This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/KTh_wFZKz8V5Fp_N5BMzfuwBa2E.roa File: KTh_wFZKz8V5Fp_N5BMzfuwBa2E.roa (raw, json) Hash identifier: Y4+66kr490+tAfYv+Li1KCX6wSQ4d0GvtrjYF/+CHtM= Subject key identifier: 29:38:7F:C0:56:4A:CF:C5:79:16:9F:CD:E4:13:33:7E:EC:01:6B:61 Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc Certificate serial: 019B7A5B267D479A6CB4566CF2776B40681E Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/KTh_wFZKz8V5Fp_N5BMzfuwBa2E.roa Signing time: Thu 01 Jan 2026 16:19:12 +0000 ROA not before: Thu 01 Jan 2026 16:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206550 IP address blocks: 185.182.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:26:7d:47:9a:6c:b4:56:6c:f2:77:6b:40:68:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc Validity Not Before: Jan 1 16:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29387fc0564acfc579169fcde413337eec016b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8c:06:35:c1:43:5c:be:31:f1:e8:aa:33:bd: 6d:17:7e:b3:ff:9e:78:2e:c8:67:c6:73:02:f2:21: c1:4c:82:44:c1:59:6d:5c:97:47:52:f9:f0:45:be: 1e:6b:cc:8e:4c:52:fe:45:62:79:d3:72:07:2d:ec: 75:b4:79:1c:ab:82:e7:86:be:11:59:e5:31:c6:05: 94:16:bd:c0:86:e0:d5:2d:6d:78:77:de:db:17:96: bc:77:1b:f2:cb:09:45:cf:49:bd:b2:d8:93:1c:fa: 75:0d:70:4d:3b:47:8a:8a:83:25:1d:a4:3d:e7:0b: 61:c7:af:5a:1b:d3:a2:a6:56:a0:06:02:a1:9a:f3: 66:c1:7e:ee:31:1e:38:6e:f0:d0:aa:fa:5a:0a:d8: 54:95:bf:ad:cb:4d:be:12:88:20:51:97:5f:06:9a: 80:8b:fe:b9:ab:21:b7:0e:dc:f5:ea:e4:ef:ee:37: 09:86:2b:4b:8f:17:e6:f7:f6:57:8a:45:8d:27:df: c7:4f:43:5b:bf:19:e9:9e:be:44:76:ab:ee:e0:55: 0c:22:d4:a1:53:6e:c5:e0:4d:10:f1:c1:f9:d7:ce: d6:ed:a2:4d:d1:75:60:f5:24:57:c4:63:56:49:2b: 9f:d6:9e:63:7d:ff:66:d8:50:32:85:bd:6f:aa:56: 9c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:38:7F:C0:56:4A:CF:C5:79:16:9F:CD:E4:13:33:7E:EC:01:6B:61 X509v3 Authority Key Identifier: keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/KTh_wFZKz8V5Fp_N5BMzfuwBa2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.112.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:69:83:70:75:73:b3:b7:13:31:30:aa:ba:be:ce:9f:1f:c2: 67:2c:99:09:c5:53:33:ea:3d:4b:21:80:67:a6:e7:41:f8:25: 2e:99:12:c2:e4:58:12:79:80:f7:d4:e7:af:ca:0e:2b:d7:97: 88:ff:8a:b0:47:20:c6:bd:1d:37:51:40:fb:5c:81:f0:fc:8b: 28:b4:7e:78:f6:48:88:19:0e:79:b7:bf:01:57:b6:2d:2b:c2: 18:18:bb:75:08:c6:1c:43:f9:ac:8e:d5:55:e7:1a:4d:02:82: a1:4c:83:7f:d5:28:ec:87:af:03:66:a3:12:e5:9f:47:ed:cb: 42:50:0f:26:b6:3f:a7:26:db:5b:e6:ee:66:10:6c:d1:af:08: f0:c4:bf:64:aa:1c:5b:fc:db:64:84:ca:9e:07:86:54:0d:ba: 19:1b:cf:f9:64:b0:62:fc:3d:da:6f:1b:77:83:40:71:00:16: 4f:02:7e:b2:8f:81:8a:54:f6:f3:44:29:b2:cd:72:72:5c:cf: 5a:56:42:0a:24:40:d1:0c:60:4e:75:49:d9:ae:59:3c:0c:52: 07:4a:f1:d6:32:15:29:4d:c1:1d:61:4c:19:5e:31:7e:f0:07: 39:f2:fa:b9:25:fe:73:99:4e:8b:f3:e3:23:2b:43:6b:e4:1f: 36:c6:3a:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WyZ9R5pstFZs8ndrQGgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYzVlM2NlZjVkYTVlN2ZkZmMzNjRjNWQ1YTA0MDJkM2E2 Nzg2ZGMwHhcNMjYwMTAxMTYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTM4N2ZjMDU2NGFjZmM1NzkxNjlmY2RlNDEzMzM3ZWVjMDE2YjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4wGNcFDXL4x8eiqM71tF36z/554 LshnxnMC8iHBTIJEwVltXJdHUvnwRb4ea8yOTFL+RWJ503IHLex1tHkcq4Lnhr4R WeUxxgWUFr3AhuDVLW14d97bF5a8dxvyywlFz0m9stiTHPp1DXBNO0eKioMlHaQ9 5wthx69aG9OiplagBgKhmvNmwX7uMR44bvDQqvpaCthUlb+ty02+EoggUZdfBpqA i/65qyG3Dtz16uTv7jcJhitLjxfm9/ZXikWNJ9/HT0Nbvxnpnr5Edqvu4FUMItSh U27F4E0Q8cH5187W7aJN0XVg9SRXxGNWSSuf1p5jff9m2FAyhb1vqlachQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCk4f8BWSs/FeRafzeQTM37sAWthMB8GA1UdIwQY MBaAFG3F48712l5/38NkxdWgQC06Z4bcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYt Y2RjYzk2NjA3YjlhLzEvS1RoX3dGWkt6OFY1RnBfTjVCTXpmdXdCYTJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYtY2RjYzk2NjA3Yjlh LzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubZwMA0G CSqGSIb3DQEBCwUAA4IBAQAPaYNwdXOztxMxMKq6vs6fH8JnLJkJxVMz6j1LIYBn pudB+CUumRLC5FgSeYD31Oevyg4r15eI/4qwRyDGvR03UUD7XIHw/IsotH549kiI GQ55t78BV7YtK8IYGLt1CMYcQ/msjtVV5xpNAoKhTIN/1Sjsh68DZqMS5Z9H7ctC UA8mtj+nJttb5u5mEGzRrwjwxL9kqhxb/NtkhMqeB4ZUDboZG8/5ZLBi/D3abxt3 g0BxABZPAn6yj4GKVPbzRCmyzXJyXM9aVkIKJEDRDGBOdUnZrlk8DFIHSvHWMhUp TcEdYUwZXjF+8Ac58vq5Jf5zmU6L8+MjK0Nr5B82xjoG -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:16 2026 by rpki-client