This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/kfGT7rmG_b7NtjrIHfozveynidI.roa File: kfGT7rmG_b7NtjrIHfozveynidI.roa (raw, json) Hash identifier: fvmGEPse0L5/dDUx9Eg53Q73vcZQitS7udRiA39FkwA= Subject key identifier: 91:F1:93:EE:B9:86:FD:BE:CD:B6:3A:C8:1D:FA:33:BD:EC:A7:89:D2 Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95 Certificate serial: 019B7834DF578258757FE6C0921DEC29158E Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/kfGT7rmG_b7NtjrIHfozveynidI.roa Signing time: Thu 01 Jan 2026 06:18:09 +0000 ROA not before: Thu 01 Jan 2026 06:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208331 IP address blocks: 185.136.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:df:57:82:58:75:7f:e6:c0:92:1d:ec:29:15:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95 Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91f193eeb986fdbecdb63ac81dfa33bdeca789d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:03:2e:44:10:81:d1:0b:8b:53:d1:3e:4f:3a: 19:ba:77:74:34:27:62:35:2b:b7:8b:1c:81:76:06: 97:9d:2e:9f:5d:f2:7e:2d:49:e3:4a:d0:1f:d1:46: 33:01:3e:cd:5c:5d:b0:5b:33:87:d3:fa:2b:30:5e: b6:59:ec:fa:ce:ba:ff:cd:43:ed:ea:08:5e:d0:a5: f5:70:af:37:95:f9:24:63:b9:07:1d:dc:fe:62:b1: d2:e1:63:47:e1:d8:55:63:3a:2c:7e:a2:b9:2f:a9: 6e:7f:c3:ec:fa:c6:c8:7e:dd:4a:b1:fb:8a:da:b5: 44:11:cf:85:fc:e0:2e:d5:d5:87:21:7c:af:6a:7f: 35:64:d6:ef:d2:a9:fa:a1:8f:e3:dc:6f:6e:f6:90: 23:e1:66:c0:e9:cc:2c:cf:d6:96:39:e3:ea:b2:c3: 42:ec:fb:c5:ee:c4:63:16:de:a3:71:03:d9:41:cc: 48:8f:8b:43:bd:0f:76:93:d8:59:82:ec:ad:48:c6: 61:55:7d:24:ad:04:1b:c6:b4:ea:14:17:b4:73:6f: 05:48:4d:35:71:c2:96:eb:c9:d1:a6:36:0a:de:7d: 31:ca:39:bc:d2:e5:e9:b8:93:03:de:91:f8:69:a7: 14:f9:fc:df:ce:c9:a2:b4:8a:a1:7f:64:0f:5b:74: 47:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F1:93:EE:B9:86:FD:BE:CD:B6:3A:C8:1D:FA:33:BD:EC:A7:89:D2 X509v3 Authority Key Identifier: keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/kfGT7rmG_b7NtjrIHfozveynidI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.227.0/24 Signature Algorithm: sha256WithRSAEncryption 59:63:4b:f6:d8:ab:60:0c:f9:c4:43:35:e6:e3:aa:a9:57:5c: ed:51:f3:e4:e3:4f:10:f1:68:d7:3c:d9:7c:33:89:41:56:63: ca:ce:b6:4d:35:72:ff:98:80:8c:b8:3d:7b:97:31:9a:f2:b9: 32:c1:90:96:e4:f3:05:07:41:b9:73:5c:44:d6:a0:56:4e:b7: 7e:e9:94:57:ae:60:c2:7a:79:e3:c7:08:30:11:3a:aa:5a:cb: f4:b2:7d:99:73:9a:47:84:46:11:77:97:bf:8d:dd:20:d7:45: 64:71:11:e8:30:1b:ab:e7:52:16:50:ab:ea:91:50:f6:f4:71: c2:d3:85:66:b3:d3:2f:e6:52:12:9b:c1:70:58:0f:75:59:cc: ca:3c:5c:4d:fa:2c:f9:09:16:13:ca:a5:20:1a:8c:24:0d:74: 3e:80:ca:24:d3:a6:d9:b2:e1:53:a6:97:1a:1c:6f:c2:cf:73: df:12:2a:d4:48:bb:99:99:32:3d:5c:20:ee:ff:0a:35:ef:4e: 62:b7:46:c4:f5:14:42:ba:ce:a9:2e:68:ee:38:62:22:b7:79: d5:35:b4:c8:fe:83:e1:cf:e1:03:fc:37:67:70:f5:c4:e8:9e: 6b:b1:3b:a5:a7:df:cf:27:2e:9f:6b:1e:32:89:fb:4c:ee:20: 06:cb:48:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NN9Xglh1f+bAkh3sKRWOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzQwYzRjMDc5ZjJkMWRlZTg1NDM5ZjgyNzgxYjliYWU3 NTZhOTUwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWYxOTNlZWI5ODZmZGJlY2RiNjNhYzgxZGZhMzNiZGVjYTc4OWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QMuRBCB0QuLU9E+TzoZund0NCdi NSu3ixyBdgaXnS6fXfJ+LUnjStAf0UYzAT7NXF2wWzOH0/orMF62Wez6zrr/zUPt 6ghe0KX1cK83lfkkY7kHHdz+YrHS4WNH4dhVYzosfqK5L6luf8Ps+sbIft1KsfuK 2rVEEc+F/OAu1dWHIXyvan81ZNbv0qn6oY/j3G9u9pAj4WbA6cwsz9aWOePqssNC 7PvF7sRjFt6jcQPZQcxIj4tDvQ92k9hZguytSMZhVX0krQQbxrTqFBe0c28FSE01 ccKW68nRpjYK3n0xyjm80uXpuJMD3pH4aacU+fzfzsmitIqhf2QPW3RHGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJHxk+65hv2+zbY6yB36M73sp4nSMB8GA1UdIwQY MBaAFLF0DEwHny0d7oVDn4J4G5uudWqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hRTVRBZWZMUjN1aFVPZmduZ2JtNjUxYXBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83MmE0OTUtMmI1ZC00YTIzLTk5YzQt ZWYwNjcxYzdjMGRmLzEva2ZHVDdybUdfYjdOdGpySUhmb3p2ZXluaWRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83MmE0OTUtMmI1ZC00YTIzLTk5YzQtZWYwNjcxYzdjMGRm LzEvc1hRTVRBZWZMUjN1aFVPZmduZ2JtNjUxYXBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYjjMA0G CSqGSIb3DQEBCwUAA4IBAQBZY0v22KtgDPnEQzXm46qpV1ztUfPk408Q8WjXPNl8 M4lBVmPKzrZNNXL/mICMuD17lzGa8rkywZCW5PMFB0G5c1xE1qBWTrd+6ZRXrmDC ennjxwgwETqqWsv0sn2Zc5pHhEYRd5e/jd0g10VkcRHoMBur51IWUKvqkVD29HHC 04Vms9Mv5lISm8FwWA91WczKPFxN+iz5CRYTyqUgGowkDXQ+gMok06bZsuFTppca HG/Cz3PfEirUSLuZmTI9XCDu/wo1705it0bE9RRCus6pLmjuOGIit3nVNbTI/oPh z+ED/DdncPXE6J5rsTulp9/PJy6fax4yiftM7iAGy0iD -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:23 2026 by rpki-client