This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/KhnFPatizLYzbuYdUdtwNlimK_A.roa File: KhnFPatizLYzbuYdUdtwNlimK_A.roa (raw, json) Hash identifier: p+Mj3EP56tIkokr0WqjKkNv7zw4zz51aSvtLv2wkCDw= Subject key identifier: 2A:19:C5:3D:AB:62:CC:B6:33:6E:E6:1D:51:DB:70:36:58:A6:2B:F0 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019B8D247E690794B97E776440DF94FDD805 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/KhnFPatizLYzbuYdUdtwNlimK_A.roa Signing time: Mon 05 Jan 2026 07:52:17 +0000 ROA not before: Mon 05 Jan 2026 07:52:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 45.146.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:24:7e:69:07:94:b9:7e:77:64:40:df:94:fd:d8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Jan 5 07:52:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a19c53dab62ccb6336ee61d51db703658a62bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:82:4f:26:d5:91:8a:83:fa:ae:67:2f:b3:1b: 83:43:0b:a9:9c:0e:a2:66:7e:1e:09:1d:cd:3a:25: 0d:69:48:e8:45:21:03:b5:90:81:50:70:88:2a:d8: 2f:fa:bc:f4:0b:97:e1:c0:d8:27:6d:a1:4c:dd:ba: da:27:5a:30:bf:56:88:8d:7c:fc:5d:f6:b7:a6:61: bb:00:ad:2d:19:b2:cf:23:7f:16:eb:48:e6:23:15: e2:af:1b:72:94:c7:9e:cf:11:20:cb:df:34:b2:03: 81:f9:b0:ab:6d:3a:5c:dd:74:93:7d:14:7d:c7:9c: e3:84:e9:4f:12:1e:92:56:a7:10:e7:b4:11:40:b7: fe:4d:50:7c:29:9e:34:6b:70:b3:51:7b:40:d1:24: 28:fc:e6:55:85:63:ca:19:c9:e1:d4:bd:c6:b6:53: 9a:2f:c8:a1:cf:dc:d9:43:77:c3:e4:4a:a1:18:d7: 19:0a:d3:bf:54:ae:58:56:d5:17:9d:7c:7c:00:3d: ee:2c:43:94:bb:86:e9:17:76:97:02:7a:79:9a:c1: fc:49:47:27:51:26:cb:a2:53:19:cd:6e:1e:97:1e: d9:d5:0c:2e:42:4e:5b:4e:9a:d7:80:51:c7:a0:ea: f9:89:12:39:59:a9:85:db:91:0e:e1:28:20:36:f1: ed:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:19:C5:3D:AB:62:CC:B6:33:6E:E6:1D:51:DB:70:36:58:A6:2B:F0 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/KhnFPatizLYzbuYdUdtwNlimK_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.200.0/24 Signature Algorithm: sha256WithRSAEncryption 30:9b:35:51:55:14:ec:d5:3b:2d:7b:d6:d8:a8:9c:c1:21:8d: c5:a2:19:cf:bc:ab:c0:41:55:99:dc:de:11:72:54:4e:59:b6: 1a:4f:f0:ad:df:b3:7e:0c:cb:a5:c9:d6:cc:5a:d3:b6:82:13: d5:8b:0f:73:f2:26:cb:f0:3b:52:62:7a:85:5e:79:6c:f7:48: f0:c3:f9:b7:37:7b:34:c4:56:73:3c:fa:33:1a:44:d1:b3:1f: ab:6b:ca:76:e5:cc:26:99:d3:18:f6:5d:70:65:7f:96:06:f0: 79:d8:ca:c9:d6:89:26:1d:45:27:b3:54:b3:56:dc:51:ba:0c: 7e:62:2d:30:2a:63:1a:8a:8f:81:fd:3c:c0:08:89:d5:a0:5e: 4e:65:b7:80:d4:31:fc:fc:d7:3d:22:df:23:cc:26:9c:d6:6d: 61:51:14:06:f3:14:66:4a:6f:5d:68:79:52:c5:69:2f:5d:11: 4f:78:bd:01:12:9b:15:cb:66:a1:43:04:89:90:98:de:43:cf: 23:9a:3a:26:07:98:8a:7f:cd:0e:82:97:4e:60:bd:fd:a3:42: 61:27:24:0a:d4:8e:48:02:b7:e6:b6:f2:5d:04:c6:40:7e:f3: b6:48:8c:5b:d7:c8:3a:bb:a0:5e:9c:98:1f:c6:b9:0f:3b:0d: 6e:42:ef:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuNJH5pB5S5fndkQN+U/dgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwMTA1MDc1MjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTE5YzUzZGFiNjJjY2I2MzM2ZWU2MWQ1MWRiNzAzNjU4YTYyYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYJPJtWRioP6rmcvsxuDQwupnA6i Zn4eCR3NOiUNaUjoRSEDtZCBUHCIKtgv+rz0C5fhwNgnbaFM3braJ1owv1aIjXz8 Xfa3pmG7AK0tGbLPI38W60jmIxXirxtylMeezxEgy980sgOB+bCrbTpc3XSTfRR9 x5zjhOlPEh6SVqcQ57QRQLf+TVB8KZ40a3CzUXtA0SQo/OZVhWPKGcnh1L3GtlOa L8ihz9zZQ3fD5EqhGNcZCtO/VK5YVtUXnXx8AD3uLEOUu4bpF3aXAnp5msH8SUcn USbLolMZzW4elx7Z1QwuQk5bTprXgFHHoOr5iRI5WamF25EO4SggNvHttwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCoZxT2rYsy2M27mHVHbcDZYpivwMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvS2huRlBhdGl6TFl6YnVZZFVkdHdObGltS19BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZLIMA0G CSqGSIb3DQEBCwUAA4IBAQAwmzVRVRTs1Tste9bYqJzBIY3FohnPvKvAQVWZ3N4R clROWbYaT/Ct37N+DMulydbMWtO2ghPViw9z8ibL8DtSYnqFXnls90jww/m3N3s0 xFZzPPozGkTRsx+ra8p25cwmmdMY9l1wZX+WBvB52MrJ1okmHUUns1SzVtxRugx+ Yi0wKmMaio+B/TzACInVoF5OZbeA1DH8/Nc9It8jzCac1m1hURQG8xRmSm9daHlS xWkvXRFPeL0BEpsVy2ahQwSJkJjeQ88jmjomB5iKf80OgpdOYL39o0JhJyQK1I5I ArfmtvJdBMZAfvO2SIxb18g6u6BenJgfxrkPOw1uQu9a -----END CERTIFICATE-----Generated at Sun Jan 25 09:41:21 2026 by rpki-client