This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/KRCT9B4RVN7i0VNkrAXq_wp-rRE.roa File: KRCT9B4RVN7i0VNkrAXq_wp-rRE.roa (raw, json) Hash identifier: qRSzgiwPczkOjtugbEXqYuJbcG64mRS3bSrnTP92V5I= Subject key identifier: 29:10:93:F4:1E:11:54:DE:E2:D1:53:64:AC:05:EA:FF:0A:7E:AD:11 Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41 Certificate serial: 019B797E1951960C791E500BF228FACA7B49 Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/KRCT9B4RVN7i0VNkrAXq_wp-rRE.roa Signing time: Thu 01 Jan 2026 12:17:45 +0000 ROA not before: Thu 01 Jan 2026 12:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203217 IP address blocks: 45.82.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:19:51:96:0c:79:1e:50:0b:f2:28:fa:ca:7b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41 Validity Not Before: Jan 1 12:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=291093f41e1154dee2d15364ac05eaff0a7ead11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cf:9a:15:87:fa:61:04:44:38:1d:02:f7:bc: 8a:f2:d1:55:90:c4:ee:3e:b3:24:76:06:89:8c:85: 05:05:e1:e4:75:51:c6:d0:e8:70:e7:52:f6:57:bb: e5:e4:4d:60:f1:cc:96:e1:3d:9d:68:53:58:96:61: 16:23:7e:93:c4:a1:42:02:31:a3:b6:7f:8c:e9:b8: a2:07:98:97:18:e7:87:48:80:08:4e:57:33:04:30: 29:7d:ec:0b:dc:81:55:dd:2b:8e:4f:9e:78:80:91: 82:72:2d:f0:df:81:7d:dd:32:b7:21:90:da:02:dd: 52:f4:b4:46:d3:d4:a5:07:31:9b:18:a3:b5:d3:e9: 68:a2:5b:40:ef:41:a4:8c:4c:1a:ba:74:6c:12:21: ce:8a:7b:22:cc:9c:60:f6:fd:51:db:d6:17:45:9d: 12:88:bd:8b:0e:92:62:0e:1f:69:ef:4e:07:d1:a9: a6:50:67:35:b6:0c:51:d5:35:88:db:a1:e8:1a:7f: d7:0e:6c:70:08:f0:87:58:7f:a6:89:83:45:09:32: 0a:2c:c3:14:97:19:8d:5c:fe:32:91:0c:27:f4:86: b8:38:7e:26:19:27:57:85:b5:6c:38:7a:6c:1d:bb: a6:5f:ac:b0:fd:8a:33:3b:b2:63:9f:48:38:7c:56: ac:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:10:93:F4:1E:11:54:DE:E2:D1:53:64:AC:05:EA:FF:0A:7E:AD:11 X509v3 Authority Key Identifier: keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/KRCT9B4RVN7i0VNkrAXq_wp-rRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.60.0/24 Signature Algorithm: sha256WithRSAEncryption 22:27:e6:41:fc:13:d4:7b:7e:e5:60:bc:4e:dc:76:a5:ec:5d: 07:54:b9:6d:3a:19:1b:2f:f9:c0:a7:9c:d4:39:5f:2e:98:fd: d7:9d:b6:76:af:9d:a8:b8:ad:9a:f2:0f:91:73:c8:69:8d:d8: 67:05:88:0b:08:c3:fd:dd:21:ad:c0:da:fc:e4:c7:b4:c8:55: 67:df:ed:78:b1:6c:6d:bf:7a:14:51:2e:37:95:4a:4c:fd:8c: d1:b0:4d:7d:6e:aa:1f:9b:e7:99:50:87:d2:df:8b:ef:0d:d9: 58:f7:78:54:1f:6d:f2:30:95:16:0d:9e:52:9c:95:50:0f:82: 28:69:e8:a7:d1:e6:66:0e:bf:09:d0:1f:ce:d4:64:2a:ad:d6: a5:cb:28:52:4b:8f:46:6a:9f:3a:b5:ec:27:d3:21:3a:41:d9: 04:69:fb:c7:75:23:f6:a9:a0:54:75:ea:58:74:d0:4d:f9:a1: 7a:70:e8:a7:c5:60:6e:d1:80:57:4f:15:b4:26:cc:c3:49:03: c5:b1:9d:d8:b6:dc:43:91:3c:88:0b:7b:8c:6e:17:01:46:e7: bf:2d:2b:c8:2f:f0:a5:56:8a:8e:03:4a:2e:c6:b2:a6:90:20: 06:b9:c6:db:cb:1b:6f:66:30:f6:9b:f9:70:a4:28:75:46:ce: 6c:62:e9:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fhlRlgx5HlAL8ij6yntJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZjVmY2VkYmRiODRkZDUyZmM2NzcwZDdjY2ZkM2ZjNjY4 NGZhNDEwHhcNMjYwMTAxMTIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTEwOTNmNDFlMTE1NGRlZTJkMTUzNjRhYzA1ZWFmZjBhN2VhZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8+aFYf6YQREOB0C97yK8tFVkMTu PrMkdgaJjIUFBeHkdVHG0Ohw51L2V7vl5E1g8cyW4T2daFNYlmEWI36TxKFCAjGj tn+M6biiB5iXGOeHSIAITlczBDApfewL3IFV3SuOT554gJGCci3w34F93TK3IZDa At1S9LRG09SlBzGbGKO10+looltA70GkjEwaunRsEiHOinsizJxg9v1R29YXRZ0S iL2LDpJiDh9p704H0ammUGc1tgxR1TWI26HoGn/XDmxwCPCHWH+miYNFCTIKLMMU lxmNXP4ykQwn9Ia4OH4mGSdXhbVsOHpsHbumX6yw/YozO7Jjn0g4fFasvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCkQk/QeEVTe4tFTZKwF6v8Kfq0RMB8GA1UdIwQY MBaAFJH1/O29uE3VL8Z3DXzP0/xmhPpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMt OGNjOTgzMzYxMWU2LzEvS1JDVDlCNFJWTjdpMFZOa3JBWHFfd3AtclJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMtOGNjOTgzMzYxMWU2 LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVI8MA0G CSqGSIb3DQEBCwUAA4IBAQAiJ+ZB/BPUe37lYLxO3Hal7F0HVLltOhkbL/nAp5zU OV8umP3XnbZ2r52ouK2a8g+Rc8hpjdhnBYgLCMP93SGtwNr85Me0yFVn3+14sWxt v3oUUS43lUpM/YzRsE19bqofm+eZUIfS34vvDdlY93hUH23yMJUWDZ5SnJVQD4Io aein0eZmDr8J0B/O1GQqrdalyyhSS49Gap86tewn0yE6QdkEafvHdSP2qaBUdepY dNBN+aF6cOinxWBu0YBXTxW0JszDSQPFsZ3YttxDkTyIC3uMbhcBRue/LSvIL/Cl VoqOA0ouxrKmkCAGucbbyxtvZjD2m/lwpCh1Rs5sYunY -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:58 2026 by rpki-client