This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/KDUP0PXVl9D07OvoTzwN-8-72ew.roa File: KDUP0PXVl9D07OvoTzwN-8-72ew.roa (raw, json) Hash identifier: T2WlXoHTDqACvTk8Ydhf12NbDhvdjynMl0xLzY+ru0M= Subject key identifier: 28:35:0F:D0:F5:D5:97:D0:F4:EC:EB:E8:4F:3C:0D:FB:CF:BB:D9:EC Certificate issuer: /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32 Certificate serial: 019B7AC93BC9361B8EC3E5D3DE55FE5158F1 Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/KDUP0PXVl9D07OvoTzwN-8-72ew.roa Signing time: Thu 01 Jan 2026 18:19:26 +0000 ROA not before: Thu 01 Jan 2026 18:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213231 IP address blocks: 194.45.217.0/24 maxlen: 24 194.45.233.0/24 maxlen: 24 194.48.3.0/24 maxlen: 24 194.48.191.0/24 maxlen: 24 2a07:e6c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:3b:c9:36:1b:8e:c3:e5:d3:de:55:fe:51:58:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32 Validity Not Before: Jan 1 18:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28350fd0f5d597d0f4ecebe84f3c0dfbcfbbd9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ac:3b:34:e2:f7:1f:5f:7f:66:c7:bd:02:b8: f7:5a:f7:0d:e2:17:d1:eb:16:14:31:a3:b4:d7:79: 54:8c:ec:41:54:a9:47:cf:e4:b1:36:9d:72:dc:4d: e2:0c:f2:e3:8a:36:7c:86:58:ee:6f:f3:05:27:41: 25:5f:b4:d1:ae:ea:f4:7a:aa:2b:e6:e1:1f:f7:f7: 0e:4a:22:30:f9:1c:be:ab:7c:bf:cf:61:dd:43:f8: f1:81:c0:76:a6:b2:5f:90:94:d8:3e:65:11:26:7f: e7:a1:0e:42:74:42:dc:46:48:a9:79:49:48:3c:df: b7:a9:71:84:12:26:23:d7:4a:0b:ad:86:b7:82:93: 9b:d6:02:f3:3a:03:c7:ef:f7:f3:ee:31:8c:40:7d: 65:42:9e:1c:55:c4:b1:cb:84:a2:f6:25:8e:a3:78: ee:b3:fb:6c:3c:3c:8f:bc:85:40:7e:e4:fc:da:df: d1:33:bc:f8:c0:e9:a6:cb:23:0f:a8:93:e1:6d:99: 16:d4:e1:56:11:ec:62:83:a8:9b:c4:85:93:51:66: 85:f5:8e:90:1a:9d:64:02:00:8a:b4:68:4e:95:1b: f6:21:78:03:c7:83:d8:ef:e4:45:6f:e2:af:16:32: 4b:a7:1d:d9:9a:5d:49:ff:3b:46:33:9f:1b:31:55: 6b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:35:0F:D0:F5:D5:97:D0:F4:EC:EB:E8:4F:3C:0D:FB:CF:BB:D9:EC X509v3 Authority Key Identifier: keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/KDUP0PXVl9D07OvoTzwN-8-72ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.45.217.0/24 194.45.233.0/24 194.48.3.0/24 194.48.191.0/24 IPv6: 2a07:e6c0::/29 Signature Algorithm: sha256WithRSAEncryption 15:0c:73:ce:26:7d:9d:f9:13:0c:36:87:2d:fd:4d:5e:b7:28: 