This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/KLpxcziAIHIxQSEYpd_o6PvM4vE.roa File: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (raw, json) Hash identifier: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk= Subject key identifier: 28:BA:71:73:38:80:20:72:31:41:21:18:A5:DF:E8:E8:FB:CC:E2:F1 Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255 Certificate serial: 019B797DDE66C1D4A0762C540D1C24A87FB7 Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/KLpxcziAIHIxQSEYpd_o6PvM4vE.roa Signing time: Thu 01 Jan 2026 12:17:30 +0000 ROA not before: Thu 01 Jan 2026 12:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 46.29.236.0/24 maxlen: 24 46.29.237.0/24 maxlen: 24 46.29.239.0/24 maxlen: 24 85.159.226.0/24 maxlen: 24 85.159.229.0/24 maxlen: 24 85.159.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:de:66:c1:d4:a0:76:2c:54:0d:1c:24:a8:7f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255 Validity Not Before: Jan 1 12:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28ba71733880207231412118a5dfe8e8fbcce2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:57:2d:ff:0c:34:75:94:3d:5c:cd:3a:56: 16:3c:e9:48:06:7a:6c:03:f6:c4:7e:ce:e8:0d:27: 6c:1d:7b:ea:ad:07:fc:0d:6a:52:f9:c2:1c:13:39: 7a:e9:98:d8:7f:5b:82:b4:f4:55:fa:f0:cb:6d:3f: 8b:76:5c:dd:72:4c:08:42:ee:33:19:a8:d5:6d:28: a2:97:ed:a4:25:47:a4:9f:b9:7b:07:df:1a:b9:d7: 3d:96:d2:8d:04:8f:79:ea:a3:b8:ed:cc:73:8a:a3: dd:72:dc:85:5a:63:0b:c0:87:2f:87:5e:8d:fc:10: 58:e6:cf:22:ce:4d:3b:7f:e7:09:e6:7f:81:3c:49: 64:50:d3:aa:80:8d:87:5d:b2:bd:ae:3f:0e:61:79: 26:a4:51:70:2f:c3:fc:c2:5c:97:80:d4:84:0a:e1: a5:d5:c3:a3:a9:ff:71:0a:e9:24:95:78:17:f2:1a: 90:43:08:80:71:c2:cb:cf:df:f8:fb:11:64:02:6c: 46:cf:91:41:b2:35:9c:c8:5f:37:aa:44:50:2b:f2: 68:d8:60:9c:1a:f0:a4:fe:fe:d8:50:57:d5:01:bf: bb:c3:88:fb:56:89:2a:bc:e3:61:ba:ac:dc:ee:da: 56:38:67:60:a0:85:f1:e6:95:c5:8b:d3:b0:77:fe: 33:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BA:71:73:38:80:20:72:31:41:21:18:A5:DF:E8:E8:FB:CC:E2:F1 X509v3 Authority Key Identifier: keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/KLpxcziAIHIxQSEYpd_o6PvM4vE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.236.0/23 46.29.239.0/24 85.159.226.0/24 85.159.229.0-85.159.230.255 Signature Algorithm: sha256WithRSAEncryption a6:3c:c5:c5:a2:ae:18:5d:68:91:35:b2:29:a2:33:ad:b0:e6: c2:25:f6:01:cd:a3:48:c9:8c:85:e0:64:90:50:f5:e2:04:58: 50:4d:2d:10:00:bf:9e:5c:3f:ac:f9:31:8e:4e:68:ad:c4:96: 46:d2:f0:4a:95:d1:10:92:d5:e5:80:05:33:8d:7e:f4:80:58: fe:ec:78:82:cb:f0:fe:a5:bf:0e:19:8b:c6:a4:28:e0:98:66: b9:04:51:79:b1:88:5c:ea:1f:c5:1f:16:97:29:5e:9d:d3:02: c7:e1:cb:c2:12:45:5a:67:ef:82:bc:f0:6d:3f:1b:66:ad:42: 8b:20:ad:49:e4:1c:f8:cc:b3:33:75:29:41:f9:bb:8c:c8:92: b8:de:9f:d7:d1:47:e5:b7:98:5e:b5:f4:27:e8:a9:bb:f1:c2: 5c:17:e8:a5:d9:17:a0:c6:2d:ec:c4:2e:15:73:a4:a0:62:4e: 18:6a:15:14:2f:c1:09:17:92:fe:2c:3b:02:31:27:b9:17:ad: 1e:80:6a:ae:8c:7e:61:6f:03:b2:d8:40:5f:4f:fc:73:ea:c4: a9:30:4e:de:9a:bb:a6:c5:03:70:65:51:55:7c:a3:c7:a8:7b: e1:45:07:4f:e3:0c:98:b9:5a:a4:5e:bc:f6:76:ba:39:c4:7b: 78:09:9b:76 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt5fd5mwdSgdixUDRwkqH+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1 NDEyNTUwHhcNMjYwMTAxMTIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGJhNzE3MzM4ODAyMDcyMzE0MTIxMThhNWRmZThlOGZiY2NlMmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFBXLf8MNHWUPVzNOlYWPOlIBnps A/bEfs7oDSdsHXvqrQf8DWpS+cIcEzl66ZjYf1uCtPRV+vDLbT+LdlzdckwIQu4z GajVbSiil+2kJUekn7l7B98audc9ltKNBI956qO47cxziqPdctyFWmMLwIcvh16N /BBY5s8izk07f+cJ5n+BPElkUNOqgI2HXbK9rj8OYXkmpFFwL8P8wlyXgNSECuGl 1cOjqf9xCukklXgX8hqQQwiAccLLz9/4+xFkAmxGz5FBsjWcyF83qkRQK/Jo2GCc GvCk/v7YUFfVAb+7w4j7VokqvONhuqzc7tpWOGdgoIXx5pXFi9Owd/4z4wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFCi6cXM4gCByMUEhGKXf6Oj7zOLxMB8GA1UdIwQY MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt ZGY3OTNhOTQwYmFiLzEvS0xweGN6aUFJSEl4UVNFWXBkX282UHZNNHZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBLh3sAwQA Lh3vAwQAVZ/iMAwDBABVn+UDBABVn+YwDQYJKoZIhvcNAQELBQADggEBAKY8xcWi rhhdaJE1simiM62w5sIl9gHNo0jJjIXgZJBQ9eIEWFBNLRAAv55cP6z5MY5OaK3E lkbS8EqV0RCS1eWABTONfvSAWP7seILL8P6lvw4Zi8akKOCYZrkEUXmxiFzqH8Uf FpcpXp3TAsfhy8ISRVpn74K88G0/G2atQosgrUnkHPjMszN1KUH5u4zIkrjen9fR R+W3mF619CfoqbvxwlwX6KXZF6DGLezELhVzpKBiThhqFRQvwQkXkv4sOwIxJ7kX rR6Aaq6MfmFvA7LYQF9P/HPqxKkwTt6au6bFA3BlUVV8o8eoe+FFB0/jDJi5WqRe vPZ2ujnEe3gJm3Y= -----END CERTIFICATE-----Generated at Fri Jan 9 12:06:14 2026 by rpki-client