This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/KTuFHNmNqOQcqGkD0_LLHcb3LD8.roa File: KTuFHNmNqOQcqGkD0_LLHcb3LD8.roa (raw, json) Hash identifier: xsj6ZBhPayD1o1vBeEH4YfY+jj4U4fktOZ+HokJunGg= Subject key identifier: 29:3B:85:1C:D9:8D:A8:E4:1C:A8:69:03:D3:F2:CB:1D:C6:F7:2C:3F Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643 Certificate serial: 019B7BA4B9A5CB7B67AF4C1790956F71B026 Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/KTuFHNmNqOQcqGkD0_LLHcb3LD8.roa Signing time: Thu 01 Jan 2026 22:19:11 +0000 ROA not before: Thu 01 Jan 2026 22:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21409 IP address blocks: 78.24.128.0/21 maxlen: 32 80.93.80.0/20 maxlen: 32 94.125.160.0/21 maxlen: 32 109.238.0.0/20 maxlen: 32 109.238.15.0/24 maxlen: 32 178.170.0.0/17 maxlen: 32 185.10.99.0/24 maxlen: 24 185.246.84.0/22 maxlen: 22 213.246.32.0/19 maxlen: 32 213.246.33.0/24 maxlen: 32 213.246.35.0/24 maxlen: 32 213.246.36.0/22 maxlen: 32 213.246.42.0/24 maxlen: 32 213.246.49.0/24 maxlen: 32 213.246.51.0/24 maxlen: 32 213.246.52.0/23 maxlen: 32 213.246.55.0/24 maxlen: 32 213.246.56.0/22 maxlen: 32 213.246.60.0/24 maxlen: 32 213.246.61.0/24 maxlen: 32 213.246.62.0/23 maxlen: 32 2a00:c70::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:b9:a5:cb:7b:67:af:4c:17:90:95:6f:71:b0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643 Validity Not Before: Jan 1 22:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=293b851cd98da8e41ca86903d3f2cb1dc6f72c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:df:6f:6e:f4:a6:29:5a:5d:55:b4:43:35:70: 99:cd:28:81:04:15:83:79:bf:ef:84:9c:b8:aa:79: 1c:e1:0b:0b:10:78:f9:0a:11:e1:9e:56:dd:3a:60: c1:94:96:76:24:c3:34:cc:82:83:33:54:07:fe:25: b1:ef:3f:dd:99:1c:c8:a9:1f:2e:75:61:7d:7a:50: 0f:69:2a:02:2c:16:3c:34:13:95:cc:70:b8:c4:1b: af:04:27:87:ac:dd:80:b7:82:03:5d:36:f1:4f:76: 02:02:dc:11:58:ed:cd:c8:01:db:f4:2c:19:80:0d: ff:03:77:8c:18:0a:f6:b4:5b:2d:a1:44:51:f7:da: 7f:5c:62:1d:00:72:bb:04:72:35:88:73:e4:52:7f: 0f:b5:2c:20:9d:ce:ca:df:dc:c5:0a:3c:17:21:69: 1e:8d:44:22:04:b5:2a:df:e5:48:70:a4:85:00:e5: 57:e7:3a:08:03:fa:9a:06:1a:54:45:b7:d8:95:7b: 32:d2:4b:5b:12:59:bc:15:a5:2d:aa:f7:e2:07:ba: 5d:2f:89:52:37:a2:f1:b1:6c:f3:ff:17:73:ca:07: b4:f4:ca:ea:83:ca:fc:37:b7:b9:96:bd:f4:7e:d0: e9:da:7c:57:a2:f3:d4:83:ce:65:f1:57:58:b1:f5: 22:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3B:85:1C:D9:8D:A8:E4:1C:A8:69:03:D3:F2:CB:1D:C6:F7:2C:3F X509v3 Authority Key Identifier: keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/KTuFHNmNqOQcqGkD0_LLHcb3LD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.24.128.0/21 80.93.80.0/20 94.125.160.0/21 109.238.0.0/20 178.170.0.0/17 