This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/K2NfFx3TkrXQP8nQwasIAH5qXuk.roa File: K2NfFx3TkrXQP8nQwasIAH5qXuk.roa (raw, json) Hash identifier: eOpjTh0ebYyTZWv6iqBeMtDuPL0eSZ5JWmYsy8J7I/A= Subject key identifier: 2B:63:5F:17:1D:D3:92:B5:D0:3F:C9:D0:C1:AB:08:00:7E:6A:5E:E9 Certificate issuer: /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c Certificate serial: 019B7D5B18827D7C18CA03773571274C2B7B Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/K2NfFx3TkrXQP8nQwasIAH5qXuk.roa Signing time: Fri 02 Jan 2026 06:18:00 +0000 ROA not before: Fri 02 Jan 2026 06:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197579 IP address blocks: 91.223.113.0/24 maxlen: 24 185.92.232.0/22 maxlen: 22 2a13:6b40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:18:82:7d:7c:18:ca:03:77:35:71:27:4c:2b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c Validity Not Before: Jan 2 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b635f171dd392b5d03fc9d0c1ab08007e6a5ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:28:dd:9a:a3:27:c2:da:5c:c5:81:6e:5a: d0:dc:62:a5:89:b1:36:f5:2f:d8:cd:8f:7d:4d:e7: 99:a0:3b:c4:48:7e:fc:3d:f1:ac:96:b0:4c:0f:df: b9:db:ce:b5:bc:17:0f:67:f4:da:3e:b7:59:12:4a: f0:28:cb:bc:7c:da:8a:a0:de:39:d9:98:34:3b:1d: de:75:6c:6a:fa:79:6d:cf:f7:f6:8f:53:09:01:b7: 0c:d1:ee:c0:56:07:c7:34:9c:ce:fd:8f:66:93:6d: aa:70:bf:b1:b8:23:c4:e2:23:55:8e:f0:32:85:bf: 03:81:14:e7:fd:63:98:e8:cc:4c:1a:ae:2d:28:30: 90:cc:40:9f:d2:09:bf:66:bc:59:9a:3a:fa:aa:c7: 78:cf:db:61:83:f6:02:35:00:df:c8:7e:d3:57:d5: b7:9f:2f:37:5e:ba:03:ab:68:e2:2e:d9:c5:bc:40: a1:ed:82:7b:4a:41:a8:6e:0b:0c:ba:85:e1:41:af: c4:c6:b4:df:9d:e0:09:a8:f0:a6:39:34:df:a0:08: 76:77:d8:b9:a9:43:11:1d:82:12:10:2d:f1:af:6e: e5:73:0a:39:88:68:ef:79:2b:3c:72:5d:a7:8a:fc: 2f:b0:a3:63:6d:c4:f9:ea:ce:0c:b9:91:aa:98:04: 9c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:63:5F:17:1D:D3:92:B5:D0:3F:C9:D0:C1:AB:08:00:7E:6A:5E:E9 X509v3 Authority Key Identifier: keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/K2NfFx3TkrXQP8nQwasIAH5qXuk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.113.0/24 185.92.232.0/22 IPv6: 2a13:6b40::/29 Signature Algorithm: sha256WithRSAEncryption 06:37:f6:7f:21:01:e5:c1:ed:b0:9c:e3:e3:74:36:59:54:6d: 7a:ad:e8:9f:0d:82:8c:53:97:84:e3:b1:39:73:87:04:6f:b6: ab:f1:20:52:ee:b2:ca:8c:ad:21:ae:5c:dd:85:fe:3f:d2:0c: 22:1a:d0:4d:80:8a:34:c1:64:1c:e5:03:3c:14:96:f5:ad:1c: 52:cc:00:bc:72:c6:bd:d6:60:00:99:33:20:11:78:94:f6:78: bd:26:49:3c:e0:e7:3e:83:a3:b5:b6:74:76:a3:21:70:ba:d5: 9c:59:a1:1b:b5:bb:ab:3a:c9:c8:d5:26:be:d0:0e:2e:44:0b: 92:1a:8a:d9:5b:6c:87:dc:ca:b7:30:dc:e4:e1:b6:37:c9:1e: e7:92:35:fb:1d:8c:8d:00:ad:63:2e:10:50:e0:b5:13:64:38: aa:f2:ca:ba:b2:71:fc:fe:22:a3:0e:d2:5b:09:67:a9:c1:82: 18:0c:ce:02:46:30:42:4e:3d:ec:e2:9e:b5:66:68:88:6c:57: 63:ba:63:12:6b:52:8d:04:2e:b4:52:d8:2a:d3:13:e1:bb:f6: f8:e1:d2:4d:aa:51:92:14:c2:65:b5:2a:5f:2e:65:30:7e:71: c4:bd:d7:3c:fe:91:c0:c1:bf:66:90:ef:99:80:a4:52:bb:c4: a0:58:1d:54 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9WxiCfXwYygN3NXEnTCt7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOTljZTY0YTBmMTYyNGQ3YmIyZDI5NjllNWMxMWFkYmFh NTQ4NWMwHhcNMjYwMTAyMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjYzNWYxNzFkZDM5MmI1ZDAzZmM5ZDBjMWFiMDgwMDdlNmE1ZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT0o3ZqjJ8LaXMWBblrQ3GKlibE2 9S/YzY99TeeZoDvESH78PfGslrBMD9+52861vBcPZ/TaPrdZEkrwKMu8fNqKoN45 2Zg0Ox3edWxq+nltz/f2j1MJAbcM0e7AVgfHNJzO/Y9mk22qcL+xuCPE4iNVjvAy hb8DgRTn/WOY6MxMGq4tKDCQzECf0gm/ZrxZmjr6qsd4z9thg/YCNQDfyH7TV9W3 ny83XroDq2jiLtnFvECh7YJ7SkGobgsMuoXhQa/ExrTfneAJqPCmOTTfoAh2d9i5 qUMRHYISEC3xr27lcwo5iGjveSs8cl2nivwvsKNjbcT56s4MuZGqmASc8QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCtjXxcd05K10D/J0MGrCAB+al7pMB8GA1UdIwQY MBaAFHKZzmSg8WJNe7LSlp5cEa26pUhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jMjBmYmEtNWI2Ny00MzhjLWFiMDAt YzdlYjM0ZTJkY2E2LzEvSzJOZkZ4M1RrclhRUDhuUXdhc0lBSDVxWHVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jMjBmYmEtNWI2Ny00MzhjLWFiMDAtYzdlYjM0ZTJkY2E2 LzEvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW99xAwQC uVzoMA0EAgACMAcDBQMqE2tAMA0GCSqGSIb3DQEBCwUAA4IBAQAGN/Z/IQHlwe2w nOPjdDZZVG16reifDYKMU5eE47E5c4cEb7ar8SBS7rLKjK0hrlzdhf4/0gwiGtBN gIo0wWQc5QM8FJb1rRxSzAC8csa91mAAmTMgEXiU9ni9Jkk84Oc+g6O1tnR2oyFw utWcWaEbtburOsnI1Sa+0A4uRAuSGorZW2yH3Mq3MNzk4bY3yR7nkjX7HYyNAK1j LhBQ4LUTZDiq8sq6snH8/iKjDtJbCWepwYIYDM4CRjBCTj3s4p61ZmiIbFdjumMS a1KNBC60Utgq0xPhu/b44dJNqlGSFMJltSpfLmUwfnHEvdc8/pHAwb9mkO+ZgKRS u8SgWB1U -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:01 2026 by rpki-client