This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/KbO_rhcd_Py9G7bL23wPhQg_H1E.roa File: KbO_rhcd_Py9G7bL23wPhQg_H1E.roa (raw, json) Hash identifier: Gt+nLupr4LnlUwhUJTSyzH1eIxogBFFobyE9mPwX8Qw= Subject key identifier: 29:B3:BF:AE:17:1D:FC:FC:BD:1B:B6:CB:DB:7C:0F:85:08:3F:1F:51 Certificate issuer: /CN=47aa878f76b50947cbd7deca04ac832e287b514d Certificate serial: 019B7D5ABB38F1FC8E01D783B29B9D22D9F2 Authority key identifier: 47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/KbO_rhcd_Py9G7bL23wPhQg_H1E.roa Signing time: Fri 02 Jan 2026 06:17:36 +0000 ROA not before: Fri 02 Jan 2026 06:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207188 IP address blocks: 194.61.102.0/23 maxlen: 24 2a03:98c7::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:bb:38:f1:fc:8e:01:d7:83:b2:9b:9d:22:d9:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47aa878f76b50947cbd7deca04ac832e287b514d Validity Not Before: Jan 2 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29b3bfae171dfcfcbd1bb6cbdb7c0f85083f1f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c6:8a:81:74:c8:80:bc:4b:a1:b8:94:34:ed: 78:f5:03:f0:5a:d1:6d:c7:42:2b:f0:50:97:f5:96: 81:ed:16:bd:09:3c:b5:6d:eb:fd:53:c9:bc:21:9b: 59:d1:d3:e4:c4:b9:7e:9f:01:3d:c5:4f:27:d9:b8: 22:c3:58:1c:ee:92:e1:2c:e5:2f:5e:3e:27:e3:1e: c6:ba:93:e8:ee:46:55:9a:2f:e1:1b:98:74:15:4a: 59:bd:10:40:48:94:91:ca:89:7e:66:58:5f:ef:55: 70:a7:5e:a2:2f:fe:79:89:75:70:da:cf:8b:72:b6: 39:9a:30:fc:f9:57:f4:0a:39:11:05:07:c7:27:92: b6:11:17:6e:fc:86:41:37:2f:28:75:6c:04:81:b3: ca:1d:18:b8:a3:df:33:53:5e:35:59:3f:34:11:da: 15:3e:16:0d:74:5c:a5:22:44:f9:71:ec:27:4a:c3: fa:94:ec:99:df:ed:c7:f6:82:04:4d:d4:82:f9:0e: 05:73:06:f6:61:19:c7:5f:84:17:64:44:ef:47:b5: 08:4a:d5:9c:77:f0:8e:8b:00:e7:d4:43:66:2a:9c: 8d:4b:86:75:1e:48:7a:9b:b0:80:a9:d8:8e:dd:78: d6:1e:c8:9c:10:e2:28:66:eb:44:17:a6:aa:e8:91: 87:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B3:BF:AE:17:1D:FC:FC:BD:1B:B6:CB:DB:7C:0F:85:08:3F:1F:51 X509v3 Authority Key Identifier: keyid:47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/KbO_rhcd_Py9G7bL23wPhQg_H1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.102.0/23 IPv6: 2a03:98c7::/32 Signature Algorithm: sha256WithRSAEncryption a2:df:53:bb:34:3d:19:a0:ae:d5:44:0e:78:59:01:69:46:f2: 40:83:96:4e:0e:1b:b3:2b:71:8c:a6:e8:7f:af:f0:87:20:5f: 8f:51:37:ff:8f:f8:35:61:d7:1c:d1:aa:6d:a5:7e:b9:5d:3b: 