This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/Kt7Bb9a8NYPt2hdNoCtrivgec60.roa File: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (raw, json) Hash identifier: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE= Subject key identifier: 2A:DE:C1:6F:D6:BC:35:83:ED:DA:17:4D:A0:2B:6B:8A:F8:1E:73:AD Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019B7C11EB32B7591F0DCDD422E13E90CC6F Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/Kt7Bb9a8NYPt2hdNoCtrivgec60.roa Signing time: Fri 02 Jan 2026 00:18:27 +0000 ROA not before: Fri 02 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 147.161.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:eb:32:b7:59:1f:0d:cd:d4:22:e1:3e:90:cc:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Jan 2 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2adec16fd6bc3583edda174da02b6b8af81e73ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:30:db:27:da:fc:95:a6:58:9d:a5:e2:07:73: ed:58:44:1e:ff:ab:d7:25:07:92:90:40:e1:5d:3b: 77:14:c1:43:5b:42:36:58:2d:06:a8:6b:0d:c8:e7: 1e:08:b8:c5:8d:d9:4d:dd:9c:25:e8:9a:74:9d:0f: 57:4b:2f:d6:4c:1a:99:1b:77:2c:60:f6:ce:f9:d8: fe:95:cc:1c:14:f8:b4:72:8d:55:5e:bc:57:a2:52: 4d:b6:3c:3d:51:35:83:df:37:ac:c8:33:93:90:c2: 2d:1f:d6:68:ed:47:49:7f:20:ac:ee:30:0a:81:fd: b1:45:ba:3a:65:4f:fc:e0:df:b4:7c:e3:ff:77:f8: 74:3c:d4:07:3a:b8:b2:35:ac:4d:af:82:e6:88:ab: d4:42:bb:75:99:a6:ba:a8:e6:58:b2:82:48:bb:9d: 53:e7:f3:06:e1:d0:0d:a0:af:e6:2a:7a:b5:3c:a5: 89:03:7d:eb:78:92:0c:0d:b3:2c:67:90:94:9c:71: cb:d4:64:34:76:7f:55:e3:91:be:32:38:1f:f1:50: bf:1f:fa:b0:33:da:40:f4:ed:e3:35:46:72:06:64: 7c:99:db:69:0e:9e:19:1e:c7:2c:3d:bf:9e:33:24: dd:cd:10:23:ba:4b:ae:08:13:d9:90:ba:1e:c0:4d: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DE:C1:6F:D6:BC:35:83:ED:DA:17:4D:A0:2B:6B:8A:F8:1E:73:AD X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/Kt7Bb9a8NYPt2hdNoCtrivgec60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.161.2.0/24 Signature Algorithm: sha256WithRSAEncryption 83:48:af:03:9b:34:b4:84:1c:77:a4:ee:94:30:e0:7f:86:fc: 7f:60:61:bb:5a:38:0a:f6:d7:50:bf:71:42:46:07:8c:03:59: 94:b5:df:35:52:40:ca:6c:07:45:3b:37:9e:f3:52:2d:22:a0: 29:19:b7:e3:8e:5c:c7:bf:ea:e3:a1:04:73:29:84:5d:94:9f: b6:d4:1f:4e:37:34:9d:3d:51:28:39:4c:81:6c:20:0c:06:7d: 3a:1f:5c:e3:29:9e:b5:4c:34:de:95:b5:6c:17:75:49:9d:42: f7:bf:d8:e7:ae:25:14:96:ad:98:fc:aa:96:39:04:73:be:6b: 7f:0c:fc:95:f2:81:d1:4d:59:e4:f1:6d:80:9b:01:20:5d:e6: e1:ff:bc:db:c3:41:00:ab:36:f1:b4:6f:7e:94:de:28:07:59: 27:19:b8:4e:83:9c:69:36:8d:40:4e:04:48:3e:7f:4f:23:c4: fb:63:e6:34:c6:83:0d:18:bc:e4:a4:84:8a:53:93:05:f5:aa: 6b:6e:77:fa:f8:ac:f4:f5:05:80:8b:18:2c:a0:96:f8:57:89: 04:d5:31:c4:5c:df:fc:4f:3e:dd:61:93:64:e4:4a:ed:43:d7: 94:5b:7d:1b:82:b4:97:40:99:4c:5c:87:08:66:05:19:a5:e7: 9d:4b:1a:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Eesyt1kfDc3UIuE+kMxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwMTAyMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWRlYzE2ZmQ2YmMzNTgzZWRkYTE3NGRhMDJiNmI4YWY4MWU3M2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjDbJ9r8laZYnaXiB3PtWEQe/6vX JQeSkEDhXTt3FMFDW0I2WC0GqGsNyOceCLjFjdlN3Zwl6Jp0nQ9XSy/WTBqZG3cs YPbO+dj+lcwcFPi0co1VXrxXolJNtjw9UTWD3zesyDOTkMItH9Zo7UdJfyCs7jAK gf2xRbo6ZU/84N+0fOP/d/h0PNQHOriyNaxNr4LmiKvUQrt1maa6qOZYsoJIu51T 5/MG4dANoK/mKnq1PKWJA33reJIMDbMsZ5CUnHHL1GQ0dn9V45G+Mjgf8VC/H/qw M9pA9O3jNUZyBmR8mdtpDp4ZHscsPb+eMyTdzRAjukuuCBPZkLoewE2TnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCrewW/WvDWD7doXTaAra4r4HnOtMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEvS3Q3QmI5YThOWVB0MmhkTm9DdHJpdmdlYzYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk6ECMA0G CSqGSIb3DQEBCwUAA4IBAQCDSK8DmzS0hBx3pO6UMOB/hvx/YGG7WjgK9tdQv3FC RgeMA1mUtd81UkDKbAdFOzee81ItIqApGbfjjlzHv+rjoQRzKYRdlJ+21B9ONzSd PVEoOUyBbCAMBn06H1zjKZ61TDTelbVsF3VJnUL3v9jnriUUlq2Y/KqWOQRzvmt/ DPyV8oHRTVnk8W2AmwEgXebh/7zbw0EAqzbxtG9+lN4oB1knGbhOg5xpNo1ATgRI Pn9PI8T7Y+Y0xoMNGLzkpISKU5MF9aprbnf6+Kz09QWAixgsoJb4V4kE1THEXN/8 Tz7dYZNk5ErtQ9eUW30bgrSXQJlMXIcIZgUZpeedSxq3 -----END CERTIFICATE-----Generated at Fri Jan 2 18:05:05 2026 by rpki-client