This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/KtALyLnHRKmm87bS3JvTnlV8ZAE.roa File: KtALyLnHRKmm87bS3JvTnlV8ZAE.roa (raw, json) Hash identifier: MY4OIysOaUWwaGs4B25MD7heUIjqEkCjZhNgceNf2ak= Subject key identifier: 2A:D0:0B:C8:B9:C7:44:A9:A6:F3:B6:D2:DC:9B:D3:9E:55:7C:64:01 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E3044CA6093F7557B4EDF3CC68B95 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/KtALyLnHRKmm87bS3JvTnlV8ZAE.roa Signing time: Thu 01 Jan 2026 12:17:51 +0000 ROA not before: Thu 01 Jan 2026 12:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60945 IP address blocks: 45.85.194.0/24 maxlen: 24 185.133.73.0/24 maxlen: 24 194.156.159.0/24 maxlen: 32 2a06:7a03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:30:44:ca:60:93:f7:55:7b:4e:df:3c:c6:8b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ad00bc8b9c744a9a6f3b6d2dc9bd39e557c6401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:b6:22:e1:df:50:a6:dc:87:c2:73:9e:fb: f0:10:a2:89:ef:63:ae:e4:be:e2:a9:35:7d:6c:8e: 88:53:64:ec:a9:5c:3d:9b:ff:31:07:11:f2:42:a5: 44:a8:40:ee:d0:d5:b8:1e:a8:88:7e:fb:aa:70:a8: 25:90:be:15:84:76:43:5d:a4:2d:df:16:0c:55:c2: 4f:3b:c8:2d:25:2a:84:28:c5:db:f0:05:7c:77:38: 56:5c:e4:d7:09:df:c9:2f:dc:84:1a:fd:08:ae:b6: f9:86:24:e2:13:0e:b3:6e:cf:f6:7a:a3:56:7b:b5: ea:4c:76:bb:fc:2e:5c:f6:44:b0:84:7f:6b:f9:2d: f7:66:3b:14:50:70:fd:4b:24:a3:e3:f5:6b:90:43: 13:08:bc:c6:c8:06:6d:78:79:01:f3:9d:b2:fc:9d: 71:58:4a:59:37:76:2d:aa:27:e4:8a:0b:c9:57:23: 75:93:c4:ac:cf:67:5a:5f:fb:31:26:46:ae:cc:e2: 5e:0d:29:88:f4:7b:ca:4c:e2:e1:55:93:34:9d:94: e5:14:b5:ce:1b:65:71:07:ca:2b:af:2e:47:86:70: bb:d5:c0:7f:dc:7f:4d:71:c7:41:ac:6d:6a:45:35: 41:86:b0:3c:44:2b:0e:40:1f:52:25:ff:d9:83:bf: de:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D0:0B:C8:B9:C7:44:A9:A6:F3:B6:D2:DC:9B:D3:9E:55:7C:64:01 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/KtALyLnHRKmm87bS3JvTnlV8ZAE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.194.0/24 185.133.73.0/24 194.156.159.0/24 IPv6: 2a06:7a03::/48 Signature Algorithm: sha256WithRSAEncryption 62:8c:47:dd:ab:dd:03:75:e9:1a:2a:1c:ef:ba:54:5c:0e:5e: 1d:27:53:28:9f:e3:95:86:b0:80:17:ba:b0:70:1f:7f:ea:44: 97:3c:10:59:86:f8:b8:91:1b:33:1c:d9:b3:df:90:bf:70:10: b5:df:cc:9d:04:ae:45:77:3c:67:d9:61:ab:41:aa:37:ad:66: 13:6d:76:e2:64:0d:2f:65:96:4f:8c:e5:b4:08:10:f1:d0:dc: 07:3a:7a:9c:6d:6b:5c:c7:3b:c0:25:ae:01:f8:3d:be:3a:0f: 19:df:be:a7:b8:09:95:78:3d:63:c2:8c:c9:6f:84:07:25:77: 3d:ce:8f:8e:dd:0a:55:c0:a1:55:39:28:ea:d6:2c:00:e3:13: 5b:b6:00:1a:f7:f2:86:79:36:7f:f5:c1:39:e8:86:8f:91:fe: 21:49:f4:c7:ac:18:20:18:e9:91:5f:7a:a4:dd:12:f8:0c:c4: ba:36:22:24:8d:d4:3b:d0:97:54:cb:38:a3:ce:78:8e:7a:5b: c6:b2:33:1d:ae:8b:d0:a4:58:f4:f3:e8:a2:04:87:eb:fd:86: 06:b3:4e:0a:c2:a5:33:4f:61:17:12:b7:38:5b:01:66:4a:49: 6f:da:52:ee:17:02:e3:2e:35:86:a1:b7:88:33:32:5a:1a:1e: 95:ed:05:f0 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt5fjBEymCT91V7Tt88xouVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWQwMGJjOGI5Yzc0NGE5YTZmM2I2ZDJkYzliZDM5ZTU1N2M2NDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbu2IuHfUKbch8JznvvwEKKJ72Ou 5L7iqTV9bI6IU2TsqVw9m/8xBxHyQqVEqEDu0NW4HqiIfvuqcKglkL4VhHZDXaQt 3xYMVcJPO8gtJSqEKMXb8AV8dzhWXOTXCd/JL9yEGv0Irrb5hiTiEw6zbs/2eqNW e7XqTHa7/C5c9kSwhH9r+S33ZjsUUHD9SySj4/VrkEMTCLzGyAZteHkB852y/J1x WEpZN3YtqifkigvJVyN1k8Ssz2daX/sxJkauzOJeDSmI9HvKTOLhVZM0nZTlFLXO G2VxB8orry5HhnC71cB/3H9NccdBrG1qRTVBhrA8RCsOQB9SJf/Zg7/e7wIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFCrQC8i5x0SppvO20tyb055VfGQBMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvS3RBTHlMbkhSS21tODdiUzNKdlRubFY4WkFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQALVXCAwQA uYVJAwQAwpyfMA8EAgACMAkDBwAqBnoDAAAwDQYJKoZIhvcNAQELBQADggEBAGKM R92r3QN16RoqHO+6VFwOXh0nUyif45WGsIAXurBwH3/qRJc8EFmG+LiRGzMc2bPf kL9wELXfzJ0ErkV3PGfZYatBqjetZhNtduJkDS9llk+M5bQIEPHQ3Ac6epxta1zH O8AlrgH4Pb46Dxnfvqe4CZV4PWPCjMlvhAcldz3Oj47dClXAoVU5KOrWLADjE1u2 ABr38oZ5Nn/1wTnoho+R/iFJ9MesGCAY6ZFfeqTdEvgMxLo2IiSN1DvQl1TLOKPO eI56W8ayMx2ui9CkWPTz6KIEh+v9hgazTgrCpTNPYRcStzhbAWZKSW/aUu4XAuMu NYaht4gzMloaHpXtBfA= -----END CERTIFICATE-----Generated at Mon Jan 19 20:26:03 2026 by rpki-client