This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/K7-F8r5HaixUXPBxPks_drLfCLM.roa File: K7-F8r5HaixUXPBxPks_drLfCLM.roa (raw, json) Hash identifier: IxrS8dpVCynttuxgWbJEvLUTdnUOcVknWjS85DsyGnY= Subject key identifier: 2B:BF:85:F2:BE:47:6A:2C:54:5C:F0:71:3E:4B:3F:76:B2:DF:08:B3 Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad Certificate serial: 019B7D5BE427CD52942DA4CFD8E057B9F625 Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/K7-F8r5HaixUXPBxPks_drLfCLM.roa Signing time: Fri 02 Jan 2026 06:18:52 +0000 ROA not before: Fri 02 Jan 2026 06:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206814 IP address blocks: 89.135.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:e4:27:cd:52:94:2d:a4:cf:d8:e0:57:b9:f6:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad Validity Not Before: Jan 2 06:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bbf85f2be476a2c545cf0713e4b3f76b2df08b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:f3:b4:8e:44:2d:26:08:79:13:d3:3d:89: 96:f8:26:f2:9a:c7:48:3c:2a:3a:b5:ee:6a:d1:9d: b4:64:40:fb:48:9e:37:22:85:d7:09:18:00:31:8c: 0d:10:82:ff:a8:8e:af:ec:39:91:3c:e2:b9:cb:e1: 5c:30:9b:e9:23:d4:51:1a:23:b3:f9:6a:67:50:ec: 15:c9:86:05:c5:18:07:74:19:61:ef:38:3e:d9:91: 0e:97:eb:bf:d5:7c:bc:19:ad:4d:dc:53:27:b1:2f: e8:cf:fb:bc:8f:68:79:4e:3c:dd:96:2d:a1:6b:e6: 13:7e:da:52:4f:aa:e5:9b:d8:ab:2c:65:05:1f:a6: 29:16:00:7a:2b:66:3b:24:66:84:a9:4f:55:b4:2b: b1:fa:ea:0f:57:2c:cf:7f:c0:24:14:f4:c4:c5:2c: 74:b2:23:00:44:44:da:74:2f:ff:17:2f:c1:e3:f7: 27:c0:69:fb:0e:f4:a3:5a:11:d1:31:92:dc:2c:16: 9b:ac:02:96:a2:7a:c9:85:e7:a8:52:2a:85:c5:80: b3:26:1c:da:db:7a:4a:f4:c6:98:01:06:4d:08:04: 9e:65:d6:97:33:ff:28:d4:3b:0c:d1:b4:ae:23:18: 30:66:60:de:81:0f:a3:4d:cf:c5:8b:67:f0:6d:4f: a7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BF:85:F2:BE:47:6A:2C:54:5C:F0:71:3E:4B:3F:76:B2:DF:08:B3 X509v3 Authority Key Identifier: keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/K7-F8r5HaixUXPBxPks_drLfCLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.135.60.0/24 Signature Algorithm: sha256WithRSAEncryption b2:3d:05:5d:ef:3e:57:97:29:f0:25:c0:65:43:9a:47:3d:48: a1:c7:ab:e8:0e:66:4b:78:8a:bb:c6:3c:20:e3:5a:18:c9:c4: 24:3b:84:49:63:8d:25:2a:e5:4e:10:aa:c3:d0:60:36:67:08: cd:b6:80:22:03:f1:90:92:69:92:7e:3a:1e:b5:8d:76:b1:c9: 5d:14:74:3a:24:7e:28:2d:70:e6:0a:4f:1b:c8:a4:92:9f:49: ef:87:22:a4:02:5e:a2:76:d8:13:5a:e4:d0:d8:39:38:12:3e: f1:f2:3e:87:b1:a6:01:fa:4b:26:37:ba:de:7a:2e:9c:d3:cf: ce:12:bc:df:d3:67:12:d2:3d:15:08:84:0e:d7:1e:ba:3a:26: ad:c0:ef:68:cc:e9:db:5c:c8:7c:9a:88:86:47:7e:5c:a3:2f: e7:40:8f:52:45:30:62:3e:d1:1b:e2:93:77:7d:be:2f:13:6e: d1:e7:a0:ee:f5:94:a7:97:17:e9:8a:2d:e0:a1:b9:fd:08:cb: 9a:ce:bb:1a:1c:af:1a:0a:37:09:cc:74:43:ec:76:62:7e:2f: a6:2d:e8:ce:eb:52:0b:2b:f5:93:19:4a:2e:ef:78:1c:c5:ae: a8:bb:92:d2:41:4c:ca:fb:f0:93:a1:59:77:f1:22:b3:60:39: 4c:1b:eb:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W+QnzVKULaTP2OBXufYlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMDE5OGE3YjNhZmRjZGQ3MDAzNTYyYTA4NzE4NzhlMjM4 NzYwYWQwHhcNMjYwMTAyMDYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmJmODVmMmJlNDc2YTJjNTQ1Y2YwNzEzZTRiM2Y3NmIyZGYwOGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskbztI5ELSYIeRPTPYmW+CbymsdI PCo6te5q0Z20ZED7SJ43IoXXCRgAMYwNEIL/qI6v7DmRPOK5y+FcMJvpI9RRGiOz +WpnUOwVyYYFxRgHdBlh7zg+2ZEOl+u/1Xy8Ga1N3FMnsS/oz/u8j2h5Tjzdli2h a+YTftpST6rlm9irLGUFH6YpFgB6K2Y7JGaEqU9VtCux+uoPVyzPf8AkFPTExSx0 siMARETadC//Fy/B4/cnwGn7DvSjWhHRMZLcLBabrAKWonrJheeoUiqFxYCzJhza 23pK9MaYAQZNCASeZdaXM/8o1DsM0bSuIxgwZmDegQ+jTc/Fi2fwbU+nHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCu/hfK+R2osVFzwcT5LP3ay3wizMB8GA1UdIwQY MBaAFN8BmKezr9zdcANWKghxh44jh2CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQt MGZjYzZjMzAxMWZjLzEvSzctRjhyNUhhaXhVWFBCeFBrc19kckxmQ0xNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQtMGZjYzZjMzAxMWZj LzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWYc8MA0G CSqGSIb3DQEBCwUAA4IBAQCyPQVd7z5XlynwJcBlQ5pHPUihx6voDmZLeIq7xjwg 41oYycQkO4RJY40lKuVOEKrD0GA2ZwjNtoAiA/GQkmmSfjoetY12scldFHQ6JH4o LXDmCk8byKSSn0nvhyKkAl6idtgTWuTQ2Dk4Ej7x8j6HsaYB+ksmN7reei6c08/O Erzf02cS0j0VCIQO1x66OiatwO9ozOnbXMh8moiGR35coy/nQI9SRTBiPtEb4pN3 fb4vE27R56Du9ZSnlxfpii3gobn9CMuazrsaHK8aCjcJzHRD7HZifi+mLejO61IL K/WTGUou73gcxa6ou5LSQUzK+/CToVl38SKzYDlMG+vi -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:40 2026 by rpki-client