This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Ktrpt7jtXNMAfyStrGUJcQnYb08.roa File: Ktrpt7jtXNMAfyStrGUJcQnYb08.roa (raw, json) Hash identifier: ft9/CRwjWLB+mDfLZHwzK+b5/WwIQUvyJ2tbIXeNRxw= Subject key identifier: 2A:DA:E9:B7:B8:ED:5C:D3:00:7F:24:AD:AC:65:09:71:09:D8:6F:4F Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF19E3FB61E797C4E2F2B4240370458 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Ktrpt7jtXNMAfyStrGUJcQnYb08.roa Signing time: Fri 02 Jan 2026 18:21:39 +0000 ROA not before: Fri 02 Jan 2026 18:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400536 IP address blocks: 185.24.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:9e:3f:b6:1e:79:7c:4e:2f:2b:42:40:37:04:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2adae9b7b8ed5cd3007f24adac65097109d86f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:e7:ec:b6:12:87:68:31:3c:c1:5b:a6:ed: 61:fe:69:f6:8a:f4:5e:ce:c9:42:b2:b0:8e:79:3a: f9:75:73:c4:ff:43:de:d7:aa:b5:f8:64:19:6b:44: 5c:ec:cd:ef:d4:e3:84:50:0e:8b:80:93:d5:a3:64: 9b:ae:ca:3b:43:83:79:cf:54:e4:77:3f:5a:84:b2: 3e:33:76:9e:01:a2:03:f3:62:6b:26:3a:71:fa:06: 7d:d5:16:3f:68:a7:05:8d:c1:b1:94:88:60:6b:b8: 0e:75:ff:95:93:61:6f:de:81:21:c7:81:11:7c:5e: 19:c0:08:3c:01:6e:68:08:5a:5c:2e:40:be:01:61: af:58:6f:ce:15:86:8e:85:0f:88:ee:a9:c4:ad:93: a2:dd:37:ee:35:27:5a:50:64:52:08:f3:7b:41:ba: c8:1c:07:ea:f6:8b:c8:3c:97:8a:77:db:83:f2:e4: 76:72:aa:1c:70:22:7d:e6:21:a4:6b:82:cd:64:96: 0e:21:fb:c2:22:f3:fc:c8:72:05:c3:ed:ff:0c:ce: f2:32:6e:f0:0f:1f:aa:16:70:11:a1:75:32:21:dc: 6b:57:88:03:ad:ad:57:67:c7:88:e3:58:db:69:ac: 85:32:d0:ce:c6:c7:2e:ad:97:cf:ef:fd:29:a7:c2: 68:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DA:E9:B7:B8:ED:5C:D3:00:7F:24:AD:AC:65:09:71:09:D8:6F:4F X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Ktrpt7jtXNMAfyStrGUJcQnYb08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.24.148.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:50:c0:52:e5:20:8c:5b:8c:5a:12:88:4f:6f:5b:6d:ed:2e: 5c:9f:d3:87:b0:4b:58:4a:82:11:e2:5e:31:fc:12:13:a1:15: 4f:70:e1:a4:16:fb:95:d8:07:2a:f2:84:0e:26:85:44:e4:bc: 51:41:3e:bc:2b:9b:da:16:48:cb:9b:99:43:d5:7b:bb:a9:24: 77:18:f2:7a:b7:5c:8d:b2:b8:9f:a4:08:ee:91:1a:dd:bc:5e: f9:14:f3:85:7e:85:a0:bb:b8:33:82:ab:2d:94:f4:90:e8:4a: 36:f1:cf:49:26:63:66:aa:2e:db:b0:a9:e0:af:21:d7:3c:b8: 4c:fa:b3:07:c0:e4:f7:d6:fd:3f:22:ac:27:5c:98:a3:88:62: 8c:65:d6:01:a5:39:26:cb:8d:fa:3e:0b:f2:03:47:8a:af:2d: 6d:7a:0c:bd:07:4a:c1:c9:87:15:db:d1:ac:5e:d9:ab:e5:c8: a8:fe:e4:4e:75:25:3a:0e:d7:ef:c2:03:e8:34:08:9b:31:22: 5c:b9:d0:56:0c:fa:9e:12:61:a8:2d:22:ee:ee:48:5e:30:22: c2:57:7a:08:30:f6:96:57:c5:6c:ea:24:07:76:9b:a0:0a:19: ae:e0:22:2f:cc:03:aa:13:ed:84:4b:f7:80:81:0d:cf:da:39: cf:4c:dc:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8Z4/th55fE4vK0JANwRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWRhZTliN2I4ZWQ1Y2QzMDA3ZjI0YWRhYzY1MDk3MTA5ZDg2ZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/vn7LYSh2gxPMFbpu1h/mn2ivRe zslCsrCOeTr5dXPE/0Pe16q1+GQZa0Rc7M3v1OOEUA6LgJPVo2Sbrso7Q4N5z1Tk dz9ahLI+M3aeAaID82JrJjpx+gZ91RY/aKcFjcGxlIhga7gOdf+Vk2Fv3oEhx4ER fF4ZwAg8AW5oCFpcLkC+AWGvWG/OFYaOhQ+I7qnErZOi3TfuNSdaUGRSCPN7QbrI HAfq9ovIPJeKd9uD8uR2cqoccCJ95iGka4LNZJYOIfvCIvP8yHIFw+3/DM7yMm7w Dx+qFnARoXUyIdxrV4gDra1XZ8eI41jbaayFMtDOxscurZfP7/0pp8JoiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCra6be47VzTAH8kraxlCXEJ2G9PMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvS3RycHQ3anRYTk1BZnlTdHJHVUpjUW5ZYjA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRiUMA0G CSqGSIb3DQEBCwUAA4IBAQBKUMBS5SCMW4xaEohPb1tt7S5cn9OHsEtYSoIR4l4x /BIToRVPcOGkFvuV2Acq8oQOJoVE5LxRQT68K5vaFkjLm5lD1Xu7qSR3GPJ6t1yN srifpAjukRrdvF75FPOFfoWgu7gzgqstlPSQ6Eo28c9JJmNmqi7bsKngryHXPLhM +rMHwOT31v0/IqwnXJijiGKMZdYBpTkmy436PgvyA0eKry1tegy9B0rByYcV29Gs Xtmr5cio/uROdSU6DtfvwgPoNAibMSJcudBWDPqeEmGoLSLu7kheMCLCV3oIMPaW V8Vs6iQHdpugChmu4CIvzAOqE+2ES/eAgQ3P2jnPTNzk -----END CERTIFICATE-----Generated at Wed Jan 21 04:03:39 2026 by rpki-client