This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Krgv9xeE17phF-OHTSJAaXDxdPY.roa File: Krgv9xeE17phF-OHTSJAaXDxdPY.roa (raw, json) Hash identifier: Cf10O3ma4RWf6EDbdLtLTsynsEL3wUx9xlWTuWn0v/0= Subject key identifier: 2A:B8:2F:F7:17:84:D7:BA:61:17:E3:87:4D:22:40:69:70:F1:74:F6 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758B6416D2CE7560291A81851BBD8D0 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Krgv9xeE17phF-OHTSJAaXDxdPY.roa Signing time: Thu 01 Jan 2026 02:17:40 +0000 ROA not before: Thu 01 Jan 2026 02:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207483 IP address blocks: 185.254.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b6:41:6d:2c:e7:56:02:91:a8:18:51:bb:d8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ab82ff71784d7ba6117e3874d22406970f174f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cd:d3:36:61:ce:c5:70:c6:1c:26:01:74:8c: c3:da:d3:c8:86:19:ee:91:0f:2c:15:42:92:6d:2d: 62:0b:9a:35:95:e6:69:9b:25:4e:d5:d6:5f:c9:f7: d7:b8:c7:76:0e:cb:e4:9e:fb:cd:40:a1:e8:a8:22: 80:c4:f5:b5:c0:79:ac:9f:7c:49:4b:58:14:be:c8: d5:62:8d:cd:ae:58:5a:b3:d4:3a:ce:ea:19:13:a4: d3:75:f3:05:14:ff:94:ec:53:72:42:62:3e:89:7c: ee:dc:6f:11:72:37:b5:12:44:3a:49:a8:48:b7:fd: ad:f4:b6:be:30:66:49:a8:e1:a0:fe:3a:26:43:81: 3b:d6:6c:b0:d8:0b:cd:56:33:23:61:1d:7a:8a:6c: 43:c3:00:aa:ea:0a:4e:88:90:9a:01:c2:b3:fc:27: bc:99:8a:ba:5a:8b:15:18:30:e0:44:91:db:81:10: 08:91:55:82:da:af:bf:07:96:72:09:2b:41:23:e1: 70:c0:ba:d6:31:57:63:1e:ff:55:79:a7:5b:88:df: 85:58:eb:b7:d9:fa:19:bc:5e:98:5d:65:29:5a:45: 8b:15:38:1f:42:e4:16:d1:95:bf:51:2e:84:14:a8: 14:42:40:ba:78:d3:cf:e1:d0:25:d6:2c:47:76:32: 0d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B8:2F:F7:17:84:D7:BA:61:17:E3:87:4D:22:40:69:70:F1:74:F6 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Krgv9xeE17phF-OHTSJAaXDxdPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.31.0/24 Signature Algorithm: sha256WithRSAEncryption 92:99:3f:6e:20:6b:9d:f7:be:83:37:e4:3d:c9:f4:6d:d4:2b: d8:fb:64:e3:c1:e6:c1:8f:76:20:28:5f:49:f3:65:3f:18:d1: c7:b5:ae:12:73:cb:8c:66:58:29:04:0d:65:ac:3d:c1:be:7a: d0:1b:a8:63:20:26:f4:e8:7e:78:a9:7c:4b:58:47:1b:69:03: f3:30:e7:5d:de:43:cc:6d:5c:d8:41:22:16:f6:92:89:66:73: f3:e3:e1:33:7b:06:af:fa:a9:a3:4e:38:b3:01:78:4b:68:37: c2:1c:ac:7c:f2:2e:5b:fd:e4:53:59:2b:1c:ad:75:4c:21:21: 22:9f:fa:12:b0:b3:a3:7a:80:a3:36:d4:d0:ce:a4:8e:d0:89: df:84:f5:63:74:54:3c:0c:0b:df:36:7a:b2:86:58:01:dd:ab: 7c:d0:18:0b:08:5f:d6:7d:48:53:75:7b:cc:a4:42:f8:93:13: a7:18:62:60:51:30:8e:4d:84:94:29:48:1d:70:ee:62:73:f1: d7:eb:ed:c9:a7:42:8a:1c:b5:d3:a8:57:53:7f:e0:fb:84:02: 78:c4:70:ba:06:dd:31:06:e8:7a:5e:47:34:78:19:94:42:23: 1d:dc:33:d0:b0:98:75:e3:ba:fb:67:ee:1c:d9:19:74:69:3f: b7:bc:5d:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WLZBbSznVgKRqBhRu9jQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWI4MmZmNzE3ODRkN2JhNjExN2UzODc0ZDIyNDA2OTcwZjE3NGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps3TNmHOxXDGHCYBdIzD2tPIhhnu kQ8sFUKSbS1iC5o1leZpmyVO1dZfyffXuMd2DsvknvvNQKHoqCKAxPW1wHmsn3xJ S1gUvsjVYo3Nrlhas9Q6zuoZE6TTdfMFFP+U7FNyQmI+iXzu3G8Rcje1EkQ6SahI t/2t9La+MGZJqOGg/jomQ4E71myw2AvNVjMjYR16imxDwwCq6gpOiJCaAcKz/Ce8 mYq6WosVGDDgRJHbgRAIkVWC2q+/B5ZyCStBI+FwwLrWMVdjHv9VeadbiN+FWOu3 2foZvF6YXWUpWkWLFTgfQuQW0ZW/US6EFKgUQkC6eNPP4dAl1ixHdjIN9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCq4L/cXhNe6YRfjh00iQGlw8XT2MB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvS3Jndjl4ZUUxN3BoRi1PSFRTSkFhWER4ZFBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf4fMA0G CSqGSIb3DQEBCwUAA4IBAQCSmT9uIGud976DN+Q9yfRt1CvY+2TjwebBj3YgKF9J 82U/GNHHta4Sc8uMZlgpBA1lrD3BvnrQG6hjICb06H54qXxLWEcbaQPzMOdd3kPM bVzYQSIW9pKJZnPz4+Ezewav+qmjTjizAXhLaDfCHKx88i5b/eRTWSscrXVMISEi n/oSsLOjeoCjNtTQzqSO0InfhPVjdFQ8DAvfNnqyhlgB3at80BgLCF/WfUhTdXvM pEL4kxOnGGJgUTCOTYSUKUgdcO5ic/HX6+3Jp0KKHLXTqFdTf+D7hAJ4xHC6Bt0x Buh6Xkc0eBmUQiMd3DPQsJh147r7Z+4c2Rl0aT+3vF3H -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:04 2026 by rpki-client