This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/K-RSBEB1ZNkw3BDgpDKvXT-jHFk.roa File: K-RSBEB1ZNkw3BDgpDKvXT-jHFk.roa (raw, json) Hash identifier: Ek8U88NKRYg8I4QyXUu+1m6S0Vw3QVig3cYX4BA41DY= Subject key identifier: 2B:E4:52:04:40:75:64:D9:30:DC:10:E0:A4:32:AF:5D:3F:A3:1C:59 Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85 Certificate serial: 019B77C7119235471E7C05FCDBD8E7B09D0E Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/K-RSBEB1ZNkw3BDgpDKvXT-jHFk.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24982 IP address blocks: 5.57.2.0/24 maxlen: 24 85.112.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:11:92:35:47:1e:7c:05:fc:db:d8:e7:b0:9d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2be45204407564d930dc10e0a432af5d3fa31c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:76:eb:56:03:86:8a:27:86:52:87:6a:0d:2b: 5c:62:b2:b9:b5:07:70:7e:79:ff:e4:27:80:cb:53: 42:6b:8c:aa:0b:47:b1:70:dd:42:ce:e0:0b:b8:33: da:9c:4a:c7:e9:c3:44:5b:e4:69:73:f0:80:a6:a7: 48:8e:5c:7c:83:79:2b:0f:c4:c9:91:1f:76:ea:17: bd:00:4b:39:68:88:95:ce:ff:82:50:23:59:8d:da: f2:b8:75:3c:24:4a:d5:cd:e6:43:ec:9b:77:8d:f6: fb:c2:b6:18:f2:a8:42:9a:b5:30:e0:1a:52:69:dd: 04:5e:04:d3:3c:98:8f:b7:51:8e:c4:8c:ba:96:71: cf:79:87:06:39:ef:c0:19:ab:96:28:5c:1a:22:84: 8a:f6:e5:bd:fc:16:53:ca:05:3c:6b:32:a8:d9:3e: 8a:d2:c3:0a:54:6a:e4:c6:72:e8:64:ba:70:e4:68: 66:fb:cd:51:be:e3:92:d8:f0:53:8a:2f:09:67:7d: bd:e4:06:fe:99:ea:fe:93:b1:b5:fe:d9:2a:06:e9: d8:3b:73:a9:d9:2d:6c:4f:0e:d6:1f:a4:31:82:c4: 63:a3:8f:32:66:c5:d5:63:33:79:6c:f3:f0:5c:9c: f9:fe:d6:36:eb:8d:cf:35:59:6e:ec:3c:bc:82:80: 5b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E4:52:04:40:75:64:D9:30:DC:10:E0:A4:32:AF:5D:3F:A3:1C:59 X509v3 Authority Key Identifier: keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/K-RSBEB1ZNkw3BDgpDKvXT-jHFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.2.0/24 85.112.68.0/24 Signature Algorithm: sha256WithRSAEncryption 21:c5:a3:43:1b:08:8e:82:9d:6f:79:80:71:d5:c1:db:6a:4c: 2d:d8:0e:f2:e5:de:a0:09:83:1f:e5:f9:7d:ef:ef:c9:fc:7f: 13:39:1c:ac:7f:43:7b:be:37:20:ee:4e:dd:b4:45:79:e1:fd: 55:7d:12:48:16:a9:07:e4:9c:55:0d:c3:b9:b9:e2:b1:99:85: a0:e2:e2:3c:1b:26:8f:58:9f:7e:89:df:75:6c:ee:8e:17:a9: 7b:28:da:33:05:20:b1:d6:5d:d0:d3:3c:5b:4c:54:9b:3f:ec: 06:aa:44:75:9f:14:82:8e:5d:45:d9:b4:1a:f7:ab:20:d8:c1: 8d:f9:77:67:a5:b5:b3:74:fc:fc:da:7b:33:9a:29:78:fe:13: 32:12:13:42:7c:c8:6b:ef:cc:7b:df:21:96:96:6f:a8:6c:dd: a1:c8:12:4a:22:20:a2:f9:d8:48:72:81:8d:eb:a7:a7:6f:09: 80:5d:b0:54:bc:f7:fc:5d:cb:02:7b:f2:a4:4c:9a:18:86:20: d5:29:67:fa:92:cf:e7:45:91:66:1f:bc:f2:50:4f:0b:43:4b: 67:03:d3:e6:1a:ed:05:10:a9:4d:a3:d0:31:c8:3a:a8:11:72: df:c2:a5:0b:ca:74:81:fd:f4:2c:43:ff:3a:b2:34:9f:00:fb: e9:17:74:4c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xxGSNUcefAX829jnsJ0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlY2Q2NGM5NzgzN2Q3YmZhYzA2NjM3ZGQ5NTJiZGVkZTBj MjVkODUwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmU0NTIwNDQwNzU2NGQ5MzBkYzEwZTBhNDMyYWY1ZDNmYTMxYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3brVgOGiieGUodqDStcYrK5tQdw fnn/5CeAy1NCa4yqC0excN1CzuALuDPanErH6cNEW+Rpc/CApqdIjlx8g3krD8TJ kR926he9AEs5aIiVzv+CUCNZjdryuHU8JErVzeZD7Jt3jfb7wrYY8qhCmrUw4BpS ad0EXgTTPJiPt1GOxIy6lnHPeYcGOe/AGauWKFwaIoSK9uW9/BZTygU8azKo2T6K 0sMKVGrkxnLoZLpw5Ghm+81RvuOS2PBTii8JZ3295Ab+mer+k7G1/tkqBunYO3Op 2S1sTw7WH6QxgsRjo48yZsXVYzN5bPPwXJz5/tY2643PNVlu7Dy8goBbIQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCvkUgRAdWTZMNwQ4KQyr10/oxxZMB8GA1UdIwQY MBaAFK7NZMl4N9e/rAZjfdlSve3gwl2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzIt MWVjZGUxNzkxNTExLzEvSy1SU0JFQjFaTmt3M0JEZ3BES3ZYVC1qSEZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzItMWVjZGUxNzkxNTEx LzEvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABTkCAwQA VXBEMA0GCSqGSIb3DQEBCwUAA4IBAQAhxaNDGwiOgp1veYBx1cHbakwt2A7y5d6g CYMf5fl97+/J/H8TORysf0N7vjcg7k7dtEV54f1VfRJIFqkH5JxVDcO5ueKxmYWg 4uI8GyaPWJ9+id91bO6OF6l7KNozBSCx1l3Q0zxbTFSbP+wGqkR1nxSCjl1F2bQa 96sg2MGN+XdnpbWzdPz82nszmil4/hMyEhNCfMhr78x73yGWlm+obN2hyBJKIiCi +dhIcoGN66enbwmAXbBUvPf8XcsCe/KkTJoYhiDVKWf6ks/nRZFmH7zyUE8LQ0tn A9PmGu0FEKlNo9AxyDqoEXLfwqULynSB/fQsQ/86sjSfAPvpF3RM -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:53 2026 by rpki-client