This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/K2kXXUMGcaKa7rD6RGsaKEmV9Wg.roa File: K2kXXUMGcaKa7rD6RGsaKEmV9Wg.roa (raw, json) Hash identifier: 4AJJT3KGPCqJR4OBHfMLmZzKwbu+xSqi/JOf68BFrzw= Subject key identifier: 2B:69:17:5D:43:06:71:A2:9A:EE:B0:FA:44:6B:1A:28:49:95:F5:68 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C72C12691FFB9FC8324B81CDC2E5CE Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/K2kXXUMGcaKa7rD6RGsaKEmV9Wg.roa Signing time: Thu 01 Jan 2026 04:18:20 +0000 ROA not before: Thu 01 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61390 IP address blocks: 45.130.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2c:12:69:1f:fb:9f:c8:32:4b:81:cd:c2:e5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b69175d430671a29aeeb0fa446b1a284995f568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:5e:44:f1:73:89:80:8c:41:8d:4f:85:5b: cd:32:9c:bb:b6:a1:10:bf:b7:78:03:25:b9:2a:20: 0b:61:9e:60:85:40:1a:e2:02:a5:29:29:0c:19:e4: 8e:c5:79:2b:55:d0:69:4c:de:45:fc:af:b9:fb:c2: 1d:95:a4:ff:3d:56:0e:38:e9:40:ce:5f:18:fa:7f: bd:54:b1:db:cb:f9:2f:dc:b3:9d:af:f9:93:f4:74: 6c:e4:9d:47:f3:7e:86:c1:d5:28:a2:2c:bf:b2:85: d3:ca:ca:45:cb:21:f3:88:d7:51:e4:87:ad:05:46: d0:a9:2b:40:c3:e6:b4:02:26:e9:22:b7:32:3d:39: 75:da:2e:ba:0c:54:26:ab:c1:83:6a:6c:ef:eb:05: a9:d1:42:ee:9d:92:b6:b0:7f:69:bc:70:a1:87:cd: 74:73:86:21:4c:06:92:09:7a:36:da:1c:58:24:c8: d9:de:32:cd:c8:3f:77:b7:e7:b9:90:56:f8:38:a7: c7:96:0f:98:7e:ce:c9:5c:93:69:79:cb:5c:e9:91: dd:ff:02:b9:dd:88:59:4e:23:4b:87:ef:ca:b8:ce: 97:e7:43:2f:47:3a:1b:d6:c2:b1:58:74:56:c7:b3: 8b:f9:cf:38:c7:ec:3e:52:2f:df:60:1b:0e:6b:1f: 29:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:69:17:5D:43:06:71:A2:9A:EE:B0:FA:44:6B:1A:28:49:95:F5:68 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/K2kXXUMGcaKa7rD6RGsaKEmV9Wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.70.0/23 Signature Algorithm: sha256WithRSAEncryption 81:41:8a:21:ad:99:0b:96:3f:bc:c0:56:d2:19:35:3c:0c:ff: 90:e8:20:c1:6d:a9:09:18:7f:54:90:1d:3a:0b:96:b7:80:86: 47:e7:cf:d0:53:a5:8a:84:34:6e:c8:9d:05:aa:fa:74:70:f7: 2e:ce:f9:71:b1:dd:94:9a:6e:19:96:90:23:84:14:03:ca:3f: 4f:c9:4f:f9:e6:fa:0f:83:a0:03:50:46:e7:6e:96:d9:2d:fc: 8e:6b:c7:46:b7:2c:d1:74:40:9a:ca:3d:8c:fb:57:65:a5:76: 7a:88:46:96:95:cc:b4:ec:bf:02:30:01:f3:8f:a7:3f:49:b5: 21:99:71:a0:15:41:df:ea:cb:37:03:2b:bd:c2:db:c9:9a:ad: 7f:dd:bc:93:42:ae:ee:24:73:fb:4d:f8:42:52:c3:bd:24:1a: a0:32:0f:c0:76:3a:db:78:28:88:33:7e:fe:9b:24:20:5f:64: 78:e7:b5:1a:6f:ed:cc:94:74:e8:3c:9a:a5:bb:a3:24:f1:d7: 13:af:68:e4:61:b3:e3:e7:2c:99:a6:e3:5c:a5:fb:5a:d2:52: 57:c4:72:9f:da:5f:b8:7a:5a:7d:4d:ac:4d:af:96:2c:8f:88: fb:d6:79:8d:52:94:1e:fe:39:47:de:65:02:a7:ea:41:c8:2d: e2:5c:b8:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xywSaR/7n8gyS4HNwuXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjY5MTc1ZDQzMDY3MWEyOWFlZWIwZmE0NDZiMWEyODQ5OTVmNTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp29eRPFziYCMQY1PhVvNMpy7tqEQ v7d4AyW5KiALYZ5ghUAa4gKlKSkMGeSOxXkrVdBpTN5F/K+5+8IdlaT/PVYOOOlA zl8Y+n+9VLHby/kv3LOdr/mT9HRs5J1H836GwdUooiy/soXTyspFyyHziNdR5Iet BUbQqStAw+a0AibpIrcyPTl12i66DFQmq8GDamzv6wWp0ULunZK2sH9pvHChh810 c4YhTAaSCXo22hxYJMjZ3jLNyD93t+e5kFb4OKfHlg+Yfs7JXJNpectc6ZHd/wK5 3YhZTiNLh+/KuM6X50MvRzob1sKxWHRWx7OL+c84x+w+Ui/fYBsOax8pTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCtpF11DBnGimu6w+kRrGihJlfVoMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvSzJrWFhVTUdjYUthN3JENlJHc2FLRW1WOVdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYJGMA0G CSqGSIb3DQEBCwUAA4IBAQCBQYohrZkLlj+8wFbSGTU8DP+Q6CDBbakJGH9UkB06 C5a3gIZH58/QU6WKhDRuyJ0Fqvp0cPcuzvlxsd2Umm4ZlpAjhBQDyj9PyU/55voP g6ADUEbnbpbZLfyOa8dGtyzRdECayj2M+1dlpXZ6iEaWlcy07L8CMAHzj6c/SbUh mXGgFUHf6ss3Ayu9wtvJmq1/3byTQq7uJHP7TfhCUsO9JBqgMg/AdjrbeCiIM37+ myQgX2R457Uab+3MlHToPJqlu6Mk8dcTr2jkYbPj5yyZpuNcpfta0lJXxHKf2l+4 elp9TaxNr5Ysj4j71nmNUpQe/jlH3mUCp+pByC3iXLhu -----END CERTIFICATE-----Generated at Wed Jan 21 06:47:49 2026 by rpki-client