This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/k4d-Grd6fMOD6ch95iLC_D9xAmI.roa File: k4d-Grd6fMOD6ch95iLC_D9xAmI.roa (raw, json) Hash identifier: FpQzQlajcmhliY2oa1dKiB0yjFo7oTmcDQa2iboX4UE= Subject key identifier: 93:87:7E:1A:B7:7A:7C:C3:83:E9:C8:7D:E6:22:C2:FC:3F:71:02:62 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019B7E3909E39A8D8BF031A786661FF06998 Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/k4d-Grd6fMOD6ch95iLC_D9xAmI.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51852 IP address blocks: 176.65.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:09:e3:9a:8d:8b:f0:31:a7:86:66:1f:f0:69:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93877e1ab77a7cc383e9c87de622c2fc3f710262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:e5:38:c5:15:f2:a6:d8:5c:2f:38:cf:4e: 8b:c8:b9:73:75:ab:22:0e:77:19:49:29:ac:18:c7: b3:70:24:27:d3:af:f9:d6:07:33:9d:c5:12:c8:20: 9a:5b:2f:1b:68:69:a3:35:92:2e:0c:25:54:52:4c: 14:b2:19:fd:63:b3:79:f5:79:05:75:1f:a0:38:1a: 21:91:e9:3e:fd:5f:57:87:7b:de:c2:9e:1f:b2:82: 38:a0:9b:66:ea:04:e9:c1:e4:64:97:a4:e0:9f:8e: 76:01:3a:fd:20:cd:8c:0c:1b:27:c6:8c:86:20:5a: 28:43:55:df:10:1e:56:f5:93:d9:18:18:fd:80:6f: 3e:c0:ca:20:f0:52:88:4b:f3:c8:fd:79:8b:bf:42: 94:6c:3b:58:c9:cb:67:f8:60:9b:38:22:36:0a:00: 72:fc:8e:17:c4:85:29:8a:73:4b:7e:94:66:0f:5d: 71:6e:71:b7:05:a8:15:e1:b3:5b:cf:a0:57:0f:6f: f9:de:d9:10:13:77:10:2b:ab:2e:51:04:19:b5:1a: 11:52:77:86:7a:e6:c5:2f:a7:be:da:83:5e:88:2d: 31:ab:a3:97:56:2e:20:d5:db:a1:f4:02:2a:6b:47: be:44:c5:5d:33:78:50:a9:80:b9:bd:b6:9f:78:d3: e7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:87:7E:1A:B7:7A:7C:C3:83:E9:C8:7D:E6:22:C2:FC:3F:71:02:62 X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/k4d-Grd6fMOD6ch95iLC_D9xAmI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.65.144.0/24 Signature Algorithm: sha256WithRSAEncryption 91:90:19:1e:82:f0:cd:8b:29:fe:0c:1a:71:14:67:a5:2b:e2: 1e:33:3a:3f:e6:64:bf:43:9c:0a:f4:7a:9b:24:51:d6:02:ad: 5f:7a:0a:7f:aa:b3:ec:77:15:56:36:bd:f3:55:d1:c8:cf:20: 41:5b:fa:80:c8:ea:d6:04:d2:60:cd:f7:50:01:f8:43:7c:84: c7:c0:94:26:9f:34:fd:ca:9a:c6:47:46:9b:29:fe:fa:14:ce: 57:24:02:02:e6:02:83:1f:3a:be:7c:20:62:eb:4e:7f:bf:be: e7:ea:72:53:09:b8:49:a5:6d:84:15:9e:43:04:35:d6:7b:e8: 57:4e:1c:55:b1:84:ab:b3:4a:d4:35:68:f9:85:4f:0e:7a:75: e8:7d:f7:87:01:da:d4:f0:59:77:d1:08:63:31:f2:a4:a6:33: e8:c7:82:c5:98:7d:de:a2:91:c0:00:cb:ef:f8:cb:72:4c:a3: 42:9c:78:a6:83:c5:79:ed:97:74:13:b4:25:95:d4:fb:0a:d8: 79:86:35:5f:31:bb:44:33:c5:55:ab:2f:7d:ca:71:89:b3:a1: 8a:cc:99:88:9e:4f:18:b8:45:5f:d7:06:5b:40:ed:32:cd:08: 3d:0e:c0:de:b7:c1:ff:52:bf:c5:ce:17:f0:61:1d:23:c2:ad: 00:be:ab:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQnjmo2L8DGnhmYf8GmYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mzg3N2UxYWI3N2E3Y2MzODNlOWM4N2RlNjIyYzJmYzNmNzEwMjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKHlOMUV8qbYXC84z06LyLlzdasi DncZSSmsGMezcCQn06/51gczncUSyCCaWy8baGmjNZIuDCVUUkwUshn9Y7N59XkF dR+gOBohkek+/V9Xh3vewp4fsoI4oJtm6gTpweRkl6Tgn452ATr9IM2MDBsnxoyG IFooQ1XfEB5W9ZPZGBj9gG8+wMog8FKIS/PI/XmLv0KUbDtYyctn+GCbOCI2CgBy /I4XxIUpinNLfpRmD11xbnG3BagV4bNbz6BXD2/53tkQE3cQK6suUQQZtRoRUneG eubFL6e+2oNeiC0xq6OXVi4g1duh9AIqa0e+RMVdM3hQqYC5vbafeNPn8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJOHfhq3enzDg+nIfeYiwvw/cQJiMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvazRkLUdyZDZmTU9ENmNoOTVpTENfRDl4QW1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsEGQMA0G CSqGSIb3DQEBCwUAA4IBAQCRkBkegvDNiyn+DBpxFGelK+IeMzo/5mS/Q5wK9Hqb JFHWAq1fegp/qrPsdxVWNr3zVdHIzyBBW/qAyOrWBNJgzfdQAfhDfITHwJQmnzT9 yprGR0abKf76FM5XJAIC5gKDHzq+fCBi605/v77n6nJTCbhJpW2EFZ5DBDXWe+hX ThxVsYSrs0rUNWj5hU8OenXoffeHAdrU8Fl30QhjMfKkpjPox4LFmH3eopHAAMvv +MtyTKNCnHimg8V57Zd0E7QlldT7Cth5hjVfMbtEM8VVqy99ynGJs6GKzJmInk8Y uEVf1wZbQO0yzQg9DsDet8H/Ur/FzhfwYR0jwq0Avqtb -----END CERTIFICATE-----Generated at Thu Jan 8 09:15:05 2026 by rpki-client