This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/KGtAb2AW0M0YASRqB3QhsbsdLzI.roa File: KGtAb2AW0M0YASRqB3QhsbsdLzI.roa (raw, json) Hash identifier: qiwS5fFaCXqMzeOtWduxw1//aM7SqgaRPEME58iPEIM= Subject key identifier: 28:6B:40:6F:60:16:D0:CD:18:01:24:6A:07:74:21:B1:BB:1D:2F:32 Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb Certificate serial: 019B78A35ACA41C51B6CE342B6FBEC9970FE Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/KGtAb2AW0M0YASRqB3QhsbsdLzI.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200019 IP address blocks: 46.253.3.0/24 maxlen: 24 46.253.4.0/24 maxlen: 24 46.253.5.0/24 maxlen: 24 95.169.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5a:ca:41:c5:1b:6c:e3:42:b6:fb:ec:99:70:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=286b406f6016d0cd1801246a077421b1bb1d2f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:44:41:2b:85:bf:93:8a:03:be:41:90:20: 63:3c:6c:bb:e9:50:06:af:ce:a0:45:76:71:b5:35: 08:8d:6a:75:16:7e:04:20:48:d6:73:b7:c5:0d:a3: 44:fc:31:d1:7b:62:45:5f:10:13:73:f1:5c:52:ad: 6d:13:3e:e0:0e:63:7d:e2:f4:d6:e4:ef:3b:0b:ce: 1f:31:e2:de:64:4e:0e:48:6d:6f:bd:5a:3b:fd:ec: 32:a5:1b:09:9c:96:c1:9a:f0:ee:aa:f9:67:47:61: c2:3d:6b:83:f5:10:d8:af:75:c6:25:86:3b:6a:8c: d8:f5:36:ad:cb:b1:e0:83:29:c5:c9:ab:4f:73:dc: e1:26:34:0a:be:64:32:7f:7e:8f:4a:cd:ac:51:90: f0:18:ee:dd:65:0e:a4:cc:80:50:3a:84:27:ca:24: b0:dd:5f:cc:59:67:aa:2b:16:07:ac:fd:fe:81:f9: 5b:84:41:97:bb:78:60:19:ec:be:ba:b2:e4:7d:04: 88:c2:12:ce:91:9e:44:6d:15:36:42:30:2f:ba:66: 7b:7c:34:63:2d:e8:f3:54:ff:3c:00:1b:99:05:1b: 47:a2:36:1a:7e:22:ae:fe:27:06:92:25:d5:a3:54: 2f:aa:f6:15:31:a2:1e:8f:bc:c2:9b:c1:98:0d:6c: 98:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6B:40:6F:60:16:D0:CD:18:01:24:6A:07:74:21:B1:BB:1D:2F:32 X509v3 Authority Key Identifier: keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/KGtAb2AW0M0YASRqB3QhsbsdLzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.3.0-46.253.5.255 95.169.203.0/24 Signature Algorithm: sha256WithRSAEncryption 01:c4:f9:fd:50:23:79:ee:71:47:a0:68:b2:e8:aa:c8:dd:f3: 3f:7b:5f:a7:7a:0e:46:f0:9d:7b:d6:f6:d6:00:16:21:6c:1c: 58:68:28:bd:10:ad:63:92:e3:3c:25:9e:f1:f2:4e:35:2e:8a: 0a:99:0b:80:a0:71:0a:75:61:79:ca:bd:cb:26:ab:8c:26:09: 03:58:09:2b:6d:60:a1:1c:4b:aa:6c:df:4d:64:16:1c:95:ac: 35:32:1b:19:3f:f1:76:98:02:e8:81:d1:d7:d6:79:38:8f:97: 06:f6:85:23:d6:75:fa:a9:82:1f:7e:44:b0:37:eb:a8:76:2d: 15:de:de:c1:4f:57:19:cf:1c:5b:dd:33:0b:6d:87:3c:df:ce: 0f:d8:6c:ca:4b:2e:5f:50:6a:22:63:af:7f:2c:a4:ff:38:06: 94:8b:59:e1:19:ff:5a:39:5a:be:b3:2d:74:1a:f8:a4:30:7f: 03:f8:51:82:d7:c8:b7:d6:4d:f5:b3:f0:8f:57:1b:84:68:2e: 3e:45:97:44:fe:14:e4:3b:a6:26:f9:b4:86:f2:eb:20:b4:a4: 1a:2f:72:b9:87:54:d1:46:7a:89:87:c8:8a:3d:7c:b1:f9:b8: 66:5d:d6:9c:c2:b5:f0:55:83:a3:4d:61:2e:e8:0b:06:44:4a: 2c:f9:6a:01 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4o1rKQcUbbONCtvvsmXD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MmQ0Y2VjNzgzMzA1OTIzZTM0OTdlZDg4NGYxYzQ0NWI0 ZTc4ZmIwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODZiNDA2ZjYwMTZkMGNkMTgwMTI0NmEwNzc0MjFiMWJiMWQyZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj1EQSuFv5OKA75BkCBjPGy76VAG r86gRXZxtTUIjWp1Fn4EIEjWc7fFDaNE/DHRe2JFXxATc/FcUq1tEz7gDmN94vTW 5O87C84fMeLeZE4OSG1vvVo7/ewypRsJnJbBmvDuqvlnR2HCPWuD9RDYr3XGJYY7 aozY9Taty7HggynFyatPc9zhJjQKvmQyf36PSs2sUZDwGO7dZQ6kzIBQOoQnyiSw 3V/MWWeqKxYHrP3+gflbhEGXu3hgGey+urLkfQSIwhLOkZ5EbRU2QjAvumZ7fDRj LejzVP88ABuZBRtHojYafiKu/icGkiXVo1QvqvYVMaIej7zCm8GYDWyYpQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFChrQG9gFtDNGAEkagd0IbG7HS8yMB8GA1UdIwQY MBaAFLYtTOx4MwWSPjSX7YhPHERbTnj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTIt ZDMyZTI3ZmI3ZTU5LzEvS0d0QWIyQVcwTTBZQVNScUIzUWhzYnNkTHpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTItZDMyZTI3ZmI3ZTU5 LzEvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAu/QMD BAEu/QQDBABfqcswDQYJKoZIhvcNAQELBQADggEBAAHE+f1QI3nucUegaLLoqsjd 8z97X6d6DkbwnXvW9tYAFiFsHFhoKL0QrWOS4zwlnvHyTjUuigqZC4CgcQp1YXnK vcsmq4wmCQNYCSttYKEcS6ps301kFhyVrDUyGxk/8XaYAuiB0dfWeTiPlwb2hSPW dfqpgh9+RLA366h2LRXe3sFPVxnPHFvdMwtthzzfzg/YbMpLLl9QaiJjr38spP84 BpSLWeEZ/1o5Wr6zLXQa+KQwfwP4UYLXyLfWTfWz8I9XG4RoLj5Fl0T+FOQ7pib5 tIby6yC0pBovcrmHVNFGeomHyIo9fLH5uGZd1pzCtfBVg6NNYS7oCwZESiz5agE= -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:29 2026 by rpki-client