This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/KtKgrqLsZRkrGS4es-oGTIqwVlw.roa File: KtKgrqLsZRkrGS4es-oGTIqwVlw.roa (raw, json) Hash identifier: UPj/hJOC1lHG60eBQqDh4t+3G4IYr9OwL7yonWIDfi0= Subject key identifier: 2A:D2:A0:AE:A2:EC:65:19:2B:19:2E:1E:B3:EA:06:4C:8A:B0:56:5C Certificate issuer: /CN=b45addcd579648fc3f6124e558479ef0b07f018c Certificate serial: 019B79ED54EABC7CBF0270A0A04A1A2FB7A1 Authority key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/KtKgrqLsZRkrGS4es-oGTIqwVlw.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207304 IP address blocks: 45.138.0.0/24 maxlen: 24 2a14:48c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:54:ea:bc:7c:bf:02:70:a0:a0:4a:1a:2f:b7:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45addcd579648fc3f6124e558479ef0b07f018c Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ad2a0aea2ec65192b192e1eb3ea064c8ab0565c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d2:62:46:78:df:18:39:43:42:06:c5:1c:65: b5:7b:d9:47:23:70:05:dc:e7:b9:11:f8:eb:44:b4: 10:be:b1:b9:64:54:ca:7d:5b:d9:f9:06:ca:96:c0: 3c:87:e0:94:72:9a:cd:b2:f1:e9:73:cc:00:bd:e8: f0:a2:2a:b2:bc:67:8c:17:0b:fe:55:38:98:e2:bc: f1:17:02:14:50:4a:7f:cb:74:3b:1e:c2:a0:99:16: 6c:a1:ba:eb:cd:11:cc:29:5f:4a:89:b6:43:05:15: b1:05:71:ad:9c:b1:4d:7c:78:10:37:df:ec:d9:d9: 5c:cd:90:60:3d:79:9a:2c:fe:8b:b6:5a:e9:b6:92: c4:a2:54:b9:16:cb:b6:02:f5:77:33:c9:01:ff:75: bd:04:41:65:de:00:a8:44:9d:c1:32:8e:4b:cb:8e: 2a:1b:e0:3a:d6:11:62:6f:2e:f2:00:88:f0:9f:eb: 5a:45:91:0b:31:fa:62:db:23:08:3f:31:0c:e1:0a: 3e:ce:29:d5:03:f0:bc:66:9a:d1:d0:b6:42:a9:c6: 99:b4:b8:23:fc:93:ab:c2:ae:e2:52:f7:78:93:b7: 70:b1:b2:ac:bb:98:c1:ea:01:03:d3:41:4d:ce:06: a3:c8:1e:0e:77:e1:f4:d9:f6:1f:00:e7:b2:c5:47: c8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D2:A0:AE:A2:EC:65:19:2B:19:2E:1E:B3:EA:06:4C:8A:B0:56:5C X509v3 Authority Key Identifier: keyid:B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/KtKgrqLsZRkrGS4es-oGTIqwVlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.0.0/24 IPv6: 2a14:48c5::/48 Signature Algorithm: sha256WithRSAEncryption 65:c9:62:24:71:4e:74:1c:40:28:54:81:a0:ac:c4:a3:e6:12: e5:cb:a7:27:94:f4:79:45:47:b9:4c:01:7c:66:ec:6c:4f:cf: 56:40:ed:eb:af:d1:0f:f2:0e:e5:c6:3f:51:8d:b3:7f:a5:f6: 83:1f:d3:93:6c:0c:44:47:1a:86:7a:8a:73:39:71:78:59:5c: 39:67:63:a9:b4:35:21:bb:80:c5:1e:43:4a:19:fc:10:2a:76: bb:d2:f8:49:e8:78:26:43:27:3f:d8:6a:a6:02:e8:98:51:b6: c8:ba:23:7b:98:21:b4:11:ba:a6:61:ea:ab:87:89:2d:65:27: 58:84:64:cb:56:bb:b6:a6:fa:f5:a4:61:59:e3:4c:52:12:32: a8:ca:77:8c:90:13:be:fb:2c:d4:32:e4:fe:4c:1c:0b:48:d5: 64:98:c8:94:8a:22:01:20:d3:1c:96:ce:0c:e3:18:09:71:2e: 9d:36:15:55:b4:a4:e0:3c:63:21:08:76:7b:81:75:cf:31:e2: d6:0f:e1:f5:8b:b7:3f:c2:74:05:31:f3:f4:bb:45:a5:7c:e4: 17:19:f1:34:36:ba:1f:d6:7f:a0:70:e9:57:d6:bb:28:8a:9b: 24:23:73:bf:38:48:0c:74:09:10:f8:df:0c:e8:c7:9d:7b:a3: 8e:0d:ca:a4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57VTqvHy/AnCgoEoaL7ehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NWFkZGNkNTc5NjQ4ZmMzZjYxMjRlNTU4NDc5ZWYwYjA3 ZjAxOGMwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWQyYTBhZWEyZWM2NTE5MmIxOTJlMWViM2VhMDY0YzhhYjA1NjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9JiRnjfGDlDQgbFHGW1e9lHI3AF 3Oe5EfjrRLQQvrG5ZFTKfVvZ+QbKlsA8h+CUcprNsvHpc8wAvejwoiqyvGeMFwv+ VTiY4rzxFwIUUEp/y3Q7HsKgmRZsobrrzRHMKV9KibZDBRWxBXGtnLFNfHgQN9/s 2dlczZBgPXmaLP6LtlrptpLEolS5Fsu2AvV3M8kB/3W9BEFl3gCoRJ3BMo5Ly44q G+A61hFiby7yAIjwn+taRZELMfpi2yMIPzEM4Qo+zinVA/C8ZprR0LZCqcaZtLgj /JOrwq7iUvd4k7dwsbKsu5jB6gED00FNzgajyB4Od+H02fYfAOeyxUfI7wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCrSoK6i7GUZKxkuHrPqBkyKsFZcMB8GA1UdIwQY MBaAFLRa3c1Xlkj8P2Ek5VhHnvCwfwGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZyZHpWZVdTUHdfWVNUbFdFZWU4TEJfQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mNGYyNDQtOGMwYy00NTY0LTljNDIt YWY2MGZkNWYwNmIxLzEvS3RLZ3JxTHNaUmtyR1M0ZXMtb0dUSXF3Vmx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mNGYyNDQtOGMwYy00NTY0LTljNDItYWY2MGZkNWYwNmIx LzEvdEZyZHpWZVdTUHdfWVNUbFdFZWU4TEJfQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALYoAMA8E AgACMAkDBwAqFEjFAAAwDQYJKoZIhvcNAQELBQADggEBAGXJYiRxTnQcQChUgaCs xKPmEuXLpyeU9HlFR7lMAXxm7GxPz1ZA7euv0Q/yDuXGP1GNs3+l9oMf05NsDERH GoZ6inM5cXhZXDlnY6m0NSG7gMUeQ0oZ/BAqdrvS+EnoeCZDJz/YaqYC6JhRtsi6 I3uYIbQRuqZh6quHiS1lJ1iEZMtWu7am+vWkYVnjTFISMqjKd4yQE777LNQy5P5M HAtI1WSYyJSKIgEg0xyWzgzjGAlxLp02FVW0pOA8YyEIdnuBdc8x4tYP4fWLtz/C dAUx8/S7RaV85BcZ8TQ2uh/Wf6Bw6VfWuyiKmyQjc784SAx0CRD43wzox517o44N yqQ= -----END CERTIFICATE-----Generated at Mon Feb 9 21:19:42 2026 by rpki-client