11:47:8b:89:95:93:75:18:5a:fb:0f:38:6b:5a:4f:07:2b:e2: 74:2f:3c:22:f8:82:db:9d:60:c8:19:ba:36:c5:1a:2b:3a:00: 3e:e0:68:6e:8e:74:2c:64:a3:e0:01:c1:89:fe:1a:7e:5f:e6: 52:15:b5:97:5e:97:6a:29:5c:63:91:9b:cc:15:d8:6e:c1:a8: dc:d0:0d:a2:75:2c:bc:c7:82:3d:9e:7d:cc:f7:68:c7:1e:e6: f3:62:96:f4:91:da:99:ae:ff:69:77:3b:ce:78:49:4b:86:64: cc:56:d8:2c:e6:4a:03:9b:2b:1c:0e:94:b0:7b:fc:b0:e5:9c: eb:58:05:4b:6a:b1:6b:77:c1:5e:80:c5:db:0f:ef:75:97:ae: a9:cf:e1:45:42:71:77:9c:c1:0f:7d:06:d8:08:fa:5c:79:16: 6b:7d:3f:d3:b7:6b:93:3a:28:14:dd:93:cb:47:21:78:bc:62: 6d:48:ba:a4:f8:13:9c:f0:8f:3c:df:0a:cc:6d:cd:cd:7b:ca: 14:f4:ae:14 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9Wrs48fyOAdeDspudItnyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YWE4NzhmNzZiNTA5NDdjYmQ3ZGVjYTA0YWM4MzJlMjg3 YjUxNGQwHhcNMjYwMTAyMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWIzYmZhZTE3MWRmY2ZjYmQxYmI2Y2JkYjdjMGY4NTA4M2YxZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28aKgXTIgLxLobiUNO149QPwWtFt x0Ir8FCX9ZaB7Ra9CTy1bev9U8m8IZtZ0dPkxLl+nwE9xU8n2bgiw1gc7pLhLOUv Xj4n4x7GupPo7kZVmi/hG5h0FUpZvRBASJSRyol+Zlhf71Vwp16iL/55iXVw2s+L crY5mjD8+Vf0CjkRBQfHJ5K2ERdu/IZBNy8odWwEgbPKHRi4o98zU141WT80EdoV PhYNdFylIkT5cewnSsP6lOyZ3+3H9oIETdSC+Q4Fcwb2YRnHX4QXZETvR7UIStWc d/COiwDn1ENmKpyNS4Z1Hkh6m7CAqdiO3XjWHsicEOIoZutEF6aq6JGHKQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCmzv64XHfz8vRu2y9t8D4UIPx9RMB8GA1UdIwQY MBaAFEeqh492tQlHy9feygSsgy4oe1FNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjZxSGozYTFDVWZMMTk3S0JLeURMaWg3VVUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jMWFiMjYtMjhiMC00NjM3LWI1MWIt Mzk5MmM1NGUxODdiLzEvS2JPX3JoY2RfUHk5RzdiTDIzd1BoUWdfSDFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jMWFiMjYtMjhiMC00NjM3LWI1MWItMzk5MmM1NGUxODdi LzEvUjZxSGozYTFDVWZMMTk3S0JLeURMaWg3VVUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwj1mMA0E AgACMAcDBQAqA5jHMA0GCSqGSIb3DQEBCwUAA4IBAQCi31O7ND0ZoK7VRA54WQFp RvJAg5ZODhuzK3GMpuh/r/CHIF+PUTf/j/g1Ydcc0aptpX65XTsRR4uJlZN1GFr7 DzhrWk8HK+J0Lzwi+ILbnWDIGbo2xRorOgA+4GhujnQsZKPgAcGJ/hp+X+ZSFbWX XpdqKVxjkZvMFdhuwajc0A2idSy8x4I9nn3M92jHHubzYpb0kdqZrv9pdzvOeElL hmTMVtgs5koDmyscDpSwe/yw5ZzrWAVLarFrd8FegMXbD+91l66pz+FFQnF3nMEP fQbYCPpceRZrfT/Tt2uTOigU3ZPLRyF4vGJtSLqk+BOc8I883wrMbc3Ne8oU9K4U -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:43 2026 by rpki-client