This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/K4N3orsfXe-l_cCSMBw3n5JPDVI.roa File: K4N3orsfXe-l_cCSMBw3n5JPDVI.roa (raw, json) Hash identifier: 6KwKSqMS7ufj2P5HpkvKEEDqwAMVfIJTQOp6xcQ5Pms= Subject key identifier: 2B:83:77:A2:BB:1F:5D:EF:A5:FD:C0:92:30:1C:37:9F:92:4F:0D:52 Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a Certificate serial: 019B7F8314271BD1010C99EEE0A0C3E9E3C0 Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/K4N3orsfXe-l_cCSMBw3n5JPDVI.roa Signing time: Fri 02 Jan 2026 16:20:55 +0000 ROA not before: Fri 02 Jan 2026 16:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.159.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 22:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:14:27:1b:d1:01:0c:99:ee:e0:a0:c3:e9:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a Validity Not Before: Jan 2 16:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b8377a2bb1f5defa5fdc092301c379f924f0d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:21:f6:d9:8a:70:b8:db:2d:72:93:ff:d1: d8:27:25:7a:6f:ea:20:4c:88:eb:6f:e3:5f:e1:62: 47:86:56:64:b2:b0:4f:91:17:bf:dc:45:e0:df:92: 41:a9:43:7f:0f:08:07:e3:a5:60:c7:5d:d9:26:d4: 9d:f7:ee:f8:43:80:f1:19:3a:e6:4a:c8:f6:26:e5: 47:8b:45:9d:53:12:1c:25:78:07:2d:01:53:61:a6: 2e:37:f3:d3:9d:4a:08:ad:44:d9:82:a7:ba:84:48: 44:3b:9a:28:ea:28:7e:46:9c:ee:1b:a2:19:ed:fe: e7:da:f0:af:29:fd:b7:82:d2:b0:46:51:c9:fc:8f: 99:30:b8:1d:e1:1a:17:12:66:b6:7a:ab:fe:6e:4b: e6:2d:65:bf:3d:ce:b5:4e:41:cd:dd:c9:60:05:31: a7:44:34:9f:4f:7d:3c:f9:15:b4:b7:d1:27:db:ad: 05:b2:b3:dd:c3:b3:e6:d8:5c:69:ea:8e:50:b7:33: 3e:44:ff:10:2d:66:67:70:21:de:03:0a:e2:22:91: ee:5d:43:95:63:92:e5:bf:0d:e5:92:87:20:90:f0: ab:35:a8:0e:0d:f5:0f:ae:96:02:78:ed:22:35:9f: 2e:c9:4f:90:32:59:92:3d:95:75:b8:41:23:31:08: 10:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:83:77:A2:BB:1F:5D:EF:A5:FD:C0:92:30:1C:37:9F:92:4F:0D:52 X509v3 Authority Key Identifier: keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/K4N3orsfXe-l_cCSMBw3n5JPDVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.224.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:e6:20:85:5b:3d:40:d2:16:98:81:b6:11:04:42:50:0f:4d: e8:96:ce:87:26:f2:d0:04:31:d3:75:4b:2f:a1:f3:c3:09:4d: 6a:48:36:ba:d4:4c:6c:68:c8:41:50:64:91:ab:50:73:4a:e3: db:40:62:39:e9:ef:4b:98:97:ce:66:f8:2f:43:9c:ed:f0:79: 19:02:76:7e:03:ad:f3:f5:8c:bf:81:1c:23:ae:1e:58:ab:86: b1:e4:ef:5d:e4:c7:1b:54:6c:56:0e:b4:55:68:fd:dc:39:07: e9:a2:d2:f8:83:68:e9:d6:16:37:6b:17:75:9f:2f:1a:a5:50: 80:9c:8b:1d:0e:9e:9f:3d:f3:01:e0:bb:68:53:4f:da:a4:e8: 3f:93:d1:13:90:67:72:e7:d1:ec:bf:60:a9:c8:d3:5b:b7:88: 30:4c:9a:eb:1f:44:22:4b:9b:8f:b4:1d:ab:99:ab:e9:15:6d: 5f:6d:f4:81:c2:fb:53:12:d2:ae:fe:3b:c9:32:06:e5:53:98: 1a:35:fd:54:c3:86:7b:31:9f:5c:f4:a2:5e:36:4d:f4:07:fe: 48:e2:08:fc:77:18:1a:19:6e:4f:67:75:76:72:32:13:2d:b9: d8:d8:6c:09:2c:71:1e:09:4a:b8:be:a5:95:5b:3a:f2:1e:ca: f5:e1:90:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gxQnG9EBDJnu4KDD6ePAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMzRmYzJiNWI4MjI3YjZkZjNmMjFkMWFkM2E3NGIxNGVj MDY4NWEwHhcNMjYwMTAyMTYyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjgzNzdhMmJiMWY1ZGVmYTVmZGMwOTIzMDFjMzc5ZjkyNGYwZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTkh9tmKcLjbLXKT/9HYJyV6b+og TIjrb+Nf4WJHhlZksrBPkRe/3EXg35JBqUN/DwgH46Vgx13ZJtSd9+74Q4DxGTrm Ssj2JuVHi0WdUxIcJXgHLQFTYaYuN/PTnUoIrUTZgqe6hEhEO5oo6ih+RpzuG6IZ 7f7n2vCvKf23gtKwRlHJ/I+ZMLgd4RoXEma2eqv+bkvmLWW/Pc61TkHN3clgBTGn RDSfT308+RW0t9En260FsrPdw7Pm2Fxp6o5QtzM+RP8QLWZncCHeAwriIpHuXUOV Y5Llvw3lkocgkPCrNagODfUPrpYCeO0iNZ8uyU+QMlmSPZV1uEEjMQgQEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCuDd6K7H13vpf3AkjAcN5+STw1SMB8GA1UdIwQY MBaAFLM0/Ctbgie23z8h0a06dLFOwGhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUt MzZlNjRhYzY0NTQyLzEvSzROM29yc2ZYZS1sX2NDU01CdzNuNUpQRFZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUtMzZlNjRhYzY0NTQy LzEvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ/gMA0G CSqGSIb3DQEBCwUAA4IBAQBs5iCFWz1A0haYgbYRBEJQD03ols6HJvLQBDHTdUsv ofPDCU1qSDa61ExsaMhBUGSRq1BzSuPbQGI56e9LmJfOZvgvQ5zt8HkZAnZ+A63z 9Yy/gRwjrh5Yq4ax5O9d5McbVGxWDrRVaP3cOQfpotL4g2jp1hY3axd1ny8apVCA nIsdDp6fPfMB4LtoU0/apOg/k9ETkGdy59Hsv2CpyNNbt4gwTJrrH0QiS5uPtB2r mavpFW1fbfSBwvtTEtKu/jvJMgblU5gaNf1Uw4Z7MZ9c9KJeNk30B/5I4gj8dxga GW5PZ3V2cjITLbnY2GwJLHEeCUq4vqWVWzryHsr14ZDZ -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:15 2026 by rpki-client