This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KRQxF066NwL01EbClXxEYJMXIuY.roa File: KRQxF066NwL01EbClXxEYJMXIuY.roa (raw, json) Hash identifier: nZ/zHtkorIjSCJXwj5zKPzXzRRBYeNgYSwhaL/nhis4= Subject key identifier: 29:14:31:17:4E:BA:37:02:F4:D4:46:C2:95:7C:44:60:93:17:22:E6 Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Certificate serial: 019B7AC7F390684F4BEDA328C143F29900A3 Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KRQxF066NwL01EbClXxEYJMXIuY.roa Signing time: Thu 01 Jan 2026 18:18:02 +0000 ROA not before: Thu 01 Jan 2026 18:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 145.78.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f3:90:68:4f:4b:ed:a3:28:c1:43:f2:99:00:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Validity Not Before: Jan 1 18:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=291431174eba3702f4d446c2957c4460931722e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:44:cd:a3:65:8d:63:84:46:89:72:64:90:ca: 91:7e:a6:7c:5e:33:f8:4e:ce:93:4f:36:52:98:2f: cb:46:45:b3:27:d4:3d:82:85:9e:12:a6:c3:55:bf: 07:ae:c0:0c:f8:ec:87:52:62:03:d5:92:53:82:42: 06:3b:16:a2:91:54:78:7b:1f:2f:cd:c9:31:00:f0: 6d:9c:94:ac:21:df:a0:7b:6e:58:b9:63:eb:69:d8: b9:15:c7:52:87:cb:06:0c:b6:a2:c3:fd:36:7a:f7: c0:f0:a7:22:58:7b:8e:76:07:c1:af:52:93:16:ed: 96:6f:05:10:17:50:0f:10:ab:fa:69:7a:7f:70:32: 6e:57:e4:6a:a7:91:23:e7:49:7a:d4:2a:b5:54:31: 48:f4:60:f7:a3:ff:ae:29:dc:52:a2:0e:b2:b3:8c: cd:a1:a4:b6:90:3d:8d:d3:08:26:69:46:3d:9d:27: 32:d3:32:69:45:45:88:e8:44:21:a3:86:73:19:b6: 6c:1a:54:1f:e1:63:74:b8:b6:49:1f:ec:81:b7:ba: 81:9f:46:9b:a7:75:a6:99:91:28:e7:1b:b9:0b:b4: c0:10:43:fc:e9:55:bd:37:eb:2e:86:f5:d8:95:a4: 3b:9d:09:75:38:0e:16:73:d2:80:4d:e1:e7:7e:e0: ff:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:14:31:17:4E:BA:37:02:F4:D4:46:C2:95:7C:44:60:93:17:22:E6 X509v3 Authority Key Identifier: keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KRQxF066NwL01EbClXxEYJMXIuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.78.20.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:97:fe:f6:43:f8:47:b1:b5:c0:c0:dd:d0:aa:00:7d:72:bc: 31:7c:84:c9:2c:fb:d2:13:a0:5e:76:e8:22:39:c2:b1:86:22: 43:85:ed:c3:bc:0c:ec:47:46:12:30:64:99:bf:3b:22:cd:e0: 42:6d:6a:62:87:81:65:36:b1:44:b3:06:f6:56:72:5a:cd:da: 81:65:d6:c7:32:29:9d:9d:78:92:08:d3:50:f7:74:47:6f:19: f9:26:51:23:3c:a5:fb:d1:fe:9e:cc:29:d7:95:39:8b:f1:45: e1:30:44:ef:ee:ba:f4:c0:ce:e5:74:c8:d0:19:7e:9f:55:47: 46:3d:46:72:ac:b6:53:c5:86:90:6d:9f:f8:ab:74:c3:24:ca: 65:28:87:23:c0:36:ce:2a:f7:2a:15:81:ac:8c:38:c2:4a:44: 08:73:71:98:d9:06:1b:0b:f1:68:c0:92:11:87:31:bc:bf:ef: 30:89:5a:ad:09:31:6a:62:46:c8:49:4f:ea:04:78:a1:ef:c1: 72:07:d3:49:6d:f1:3f:c6:ec:cf:16:4e:28:8e:15:41:47:cc: 82:57:a0:1b:34:6e:5c:52:04:0d:33:bb:14:e2:4c:ee:0d:69: 14:89:da:2a:f9:b9:27:ec:05:52:01:57:ab:5b:22:cd:0c:9a: f6:10:18:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x/OQaE9L7aMowUPymQCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm NDUyM2UwHhcNMjYwMTAxMTgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTE0MzExNzRlYmEzNzAyZjRkNDQ2YzI5NTdjNDQ2MDkzMTcyMmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UTNo2WNY4RGiXJkkMqRfqZ8XjP4 Ts6TTzZSmC/LRkWzJ9Q9goWeEqbDVb8HrsAM+OyHUmID1ZJTgkIGOxaikVR4ex8v zckxAPBtnJSsId+ge25YuWPradi5FcdSh8sGDLaiw/02evfA8KciWHuOdgfBr1KT Fu2WbwUQF1APEKv6aXp/cDJuV+Rqp5Ej50l61Cq1VDFI9GD3o/+uKdxSog6ys4zN oaS2kD2N0wgmaUY9nScy0zJpRUWI6EQho4ZzGbZsGlQf4WN0uLZJH+yBt7qBn0ab p3WmmZEo5xu5C7TAEEP86VW9N+suhvXYlaQ7nQl1OA4Wc9KATeHnfuD/IwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCkUMRdOujcC9NRGwpV8RGCTFyLmMB8GA1UdIwQY MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt NTQ4NjFmMjMyNDlkLzEvS1JReEYwNjZOd0wwMUViQ2xYeEVZSk1YSXVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkU4UMA0G CSqGSIb3DQEBCwUAA4IBAQAsl/72Q/hHsbXAwN3QqgB9crwxfITJLPvSE6Bedugi OcKxhiJDhe3DvAzsR0YSMGSZvzsizeBCbWpih4FlNrFEswb2VnJazdqBZdbHMimd nXiSCNNQ93RHbxn5JlEjPKX70f6ezCnXlTmL8UXhMETv7rr0wM7ldMjQGX6fVUdG PUZyrLZTxYaQbZ/4q3TDJMplKIcjwDbOKvcqFYGsjDjCSkQIc3GY2QYbC/FowJIR hzG8v+8wiVqtCTFqYkbISU/qBHih78FyB9NJbfE/xuzPFk4ojhVBR8yCV6AbNG5c UgQNM7sU4kzuDWkUidoq+bkn7AVSAVerWyLNDJr2EBhV -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:09 2026 by rpki-client