This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KfGUUnX0c4GMRya5yY2orpGJtbQ.roa File: KfGUUnX0c4GMRya5yY2orpGJtbQ.roa (raw, json) Hash identifier: eiIQzJXl4mRN4tk7kiHuwhtHqk7WrfLe2fO9eVS8PU4= Subject key identifier: 29:F1:94:52:75:F4:73:81:8C:47:26:B9:C9:8D:A8:AE:91:89:B5:B4 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EBC14BA51FCEDBCB862DF4D57B101 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KfGUUnX0c4GMRya5yY2orpGJtbQ.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43718 IP address blocks: 82.147.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bc:14:ba:51:fc:ed:bc:b8:62:df:4d:57:b1:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29f1945275f473818c4726b9c98da8ae9189b5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:20:0a:da:5f:97:5f:43:ea:dd:98:23:84: bb:05:0f:3e:2e:98:e6:2a:77:07:32:dc:ae:63:c7: 5e:50:90:5d:5a:7b:93:61:47:be:af:00:a2:76:9e: 98:b5:eb:eb:b5:38:01:05:8c:83:5c:3a:49:ac:57: 60:21:60:c7:82:bc:5c:b4:f7:87:45:68:c2:67:50: d3:ff:1e:74:d6:d0:91:44:0c:f1:e3:74:2a:d7:ad: 2b:2d:74:d4:85:c8:13:9f:0e:30:6b:a3:ca:13:63: b7:d1:e8:f5:e4:e6:68:d5:11:80:f0:aa:bb:2a:6d: 9a:fa:32:61:41:ef:d1:39:da:d8:2c:7a:b8:59:17: 38:8b:0e:55:66:b2:02:b3:e1:d2:bf:fa:4e:48:a1: 0f:45:d0:03:46:57:e7:5e:eb:f8:68:b6:77:75:62: 75:1c:42:7e:24:96:d0:35:70:f7:14:b5:ba:08:50: cc:36:64:4d:2e:53:f8:1b:cf:13:7e:ba:2b:93:76: 3f:f4:0f:f8:45:47:97:aa:a8:52:48:a6:7b:44:4b: 27:27:39:50:3f:27:1c:94:3b:0b:e8:d9:ab:3f:e0: 17:d9:75:24:47:6e:9a:65:6f:aa:fd:d0:3e:b0:6c: 2a:22:93:00:82:5f:ba:2e:e9:39:9b:33:cb:98:1a: 58:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F1:94:52:75:F4:73:81:8C:47:26:B9:C9:8D:A8:AE:91:89:B5:B4 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KfGUUnX0c4GMRya5yY2orpGJtbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.147.135.0/24 Signature Algorithm: sha256WithRSAEncryption 70:98:b8:79:5b:0c:05:a1:5d:72:66:29:3c:25:58:c2:d2:36: 4b:a4:4a:30:78:ca:0e:92:d0:67:f6:f7:87:2b:6d:fa:08:8b: 7f:e8:32:65:fe:a1:31:38:50:55:d3:1e:04:a2:fc:97:b5:70: c0:6c:a5:07:9c:66:ac:2b:3b:b7:b1:ab:85:58:d2:c9:6e:74: bd:3d:1a:b7:ba:69:4b:f3:15:ad:6a:fb:b6:1d:44:d4:37:61: 22:37:92:82:fc:90:ab:df:37:65:80:4f:97:45:07:2d:da:a1: 2e:95:f4:45:88:f0:6f:b1:18:8d:f0:18:94:ac:d7:17:4d:bb: 8d:5b:d1:c2:9b:c7:10:d1:05:a6:5c:b5:ac:64:9b:75:dd:92: cc:f3:58:13:d6:e9:c6:73:4f:6a:b2:f6:32:e5:e1:11:2d:73: bb:ca:0b:7e:e8:b2:8f:7d:ad:47:90:61:19:51:0f:b4:d5:97: 50:31:e7:94:31:51:ad:8a:5e:e3:03:1b:90:39:10:10:97:35: 38:c3:b8:f8:5b:51:0b:56:10:f1:d1:bc:b0:b8:7a:6f:eb:6c: 03:50:c1:ac:6c:f0:28:a2:8d:25:e3:3a:03:c0:06:66:7b:cc: 6d:14:9f:4d:d2:e4:a4:b7:06:7d:86:96:e8:b0:9d:0e:8b:3f: 0f:04:2c:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5frwUulH87by4Yt9NV7EBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWYxOTQ1Mjc1ZjQ3MzgxOGM0NzI2YjljOThkYThhZTkxODliNWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr0gCtpfl19D6t2YI4S7BQ8+Lpjm KncHMtyuY8deUJBdWnuTYUe+rwCidp6YtevrtTgBBYyDXDpJrFdgIWDHgrxctPeH RWjCZ1DT/x501tCRRAzx43Qq160rLXTUhcgTnw4wa6PKE2O30ej15OZo1RGA8Kq7 Km2a+jJhQe/ROdrYLHq4WRc4iw5VZrICs+HSv/pOSKEPRdADRlfnXuv4aLZ3dWJ1 HEJ+JJbQNXD3FLW6CFDMNmRNLlP4G88Tfrork3Y/9A/4RUeXqqhSSKZ7REsnJzlQ PycclDsL6NmrP+AX2XUkR26aZW+q/dA+sGwqIpMAgl+6Luk5mzPLmBpYjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCnxlFJ19HOBjEcmucmNqK6RibW0MB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvS2ZHVVVuWDBjNEdNUnlhNXlZMm9ycEdKdGJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpOHMA0G CSqGSIb3DQEBCwUAA4IBAQBwmLh5WwwFoV1yZik8JVjC0jZLpEoweMoOktBn9veH K236CIt/6DJl/qExOFBV0x4EovyXtXDAbKUHnGasKzu3sauFWNLJbnS9PRq3umlL 8xWtavu2HUTUN2EiN5KC/JCr3zdlgE+XRQct2qEulfRFiPBvsRiN8BiUrNcXTbuN W9HCm8cQ0QWmXLWsZJt13ZLM81gT1unGc09qsvYy5eERLXO7ygt+6LKPfa1HkGEZ UQ+01ZdQMeeUMVGtil7jAxuQORAQlzU4w7j4W1ELVhDx0bywuHpv62wDUMGsbPAo oo0l4zoDwAZme8xtFJ9N0uSktwZ9hpbosJ0Oiz8PBCwj -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:27 2026 by rpki-client