This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/K8RFO2AM7Fo3hksJurk3NmyaMuM.roa File: K8RFO2AM7Fo3hksJurk3NmyaMuM.roa (raw, json) Hash identifier: glhBgnP/cbTnRmmsbzZofYMCPRMzalXz621TywGBZZc= Subject key identifier: 2B:C4:45:3B:60:0C:EC:5A:37:86:4B:09:BA:B9:37:36:6C:9A:32:E3 Certificate issuer: /CN=4a883e94aa1451ba748d6a5bf175a43fe816e661 Certificate serial: 019B7CED64871422F9E5F40F4836A68DB14B Authority key identifier: 4A:88:3E:94:AA:14:51:BA:74:8D:6A:5B:F1:75:A4:3F:E8:16:E6:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/K8RFO2AM7Fo3hksJurk3NmyaMuM.roa Signing time: Fri 02 Jan 2026 04:18:11 +0000 ROA not before: Fri 02 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51504 IP address blocks: 46.16.112.0/21 maxlen: 21 46.39.128.0/19 maxlen: 19 81.25.240.0/20 maxlen: 20 188.95.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:64:87:14:22:f9:e5:f4:0f:48:36:a6:8d:b1:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a883e94aa1451ba748d6a5bf175a43fe816e661 Validity Not Before: Jan 2 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bc4453b600cec5a37864b09bab937366c9a32e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:43:e4:5c:fa:2d:60:8c:3a:e5:1e:89:30:52: f8:9c:0e:2f:58:7e:95:5e:ad:f1:f6:c8:18:7a:9e: c3:93:fb:c4:30:47:da:ee:98:a7:19:35:aa:fe:1d: 50:d1:e8:4f:d1:33:43:bd:22:37:5f:35:0c:20:0e: 68:2b:12:2c:a1:7d:b7:c1:01:bd:48:94:9d:91:bf: d5:f7:b4:e2:57:e3:e1:39:f6:76:87:b7:a9:33:9a: 7c:8a:c6:56:8a:33:b4:60:6c:c4:a6:d0:d6:ae:77: 31:b3:b1:60:44:62:a1:41:b5:ea:a7:88:d8:8a:61: d5:13:67:dc:f5:ae:41:3f:6b:ce:96:ee:c0:f2:47: 19:0f:dc:5b:ce:28:32:99:85:e9:cf:bb:a4:a4:39: a9:92:6d:2d:c0:12:45:ab:da:da:a1:3c:99:a0:e7: 45:73:f2:94:1b:38:59:b1:da:f3:0a:57:6e:e6:96: 80:54:d1:29:f8:d4:41:93:fc:43:39:eb:7d:e9:23: 05:5c:28:3c:ce:18:2c:d7:19:11:64:c5:04:5a:7f: 9e:c3:a8:e5:87:18:0b:16:4e:03:c4:fe:a9:ad:c1: 93:23:72:0a:4b:23:93:4b:72:7a:15:a6:2e:77:56: 4d:45:20:cf:71:a6:1d:eb:c5:9a:87:e2:8c:21:ca: a5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C4:45:3B:60:0C:EC:5A:37:86:4B:09:BA:B9:37:36:6C:9A:32:E3 X509v3 Authority Key Identifier: keyid:4A:88:3E:94:AA:14:51:BA:74:8D:6A:5B:F1:75:A4:3F:E8:16:E6:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/K8RFO2AM7Fo3hksJurk3NmyaMuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.112.0/21 46.39.128.0/19 81.25.240.0/20 188.95.208.0/21 Signature Algorithm: sha256WithRSAEncryption 39:15:54:56:3a:4e:d2:ee:c3:43:f7:fb:83:eb:79:ee:ef:f9: fd:61:31:ae:80:0a:a4:a1:9a:0c:5a:9d:50:0a:43:98:13:65: d3:5b:79:e9:2f:3f:d2:d7:7f:c0:44:4b:03:c6:76:e1:84:ec: 65:24:7c:4e:75:92:16:4d:6d:64:10:a0:78:74:21:60:8e:c6: d8:a5:fe:7b:75:18:69:f6:2d:52:28:8e:40:a5:f0:42:d5:23: e7:78:f0:d8:7e:57:9f:e4:dd:14:ad:d7:89:d1:fd:bf:4c:ff: 06:a0:a3:d9:93:12:72:77:a4:8a:89:6a:04:6b:f6:07:81:bc: 7b:3c:c1:ff:1b:32:82:b3:d4:d2:11:2f:70:61:c1:ed:92:77: ee:1e:75:36:81:91:40:c4:d7:a4:49:69:d4:d6:c0:74:bf:a0: 57:5e:d0:3c:b7:74:9f:70:2f:5d:b4:91:7f:b5:fe:fc:b0:b0: b4:d5:32:86:e8:76:e0:a9:94:ed:0a:f9:28:24:d5:5e:ea:99: 33:5b:d4:f3:f2:e3:11:76:be:5a:91:ca:05:e4:2a:f7:db:9b: 09:51:fd:78:b9:aa:a9:cf:83:3e:d0:4f:6b:49:3e:10:cc:8b: ec:4c:a7:81:7d:3f:e4:83:62:8c:3a:67:5c:9b:23:ea:38:a9: 64:f2:06:f4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt87WSHFCL55fQPSDamjbFLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhODgzZTk0YWExNDUxYmE3NDhkNmE1YmYxNzVhNDNmZTgx NmU2NjEwHhcNMjYwMTAyMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmM0NDUzYjYwMGNlYzVhMzc4NjRiMDliYWI5MzczNjZjOWEzMmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EPkXPotYIw65R6JMFL4nA4vWH6V Xq3x9sgYep7Dk/vEMEfa7pinGTWq/h1Q0ehP0TNDvSI3XzUMIA5oKxIsoX23wQG9 SJSdkb/V97TiV+PhOfZ2h7epM5p8isZWijO0YGzEptDWrncxs7FgRGKhQbXqp4jY imHVE2fc9a5BP2vOlu7A8kcZD9xbzigymYXpz7ukpDmpkm0twBJFq9raoTyZoOdF c/KUGzhZsdrzCldu5paAVNEp+NRBk/xDOet96SMFXCg8zhgs1xkRZMUEWn+ew6jl hxgLFk4DxP6prcGTI3IKSyOTS3J6FaYud1ZNRSDPcaYd68Wah+KMIcql8wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCvERTtgDOxaN4ZLCbq5NzZsmjLjMB8GA1UdIwQY MBaAFEqIPpSqFFG6dI1qW/F1pD/oFuZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29nLWxLb1VVYnAwaldwYjhYV2tQLWdXNW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85MTc4MjgtN2M0MC00OWNlLTg3MDMt OWQzNzAyNmY1MWI0LzEvSzhSRk8yQU03Rm8zaGtzSnVyazNObXlhTXVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85MTc4MjgtN2M0MC00OWNlLTg3MDMtOWQzNzAyNmY1MWI0 LzEvU29nLWxLb1VVYnAwaldwYjhYV2tQLWdXNW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDLhBwAwQF LieAAwQEURnwAwQDvF/QMA0GCSqGSIb3DQEBCwUAA4IBAQA5FVRWOk7S7sND9/uD 63nu7/n9YTGugAqkoZoMWp1QCkOYE2XTW3npLz/S13/AREsDxnbhhOxlJHxOdZIW TW1kEKB4dCFgjsbYpf57dRhp9i1SKI5ApfBC1SPnePDYflef5N0UrdeJ0f2/TP8G oKPZkxJyd6SKiWoEa/YHgbx7PMH/GzKCs9TSES9wYcHtknfuHnU2gZFAxNekSWnU 1sB0v6BXXtA8t3SfcC9dtJF/tf78sLC01TKG6HbgqZTtCvkoJNVe6pkzW9Tz8uMR dr5akcoF5Cr325sJUf14uaqpz4M+0E9rST4QzIvsTKeBfT/kg2KMOmdcmyPqOKlk 8gb0 -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:20 2026 by rpki-client