This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kELVwZs5SaLQrab9sap9Xcmgflk.roa File: kELVwZs5SaLQrab9sap9Xcmgflk.roa (raw, json) Hash identifier: gOv2sEEdNVSjrYd0iMOFCkOEFxapFPoF2zX1OSgF1Vc= Subject key identifier: 90:42:D5:C1:9B:39:49:A2:D0:AD:A6:FD:B1:AA:7D:5D:C9:A0:7E:59 Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33 Certificate serial: 019B78A368D57BEEC279B3C233208C45D786 Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kELVwZs5SaLQrab9sap9Xcmgflk.roa Signing time: Thu 01 Jan 2026 08:18:53 +0000 ROA not before: Thu 01 Jan 2026 08:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199744 IP address blocks: 185.48.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:68:d5:7b:ee:c2:79:b3:c2:33:20:8c:45:d7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33 Validity Not Before: Jan 1 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9042d5c19b3949a2d0ada6fdb1aa7d5dc9a07e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1a:8b:4c:7f:0c:2d:b0:39:51:96:d6:5e:e9: 41:a6:e4:63:ca:11:93:e2:60:12:4e:f7:0c:c5:8c: bf:51:b5:00:4d:89:d4:6e:2f:3c:da:6a:90:60:5e: 91:96:3f:b6:1a:f5:fc:7c:3e:11:19:14:8a:a5:15: 39:0d:4c:69:40:e7:b4:b2:ce:8a:b9:38:5a:cc:de: 6a:ad:27:0e:f4:d8:93:34:9c:42:5d:3f:59:6c:86: 13:8e:ce:3e:1c:a8:2c:31:44:dc:9c:f6:4a:7c:bb: cb:3a:16:27:b1:d5:4e:82:8c:a1:80:78:c2:60:f6: a9:55:59:26:6b:b2:8f:cd:45:22:5e:8c:eb:9e:d0: 6f:e2:c1:b4:12:cb:29:23:a8:5e:48:1e:22:2c:4b: b4:b8:e7:98:4b:63:2d:b2:df:d5:57:6c:3d:d6:2a: f6:fc:be:88:4a:d0:c0:d3:1e:5e:d2:dc:ac:ae:f4: fd:4e:51:97:f8:25:7b:8a:b7:34:67:42:01:85:67: 33:fa:41:e0:72:dd:8e:55:0c:da:b7:00:ed:fe:69: 91:98:0a:44:ae:d6:82:53:24:6b:cd:04:30:fd:68: f9:c8:6d:4b:2f:44:37:5b:dd:8e:87:68:f2:5a:4f: 10:41:20:8a:ee:50:3b:5f:3e:02:91:9c:59:4b:d4: f0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:42:D5:C1:9B:39:49:A2:D0:AD:A6:FD:B1:AA:7D:5D:C9:A0:7E:59 X509v3 Authority Key Identifier: keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kELVwZs5SaLQrab9sap9Xcmgflk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.143.0/24 Signature Algorithm: sha256WithRSAEncryption 99:04:06:c0:81:12:21:a4:30:d1:fb:a0:db:e9:ad:92:15:66: 14:80:72:18:09:ee:8e:9e:d5:cc:cf:67:de:af:a0:63:44:98: ee:59:27:2e:8d:f0:39:2e:85:1d:63:ca:12:64:e4:8b:13:5a: 7f:ec:26:65:25:90:48:f7:89:d8:2f:b9:63:7c:72:ee:01:68: b7:fb:a5:54:f8:4f:bb:e2:38:49:08:15:ef:b5:2c:0d:7f:84: b4:30:32:6b:0e:1e:1c:62:12:a5:16:13:fd:fc:4f:26:11:6e: ea:67:bf:45:d2:90:d3:b5:1f:6c:98:45:c7:b8:f0:7b:26:4c: f2:4a:68:33:db:b2:c3:dd:cf:92:07:18:3f:76:45:1a:5d:8b: a9:94:82:72:14:c3:2a:d6:a5:7c:41:31:dd:e4:a0:94:fc:32: 6c:75:cc:90:dd:8b:8b:cc:4d:7d:0b:c8:f2:79:03:70:4a:68: 0c:5c:20:2d:c3:4d:d3:b2:81:76:16:1c:d4:82:9a:97:f9:e9: 9b:60:32:18:eb:e0:94:51:0a:40:be:c0:4b:76:0c:36:6a:26: 74:e2:c6:a8:f9:8f:10:98:18:ea:e2:1c:46:4e:fa:9f:77:a6: 4e:46:ba:1a:a1:a5:ce:9d:12:a7:80:22:1f:00:3f:2c:f3:b4: f4:cd:08:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2jVe+7CebPCMyCMRdeGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDUzMmI0Zjc0M2NmOTVjYmVjMTg2ODFiYTY3YWM1ZGI4 NTRmMzMwHhcNMjYwMTAxMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDQyZDVjMTliMzk0OWEyZDBhZGE2ZmRiMWFhN2Q1ZGM5YTA3ZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RqLTH8MLbA5UZbWXulBpuRjyhGT 4mASTvcMxYy/UbUATYnUbi882mqQYF6Rlj+2GvX8fD4RGRSKpRU5DUxpQOe0ss6K uThazN5qrScO9NiTNJxCXT9ZbIYTjs4+HKgsMUTcnPZKfLvLOhYnsdVOgoyhgHjC YPapVVkma7KPzUUiXozrntBv4sG0EsspI6heSB4iLEu0uOeYS2Mtst/VV2w91ir2 /L6IStDA0x5e0tysrvT9TlGX+CV7irc0Z0IBhWcz+kHgct2OVQzatwDt/mmRmApE rtaCUyRrzQQw/Wj5yG1LL0Q3W92Oh2jyWk8QQSCK7lA7Xz4CkZxZS9TwlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJBC1cGbOUmi0K2m/bGqfV3JoH5ZMB8GA1UdIwQY MBaAFJJFMrT3Q8+Vy+wYaBumesXbhU8zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tVeXRQZER6NVhMN0Job0c2WjZ4ZHVGVHpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yYjlmMDEtYTU2ZS00YmU5LWFkMzIt MzhlZDcxNTU5OTVjLzEva0VMVndaczVTYUxRcmFiOXNhcDlYY21nZmxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8yYjlmMDEtYTU2ZS00YmU5LWFkMzItMzhlZDcxNTU5OTVj LzEva2tVeXRQZER6NVhMN0Job0c2WjZ4ZHVGVHpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTCPMA0G CSqGSIb3DQEBCwUAA4IBAQCZBAbAgRIhpDDR+6Db6a2SFWYUgHIYCe6OntXMz2fe r6BjRJjuWScujfA5LoUdY8oSZOSLE1p/7CZlJZBI94nYL7ljfHLuAWi3+6VU+E+7 4jhJCBXvtSwNf4S0MDJrDh4cYhKlFhP9/E8mEW7qZ79F0pDTtR9smEXHuPB7Jkzy Smgz27LD3c+SBxg/dkUaXYuplIJyFMMq1qV8QTHd5KCU/DJsdcyQ3YuLzE19C8jy eQNwSmgMXCAtw03TsoF2FhzUgpqX+embYDIY6+CUUQpAvsBLdgw2aiZ04sao+Y8Q mBjq4hxGTvqfd6ZORroaoaXOnRKngCIfAD8s87T0zQgP -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:40 2026 by rpki-client