This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/K-khbksQ-2sabX4zr3q8PxzSit0.roa File: K-khbksQ-2sabX4zr3q8PxzSit0.roa (raw, json) Hash identifier: xDFWiYoyDY13IMLCQNkMrZzkvNnytsrYJpcMXHkSwMs= Subject key identifier: 2B:E9:21:6E:4B:10:FB:6B:1A:6D:7E:33:AF:7A:BC:3F:1C:D2:8A:DD Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019BDFF84D3548E51DD0B53A25CB7EBD8D65 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/K-khbksQ-2sabX4zr3q8PxzSit0.roa Signing time: Wed 21 Jan 2026 09:52:30 +0000 ROA not before: Wed 21 Jan 2026 09:52:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207350 IP address blocks: 45.159.148.0/24 maxlen: 24 2a05:9080:1::/48 maxlen: 48 2a05:9080:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:f8:4d:35:48:e5:1d:d0:b5:3a:25:cb:7e:bd:8d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 21 09:52:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2be9216e4b10fb6b1a6d7e33af7abc3f1cd28add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:eb:9c:b5:7c:76:ba:af:2c:d7:62:b8:03: 39:d4:7f:43:68:92:c2:f7:61:3a:e8:0f:c3:88:99: db:4e:15:2d:5e:e5:b1:76:df:09:87:b1:92:5e:60: aa:9f:a4:dc:1c:15:03:83:a5:f9:7b:eb:89:22:83: 3c:32:45:6c:bb:8e:91:cb:a5:be:b2:4c:8c:dd:72: 8b:40:ef:92:24:52:c8:c4:f4:ff:25:c8:96:e8:ca: a7:35:d9:ea:ed:b5:3f:3d:6e:fb:ad:f7:57:c1:ec: 16:a2:d8:4d:d0:be:a8:2a:17:f5:82:ab:48:7a:9f: 77:da:1b:74:b2:69:5b:ed:fe:ba:e0:d4:33:de:de: 3a:e0:60:83:e5:33:fa:dd:77:7b:c0:eb:db:2c:fc: fa:a0:c3:5e:04:07:bd:fe:f1:e1:68:c4:b3:a7:7d: 50:c4:e4:6b:d3:d9:a2:48:47:47:01:21:c2:9c:34: 39:ba:10:4f:c7:1c:12:34:2f:e3:8e:97:ac:9e:58: 4f:bb:d8:4b:1a:11:4f:3d:e7:bd:a3:aa:8c:a5:86: 4f:32:dd:45:32:83:e1:ce:12:2e:34:84:52:20:a4: a5:2c:c2:6f:5f:5a:e3:38:c5:b0:d5:d3:0f:03:79: 18:a7:50:cc:f6:a4:44:7b:44:c3:ac:7e:e3:dd:db: e5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E9:21:6E:4B:10:FB:6B:1A:6D:7E:33:AF:7A:BC:3F:1C:D2:8A:DD X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/K-khbksQ-2sabX4zr3q8PxzSit0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.148.0/24 IPv6: 2a05:9080:1::/48 2a05:9080:15::/48 Signature Algorithm: sha256WithRSAEncryption 0e:b9:4a:05:9e:9e:93:94:62:17:7b:f2:04:bc:34:3a:bd:f3: 05:1f:b0:b5:f8:1f:04:d1:9f:e4:c6:cf:f2:03:61:76:2d:09: 04:7a:9f:a1:16:16:df:5f:6d:59:24:8d:ff:bb:25:18:20:c1: 57:5b:1b:ea:9d:60:d0:10:d6:7a:7b:e2:d1:65:2c:c1:8d:c1: e9:70:45:83:f6:20:55:68:ab:3d:d0:15:b1:0f:c9:5d:80:f3: 07:db:49:06:7c:b1:3c:5b:d9:4c:dc:ee:40:e4:63:39:46:79: 94:95:91:d0:69:51:05:88:81:67:3a:11:37:fc:6a:29:d6:8b: bf:85:d8:57:43:3f:13:f5:52:62:33:b8:d2:b5:5b:c0:35:c7: 48:a8:d2:7a:12:63:f3:38:9a:27:75:b2:77:57:d7:68:da:dd: 28:39:65:2a:53:24:9b:e8:bd:3a:d1:6f:30:0b:cb:98:a8:19: 41:d8:09:a1:56:2f:62:d7:ca:b6:91:dd:3c:3b:ec:0b:3a:9e: 5e:6e:38:a3:9a:41:ec:14:2d:13:f1:fe:39:4b:f3:90:30:9c: 04:47:78:e6:ef:25:81:6a:23:78:75:24:e8:80:3b:4b:5f:ba: fd:8e:46:9b:d4:e1:4a:b5:38:2d:2d:7d:73:ce:9f:8d:8c:0e: 86:c8:65:14 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZvf+E01SOUd0LU6Jct+vY1lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTIxMDk1MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmU5MjE2ZTRiMTBmYjZiMWE2ZDdlMzNhZjdhYmMzZjFjZDI4YWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj7rnLV8drqvLNdiuAM51H9DaJLC 92E66A/DiJnbThUtXuWxdt8Jh7GSXmCqn6TcHBUDg6X5e+uJIoM8MkVsu46Ry6W+ skyM3XKLQO+SJFLIxPT/JciW6MqnNdnq7bU/PW77rfdXwewWothN0L6oKhf1gqtI ep932ht0smlb7f664NQz3t464GCD5TP63Xd7wOvbLPz6oMNeBAe9/vHhaMSzp31Q xORr09miSEdHASHCnDQ5uhBPxxwSNC/jjpesnlhPu9hLGhFPPee9o6qMpYZPMt1F MoPhzhIuNIRSIKSlLMJvX1rjOMWw1dMPA3kYp1DM9qREe0TDrH7j3dvlVQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFCvpIW5LEPtrGm1+M696vD8c0ordMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvSy1raGJrc1EtMnNhYlg0enIzcThQeHpTaXQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQALZ+UMBgE AgACMBIDBwAqBZCAAAEDBwAqBZCAABUwDQYJKoZIhvcNAQELBQADggEBAA65SgWe npOUYhd78gS8NDq98wUfsLX4HwTRn+TGz/IDYXYtCQR6n6EWFt9fbVkkjf+7JRgg wVdbG+qdYNAQ1np74tFlLMGNwelwRYP2IFVoqz3QFbEPyV2A8wfbSQZ8sTxb2Uzc 7kDkYzlGeZSVkdBpUQWIgWc6ETf8ainWi7+F2FdDPxP1UmIzuNK1W8A1x0io0noS Y/M4mid1sndX12ja3Sg5ZSpTJJvovTrRbzALy5ioGUHYCaFWL2LXyraR3Tw77As6 nl5uOKOaQewULRPx/jlL85AwnARHeObvJYFqI3h1JOiAO0tfuv2ORpvU4Uq1OC0t fXPOn42MDobIZRQ= -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:42 2026 by rpki-client