWmWud2s7RRPLCA3VMws5KbOk7SVO9uxDrKGlBJXPjBplscRe6Os81 LKPRaBqvDTDr7zMur02FSuFx+Ph57prKKXyh/dH5g6qkTzJX1qqkoYDoJDHF1oOF dq8PJ9jq0hM2nLTOPHwWOAPiUvOU4IY9gpcNLhK+VFGKdQnZTaPcnNNezyyjtf29 x4+vCVO9cckJSyewBJ6BCyWSBfvScjEAtPjqtWFLdoqYGH0Ev+TB1+IUNmqVgsgj 5XTmGMmTOQ7R/+frRIRjZSHfvNBgvu6SLpTKKumndyQNpAHV1n0Cy0oflQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJO2s/vwbWyi2C4uNWhCi0SLzZqHMB8GA1UdIwQY MBaAFKYa2mEgJBPNj8ovSXQlJ60CH5Z2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGhyYVlTQWtFODJQeWk5SmRDVW5yUUlmbG5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iZGFiOWQtNDU4Yi00ZDZhLTlkOWIt YWVlYzdhODU5YzU5LzEvazdhei1fQnRiS0xZTGk0MWFFS0xSSXZObW9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iZGFiOWQtNDU4Yi00ZDZhLTlkOWItYWVlYzdhODU5YzU5 LzEvcGhyYVlTQWtFODJQeWk5SmRDVW5yUUlmbG5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSbwMA0G CSqGSIb3DQEBCwUAA4IBAQCEsqWI7zdCbHAcSIVdubaKfKHN5eaf0HdPjX/NHN62 8PoSZ4nCEkH86Dnetgda1gF12HnHGwPS52w00/O9xRou7HIR680AgUf5FUkPy9TO eTzieCIkIT4+/RyH/h+AowacNDAa4xAJ48JZ+5qzdifE5jr6MFUGqiDhmwVEqeSe HFmHKPE/Ql44bEriYt/gVUmva21/Yir6BFOlVcQCkMMkccaQxX4w/3X+DUU3kHon YYjvJ0wmu7jD1qbdmOZSfsRYOD0yJMYIDWg6RPD8Oiiajyq+bUuAHleMKXYVI6Hx Iotp8VIBXg/KCA+gvHQvyiI61Q5h7gvjgBpkA3S6J63B -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:47 2026 by rpki-client