This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/KrNmRR4hrk8plssZBHDOJNr9Ryg.roa File: KrNmRR4hrk8plssZBHDOJNr9Ryg.roa (raw, json) Hash identifier: HDzmGWPUIRpUxMQHSK5rxjukfcM5P9MYRi+LIu0onOw= Subject key identifier: 2A:B3:66:45:1E:21:AE:4F:29:96:CB:19:04:70:CE:24:DA:FD:47:28 Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac Certificate serial: 019B7BA4454C360232453E0E628188C1CA8D Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/KrNmRR4hrk8plssZBHDOJNr9Ryg.roa Signing time: Thu 01 Jan 2026 22:18:41 +0000 ROA not before: Thu 01 Jan 2026 22:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 212.68.180.0/22 maxlen: 22 212.68.180.0/24 maxlen: 24 212.68.181.0/24 maxlen: 24 212.68.182.0/24 maxlen: 24 212.68.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:45:4c:36:02:32:45:3e:0e:62:81:88:c1:ca:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac Validity Not Before: Jan 1 22:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ab366451e21ae4f2996cb190470ce24dafd4728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:68:65:fd:b7:27:f1:b0:34:ce:9e:9e:69:aa: e7:e8:3e:ce:34:c9:25:67:2c:05:02:5b:49:1e:9f: 8b:83:a9:d6:d2:38:f2:21:78:e9:77:ad:ab:ee:c4: 50:2d:ee:c5:fc:f0:8a:99:14:33:4e:a7:ee:6f:c3: 86:3a:59:e6:22:81:fa:b2:48:01:b5:8c:d5:20:e0: c4:93:33:34:d9:93:db:a5:fa:db:0c:85:98:54:00: 73:3a:83:be:b3:5a:65:02:37:cf:2a:34:67:eb:4a: b8:60:65:f8:1b:19:56:16:ef:5f:94:0e:82:8a:06: 9d:8a:fb:4e:0e:9d:67:da:3e:34:7a:7a:2e:09:a1: 14:84:a3:70:98:26:7f:06:24:e0:ab:cc:6a:5e:86: db:1b:f4:89:89:94:f3:c1:5f:02:ea:31:5d:af:38: df:3a:18:a4:47:3a:0d:68:1d:a3:a7:c8:f8:07:c8: 03:49:38:01:7a:b9:a5:ee:5e:4b:1c:5c:1c:d3:6b: bb:8c:ef:f7:7c:c1:cc:97:8c:89:e5:49:04:2e:a3: b8:2a:a3:2e:cc:40:6b:42:ec:06:c5:ab:9a:58:05: e1:3b:61:82:81:d1:86:c8:0d:ec:31:6c:fa:e6:b2: 9d:ce:30:60:e9:65:8f:cd:83:38:3e:eb:5e:e6:1e: 80:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B3:66:45:1E:21:AE:4F:29:96:CB:19:04:70:CE:24:DA:FD:47:28 X509v3 Authority Key Identifier: keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/KrNmRR4hrk8plssZBHDOJNr9Ryg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.68.180.0/22 Signature Algorithm: sha256WithRSAEncryption a9:73:80:b9:f3:62:41:2c:2b:f6:11:c7:38:7a:ca:01:61:05: 5e:4f:86:c1:3d:23:bf:cf:3a:81:09:22:52:a1:bf:e6:fb:e7: b2:b6:5a:df:57:df:38:6e:9d:84:43:92:62:0b:0a:06:d4:e2: 32:e8:86:57:91:87:dc:39:d6:5a:21:88:ad:8c:ee:76:69:4c: 95:74:b7:3a:82:80:1b:a3:43:73:05:e6:0d:ca:b3:b1:c8:9d: 2f:5b:a0:25:ea:92:cf:e0:95:a6:27:f7:05:02:f5:df:a2:0b: 80:a7:ad:02:bc:11:6f:b4:76:c6:3f:6f:4b:bc:ab:6b:75:3b: b5:11:e8:30:c3:74:bf:6a:21:86:f6:8e:82:eb:34:49:3d:15: a2:b3:10:0a:33:b8:84:48:37:2c:99:2f:73:7d:b9:b7:0a:e4: 9a:53:5d:9a:3d:e9:91:72:a0:5d:31:34:8a:ba:b9:7e:1e:38: 9f:91:0c:15:e2:10:01:88:d8:ae:c5:94:52:68:f2:47:49:69: d8:32:cb:40:23:f6:25:c8:b9:f1:ff:3a:8a:a7:3f:89:19:55: 69:7d:36:f4:b0:e2:0e:bc:10:88:eb:18:b6:89:0f:e5:1d:08: bf:3a:9e:8b:4c:16:ff:ff:80:c4:6e:b9:25:ae:7f:5a:16:a3: 45:61:1d:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pEVMNgIyRT4OYoGIwcqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYmFkM2RlODMxZGE5NDIyMmMxYWRkMTA0Y2FmNGMzMjQ3 Njg5YWMwHhcNMjYwMTAxMjIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWIzNjY0NTFlMjFhZTRmMjk5NmNiMTkwNDcwY2UyNGRhZmQ0NzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2hl/bcn8bA0zp6eaarn6D7ONMkl ZywFAltJHp+Lg6nW0jjyIXjpd62r7sRQLe7F/PCKmRQzTqfub8OGOlnmIoH6skgB tYzVIODEkzM02ZPbpfrbDIWYVABzOoO+s1plAjfPKjRn60q4YGX4GxlWFu9flA6C igadivtODp1n2j40enouCaEUhKNwmCZ/BiTgq8xqXobbG/SJiZTzwV8C6jFdrzjf OhikRzoNaB2jp8j4B8gDSTgBerml7l5LHFwc02u7jO/3fMHMl4yJ5UkELqO4KqMu zEBrQuwGxauaWAXhO2GCgdGGyA3sMWz65rKdzjBg6WWPzYM4Pute5h6AyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCqzZkUeIa5PKZbLGQRwziTa/UcoMB8GA1UdIwQY MBaAFKu6096DHalCIsGt0QTK9MMkdomsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDct NTVjNDM0ZWVjOTZjLzEvS3JObVJSNGhyazhwbHNzWkJIRE9KTnI5UnlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDctNTVjNDM0ZWVjOTZj LzEvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1ES0MA0G CSqGSIb3DQEBCwUAA4IBAQCpc4C582JBLCv2Ecc4esoBYQVeT4bBPSO/zzqBCSJS ob/m++eytlrfV984bp2EQ5JiCwoG1OIy6IZXkYfcOdZaIYitjO52aUyVdLc6goAb o0NzBeYNyrOxyJ0vW6Al6pLP4JWmJ/cFAvXfoguAp60CvBFvtHbGP29LvKtrdTu1 Eegww3S/aiGG9o6C6zRJPRWisxAKM7iESDcsmS9zfbm3CuSaU12aPemRcqBdMTSK url+HjifkQwV4hABiNiuxZRSaPJHSWnYMstAI/YlyLnx/zqKpz+JGVVpfTb0sOIO vBCI6xi2iQ/lHQi/Op6LTBb//4DEbrklrn9aFqNFYR01 -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:33 2026 by rpki-client