This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/KHQ_ZdxN56Iz5Ca6N9aBw4nqLxI.roa File: KHQ_ZdxN56Iz5Ca6N9aBw4nqLxI.roa (raw, json) Hash identifier: +nZrFR1HZ1NCMol1rB0+mW9pkjA6Lmn6yBpxxfjSeJA= Subject key identifier: 28:74:3F:65:DC:4D:E7:A2:33:E4:26:BA:37:D6:81:C3:89:EA:2F:12 Certificate issuer: /CN=522399c2789b1a5504f81671cff220c04eaf59f1 Certificate serial: 019B77C6FE30527D343B3D4A7F3057E05F45 Authority key identifier: 52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/KHQ_ZdxN56Iz5Ca6N9aBw4nqLxI.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201378 IP address blocks: 80.184.196.0/24 maxlen: 24 80.184.197.0/24 maxlen: 24 80.184.198.0/24 maxlen: 24 80.184.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fe:30:52:7d:34:3b:3d:4a:7f:30:57:e0:5f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522399c2789b1a5504f81671cff220c04eaf59f1 Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28743f65dc4de7a233e426ba37d681c389ea2f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:f6:31:d7:42:8a:74:88:72:d4:91:15:83: 38:c8:8a:37:85:94:5d:bb:6f:2e:44:45:df:d4:96: 74:85:33:fe:71:f9:bc:6f:26:ae:f4:5a:02:6d:58: f5:32:98:1c:a6:20:c6:b7:f8:7c:01:4a:bf:d2:2c: 91:31:35:bc:bd:a4:f0:d9:02:a5:9e:cf:c6:c5:8a: 0b:6a:99:65:26:d1:10:60:78:06:bc:a9:93:63:b0: 94:df:b9:3b:01:c1:a2:3c:a1:3f:ab:16:0e:eb:88: fb:41:ae:98:af:4b:16:71:05:05:d8:82:89:20:db: 4c:30:2c:99:f0:c6:26:cb:1d:87:b9:83:f7:33:f6: 2b:8a:d0:38:12:55:b3:9b:77:a2:8f:44:24:71:fd: 1c:9b:1d:c2:e8:10:ec:70:82:f7:e7:3b:be:b3:cd: 14:07:6b:e6:d8:17:ae:23:d1:33:42:ab:df:b5:4c: 8a:60:a7:93:e4:20:98:dc:fb:f1:ec:66:f0:0c:45: a1:70:f3:30:ed:f9:a4:ca:72:db:ce:b4:88:4d:65: 7a:ff:9b:da:c3:f4:23:c4:60:0f:73:6a:cf:eb:0e: 38:b7:59:15:38:c5:cc:45:46:41:5d:ad:4c:e5:be: 1f:c9:6d:55:54:61:31:bc:a3:5f:dc:9a:ba:dd:f1: a8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:74:3F:65:DC:4D:E7:A2:33:E4:26:BA:37:D6:81:C3:89:EA:2F:12 X509v3 Authority Key Identifier: keyid:52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/KHQ_ZdxN56Iz5Ca6N9aBw4nqLxI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.184.196.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:e9:62:2b:25:36:ab:22:6d:dd:f8:eb:26:03:e8:ae:9e:4e: d9:23:2c:ed:0a:8d:45:48:70:4b:23:4d:3c:27:cf:be:9c:60: 34:d9:d4:ed:86:51:91:38:12:a9:fc:e6:22:16:d2:5b:b7:c5: c1:48:33:dd:9e:82:e8:7d:f8:12:b8:09:b7:82:3d:4e:a4:60: 40:1c:f9:04:80:b3:08:9b:21:8f:92:11:b1:be:67:c5:fb:71: 40:9f:31:63:1c:58:1f:a9:1b:e6:ca:c6:69:6d:b6:d1:78:5c: 23:86:e5:03:1e:90:a2:ba:e7:d8:d9:ee:9c:01:e5:7b:38:4f: 62:ab:65:cd:f4:1e:03:28:ed:30:8e:fb:09:fc:02:e5:57:cc: 1d:e8:61:58:e9:84:e2:30:8b:98:80:85:62:a8:45:c4:9a:f4: 96:7a:6a:e2:f6:0c:1e:c2:d2:d9:01:96:9e:d9:47:3b:30:ce: 3c:a3:1d:9c:20:3e:e2:00:a7:d8:83:89:8c:72:97:38:e4:0f: 6e:24:c4:ba:05:2d:9b:66:99:13:c9:20:4a:69:67:32:56:b8: aa:cf:cc:ae:9a:5c:4a:7f:e2:0f:a7:0c:8e:17:52:b0:e3:87: 6c:86:d0:04:f0:f0:71:d2:4b:db:5e:a3:79:69:68:b6:95:1f: 91:49:e8:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xv4wUn00Oz1KfzBX4F9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjM5OWMyNzg5YjFhNTUwNGY4MTY3MWNmZjIyMGMwNGVh ZjU5ZjEwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODc0M2Y2NWRjNGRlN2EyMzNlNDI2YmEzN2Q2ODFjMzg5ZWEyZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFv2MddCinSIctSRFYM4yIo3hZRd u28uREXf1JZ0hTP+cfm8byau9FoCbVj1MpgcpiDGt/h8AUq/0iyRMTW8vaTw2QKl ns/GxYoLapllJtEQYHgGvKmTY7CU37k7AcGiPKE/qxYO64j7Qa6Yr0sWcQUF2IKJ INtMMCyZ8MYmyx2HuYP3M/YritA4ElWzm3eij0Qkcf0cmx3C6BDscIL35zu+s80U B2vm2BeuI9EzQqvftUyKYKeT5CCY3Pvx7GbwDEWhcPMw7fmkynLbzrSITWV6/5va w/QjxGAPc2rP6w44t1kVOMXMRUZBXa1M5b4fyW1VVGExvKNf3Jq63fGoiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCh0P2XcTeeiM+QmujfWgcOJ6i8SMB8GA1UdIwQY MBaAFFIjmcJ4mxpVBPgWcc/yIMBOr1nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWlPWnduaWJHbFVFLUJaeHpfSWd3RTZ2V2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8yMmQwMTEtZWQ0Mi00ZDE0LWE2NzAt ZDVkNTFkMzc5NDlkLzEvS0hRX1pkeE41Nkl6NUNhNk45YUJ3NG5xTHhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8yMmQwMTEtZWQ0Mi00ZDE0LWE2NzAtZDVkNTFkMzc5NDlk LzEvVWlPWnduaWJHbFVFLUJaeHpfSWd3RTZ2V2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCULjEMA0G CSqGSIb3DQEBCwUAA4IBAQBu6WIrJTarIm3d+OsmA+iunk7ZIyztCo1FSHBLI008 J8++nGA02dTthlGROBKp/OYiFtJbt8XBSDPdnoLoffgSuAm3gj1OpGBAHPkEgLMI myGPkhGxvmfF+3FAnzFjHFgfqRvmysZpbbbReFwjhuUDHpCiuufY2e6cAeV7OE9i q2XN9B4DKO0wjvsJ/ALlV8wd6GFY6YTiMIuYgIViqEXEmvSWemri9gwewtLZAZae 2Uc7MM48ox2cID7iAKfYg4mMcpc45A9uJMS6BS2bZpkTySBKaWcyVriqz8yumlxK f+IPpwyOF1Kw44dshtAE8PBx0kvbXqN5aWi2lR+RSeh5 -----END CERTIFICATE-----Generated at Mon Feb 9 20:03:24 2026 by rpki-client