This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/K1nh_4HYePIPpfCcss_oviiPK_Q.roa File: K1nh_4HYePIPpfCcss_oviiPK_Q.roa (raw, json) Hash identifier: mHJgJAM42x8KIgcP2qSd1a11ihRhwdkPsD0pX6BQzVg= Subject key identifier: 2B:59:E1:FF:81:D8:78:F2:0F:A5:F0:9C:B2:CF:E8:BE:28:8F:2B:F4 Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Certificate serial: 019B7EA6CB3B7A281D6837F38959CEC83BA1 Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/K1nh_4HYePIPpfCcss_oviiPK_Q.roa Signing time: Fri 02 Jan 2026 12:20:18 +0000 ROA not before: Fri 02 Jan 2026 12:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24875 IP address blocks: 80.89.224.0/20 maxlen: 24 80.89.236.0/23 maxlen: 23 89.105.192.0/19 maxlen: 19 89.105.192.0/20 maxlen: 20 89.105.208.0/20 maxlen: 20 185.80.232.0/22 maxlen: 22 185.80.232.0/23 maxlen: 23 185.80.234.0/23 maxlen: 23 185.147.12.0/22 maxlen: 24 2001:968::/29 maxlen: 29 2001:968::/32 maxlen: 32 2001:968:15::/48 maxlen: 48 2001:968:100::/48 maxlen: 48 2001:968:675::/48 maxlen: 48 2001:968:676::/48 maxlen: 48 2001:968:677::/48 maxlen: 48 2001:968:678::/48 maxlen: 48 2001:968:679::/48 maxlen: 48 2001:968:780::/48 maxlen: 48 2001:968:1007::/48 maxlen: 48 2001:968:1400::/48 maxlen: 48 2001:968:2001::/48 maxlen: 48 2001:968:2003::/48 maxlen: 48 2001:968:2004::/48 maxlen: 48 2001:968:2005::/48 maxlen: 48 2001:968:2006::/48 maxlen: 48 2001:968:2007::/48 maxlen: 48 2001:968:2008::/48 maxlen: 48 2001:968:2010::/48 maxlen: 48 2001:968:2013::/48 maxlen: 48 2001:968:2015::/48 maxlen: 48 2001:968:2016::/48 maxlen: 48 2001:968:2017::/48 maxlen: 48 2001:968:2019::/48 maxlen: 48 2001:968:2020::/48 maxlen: 48 2001:968:2021::/48 maxlen: 48 2001:968:2022::/48 maxlen: 48 2001:968:2023::/48 maxlen: 48 2001:968:2024::/48 maxlen: 48 2001:968:2025::/48 maxlen: 48 2001:968:2026::/48 maxlen: 48 2001:968:2027::/48 maxlen: 48 2001:968:2032::/48 maxlen: 48 2001:968:2035::/48 maxlen: 48 2001:968:2036::/48 maxlen: 48 2001:968:2037::/48 maxlen: 48 2001:968:2062::/48 maxlen: 48 2001:968:2101::/48 maxlen: 48 2001:968:2102::/48 maxlen: 48 2001:968:2103::/48 maxlen: 48 2001:968:2104::/48 maxlen: 48 2001:968:2106::/48 maxlen: 48 2001:968:2107::/48 maxlen: 48 2001:968:2108::/48 maxlen: 48 2001:968:2109::/48 maxlen: 48 2001:968:2110::/48 maxlen: 48 2001:968:2111::/48 maxlen: 48 2001:968:2112::/48 maxlen: 48 2001:968:2117::/48 maxlen: 48 2001:968:2118::/48 maxlen: 48 2001:968:2119::/48 maxlen: 48 2001:968:2127::/48 maxlen: 48 2001:968:2128::/48 maxlen: 48 2001:968:2129::/48 maxlen: 48 2001:968:2130::/48 maxlen: 48 2001:968:2131::/48 maxlen: 48 2001:968:2132::/48 maxlen: 48 2001:968:2133::/48 maxlen: 48 