This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/KkzOKS5xACn0UjnTzvLl1ZMgsFU.roa File: KkzOKS5xACn0UjnTzvLl1ZMgsFU.roa (raw, json) Hash identifier: O4xI1/DzVMIi8hKQlEy0JEY0jx5/fNmomU37zYDUUew= Subject key identifier: 2A:4C:CE:29:2E:71:00:29:F4:52:39:D3:CE:F2:E5:D5:93:20:B0:55 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019BBD728BE5A51516FDB0DA63294D761847 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/KkzOKS5xACn0UjnTzvLl1ZMgsFU.roa Signing time: Wed 14 Jan 2026 16:59:19 +0000 ROA not before: Wed 14 Jan 2026 16:59:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35682 IP address blocks: 77.83.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bd:72:8b:e5:a5:15:16:fd:b0:da:63:29:4d:76:18:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 14 16:59:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a4cce292e710029f45239d3cef2e5d59320b055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:34:bb:23:d3:a7:10:88:97:7d:98:34:7d:ad: dd:9a:8c:a7:b3:76:cd:13:b4:58:7d:5c:6c:63:64: 0f:b3:cc:37:40:91:85:ed:62:57:d5:b3:c0:b2:ef: 54:cd:61:c6:ea:8e:d9:cf:98:48:ac:12:8c:54:94: 4a:de:be:c0:46:a5:e3:de:35:58:02:6d:b6:c5:f6: 17:90:78:48:89:e1:8d:3d:39:57:a0:6f:0f:bd:a4: 84:f5:83:d5:9c:47:fc:1e:25:7b:3c:3d:32:be:8c: 2e:c5:03:34:25:ee:ca:58:c2:f7:d6:a8:92:2a:8a: f8:02:eb:df:43:65:d9:c8:f1:a0:45:af:bf:8b:04: 86:a6:24:ed:da:e2:6f:0d:f7:4f:aa:f0:ce:95:27: 20:d5:87:5f:42:a5:e1:9f:d6:e4:5e:40:4e:8d:93: 49:d8:12:a2:4f:38:f1:9b:ad:9d:4e:29:1b:1e:01: 01:36:e3:44:7a:90:2f:f8:11:f9:fb:7c:63:be:18: fd:b2:3a:87:c1:aa:28:1f:9c:fd:29:82:6b:e8:8e: 80:3e:91:13:67:0f:e3:1d:1c:ed:fa:3e:55:36:d0: d4:f1:ba:44:28:dc:ae:a1:21:75:3b:6c:6e:5a:17: 93:4f:f9:24:5c:c8:4c:9e:d6:d7:d5:98:30:6d:31: 55:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4C:CE:29:2E:71:00:29:F4:52:39:D3:CE:F2:E5:D5:93:20:B0:55 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/KkzOKS5xACn0UjnTzvLl1ZMgsFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.206.0/24 Signature Algorithm: sha256WithRSAEncryption 58:4d:11:84:35:54:df:13:5e:b7:7a:21:18:d5:4d:87:0c:70: 9b:31:a7:0d:b0:29:84:93:ba:67:c3:54:43:35:d5:f6:bb:7a: 6c:1d:2d:18:de:31:b7:77:85:11:a5:57:26:40:9e:09:03:13: 69:b7:9f:78:ba:2d:0d:ca:f5:c4:a3:9e:44:6c:fe:57:7e:08: 80:27:f8:c3:2b:53:b1:de:af:17:38:69:7e:33:18:c8:ad:f1: 31:91:8f:ef:68:3f:d7:7d:0a:25:ec:27:e0:4e:fd:1a:ba:8a: 2f:25:93:94:dd:95:0f:9b:68:da:a4:1d:5e:09:25:d5:8b:c5: 29:ad:d0:33:3f:0a:da:ce:24:da:8b:03:ad:5a:cd:62:fe:7c: ca:2b:ac:4d:55:c3:9e:ad:8b:21:ef:8b:81:39:de:8a:91:dd: ce:cf:f4:c0:90:7f:a2:61:00:5e:a1:fb:31:98:3d:2b:6d:06: cc:ca:36:95:3c:fd:90:f4:1a:36:b7:74:f8:dc:eb:80:0d:a5: ce:d3:d0:df:06:91:a7:30:d3:88:4b:93:d5:6d:53:fd:b9:b5: 70:d5:08:fa:63:3a:6f:4f:41:5e:1b:4f:cc:a3:74:5c:9d:b4: 65:fa:89:03:0b:ab:cc:e6:8e:c9:29:a9:83:27:b2:5e:c3:f7: 2d:9f:cf:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu9covlpRUW/bDaYylNdhhHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTE0MTY1OTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTRjY2UyOTJlNzEwMDI5ZjQ1MjM5ZDNjZWYyZTVkNTkzMjBiMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTS7I9OnEIiXfZg0fa3dmoyns3bN E7RYfVxsY2QPs8w3QJGF7WJX1bPAsu9UzWHG6o7Zz5hIrBKMVJRK3r7ARqXj3jVY Am22xfYXkHhIieGNPTlXoG8PvaSE9YPVnEf8HiV7PD0yvowuxQM0Je7KWML31qiS Kor4AuvfQ2XZyPGgRa+/iwSGpiTt2uJvDfdPqvDOlScg1YdfQqXhn9bkXkBOjZNJ 2BKiTzjxm62dTikbHgEBNuNEepAv+BH5+3xjvhj9sjqHwaooH5z9KYJr6I6APpET Zw/jHRzt+j5VNtDU8bpEKNyuoSF1O2xuWheTT/kkXMhMntbX1ZgwbTFVBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCpMzikucQAp9FI5087y5dWTILBVMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvS2t6T0tTNXhBQ24wVWpuVHp2TGwxWk1nc0ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVPOMA0G CSqGSIb3DQEBCwUAA4IBAQBYTRGENVTfE163eiEY1U2HDHCbMacNsCmEk7pnw1RD NdX2u3psHS0Y3jG3d4URpVcmQJ4JAxNpt594ui0NyvXEo55EbP5XfgiAJ/jDK1Ox 3q8XOGl+MxjIrfExkY/vaD/XfQol7CfgTv0auoovJZOU3ZUPm2japB1eCSXVi8Up rdAzPwraziTaiwOtWs1i/nzKK6xNVcOerYsh74uBOd6Kkd3Oz/TAkH+iYQBeofsx mD0rbQbMyjaVPP2Q9Bo2t3T43OuADaXO09DfBpGnMNOIS5PVbVP9ubVw1Qj6Yzpv T0FeG0/Mo3RcnbRl+okDC6vM5o7JKamDJ7Jew/ctn89H -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:52 2026 by rpki-client