This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/KTnr28UXB2AOhLUGojIXh3TKOoo.roa File: KTnr28UXB2AOhLUGojIXh3TKOoo.roa (raw, json) Hash identifier: 8eiF90G8f4f8jQjBHQ0ai2Os8eR7L9120f3BRFVgphs= Subject key identifier: 29:39:EB:DB:C5:17:07:60:0E:84:B5:06:A2:32:17:87:74:CA:3A:8A Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 019B7C12B8FFD6B725B598AE4F410824E3F1 Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/KTnr28UXB2AOhLUGojIXh3TKOoo.roa Signing time: Fri 02 Jan 2026 00:19:20 +0000 ROA not before: Fri 02 Jan 2026 00:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198504 IP address blocks: 84.17.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b8:ff:d6:b7:25:b5:98:ae:4f:41:08:24:e3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Jan 2 00:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2939ebdbc51707600e84b506a232178774ca3a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:73:0e:fc:1d:7c:49:66:b4:7b:0d:75:7e:68: 1f:39:d2:59:91:d4:f2:8b:45:09:7c:9a:a0:fa:66: 2d:29:14:49:ac:3f:b4:25:11:91:62:f0:2c:e9:6c: d2:19:b0:2d:2a:ad:b7:b1:5e:56:ad:b4:37:ff:9b: e4:9f:6c:a5:c1:1a:a4:eb:89:ec:7f:ad:02:69:e6: 33:b0:8e:5d:86:16:fb:3f:32:d6:15:26:5f:16:47: b6:56:21:db:07:86:5a:e9:50:0c:d6:43:18:0d:0c: c6:d1:c0:54:74:0e:38:b8:17:16:a3:18:db:c6:2d: 85:91:c1:72:36:15:ef:43:d4:3d:33:ef:e4:10:10: 8f:4c:fe:c7:83:ea:46:68:71:18:11:cf:a0:c1:55: eb:1b:4d:f4:59:d4:1d:8b:36:ec:bc:78:71:eb:3e: 67:66:a6:be:09:a6:1b:10:e8:15:26:eb:f2:f9:be: 54:5e:9c:7a:dc:03:e0:ab:b9:00:55:bf:17:f8:a9: 9d:fb:5c:cc:9f:d8:82:e7:ca:a1:a2:00:a4:f7:b7: bf:25:b4:89:48:b0:22:0a:07:78:db:a0:a0:05:ab: 9d:e4:ea:ed:69:4c:c6:e6:bd:97:fc:b5:d3:ef:69: 92:22:fd:97:c1:47:7b:8d:64:0c:35:3d:b9:e9:ea: 1e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:39:EB:DB:C5:17:07:60:0E:84:B5:06:A2:32:17:87:74:CA:3A:8A X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/KTnr28UXB2AOhLUGojIXh3TKOoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.17.73.0/24 Signature Algorithm: sha256WithRSAEncryption 62:c0:3c:27:d3:85:b1:76:62:1b:fe:f6:9f:95:a4:20:f3:65: 1b:b5:8e:37:19:27:fe:d7:40:da:f9:ea:bb:27:68:fa:74:21: 73:13:99:a3:b4:88:e9:2b:e3:dd:d0:01:89:a3:04:14:47:f4: 99:41:da:ff:7c:31:f0:6a:14:ff:fe:1c:c1:ca:db:bd:8f:7c: cd:b8:0f:ae:b6:d0:95:8c:c0:1c:45:f6:4c:2c:fe:2f:81:d8: fc:4b:43:73:97:ed:75:77:41:d7:66:62:7d:73:72:c7:e9:19: 2d:52:b7:2f:d3:37:05:ad:93:a6:f2:b9:a2:66:3c:5d:33:5f: 73:ab:0e:de:ea:7a:e4:fc:0e:13:62:a6:54:ea:b7:bc:43:32: 39:0a:08:55:d7:47:c4:aa:12:87:88:63:70:d7:47:a5:26:9b: 7d:4a:38:80:73:9e:21:08:09:f9:9b:fe:ba:92:b5:cf:cc:bf: f3:41:3d:9d:17:54:e5:99:4b:8e:e5:a1:38:c5:b6:29:5f:b3: 6f:59:0e:96:02:da:27:1f:2d:54:ec:6f:24:ff:f0:39:44:97: 67:66:d4:49:87:f0:fe:c3:57:42:0d:d8:cf:68:b9:37:f5:cb: 49:dc:d1:57:f8:40:2a:11:d9:6f:47:79:56:99:30:66:e5:e2: a7:c2:3c:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Erj/1rcltZiuT0EIJOPxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjYwMTAyMDAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTM5ZWJkYmM1MTcwNzYwMGU4NGI1MDZhMjMyMTc4Nzc0Y2EzYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HMO/B18SWa0ew11fmgfOdJZkdTy i0UJfJqg+mYtKRRJrD+0JRGRYvAs6WzSGbAtKq23sV5WrbQ3/5vkn2ylwRqk64ns f60CaeYzsI5dhhb7PzLWFSZfFke2ViHbB4Za6VAM1kMYDQzG0cBUdA44uBcWoxjb xi2FkcFyNhXvQ9Q9M+/kEBCPTP7Hg+pGaHEYEc+gwVXrG030WdQdizbsvHhx6z5n Zqa+CaYbEOgVJuvy+b5UXpx63APgq7kAVb8X+Kmd+1zMn9iC58qhogCk97e/JbSJ SLAiCgd426CgBaud5OrtaUzG5r2X/LXT72mSIv2XwUd7jWQMNT256eoeAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCk569vFFwdgDoS1BqIyF4d0yjqKMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvS1RucjI4VVhCMkFPaExVR29qSVhoM1RLT29vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVBFJMA0G CSqGSIb3DQEBCwUAA4IBAQBiwDwn04WxdmIb/vaflaQg82UbtY43GSf+10Da+eq7 J2j6dCFzE5mjtIjpK+Pd0AGJowQUR/SZQdr/fDHwahT//hzBytu9j3zNuA+uttCV jMAcRfZMLP4vgdj8S0Nzl+11d0HXZmJ9c3LH6RktUrcv0zcFrZOm8rmiZjxdM19z qw7e6nrk/A4TYqZU6re8QzI5CghV10fEqhKHiGNw10elJpt9SjiAc54hCAn5m/66 krXPzL/zQT2dF1TlmUuO5aE4xbYpX7NvWQ6WAtonHy1U7G8k//A5RJdnZtRJh/D+ w1dCDdjPaLk39ctJ3NFX+EAqEdlvR3lWmTBm5eKnwjzi -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:47 2026 by rpki-client