This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/kr6gYLB4Pd8qRq3Kg0GtUqQOfnw.roa File: kr6gYLB4Pd8qRq3Kg0GtUqQOfnw.roa (raw, json) Hash identifier: +bNtrAgrs9UMZ41Ycad9z9uhop8oPo6A0JJON7s2KnU= Subject key identifier: 92:BE:A0:60:B0:78:3D:DF:2A:46:AD:CA:83:41:AD:52:A4:0E:7E:7C Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F159FED0192FED437AA73016D70D99A Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/kr6gYLB4Pd8qRq3Kg0GtUqQOfnw.roa Signing time: Fri 02 Jan 2026 14:21:22 +0000 ROA not before: Fri 02 Jan 2026 14:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26008 IP address blocks: 81.200.66.0/24 maxlen: 24 81.200.67.0/24 maxlen: 24 81.200.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9f:ed:01:92:fe:d4:37:aa:73:01:6d:70:d9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92bea060b0783ddf2a46adca8341ad52a40e7e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:23:a3:a6:bd:30:7f:0c:78:1d:b4:ad:98:82: ef:56:8a:27:c6:2d:a7:32:ab:dd:71:60:cc:79:ba: 36:32:98:d2:93:6b:88:e6:3b:2d:21:f3:43:f2:43: 01:f1:e1:7e:09:c3:49:1a:bb:b2:96:6a:3c:cd:11: 18:da:c5:c8:a0:da:b8:52:e3:d1:4b:ec:c2:62:45: 29:56:75:14:21:1f:ec:71:ce:ca:86:1e:45:28:f1: 36:7b:fb:c7:e3:f2:68:75:68:9b:64:ed:c0:08:96: 70:f4:16:7a:d8:1a:e8:1c:28:dd:65:58:10:29:7b: 9c:af:fe:d2:b8:0c:c6:c2:59:aa:5e:db:07:e2:df: 60:37:96:71:70:8c:28:0a:1e:8c:98:59:0e:6a:af: 7c:c8:7f:ca:4f:69:30:80:e1:3a:99:89:7d:95:e6: 4e:e6:24:15:dc:63:8e:ed:68:3b:2b:24:7b:7e:4d: 37:e7:ed:8c:ce:79:a4:d6:d6:45:f8:26:bd:05:74: d3:3e:80:70:fc:ae:95:47:34:c1:4e:b6:af:e8:95: ef:ea:5e:4f:66:f5:72:06:19:34:2c:c3:f4:69:6c: 2f:20:fd:46:73:9d:f1:a7:7b:22:17:ed:1d:b4:61: 40:6c:af:dc:71:ff:be:b7:f7:8f:f4:d3:d3:93:b6: 37:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BE:A0:60:B0:78:3D:DF:2A:46:AD:CA:83:41:AD:52:A4:0E:7E:7C X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/kr6gYLB4Pd8qRq3Kg0GtUqQOfnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.200.66.0/23 81.200.69.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:da:34:c1:c5:be:ba:fb:3a:46:58:2c:e4:b0:1f:ff:bb:5c: 2b:42:0a:55:45:e8:19:47:a5:99:49:b2:5f:60:d1:83:df:1b: 3f:a4:55:ab:09:b2:6b:fa:b5:b5:57:64:bc:35:7f:63:7f:6d: 0d:6b:e9:0c:99:71:24:24:f2:0d:14:da:8d:c5:87:a8:e5:90: 4b:d4:61:09:16:85:4d:77:2c:1a:ff:47:87:9f:66:27:9d:0d: ec:bd:bd:29:f1:c8:fc:9a:e9:c1:f6:58:6b:75:92:d6:f4:51: e5:a1:47:c0:8a:f8:91:6a:98:72:26:61:c3:6a:87:b3:90:52: 14:ed:3c:a2:7b:15:86:6c:54:03:ad:a7:7d:1a:a3:5c:50:83: b2:e6:91:f5:c5:73:d4:b5:94:2e:a2:45:b6:7a:96:a0:42:94: de:43:4d:a9:fe:d8:b8:67:4b:5a:89:7b:22:b7:64:54:4e:51: e7:fe:ee:f8:5e:91:7b:82:49:61:9e:27:f5:b2:0d:bd:92:12: 0b:65:b7:94:0d:23:e5:59:3c:f3:84:25:2b:c1:57:bf:aa:90: 13:08:1a:b4:87:99:92:9d:73:77:bd:30:38:d2:5d:8c:f2:24: 46:ce:4d:ff:70:79:87:24:4c:b8:12:18:58:34:b3:39:f4:95: d7:6d:51:7a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FZ/tAZL+1DeqcwFtcNmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmJlYTA2MGIwNzgzZGRmMmE0NmFkY2E4MzQxYWQ1MmE0MGU3ZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyOjpr0wfwx4HbStmILvVoonxi2n MqvdcWDMebo2MpjSk2uI5jstIfND8kMB8eF+CcNJGruylmo8zREY2sXIoNq4UuPR S+zCYkUpVnUUIR/scc7Khh5FKPE2e/vH4/JodWibZO3ACJZw9BZ62BroHCjdZVgQ KXucr/7SuAzGwlmqXtsH4t9gN5ZxcIwoCh6MmFkOaq98yH/KT2kwgOE6mYl9leZO 5iQV3GOO7Wg7KyR7fk035+2Mznmk1tZF+Ca9BXTTPoBw/K6VRzTBTrav6JXv6l5P ZvVyBhk0LMP0aWwvIP1Gc53xp3siF+0dtGFAbK/ccf++t/eP9NPTk7Y38wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJK+oGCweD3fKkatyoNBrVKkDn58MB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEva3I2Z1lMQjRQZDhxUnEzS2cwR3RVcVFPZm53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUchCAwQA UchFMA0GCSqGSIb3DQEBCwUAA4IBAQBb2jTBxb66+zpGWCzksB//u1wrQgpVRegZ R6WZSbJfYNGD3xs/pFWrCbJr+rW1V2S8NX9jf20Na+kMmXEkJPINFNqNxYeo5ZBL 1GEJFoVNdywa/0eHn2YnnQ3svb0p8cj8munB9lhrdZLW9FHloUfAiviRaphyJmHD aoezkFIU7TyiexWGbFQDrad9GqNcUIOy5pH1xXPUtZQuokW2epagQpTeQ02p/ti4 Z0taiXsit2RUTlHn/u74XpF7gklhnif1sg29khILZbeUDSPlWTzzhCUrwVe/qpAT CBq0h5mSnXN3vTA40l2M8iRGzk3/cHmHJEy4EhhYNLM59JXXbVF6 -----END CERTIFICATE-----Generated at Wed Jan 21 10:29:17 2026 by rpki-client