This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/KbInZ1Gpupdhphj7CkIdrL5je5o.roa File: KbInZ1Gpupdhphj7CkIdrL5je5o.roa (raw, json) Hash identifier: q3MqxIRaBKHDKKFdix9wq0J/uM2um2WP1MbmKzjeTHE= Subject key identifier: 29:B2:27:67:51:A9:BA:97:61:A6:18:FB:0A:42:1D:AC:BE:63:7B:9A Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019B7AC95F8265BA913F904D8131E295242E Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/KbInZ1Gpupdhphj7CkIdrL5je5o.roa Signing time: Thu 01 Jan 2026 18:19:36 +0000 ROA not before: Thu 01 Jan 2026 18:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201295 IP address blocks: 94.74.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:5f:82:65:ba:91:3f:90:4d:81:31:e2:95:24:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Jan 1 18:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29b2276751a9ba9761a618fb0a421dacbe637b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:20:16:22:04:1f:f3:3a:5c:e7:02:ed:59: 7d:c0:2a:4b:77:32:c1:34:a6:b0:24:93:d0:c5:01: 42:6a:e8:78:6c:22:09:eb:96:19:35:ec:ea:21:eb: 3b:9b:d0:db:e0:ce:23:19:3f:50:94:86:0d:7b:bd: f8:f5:50:2a:c2:5b:38:ea:bc:9b:7f:6a:b6:92:65: 10:8e:89:55:26:08:bd:99:6a:11:5e:77:98:62:e1: 48:b7:f6:6f:5a:4b:4d:5e:d2:d5:51:ce:b1:44:46: af:5f:11:26:6e:66:e2:8d:f7:ae:2f:50:c6:36:9a: 20:f6:0a:f0:e0:47:82:60:22:4f:1e:c6:ae:1b:29: 93:cc:3e:d6:0c:e5:da:71:a2:ed:09:e1:31:cd:6e: c8:f0:b4:50:82:2e:19:cd:9f:7a:2c:c1:e5:7d:27: 96:b4:d4:52:90:05:0d:20:69:b7:51:23:47:1a:29: 0d:2c:40:83:89:34:e3:66:1d:97:9b:35:92:cb:a2: 7f:a9:17:b4:c1:6c:3b:1d:fc:2f:d4:4e:70:1f:27: 45:90:f2:c4:aa:b6:8f:47:29:b1:ae:6c:f9:ea:04: f9:9e:f6:d6:0e:9b:c0:1a:d6:7c:03:41:f9:46:eb: 02:e4:3c:7e:83:c1:03:7c:16:9e:db:f8:53:f3:ad: 01:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B2:27:67:51:A9:BA:97:61:A6:18:FB:0A:42:1D:AC:BE:63:7B:9A X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/KbInZ1Gpupdhphj7CkIdrL5je5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.74.145.0/24 Signature Algorithm: sha256WithRSAEncryption ab:82:f9:22:c1:f1:5e:5e:bf:4c:95:6c:80:49:82:5a:40:da: 1d:1a:5b:e2:64:9f:1d:6d:ea:6b:07:dd:32:f2:34:98:aa:a1: 7c:ec:0e:da:90:76:f8:9f:67:c7:b7:ed:ce:79:82:27:2f:2a: 98:f5:9b:99:3c:4d:4e:d2:94:9b:17:a1:3e:4a:3a:9b:f2:24: 2c:c5:47:15:73:3c:31:e7:b6:11:cb:0d:50:c8:69:13:53:ca: c6:31:72:d0:82:e7:b2:60:54:28:95:6b:74:1f:16:67:2e:1d: 1b:56:1a:71:e0:6f:28:8a:9c:61:f8:a8:ba:09:c1:ab:3b:8e: 4c:f3:4f:f0:ab:54:d7:2b:42:94:87:aa:59:cd:0e:fb:05:fd: c3:ea:c4:7c:af:93:bc:1b:7e:8c:9a:2f:da:20:0d:47:c3:19: 9f:3b:bc:71:c9:9d:2b:1c:a7:f2:99:20:d9:a6:b1:43:45:5b: 1f:f3:46:c2:1b:bb:03:e9:a3:f1:51:60:b8:b1:10:da:ce:ef: 6f:b5:72:07:ee:1d:67:a7:7c:8c:dd:a0:e4:a8:5a:78:45:0e: d2:c5:85:03:35:db:a3:32:ba:47:a5:00:79:7b:85:5f:65:55: f8:9c:62:68:22:02:ed:26:3d:5b:ac:32:35:15:04:14:f9:fe: 3e:0d:26:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yV+CZbqRP5BNgTHilSQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwMTAxMTgxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWIyMjc2NzUxYTliYTk3NjFhNjE4ZmIwYTQyMWRhY2JlNjM3YjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0ggFiIEH/M6XOcC7Vl9wCpLdzLB NKawJJPQxQFCauh4bCIJ65YZNezqIes7m9Db4M4jGT9QlIYNe7349VAqwls46ryb f2q2kmUQjolVJgi9mWoRXneYYuFIt/ZvWktNXtLVUc6xREavXxEmbmbijfeuL1DG Npog9grw4EeCYCJPHsauGymTzD7WDOXacaLtCeExzW7I8LRQgi4ZzZ96LMHlfSeW tNRSkAUNIGm3USNHGikNLECDiTTjZh2XmzWSy6J/qRe0wWw7Hfwv1E5wHydFkPLE qraPRymxrmz56gT5nvbWDpvAGtZ8A0H5RusC5Dx+g8EDfBae2/hT860BswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCmyJ2dRqbqXYaYY+wpCHay+Y3uaMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvS2JJbloxR3B1cGRocGhqN0NrSWRyTDVqZTVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXkqRMA0G CSqGSIb3DQEBCwUAA4IBAQCrgvkiwfFeXr9MlWyASYJaQNodGlviZJ8dbeprB90y 8jSYqqF87A7akHb4n2fHt+3OeYInLyqY9ZuZPE1O0pSbF6E+Sjqb8iQsxUcVczwx 57YRyw1QyGkTU8rGMXLQgueyYFQolWt0HxZnLh0bVhpx4G8oipxh+Ki6CcGrO45M 80/wq1TXK0KUh6pZzQ77Bf3D6sR8r5O8G36Mmi/aIA1HwxmfO7xxyZ0rHKfymSDZ prFDRVsf80bCG7sD6aPxUWC4sRDazu9vtXIH7h1np3yM3aDkqFp4RQ7SxYUDNduj MrpHpQB5e4VfZVX4nGJoIgLtJj1brDI1FQQU+f4+DSYR -----END CERTIFICATE-----Generated at Wed Jan 21 22:54:49 2026 by rpki-client