2001:968:2134::/48 maxlen: 48 2001:968:2135::/48 maxlen: 48 2001:968:2137::/48 maxlen: 48 2001:968:2138::/48 maxlen: 48 2001:968:2139::/48 maxlen: 48 2001:968:2140::/48 maxlen: 48 2001:968:2143::/48 maxlen: 48 2001:968:2144::/48 maxlen: 48 2001:968:2145::/48 maxlen: 48 2001:968:2146::/48 maxlen: 48 2001:968:2147::/48 maxlen: 48 2001:968:2148::/48 maxlen: 48 2001:968:2150::/48 maxlen: 48 2001:968:2151::/48 maxlen: 48 2001:968:2152::/48 maxlen: 48 2001:968:2153::/48 maxlen: 48 2001:968:2155::/48 maxlen: 48 2001:968:2158::/48 maxlen: 48 2001:968:2160::/48 maxlen: 48 2001:968:2162::/48 maxlen: 48 2001:968:2164::/48 maxlen: 48 2001:968:2171::/48 maxlen: 48 2001:968:2172::/48 maxlen: 48 2001:968:2173::/48 maxlen: 48 2001:968:2174::/48 maxlen: 48 2001:968:2177::/48 maxlen: 48 2001:968:2178::/48 maxlen: 48 2001:968:2179::/48 maxlen: 48 2001:968:2180::/48 maxlen: 48 2001:968:2181::/48 maxlen: 48 2001:968:2182::/48 maxlen: 48 2001:968:2184::/48 maxlen: 48 2001:968:2185::/48 maxlen: 48 2001:968:2186::/48 maxlen: 48 2001:968:2188::/48 maxlen: 48 2001:968:2189::/48 maxlen: 48 2001:968:2190::/48 maxlen: 48 2001:968:2191::/48 maxlen: 48 2001:968:2192::/48 maxlen: 48 2001:968:2193::/48 maxlen: 48 2001:968:2194::/48 maxlen: 48 2001:968:2195::/48 maxlen: 48 2001:968:2197::/48 maxlen: 48 2001:968:2198::/48 maxlen: 48 2001:968:2226::/48 maxlen: 48 2001:968:2227::/48 maxlen: 48 2001:968:2412::/48 maxlen: 48 2001:968:3295::/48 maxlen: 48 2a00:11f8::/29 maxlen: 29 2a00:11f8::/32 maxlen: 32 2a07:5440::/29 maxlen: 29 2a07:5440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cb:3b:7a:28:1d:68:37:f3:89:59:ce:c8:3b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Validity Not Before: Jan 2 12:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b59e1ff81d878f20fa5f09cb2cfe8be288f2bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:3c:4b:ed:1f:eb:33:ca:9c:0e:da:eb:6a: 20:d0:07:98:a0:db:e4:29:2c:3c:42:30:a1:7e:2b: f1:4d:cf:e8:6b:9e:5a:ef:3f:f8:f4:55:80:74:b6: 46:3d:bf:ff:ff:0b:fd:88:2e:73:c1:bc:c3:43:85: c3:21:34:03:37:4c:a9:72:e2:8b:96:e4:48:11:4a: 24:f4:18:87:5c:75:d1:e6:51:42:9e:20:90:c5:d3: f1:9e:67:f9:17:0b:7a:24:5b:74:ee:e8:7c:ec:fb: 92:02:95:15:79:20:7d:4b:b1:38:00:89:63:61:3f: d1:80:d9:13:ec:f4:6e:34:8e:52:e4:57:36:a9:ca: 55:99:32:4c:2b:94:fb:42:1e:e0:29:6f:6e:aa:d7: 40:6f:91:3f:42:85:01:e1:ea:47:91:13:82:d0:20: 16:6c:47:b6:3c:e5:df:40:8e:dd:c3:41:41:62:6e: 8c:7f:30:b3:66:07:5a:a9:0a:20:89:74:1b:22:8b: a0:14:45:0a:65:6d:ae:4a:df:ae:8c:8c:eb:1e:f5: f2:af:a7:fc:0a:2a:a3:f0:8a:d9:5d:9f:ff:23:ab: 5e:45:43:b9:8c:cf:0f:b7:df:5a:0e:33:b5:66:ae: 7f:60:bb:1f:5b:cd:b9:76:28:da:7c:90:78:17:29: