This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GZa1fOF2UFUhutJlH2oEuUq_kpk.roa File: GZa1fOF2UFUhutJlH2oEuUq_kpk.roa (raw, json) Hash identifier: nDh3EXfBhs7KgDZx3mmKwnJqj4s/MExb8srMYTG6kac= Subject key identifier: 19:96:B5:7C:E1:76:50:55:21:BA:D2:65:1F:6A:04:B9:4A:BF:92:99 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC64AB4648C97E4056A00239AE1340 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GZa1fOF2UFUhutJlH2oEuUq_kpk.roa Signing time: Thu 01 Jan 2026 14:18:13 +0000 ROA not before: Thu 01 Jan 2026 14:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49791 IP address blocks: 150.241.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:64:ab:46:48:c9:7e:40:56:a0:02:39:ae:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1996b57ce176505521bad2651f6a04b94abf9299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9e:c8:65:1c:3c:61:73:54:74:f6:e8:3b:0c: 87:a1:6a:89:d4:90:d8:7c:f3:26:75:bd:aa:19:d5: db:dd:1c:c8:97:97:20:1c:02:18:69:41:1a:43:90: 8f:5d:89:4d:3f:5f:91:e3:b7:f1:3f:a9:76:b5:c6: e8:44:6f:f6:fa:2b:27:34:55:c3:57:ae:45:00:2f: ec:f4:04:e2:e2:34:30:1c:ea:d0:f4:ea:8d:c0:8e: 03:13:13:3b:35:de:b8:1f:bf:e9:7c:17:2b:72:3b: 83:c6:a1:79:87:65:9c:d6:40:fa:61:61:85:db:45: 39:2a:13:6f:52:f8:6d:18:cb:a8:5d:6e:5a:dc:58: 5e:f1:b1:d5:68:7b:38:e4:b0:97:e9:08:ff:8e:2b: ca:91:28:08:63:f3:8a:a0:d4:d1:17:c3:c0:f8:7b: a7:5a:e4:89:3b:86:1c:79:5b:5d:f7:a5:c9:03:2e: 08:de:65:10:90:c1:d2:fd:e0:12:84:62:60:68:bd: 8d:64:ce:39:aa:83:1d:88:fb:b0:48:ae:3b:12:88: 36:c8:cc:71:3b:6d:1a:b3:93:0d:7d:15:8a:09:4a: 24:86:c9:79:40:ed:07:c6:1e:b8:a2:d1:b1:30:26: 31:0e:20:72:3d:b9:95:eb:f8:c3:60:fd:a8:cf:1d: 62:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:96:B5:7C:E1:76:50:55:21:BA:D2:65:1F:6A:04:B9:4A:BF:92:99 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GZa1fOF2UFUhutJlH2oEuUq_kpk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.241.122.0/24 Signature Algorithm: sha256WithRSAEncryption 59:d9:79:04:16:5a:81:e4:7d:e6:e1:19:72:bf:61:ef:37:c1: f9:bc:24:df:4c:bb:15:20:2f:2e:a4:bf:88:a8:bb:45:26:d2: 2e:7e:6c:f7:d3:d0:ef:dd:45:8c:ae:87:1a:09:e7:67:61:3a: a5:c3:bd:d7:e3:79:90:41:08:da:97:1e:fd:14:c6:5d:b9:f6: 09:93:28:2e:2a:e8:e0:e7:d6:d2:db:73:3f:31:b9:f7:c5:ac: 30:06:04:bb:3a:dd:74:90:0c:94:86:c9:da:ce:85:ae:4a:ab: ef:cf:d7:e8:d2:69:c9:92:43:79:cc:1e:94:f4:42:15:83:c4: be:a9:a4:a5:f3:11:f9:ea:e7:2c:cd:9d:e9:46:78:bb:2b:cc: 7e:6a:3f:27:dc:ea:99:36:98:96:10:d4:92:02:6c:cf:e6:f1: f2:14:d8:ed:e4:8f:e3:47:37:d9:4a:83:77:bd:d0:80:20:cc: a5:8e:d7:0c:ed:43:17:1b:a0:d2:da:64:6b:b2:38:f5:3e:1a: f9:f4:4d:84:a4:e4:c1:2e:63:2b:3d:6e:bd:c8:38:dd:b0:76: cf:da:16:dc:36:3d:55:ed:81:6b:a5:eb:8f:6c:0f:73:43:35: 0f:98:ce:6c:c4:d9:f6:ee:57:06:7f:96:9b:39:b3:a0:b5:b1: 91:6e:b4:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57GSrRkjJfkBWoAI5rhNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTk2YjU3Y2UxNzY1MDU1MjFiYWQyNjUxZjZhMDRiOTRhYmY5Mjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp7IZRw8YXNUdPboOwyHoWqJ1JDY fPMmdb2qGdXb3RzIl5cgHAIYaUEaQ5CPXYlNP1+R47fxP6l2tcboRG/2+isnNFXD V65FAC/s9ATi4jQwHOrQ9OqNwI4DExM7Nd64H7/pfBcrcjuDxqF5h2Wc1kD6YWGF 20U5KhNvUvhtGMuoXW5a3Fhe8bHVaHs45LCX6Qj/jivKkSgIY/OKoNTRF8PA+Hun WuSJO4YceVtd96XJAy4I3mUQkMHS/eAShGJgaL2NZM45qoMdiPuwSK47Eog2yMxx O20as5MNfRWKCUokhsl5QO0Hxh64otGxMCYxDiByPbmV6/jDYP2ozx1i9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBmWtXzhdlBVIbrSZR9qBLlKv5KZMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvR1phMWZPRjJVRlVodXRKbEgyb0V1VXFfa3BrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvF6MA0G CSqGSIb3DQEBCwUAA4IBAQBZ2XkEFlqB5H3m4Rlyv2HvN8H5vCTfTLsVIC8upL+I qLtFJtIufmz309Dv3UWMrocaCednYTqlw73X43mQQQjalx79FMZdufYJkyguKujg 59bS23M/Mbn3xawwBgS7Ot10kAyUhsnazoWuSqvvz9fo0mnJkkN5zB6U9EIVg8S+ qaSl8xH56ucszZ3pRni7K8x+aj8n3OqZNpiWENSSAmzP5vHyFNjt5I/jRzfZSoN3 vdCAIMyljtcM7UMXG6DS2mRrsjj1Phr59E2EpOTBLmMrPW69yDjdsHbP2hbcNj1V 7YFrpeuPbA9zQzUPmM5sxNn27lcGf5abObOgtbGRbrTT -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:45 2026 by rpki-client