This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/khD-5GIOCtdSW94SprlTc6aKDCw.roa File: khD-5GIOCtdSW94SprlTc6aKDCw.roa (raw, json) Hash identifier: 9g8S387WfYIRLJ6x0iTubqGcDstg4uHac2ZeVMN70tA= Subject key identifier: 92:10:FE:E4:62:0E:0A:D7:52:5B:DE:12:A6:B9:53:73:A6:8A:0C:2C Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f Certificate serial: 019B7F145C9F321084079E814D0CF246B6C8 Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/khD-5GIOCtdSW94SprlTc6aKDCw.roa Signing time: Fri 02 Jan 2026 14:19:59 +0000 ROA not before: Fri 02 Jan 2026 14:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52073 IP address blocks: 185.143.241.0/24 maxlen: 24 185.200.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:5c:9f:32:10:84:07:9e:81:4d:0c:f2:46:b6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f Validity Not Before: Jan 2 14:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9210fee4620e0ad7525bde12a6b95373a68a0c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ce:1f:a6:78:47:f7:da:f0:e9:c8:ff:ea:2a: 78:f9:2f:b5:cb:61:1a:06:c1:f9:4a:92:7e:ad:56: 6f:bd:34:da:f5:7a:7c:ea:a0:a2:8a:f3:93:e5:b5: 7c:52:4d:b1:ea:43:d9:96:aa:10:66:14:e7:fa:b5: 50:bb:78:12:90:32:7e:18:2f:7c:bb:44:59:a6:2c: 82:4c:8b:bb:b3:fd:b7:e7:34:37:b7:72:2f:3d:cf: e5:15:d4:53:9c:bc:be:d2:5b:b2:e2:50:b2:7c:b4: 36:bd:10:dc:8e:4f:c2:9c:85:40:b3:fd:d0:4b:f5: 3e:ec:56:f3:01:d3:45:25:7b:7c:b4:92:92:00:07: 9b:39:bf:33:d4:bf:60:09:c9:cf:4d:97:4b:a0:a3: 75:6d:e1:a5:98:16:46:c4:0e:46:53:ca:83:1f:93: f8:9a:fa:05:72:19:77:b6:84:46:d1:ea:f8:2d:50: 39:02:e0:22:50:41:78:81:41:7b:65:a6:da:f3:1f: 8e:40:9e:c8:20:57:66:93:bd:a1:65:43:48:a8:8d: ac:c8:d4:e0:91:08:0a:d4:be:d8:8c:2a:8d:74:e5: 0b:dd:55:71:54:fe:7d:e6:7c:28:09:22:bf:5d:ff: 36:a7:c6:34:68:1d:0c:15:c5:89:a9:4d:95:72:4f: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:10:FE:E4:62:0E:0A:D7:52:5B:DE:12:A6:B9:53:73:A6:8A:0C:2C X509v3 Authority Key Identifier: keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/khD-5GIOCtdSW94SprlTc6aKDCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.241.0/24 185.200.246.0/24 Signature Algorithm: sha256WithRSAEncryption 53:9d:7b:e0:ea:c8:fa:c8:af:98:51:94:a5:eb:f7:43:4e:25: 42:4f:88:e3:4a:6e:8d:9a:7b:07:a5:b0:94:7c:aa:df:20:27: 66:9b:4b:b8:db:26:6b:43:b6:b9:57:75:e6:8f:f9:4a:35:cd: 39:06:6e:ec:89:09:b8:7c:d0:b3:c5:f2:7d:e7:41:67:18:3e: bb:fa:5f:c5:f0:f9:3c:bf:94:5c:a5:0a:cb:96:bb:c8:ff:9e: 9c:65:05:22:13:3c:b3:c5:e0:c9:aa:be:f7:6b:c3:75:19:87: a7:72:40:69:8b:1f:6c:43:18:e1:b9:a3:b7:6b:e0:bb:d0:70: 67:6f:1b:3f:cd:c5:11:05:36:bc:4d:13:74:e4:dd:2e:f1:32: 25:5e:c7:9d:d3:a3:38:7c:38:90:4e:d5:82:db:21:b9:4e:05: 3f:3b:95:39:4e:ff:42:ac:18:d7:86:bc:17:9d:4e:10:44:8f: db:45:50:6d:bc:0b:dc:cf:85:a6:68:55:5f:0f:d1:44:af:36: b1:e1:42:8f:35:00:f8:4d:b2:5f:fa:ba:18:12:ad:56:8c:db: 8b:86:bf:ff:8d:57:c8:2b:76:5d:d1:c0:ae:56:aa:b0:46:b3: 40:b2:eb:5b:25:68:f9:c0:26:e2:5e:96:7f:89:63:53:e1:0f: 48:f9:9a:fa -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FFyfMhCEB56BTQzyRrbIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZGU0YjNiODJmMjA5YjcwMWFlMzQwY2Y1M2I5NzQwNzhm MTZhOWYwHhcNMjYwMTAyMTQxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjEwZmVlNDYyMGUwYWQ3NTI1YmRlMTJhNmI5NTM3M2E2OGEwYzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc4fpnhH99rw6cj/6ip4+S+1y2Ea BsH5SpJ+rVZvvTTa9Xp86qCiivOT5bV8Uk2x6kPZlqoQZhTn+rVQu3gSkDJ+GC98 u0RZpiyCTIu7s/235zQ3t3IvPc/lFdRTnLy+0luy4lCyfLQ2vRDcjk/CnIVAs/3Q S/U+7FbzAdNFJXt8tJKSAAebOb8z1L9gCcnPTZdLoKN1beGlmBZGxA5GU8qDH5P4 mvoFchl3toRG0er4LVA5AuAiUEF4gUF7Zaba8x+OQJ7IIFdmk72hZUNIqI2syNTg kQgK1L7YjCqNdOUL3VVxVP595nwoCSK/Xf82p8Y0aB0MFcWJqU2Vck/nwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJIQ/uRiDgrXUlveEqa5U3OmigwsMB8GA1UdIwQY MBaAFF3eSzuC8gm3Aa40DPU7l0B48WqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWIt ODZhNTUxOGUyZDUyLzEva2hELTVHSU9DdGRTVzk0U3BybFRjNmFLREN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWItODZhNTUxOGUyZDUy LzEvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuY/xAwQA ucj2MA0GCSqGSIb3DQEBCwUAA4IBAQBTnXvg6sj6yK+YUZSl6/dDTiVCT4jjSm6N mnsHpbCUfKrfICdmm0u42yZrQ7a5V3Xmj/lKNc05Bm7siQm4fNCzxfJ950FnGD67 +l/F8Pk8v5RcpQrLlrvI/56cZQUiEzyzxeDJqr73a8N1GYenckBpix9sQxjhuaO3 a+C70HBnbxs/zcURBTa8TRN05N0u8TIlXsed06M4fDiQTtWC2yG5TgU/O5U5Tv9C rBjXhrwXnU4QRI/bRVBtvAvcz4WmaFVfD9FErzax4UKPNQD4TbJf+roYEq1WjNuL hr//jVfIK3Zd0cCuVqqwRrNAsutbJWj5wCbiXpZ/iWNT4Q9I+Zr6 -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:19 2026 by rpki-client