This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/koHuyp402Ngn3ka12oQGaA_PmT0.roa File: koHuyp402Ngn3ka12oQGaA_PmT0.roa (raw, json) Hash identifier: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54= Subject key identifier: 92:81:EE:CA:9E:34:D8:D8:27:DE:46:B5:DA:84:06:68:0F:CF:99:3D Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019B77C6F1DC92DEC18FBD17A0F86D848A74 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/koHuyp402Ngn3ka12oQGaA_PmT0.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4785 IP address blocks: 45.142.165.0/24 maxlen: 24 192.109.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f1:dc:92:de:c1:8f:bd:17:a0:f8:6d:84:8a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9281eeca9e34d8d827de46b5da8406680fcf993d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:30:c5:09:ed:75:58:bb:4b:94:63:45:18:53: 62:5e:83:ac:a3:e3:6f:97:14:4a:52:7e:c5:69:1c: 44:85:6a:ae:24:c9:70:97:59:62:b1:47:9d:a6:cf: bf:27:c9:c8:c8:5c:87:f1:d8:d2:94:86:cc:28:70: 59:ce:bb:8e:00:ee:56:40:2d:66:bd:a7:2a:ea:52: 64:37:c6:10:79:5a:36:63:02:28:4c:c7:31:75:93: 27:1d:7a:64:d9:de:07:79:87:5a:4c:06:37:bd:fd: 10:a8:9c:7e:8f:54:d8:53:4b:45:34:3a:d2:93:fd: d0:20:8a:5c:d8:2f:53:37:2a:57:02:22:e0:86:94: 6b:bf:23:e1:15:b2:33:13:27:8d:78:f5:10:0c:f4: 2c:64:c1:61:c2:2e:82:52:6d:d3:c6:8a:91:a6:f7: 00:d2:98:3e:59:2e:85:dc:07:1e:a4:ef:05:62:96: 58:ca:87:cf:36:29:5e:12:a0:7c:da:30:08:d9:64: 35:56:c4:02:6f:6a:53:36:4b:8b:8f:88:66:7f:b7: 6b:76:34:a5:0f:af:bf:8a:58:9e:c6:c8:23:86:4e: 0f:51:e5:d7:d4:f5:bf:7d:50:da:df:f1:01:c3:fd: 8d:b8:07:15:55:7f:8c:f4:9e:3f:03:37:4d:64:1a: d0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:81:EE:CA:9E:34:D8:D8:27:DE:46:B5:DA:84:06:68:0F:CF:99:3D X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/koHuyp402Ngn3ka12oQGaA_PmT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.165.0/24 192.109.232.0/24 Signature Algorithm: sha256WithRSAEncryption 27:73:d3:db:21:8b:8d:62:f3:c3:75:1f:a5:31:71:05:08:af: f4:96:7d:a3:f4:fa:64:8b:58:4f:4a:c7:a1:3b:63:6a:1e:da: 30:2a:19:2c:e9:59:c2:df:88:a0:d1:73:df:c0:52:bc:3a:8e: cb:41:93:7a:f5:19:65:e2:38:e9:98:29:cd:23:d7:bd:ec:24: 77:b7:5b:63:29:bd:a2:19:10:d0:50:4c:31:66:2f:5c:07:2f: f3:54:c0:9a:65:2d:b4:33:bf:70:74:85:be:6a:d4:24:26:ac: 56:6b:35:9b:bc:6c:5a:e6:03:19:de:75:4a:67:9f:44:98:54: 05:d4:4a:0c:73:0f:39:a5:f7:f7:60:fa:90:fb:bb:ba:52:d3: f5:4a:33:20:fb:75:ad:51:7f:7e:54:cf:1c:54:1b:f8:0b:f9: ec:eb:25:d9:46:e8:af:1e:ee:61:97:c2:e4:b4:60:c4:d5:30: 91:3c:ef:56:da:e3:0a:bc:5c:78:fd:6e:2a:e2:08:e7:d3:8f: d8:52:d7:b9:06:41:58:06:86:af:fb:43:33:67:35:13:99:2a: 87:87:bb:6c:69:71:54:75:a5:ee:46:00:6a:0d:5e:2b:fd:c1: ba:70:48:cf:73:db:65:8e:fc:e5:e0:fc:22:09:d4:d4:7f:9a: ad:b7:66:ea -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xvHckt7Bj70XoPhthIp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjgxZWVjYTllMzRkOGQ4MjdkZTQ2YjVkYTg0MDY2ODBmY2Y5OTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TDFCe11WLtLlGNFGFNiXoOso+Nv lxRKUn7FaRxEhWquJMlwl1lisUedps+/J8nIyFyH8djSlIbMKHBZzruOAO5WQC1m vacq6lJkN8YQeVo2YwIoTMcxdZMnHXpk2d4HeYdaTAY3vf0QqJx+j1TYU0tFNDrS k/3QIIpc2C9TNypXAiLghpRrvyPhFbIzEyeNePUQDPQsZMFhwi6CUm3TxoqRpvcA 0pg+WS6F3AcepO8FYpZYyofPNileEqB82jAI2WQ1VsQCb2pTNkuLj4hmf7drdjSl D6+/iliexsgjhk4PUeXX1PW/fVDa3/EBw/2NuAcVVX+M9J4/AzdNZBrQHQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJKB7sqeNNjYJ95GtdqEBmgPz5k9MB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEva29IdXlwNDAyTmduM2thMTJvUUdhQV9QbVQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY6lAwQA wG3oMA0GCSqGSIb3DQEBCwUAA4IBAQAnc9PbIYuNYvPDdR+lMXEFCK/0ln2j9Ppk i1hPSsehO2NqHtowKhks6VnC34ig0XPfwFK8Oo7LQZN69Rll4jjpmCnNI9e97CR3 t1tjKb2iGRDQUEwxZi9cBy/zVMCaZS20M79wdIW+atQkJqxWazWbvGxa5gMZ3nVK Z59EmFQF1EoMcw85pff3YPqQ+7u6UtP1SjMg+3WtUX9+VM8cVBv4C/ns6yXZRuiv Hu5hl8LktGDE1TCRPO9W2uMKvFx4/W4q4gjn04/YUte5BkFYBoav+0MzZzUTmSqH h7tsaXFUdaXuRgBqDV4r/cG6cEjPc9tljvzl4PwiCdTUf5qtt2bq -----END CERTIFICATE-----Generated at Sun Jan 18 06:33:56 2026 by rpki-client