This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/KRv87T4ZM2FUirwnB1dhL3l-Kd0.roa File: KRv87T4ZM2FUirwnB1dhL3l-Kd0.roa (raw, json) Hash identifier: Vl+l0xUb4tTixNYLTovd1bUz+nc7mehkSAFw6cLldSs= Subject key identifier: 29:1B:FC:ED:3E:19:33:61:54:8A:BC:27:07:57:61:2F:79:7E:29:DD Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB17B409BB375F8BE2CD832D3D6047 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/KRv87T4ZM2FUirwnB1dhL3l-Kd0.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205759 IP address blocks: 185.207.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:17:b4:09:bb:37:5f:8b:e2:cd:83:2d:3d:60:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=291bfced3e193361548abc270757612f797e29dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:51:b3:c5:f0:19:16:61:c6:d5:70:f5:df:79: e1:88:8b:06:bf:27:9a:e0:37:b6:55:92:2e:bb:31: a7:93:65:aa:88:55:a5:7d:3c:cf:6c:de:7e:3d:07: b2:20:aa:49:a0:4c:04:02:a2:4f:a4:7b:77:4f:e0: 65:28:f6:d3:c4:8d:f7:b7:f6:f7:f8:a1:92:cf:bc: 3b:65:8b:48:a8:74:6b:04:3c:1a:fa:16:45:80:5d: 44:8a:fd:d8:6c:5e:0e:66:c9:f0:9c:92:b7:29:a8: 42:40:b2:9d:6a:b3:81:48:a0:ee:13:70:32:8c:6d: 1d:a8:67:61:11:7c:b4:11:47:ab:5e:4d:ef:3d:5e: 1b:da:ca:cc:7d:ef:83:3a:b1:45:50:8b:9e:30:ed: 42:44:5f:df:89:88:e4:09:7a:4d:7d:95:00:00:e4: 21:b6:72:f1:ff:79:4f:93:88:54:e6:62:f7:12:b9: a9:e9:23:be:77:55:17:fc:eb:fe:9d:2c:37:cf:c7: de:b1:a5:90:ad:ca:52:62:ac:94:61:d8:56:40:7f: fd:11:eb:3c:0c:bc:8e:fd:53:59:45:a8:08:da:db: ad:1c:ba:3f:93:99:4b:0b:ca:74:89:c2:cf:6e:86: 50:8b:15:4e:e9:da:bc:bf:32:b0:cf:e9:f7:f7:ec: 0e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1B:FC:ED:3E:19:33:61:54:8A:BC:27:07:57:61:2F:79:7E:29:DD X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/KRv87T4ZM2FUirwnB1dhL3l-Kd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.144.0/22 Signature Algorithm: sha256WithRSAEncryption 74:dd:dd:89:43:a1:23:85:88:b0:95:20:4f:dc:8a:9c:2f:17: d2:35:4b:6a:51:fa:e1:3f:df:c1:33:bb:79:a7:88:6e:0d:ef: 71:58:ec:67:d6:f6:56:a8:60:3e:83:0a:6f:b3:54:40:fa:e2: 49:90:12:c5:dd:3f:44:0b:38:8e:10:7d:3d:c8:21:64:f4:fc: cc:c0:99:f3:61:48:6e:f2:1c:58:57:d2:70:23:2f:02:d7:27: df:34:cf:34:9e:b7:5f:c5:86:47:ad:36:00:d5:cb:c2:8d:90: bb:02:42:dd:ea:66:31:a5:ad:49:d4:83:9d:61:ed:aa:d2:f5: 45:2d:be:3d:e5:19:53:ae:c5:0e:a7:77:e2:4f:bb:a3:2c:78: c8:3a:08:51:00:58:c1:cd:11:bf:98:02:4a:54:43:fc:2b:f2: 2e:b0:bf:f5:57:a8:ca:f7:96:fc:35:01:0a:3b:9a:31:20:ae: 47:37:6c:ab:78:01:a0:e3:99:02:af:6b:e8:bf:16:de:2b:69: 85:e5:b3:08:9d:17:ec:ff:f5:fe:11:80:54:2f:6b:f6:ea:0a: 4d:6a:78:21:ba:23:27:31:8a:05:b2:74:9b:65:82:9d:61:6c: bf:c8:80:67:81:66:7e:47:08:d4:0c:db:13:46:1e:9a:a4:f3: f7:02:00:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xe0Cbs3X4vizYMtPWBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTFiZmNlZDNlMTkzMzYxNTQ4YWJjMjcwNzU3NjEyZjc5N2UyOWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31GzxfAZFmHG1XD133nhiIsGvyea 4De2VZIuuzGnk2WqiFWlfTzPbN5+PQeyIKpJoEwEAqJPpHt3T+BlKPbTxI33t/b3 +KGSz7w7ZYtIqHRrBDwa+hZFgF1Eiv3YbF4OZsnwnJK3KahCQLKdarOBSKDuE3Ay jG0dqGdhEXy0EUerXk3vPV4b2srMfe+DOrFFUIueMO1CRF/fiYjkCXpNfZUAAOQh tnLx/3lPk4hU5mL3Ermp6SO+d1UX/Ov+nSw3z8fesaWQrcpSYqyUYdhWQH/9Ees8 DLyO/VNZRagI2tutHLo/k5lLC8p0icLPboZQixVO6dq8vzKwz+n39+wOkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCkb/O0+GTNhVIq8JwdXYS95findMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvS1J2ODdUNFpNMkZVaXJ3bkIxZGhMM2wtS2QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc+QMA0G CSqGSIb3DQEBCwUAA4IBAQB03d2JQ6EjhYiwlSBP3IqcLxfSNUtqUfrhP9/BM7t5 p4huDe9xWOxn1vZWqGA+gwpvs1RA+uJJkBLF3T9ECziOEH09yCFk9PzMwJnzYUhu 8hxYV9JwIy8C1yffNM80nrdfxYZHrTYA1cvCjZC7AkLd6mYxpa1J1IOdYe2q0vVF Lb495RlTrsUOp3fiT7ujLHjIOghRAFjBzRG/mAJKVEP8K/IusL/1V6jK95b8NQEK O5oxIK5HN2yreAGg45kCr2vovxbeK2mF5bMInRfs//X+EYBUL2v26gpNanghuiMn MYoFsnSbZYKdYWy/yIBngWZ+RwjUDNsTRh6apPP3AgBv -----END CERTIFICATE-----Generated at Sun Jan 25 17:42:21 2026 by rpki-client