This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/KKkdWKb8trEZFH4vckoUJV2EraM.roa File: KKkdWKb8trEZFH4vckoUJV2EraM.roa (raw, json) Hash identifier: Ag2mjewJcCUE9H557ALCBro2BDKEQqn+ZfAIETR7Z90= Subject key identifier: 28:A9:1D:58:A6:FC:B6:B1:19:14:7E:2F:72:4A:14:25:5D:84:AD:A3 Certificate issuer: /CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f Certificate serial: 019B7F819DBC0C1F05AB0EEF310CF8B435C6 Authority key identifier: ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/KKkdWKb8trEZFH4vckoUJV2EraM.roa Signing time: Fri 02 Jan 2026 16:19:19 +0000 ROA not before: Fri 02 Jan 2026 16:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16110 IP address blocks: 46.174.208.0/24 maxlen: 24 46.174.209.0/24 maxlen: 24 46.174.211.0/24 maxlen: 24 46.174.212.0/24 maxlen: 24 46.174.213.0/24 maxlen: 24 46.174.214.0/24 maxlen: 24 46.174.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:9d:bc:0c:1f:05:ab:0e:ef:31:0c:f8:b4:35:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f Validity Not Before: Jan 2 16:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28a91d58a6fcb6b119147e2f724a14255d84ada3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cc:3f:51:e5:11:4a:c1:c4:90:b1:4d:e5:48: 3c:89:fc:1c:37:fd:d4:f0:03:56:38:ff:8f:2a:c4: f8:9f:1e:54:f4:b6:f9:11:7e:7d:2e:48:18:68:01: 00:d1:e6:f9:8e:ae:8c:50:88:42:8f:60:07:3c:ae: c8:a6:9a:1f:e9:91:b8:41:73:54:08:c8:f2:96:49: 05:a9:45:67:82:d3:c2:5f:85:fd:32:25:f6:2c:d2: ba:97:49:9a:45:20:4c:e9:d6:8c:48:07:59:ae:3f: 38:5e:d6:4c:7b:4c:04:71:9d:2f:7b:1f:5a:cf:8a: f3:b5:a2:5a:0f:67:bd:3f:88:6f:c4:eb:8a:eb:8f: 66:f0:f6:de:8e:e0:93:d7:ea:94:7d:9c:91:52:38: 37:c8:8e:2b:35:9d:ef:2e:1c:85:3c:c0:59:7d:bd: a7:ed:d3:5e:69:96:1a:d6:54:b1:fb:3d:3d:cf:67: 4c:06:44:78:0f:4d:aa:96:9b:8d:21:12:3c:ec:ad: 9f:41:cb:54:9e:76:69:6b:33:cf:c9:79:60:e9:18: 84:6f:82:40:ea:a9:50:ad:8d:ce:80:70:1e:bc:05: 0b:5b:2c:51:36:e1:b2:29:3f:88:d2:81:ef:9e:eb: 89:e9:18:cd:ca:0c:16:1a:10:8b:e8:93:c5:06:72: b4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A9:1D:58:A6:FC:B6:B1:19:14:7E:2F:72:4A:14:25:5D:84:AD:A3 X509v3 Authority Key Identifier: keyid:ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/KKkdWKb8trEZFH4vckoUJV2EraM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.174.208.0/23 46.174.211.0-46.174.215.255 Signature Algorithm: sha256WithRSAEncryption 45:9b:4e:07:2e:20:0f:31:39:5a:31:28:b8:cc:29:a8:92:c9: e3:e5:17:10:59:22:63:42:6c:10:7c:7f:f6:ee:f8:86:41:e8: 4c:a0:e1:e5:07:7e:ac:c8:b5:ad:4d:df:7a:80:b0:db:28:ea: bc:97:83:2d:f1:73:c5:06:cf:61:46:c1:c8:1c:78:34:ec:5b: 6b:c6:ca:17:9b:f6:dc:ad:2e:4c:01:41:39:37:fd:49:5c:69: d4:71:e1:14:24:75:37:37:45:a5:9d:cf:2f:b1:26:26:d3:ac: 66:be:06:a8:d3:ce:c3:de:ef:95:5b:eb:b8:28:75:2e:45:6e: 7d:14:d6:d4:5a:f1:00:93:a1:1a:ba:0f:0e:00:11:6d:ea:04: ef:09:f5:6d:b2:2d:b2:f7:b2:40:2e:6e:b3:a1:98:64:0a:6c: f7:ee:32:65:2a:f5:73:75:f8:00:aa:1d:3e:4c:86:5a:ce:1e: 24:b1:9b:7f:23:4c:66:62:5f:54:07:ec:da:cd:f6:a7:45:18: ba:8b:dd:34:db:a8:5f:3c:f5:50:f6:ae:54:f1:0f:85:3c:15: 7f:b9:80:9f:cd:57:65:b2:08:77:d1:1b:d5:e8:2d:b9:ad:18: 89:17:55:cb:47:50:27:e8:49:57:ac:8c:74:ff:c3:52:32:4b: 56:45:44:a8 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/gZ28DB8Fqw7vMQz4tDXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzcyYzJmYTIzYmU2ZmE4ZTI4YWVhNGE3MTVkNWFjMzFm MGNjOWYwHhcNMjYwMTAyMTYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGE5MWQ1OGE2ZmNiNmIxMTkxNDdlMmY3MjRhMTQyNTVkODRhZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMw/UeURSsHEkLFN5Ug8ifwcN/3U 8ANWOP+PKsT4nx5U9Lb5EX59LkgYaAEA0eb5jq6MUIhCj2AHPK7Ippof6ZG4QXNU CMjylkkFqUVngtPCX4X9MiX2LNK6l0maRSBM6daMSAdZrj84XtZMe0wEcZ0vex9a z4rztaJaD2e9P4hvxOuK649m8PbejuCT1+qUfZyRUjg3yI4rNZ3vLhyFPMBZfb2n 7dNeaZYa1lSx+z09z2dMBkR4D02qlpuNIRI87K2fQctUnnZpazPPyXlg6RiEb4JA 6qlQrY3OgHAevAULWyxRNuGyKT+I0oHvnuuJ6RjNygwWGhCL6JPFBnK0zQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCipHVim/LaxGRR+L3JKFCVdhK2jMB8GA1UdIwQY MBaAFO13LC+iO+b6jiiupKcV1awx8MyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83OTA2NDgtZGQ5MC00NGViLTlhOGYt OGZhMDk4NzQxMTNlLzEvS0trZFdLYjh0ckVaRkg0dmNrb1VKVjJFcmFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy83OTA2NDgtZGQ5MC00NGViLTlhOGYtOGZhMDk4NzQxMTNl LzEvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBLq7QMAwD BAAurtMDBAMurtAwDQYJKoZIhvcNAQELBQADggEBAEWbTgcuIA8xOVoxKLjMKaiS yePlFxBZImNCbBB8f/bu+IZB6Eyg4eUHfqzIta1N33qAsNso6ryXgy3xc8UGz2FG wcgceDTsW2vGyheb9tytLkwBQTk3/UlcadRx4RQkdTc3RaWdzy+xJibTrGa+BqjT zsPe75Vb67godS5Fbn0U1tRa8QCToRq6Dw4AEW3qBO8J9W2yLbL3skAubrOhmGQK bPfuMmUq9XN1+ACqHT5MhlrOHiSxm38jTGZiX1QH7NrN9qdFGLqL3TTbqF889VD2 rlTxD4U8FX+5gJ/NV2WyCHfRG9XoLbmtGIkXVctHUCfoSVesjHT/w1IyS1ZFRKg= -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:17 2026 by rpki-client