44:67:24:b2:35:d0:63:94:5e:5f:02:a9:92:3e:bf:70:11:74: db:c9:82:53:66:fb:84:89:49:2b:89:a8:d5:a5:cd:93:96:96: 7c:13:41:10:ec:97:08:4e:1c:92:a1:cf:00:36:6b:06:5c:02: 0e:ae:dd:3c:22:25:76:87:40:c3:8d:61:b3:14:29:9e:3d:de: 1c:13:26:3f:73:28:9d:f4:aa:db:81:ab:f1:5b:87:22:b8:fd: e1:31:80:ec:96:05:12:83:21:d2:c5:0f:05:2d:89:92:54:47: ce:18:98:a2:29:59:f0:1d:cc:98:e8:d1:9d:e7:a6:a3:46:51: 15:af:70:4e:5c:22:7d:b7:b4:cf:93:d0:0d:31:3e:22:94:7f: 5b:52:ab:cd:85:38:db:5d:16:32:82:df:9e:e3:45:7f:23:72: 11:dd:f8:49:1b:87:a4:98:37:35:36:9e:0b:a6:98:b0:06:b4: fb:14:5e:3c:9f:50:52:9a:d0:85:8d:38:0d:bd:fa:d8:dc:c1: 7b:0c:37:63:4b:cf:a2:56:4f:13:22:ec:29:ad:48:0c:7a:d5: 6b:09:c5:e6:aa:1f:f6:19:1a:3e:59:22:f0:e7:81:ba:47:2c: d8:a0:b7:73 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt6yTvJNhuOw+XT3lX+UVjxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNTI4Yzk1ZjYwODBhYjEzY2IwNDk3ODNlOTI0NGQzM2Q5 YzRiMzIwHhcNMjYwMTAxMTgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODM1MGZkMGY1ZDU5N2QwZjRlY2ViZTg0ZjNjMGRmYmNmYmJkOWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqw7NOL3H19/Zse9Arj3WvcN4hfR 6xYUMaO013lUjOxBVKlHz+SxNp1y3E3iDPLjijZ8hljub/MFJ0ElX7TRrur0eqor 5uEf9/cOSiIw+Ry+q3y/z2HdQ/jxgcB2prJfkJTYPmURJn/noQ5CdELcRkipeUlI PN+3qXGEEiYj10oLrYa3gpOb1gLzOgPH7/fz7jGMQH1lQp4cVcSxy4Si9iWOo3ju s/tsPDyPvIVAfuT82t/RM7z4wOmmyyMPqJPhbZkW1OFWEexig6ibxIWTUWaF9Y6Q Gp1kAgCKtGhOlRv2IXgDx4PY7+RFb+KvFjJLpx3Zml1J/ztGM58bMVVr8wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFCg1D9D11ZfQ9Ozr6E88DfvPu9nsMB8GA1UdIwQY MBaAFD9SjJX2CAqxPLBJeD6SRNM9nEsyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jMmZkZjItMmEwYS00NDNmLWI3ZTAt YTViZGJiMTQ1YTc4LzEvS0RVUDBQWFZsOUQwN092b1R6d04tOC03MmV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jMmZkZjItMmEwYS00NDNmLWI3ZTAtYTViZGJiMTQ1YTc4 LzEvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwi3ZAwQA wi3pAwQAwjADAwQAwjC/MA0EAgACMAcDBQMqB+bAMA0GCSqGSIb3DQEBCwUAA4IB AQAVDHPOJn2d+RMMNoct/U1etyhEZySyNdBjlF5fAqmSPr9wEXTbyYJTZvuEiUkr iajVpc2TlpZ8E0EQ7JcIThySoc8ANmsGXAIOrt08IiV2h0DDjWGzFCmePd4cEyY/ cyid9KrbgavxW4ciuP3hMYDslgUSgyHSxQ8FLYmSVEfOGJiiKVnwHcyY6NGd56aj RlEVr3BOXCJ9t7TPk9ANMT4ilH9bUqvNhTjbXRYygt+e40V/I3IR3fhJG4ekmDc1 Np4LppiwBrT7FF48n1BSmtCFjTgNvfrY3MF7DDdjS8+iVk8TIuwprUgMetVrCcXm qh/2GRo+WSLw54G6RyzYoLdz -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:22 2026 by rpki-client