This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/KTSZoqFeca-_Q6n1KMEhLLL8dWA.roa File: KTSZoqFeca-_Q6n1KMEhLLL8dWA.roa (raw, json) Hash identifier: o1/RiBn3II/bJglE4RL5UD9dzxw8QVEjbH+MNAs/ja0= Subject key identifier: 29:34:99:A2:A1:5E:71:AF:BF:43:A9:F5:28:C1:21:2C:B2:FC:75:60 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15C232DBE97F2A12EBA6BD3DBCA7EB Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/KTSZoqFeca-_Q6n1KMEhLLL8dWA.roa Signing time: Fri 02 Jan 2026 14:21:30 +0000 ROA not before: Fri 02 Jan 2026 14:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48266 IP address blocks: 45.67.200.0/24 maxlen: 24 45.67.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c2:32:db:e9:7f:2a:12:eb:a6:bd:3d:bc:a7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=293499a2a15e71afbf43a9f528c1212cb2fc7560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:95:d7:bd:81:7a:da:fc:52:c5:f3:2f:34: f5:9f:44:e9:4f:f6:94:d6:c8:60:56:2f:05:f0:a4: 4c:be:63:94:a9:5e:33:45:40:03:a2:d7:ab:7a:2c: a3:35:1a:47:cc:44:c5:6c:76:a3:ce:e5:ed:0a:94: 99:51:c0:f1:45:b3:e3:52:31:b5:76:d7:92:7b:e7: bb:b7:c3:da:dc:c7:2a:d9:38:0d:e7:b2:e9:84:d6: 6d:a8:31:f1:78:0f:14:ec:9b:25:67:10:54:ed:ce: a8:34:3a:97:6c:cd:c4:90:36:9c:5b:7b:c6:3a:7a: 07:b6:da:f2:90:5a:97:73:fe:fe:11:57:87:0d:de: 0f:70:f7:7d:92:a1:57:5d:9b:87:65:c1:d5:46:71: 87:d9:f3:1d:a2:f5:93:43:35:b1:d9:17:c9:09:b6: b4:1f:22:0f:29:a2:a0:81:e0:51:5d:06:05:53:88: 4f:5b:77:5f:75:48:cf:f3:4a:0c:62:3a:58:9d:79: 98:7f:2b:5d:43:6d:2d:f5:47:6b:3f:a3:d7:2c:86: 3f:45:f4:5c:75:1e:52:e6:d1:83:4e:e2:fe:b5:12: 66:dc:81:93:e7:ac:e6:ba:41:29:f8:24:8e:77:76: f5:d6:d8:35:8b:d4:6d:45:3e:11:6e:3d:b5:1f:e4: 12:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:34:99:A2:A1:5E:71:AF:BF:43:A9:F5:28:C1:21:2C:B2:FC:75:60 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/KTSZoqFeca-_Q6n1KMEhLLL8dWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.200.0/23 Signature Algorithm: sha256WithRSAEncryption 40:58:e8:9a:f3:f0:2a:2b:a6:3f:08:b0:15:54:24:f8:37:1c: 07:53:a4:e8:43:fe:6e:10:06:9a:b9:a9:c4:ae:f9:4a:2b:8c: 04:f0:a7:69:f8:3c:6c:1e:e6:3c:78:4e:6a:f0:34:87:07:aa: d4:af:8c:6d:94:e6:0f:1a:e7:1f:9d:26:ea:79:17:87:85:19: ed:bf:a4:df:2d:c2:39:e8:68:88:32:f8:83:5d:86:3c:a5:17: 8e:da:f9:8c:b2:2f:5a:82:d5:dc:a4:94:c4:27:cb:1e:fa:0b: cf:18:35:cb:33:f8:95:00:43:b2:57:89:74:7b:d6:d2:4d:7f: 54:8c:1a:25:ec:93:0a:c7:a3:cc:47:73:c8:a4:67:9d:99:44: 33:f4:03:c0:ed:64:b1:95:05:d5:3b:b4:eb:65:4f:46:91:3a: 38:fa:72:b8:82:bb:8d:d1:7a:2d:24:58:75:92:9b:ff:5e:c5: e0:b7:b5:4a:72:f7:34:8b:68:e2:1a:1e:7e:09:db:94:1a:03: d8:33:65:8f:7f:40:1a:90:02:c7:40:9d:20:24:27:e5:4c:04: 5b:90:d7:4d:52:c9:04:a2:04:13:f7:5d:f1:69:29:8e:91:5c: aa:22:19:9b:2f:78:e2:0f:a6:a8:12:9e:a6:f7:5d:3f:72:c6: 0f:75:90:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FcIy2+l/KhLrpr09vKfrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTM0OTlhMmExNWU3MWFmYmY0M2E5ZjUyOGMxMjEyY2IyZmM3NTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxCV172Betr8UsXzLzT1n0TpT/aU 1shgVi8F8KRMvmOUqV4zRUADotereiyjNRpHzETFbHajzuXtCpSZUcDxRbPjUjG1 dteSe+e7t8Pa3Mcq2TgN57LphNZtqDHxeA8U7JslZxBU7c6oNDqXbM3EkDacW3vG OnoHttrykFqXc/7+EVeHDd4PcPd9kqFXXZuHZcHVRnGH2fMdovWTQzWx2RfJCba0 HyIPKaKggeBRXQYFU4hPW3dfdUjP80oMYjpYnXmYfytdQ20t9UdrP6PXLIY/RfRc dR5S5tGDTuL+tRJm3IGT56zmukEp+CSOd3b11tg1i9RtRT4Rbj21H+QSmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCk0maKhXnGvv0Op9SjBISyy/HVgMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvS1RTWm9xRmVjYS1fUTZuMUtNRWhMTEw4ZFdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLUPIMA0G CSqGSIb3DQEBCwUAA4IBAQBAWOia8/AqK6Y/CLAVVCT4NxwHU6ToQ/5uEAaauanE rvlKK4wE8Kdp+DxsHuY8eE5q8DSHB6rUr4xtlOYPGucfnSbqeReHhRntv6TfLcI5 6GiIMviDXYY8pReO2vmMsi9agtXcpJTEJ8se+gvPGDXLM/iVAEOyV4l0e9bSTX9U jBol7JMKx6PMR3PIpGedmUQz9APA7WSxlQXVO7TrZU9GkTo4+nK4gruN0XotJFh1 kpv/XsXgt7VKcvc0i2jiGh5+CduUGgPYM2WPf0AakALHQJ0gJCflTARbkNdNUskE ogQT913xaSmOkVyqIhmbL3jiD6aoEp6m910/csYPdZCP -----END CERTIFICATE-----Generated at Wed Jan 21 04:21:31 2026 by rpki-client