185.10.99.0/24 185.246.84.0/22 213.246.32.0/19 IPv6: 2a00:c70::/32 Signature Algorithm: sha256WithRSAEncryption 0e:d1:d9:9f:2d:f8:ad:22:55:e4:a0:bc:83:2d:c5:c5:d2:3d: 53:2e:bf:17:a5:ec:a9:62:89:62:2a:f9:7a:c6:ef:c2:be:21: 07:bf:d5:04:99:d5:54:d1:5a:27:d9:40:90:24:30:aa:41:89: c7:4a:b0:ea:b2:64:85:e7:a8:21:68:f6:4b:67:19:c9:6f:b2: 1d:4b:eb:a6:48:98:0a:2a:3e:3b:fa:3d:ea:5b:c8:4d:ca:5b: 1d:41:47:c4:b5:98:7c:4d:6e:88:ea:f6:9e:1e:77:59:ea:a0: 51:e0:e0:41:86:09:63:27:5d:cd:73:5a:98:67:17:c5:28:51: d4:9c:83:65:58:21:60:9c:0d:89:33:e1:84:96:44:bc:fc:95: 3f:bd:2f:86:5b:ec:1f:8d:6e:f7:3d:b8:6f:f2:c5:c2:92:62: ec:6b:e3:60:ce:c9:1d:b2:d5:33:80:46:69:61:b2:60:2c:0e: d1:fa:f2:c0:7b:de:de:47:49:98:88:4c:0b:a5:53:58:52:f1: 8b:1d:ef:fd:1a:8e:1c:8e:89:71:9b:13:99:8a:2f:f1:de:1e: 87:b3:58:61:57:d2:de:a0:48:41:62:63:bd:83:50:39:e0:2d: 6e:2d:87:bf:bd:1c:fb:c0:f1:a6:d8:46:76:6e:e9:02:86:82: c2:ea:4a:f6 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt7pLmly3tnr0wXkJVvcbAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ODg3Y2ViMWNiZDEwMjllZjhhNzZkZjc3ZjExNTJiYjQ3 M2I2NDMwHhcNMjYwMTAxMjIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTNiODUxY2Q5OGRhOGU0MWNhODY5MDNkM2YyY2IxZGM2ZjcyYzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd9vbvSmKVpdVbRDNXCZzSiBBBWD eb/vhJy4qnkc4QsLEHj5ChHhnlbdOmDBlJZ2JMM0zIKDM1QH/iWx7z/dmRzIqR8u dWF9elAPaSoCLBY8NBOVzHC4xBuvBCeHrN2At4IDXTbxT3YCAtwRWO3NyAHb9CwZ gA3/A3eMGAr2tFstoURR99p/XGIdAHK7BHI1iHPkUn8PtSwgnc7K39zFCjwXIWke jUQiBLUq3+VIcKSFAOVX5zoIA/qaBhpURbfYlXsy0ktbElm8FaUtqvfiB7pdL4lS N6LxsWzz/xdzyge09Mrqg8r8N7e5lr30ftDp2nxXovPUg85l8VdYsfUihwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFCk7hRzZjajkHKhpA9Pyyx3G9yw/MB8GA1UdIwQY MBaAFAeIfOscvRAp74p233fxFSu0c7ZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjRoODZ4eTlFQ252aW5iZmRfRVZLN1J6dGtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wMjQ0NWMtODFmOS00N2IzLTkzODUt MzRmN2Q1MTMxMzY3LzEvS1R1RkhObU5xT1FjcUdrRDBfTExIY2IzTEQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8wMjQ0NWMtODFmOS00N2IzLTkzODUtMzRmN2Q1MTMxMzY3 LzEvQjRoODZ4eTlFQ252aW5iZmRfRVZLN1J6dGtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDThiAAwQE UF1QAwQDXn2gAwQEbe4AAwQHsqoAAwQAuQpjAwQCufZUAwQF1fYgMA0EAgACMAcD BQAqAAxwMA0GCSqGSIb3DQEBCwUAA4IBAQAO0dmfLfitIlXkoLyDLcXF0j1TLr8X peypYoliKvl6xu/CviEHv9UEmdVU0Von2UCQJDCqQYnHSrDqsmSF56ghaPZLZxnJ b7IdS+umSJgKKj47+j3qW8hNylsdQUfEtZh8TW6I6vaeHndZ6qBR4OBBhgljJ13N c1qYZxfFKFHUnINlWCFgnA2JM+GElkS8/JU/vS+GW+wfjW73Pbhv8sXCkmLsa+Ng zskdstUzgEZpYbJgLA7R+vLAe97eR0mYiEwLpVNYUvGLHe/9Go4cjolxmxOZii/x 3h6Hs1hhV9LeoEhBYmO9g1A54C1uLYe/vRz7wPGm2EZ2bukChoLC6kr2 -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:15 2026 by rpki-client