This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/kbd8DyKehIsGg90OqET0nvTdof4.roa File: kbd8DyKehIsGg90OqET0nvTdof4.roa (raw, json) Hash identifier: CToqIuzEVpITovVF+3kk6xRGdjwlN1OnxUyoxb4vvQY= Subject key identifier: 91:B7:7C:0F:22:9E:84:8B:06:83:DD:0E:A8:44:F4:9E:F4:DD:A1:FE Certificate issuer: /CN=3d555102998184fda7c3012e861900948fcf2773 Certificate serial: 019B7C12AEBDD52B1D08689EDDE6829590F5 Authority key identifier: 3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/kbd8DyKehIsGg90OqET0nvTdof4.roa Signing time: Fri 02 Jan 2026 00:19:17 +0000 ROA not before: Fri 02 Jan 2026 00:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211717 IP address blocks: 45.144.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ae:bd:d5:2b:1d:08:68:9e:dd:e6:82:95:90:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d555102998184fda7c3012e861900948fcf2773 Validity Not Before: Jan 2 00:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91b77c0f229e848b0683dd0ea844f49ef4dda1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:20:66:69:93:d2:69:c0:85:48:70:bd:31: 7a:58:2e:66:29:35:f9:08:d8:8b:55:0d:2f:c7:e6: bf:4d:7d:f6:f4:14:56:07:a5:2c:c6:fe:ec:23:f7: dc:bb:d9:c1:31:ce:d9:1e:0a:ac:9e:f7:bf:f9:35: 09:18:9a:e3:ca:61:58:ce:b7:97:0e:f7:52:dd:3a: 1e:0d:77:00:29:d0:2c:97:10:7d:f7:95:81:32:a1: 35:6d:c0:f5:5e:0b:17:88:1d:dc:7b:a3:01:50:2f: ce:cb:d8:18:1b:61:92:87:c8:4c:d5:7f:f8:77:d8: 4b:c7:7f:a5:21:bd:a0:91:8f:41:7a:1d:95:27:1a: 7a:db:66:d8:e4:c5:08:c2:1e:65:0d:bd:98:0c:80: 8c:2e:29:f2:50:46:65:2e:c3:28:df:20:f2:bc:df: 92:ea:e7:da:ad:47:31:e0:83:74:aa:7f:b7:db:5f: 45:58:34:03:64:a1:41:06:f4:ae:df:52:f1:8a:2c: 73:fe:f8:eb:30:ff:dc:c1:cb:a5:c3:8b:f0:da:8c: 72:d9:4b:55:12:00:77:8c:31:d0:19:c9:42:33:de: 21:92:16:1d:fa:da:81:95:b4:a8:f7:ed:0a:d6:67: cc:07:4c:98:03:4b:57:42:50:41:e7:df:c1:7c:27: f7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B7:7C:0F:22:9E:84:8B:06:83:DD:0E:A8:44:F4:9E:F4:DD:A1:FE X509v3 Authority Key Identifier: keyid:3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/kbd8DyKehIsGg90OqET0nvTdof4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.231.0/24 Signature Algorithm: sha256WithRSAEncryption 54:93:f0:b9:e1:aa:dd:aa:b1:5f:a4:05:99:c1:53:c5:8b:97: e9:77:fc:81:03:0a:9d:9a:4c:ab:95:d3:ed:9d:49:3e:14:18: b9:0f:2c:02:75:31:d8:d7:b5:41:56:82:72:d9:87:79:18:e6: 07:aa:28:12:94:68:dd:ae:ce:94:56:44:fe:05:37:d1:98:67: f1:b0:47:31:9d:a5:02:eb:fa:aa:85:14:5d:b8:a6:b6:e3:5a: 44:bf:27:b1:87:f0:e3:31:69:07:e3:86:f5:03:d7:b3:11:27: 42:06:34:78:3a:fb:05:b1:5e:e2:e1:cd:e9:38:cf:76:c6:00: 70:5a:df:76:93:a6:2d:f4:1d:e9:47:8f:76:6a:a8:2e:82:30: ac:0c:e0:9d:f7:35:a6:42:be:ef:6b:19:b3:cd:f2:34:e4:3c: 61:37:b9:1a:dd:6f:f5:16:29:90:83:ab:13:03:b9:b3:24:47: 98:4d:0b:0f:23:c3:40:f4:4d:f6:87:e3:7b:31:57:57:1c:76: f5:6b:b4:89:fe:c3:28:25:41:a8:01:6f:4e:97:16:ee:a2:64: a5:7d:81:4b:83:f8:d5:d0:ca:6d:b2:7c:90:53:36:76:79:e1: 9c:cf:54:c1:2e:d5:fc:6d:0e:6e:09:b4:c3:a7:bd:f7:1f:11: 7a:9d:bb:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Eq691SsdCGie3eaClZD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNTU1MTAyOTk4MTg0ZmRhN2MzMDEyZTg2MTkwMDk0OGZj ZjI3NzMwHhcNMjYwMTAyMDAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWI3N2MwZjIyOWU4NDhiMDY4M2RkMGVhODQ0ZjQ5ZWY0ZGRhMWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlIgZmmT0mnAhUhwvTF6WC5mKTX5 CNiLVQ0vx+a/TX329BRWB6Usxv7sI/fcu9nBMc7ZHgqsnve/+TUJGJrjymFYzreX DvdS3ToeDXcAKdAslxB995WBMqE1bcD1XgsXiB3ce6MBUC/Oy9gYG2GSh8hM1X/4 d9hLx3+lIb2gkY9Beh2VJxp622bY5MUIwh5lDb2YDICMLinyUEZlLsMo3yDyvN+S 6ufarUcx4IN0qn+3219FWDQDZKFBBvSu31Lxiixz/vjrMP/cwculw4vw2oxy2UtV EgB3jDHQGclCM94hkhYd+tqBlbSo9+0K1mfMB0yYA0tXQlBB59/BfCf3owIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJG3fA8inoSLBoPdDqhE9J703aH+MB8GA1UdIwQY MBaAFD1VUQKZgYT9p8MBLoYZAJSPzydzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFZWUkFwbUJoUDJud3dFdWhoa0FsSV9QSjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yNzMzY2UtZTliOS00YWI5LTk1MGMt YzI4YmRhMjMwY2I0LzEva2JkOER5S2VoSXNHZzkwT3FFVDBudlRkb2Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8yNzMzY2UtZTliOS00YWI5LTk1MGMtYzI4YmRhMjMwY2I0 LzEvUFZWUkFwbUJoUDJud3dFdWhoa0FsSV9QSjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZDnMA0G CSqGSIb3DQEBCwUAA4IBAQBUk/C54ardqrFfpAWZwVPFi5fpd/yBAwqdmkyrldPt nUk+FBi5DywCdTHY17VBVoJy2Yd5GOYHqigSlGjdrs6UVkT+BTfRmGfxsEcxnaUC 6/qqhRRduKa241pEvyexh/DjMWkH44b1A9ezESdCBjR4OvsFsV7i4c3pOM92xgBw Wt92k6Yt9B3pR492aqgugjCsDOCd9zWmQr7vaxmzzfI05DxhN7ka3W/1FimQg6sT A7mzJEeYTQsPI8NA9E32h+N7MVdXHHb1a7SJ/sMoJUGoAW9OlxbuomSlfYFLg/jV 0MptsnyQUzZ2eeGcz1TBLtX8bQ5uCbTDp733HxF6nbuD -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:07 2026 by rpki-client