c9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:59:E1:FF:81:D8:78:F2:0F:A5:F0:9C:B2:CF:E8:BE:28:8F:2B:F4 X509v3 Authority Key Identifier: keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/K1nh_4HYePIPpfCcss_oviiPK_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.89.224.0/20 89.105.192.0/19 185.80.232.0/22 185.147.12.0/22 IPv6: 2001:968::/29 2a00:11f8::/29 2a07:5440::/29 Signature Algorithm: sha256WithRSAEncryption 18:a7:b2:ee:5d:f7:e1:2d:c7:52:18:3b:dd:bc:b4:27:b6:d9: c1:64:a0:6f:af:60:1d:d3:c4:86:67:f7:4d:61:a4:0e:60:07: 70:ad:3d:33:9c:a2:8c:d1:45:f9:45:5c:ce:b1:6d:84:02:dc: d7:e6:43:02:42:1c:14:de:90:87:82:c3:71:a9:da:27:b3:eb: 5d:88:6c:47:d3:f8:3e:3d:1e:ca:0f:d5:09:e8:d5:52:cc:e7: e5:3d:0f:e0:7f:8e:1e:53:0e:bd:84:62:81:6e:b0:68:13:88: 5f:36:88:ba:29:ed:88:33:e9:0c:39:6c:72:cc:e7:1e:b5:7a: 2d:79:dc:f4:2a:0a:19:06:47:d0:aa:a5:2a:6e:8a:ca:b3:62: 16:99:83:6c:90:26:c8:9e:4a:41:a6:13:71:3e:2f:4f:02:04: 2e:3f:50:d1:56:cb:0d:95:6a:2f:be:25:08:cd:21:c6:2b:a0: ff:32:d7:b2:7d:77:2d:f9:40:16:c9:bd:2e:cc:79:24:b4:a3: 24:4a:2f:59:f8:df:a8:80:e6:f1:95:4f:21:fc:c5:0d:9e:18: 44:e2:a2:e3:b0:76:ff:88:54:a3:22:0a:1b:32:b9:54:dc:31: b8:1e:d2:33:06:4c:2f:d0:1a:94:71:20:5f:29:38:c0:95:8e: 89:9d:64:ab -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt+pss7eigdaDfziVnOyDuhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz Zjc5MzAwHhcNMjYwMTAyMTIyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjU5ZTFmZjgxZDg3OGYyMGZhNWYwOWNiMmNmZThiZTI4OGYyYmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud08S+0f6zPKnA7a62og0AeYoNvk KSw8QjChfivxTc/oa55a7z/49FWAdLZGPb///wv9iC5zwbzDQ4XDITQDN0ypcuKL luRIEUok9BiHXHXR5lFCniCQxdPxnmf5Fwt6JFt07uh87PuSApUVeSB9S7E4AIlj YT/RgNkT7PRuNI5S5Fc2qcpVmTJMK5T7Qh7gKW9uqtdAb5E/QoUB4epHkROC0CAW bEe2POXfQI7dw0FBYm6MfzCzZgdaqQogiXQbIougFEUKZW2uSt+ujIzrHvXyr6f8 Ciqj8IrZXZ//I6teRUO5jM8Pt99aDjO1Zq5/YLsfW825dijafJB4FynJBwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFCtZ4f+B2HjyD6XwnLLP6L4ojyv0MB8GA1UdIwQY MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt MDBiY2Q5YjkxYzFiLzEvSzFuaF80SFllUElQcGZDY3NzX292aWlQS19RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAeBAIAATAYAwQEUFngAwQF WWnAAwQCuVDoAwQCuZMMMBsEAgACMBUDBQMgAQloAwUDKgAR+AMFAyoHVEAwDQYJ KoZIhvcNAQELBQADggEBABinsu5d9+Etx1IYO928tCe22cFkoG+vYB3TxIZn901h pA5gB3CtPTOcoozRRflFXM6xbYQC3NfmQwJCHBTekIeCw3Gp2iez612IbEfT+D49 HsoP1Qno1VLM5+U9D+B/jh5TDr2EYoFusGgTiF82iLop7Ygz6Qw5bHLM5x61ei15 3PQqChkGR9CqpSpuisqzYhaZg2yQJsieSkGmE3E+L08CBC4/UNFWyw2Vai++JQjN IcYroP8y17J9dy35QBbJvS7MeSS0oyRKL1n436iA5vGVTyH8xQ2eGETiouOwdv+I VKMiChsyuVTcMbge0jMGTC/QGpRxIF8pOMCVjomdZKs= -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:36 2026 by rpki-client