This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/KryCaxT64_DbJj9jN-VGjBxwrAo.roa File: KryCaxT64_DbJj9jN-VGjBxwrAo.roa (raw, json) Hash identifier: Tm0gGiIBbT70VOlPTXJPfE+loxLa156dIkZIGPLoeOg= Subject key identifier: 2A:BC:82:6B:14:FA:E3:F0:DB:26:3F:63:37:E5:46:8C:1C:70:AC:0A Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d Certificate serial: 019B7EA6C51D77B9741A6B200A40A1BB2D14 Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/KryCaxT64_DbJj9jN-VGjBxwrAo.roa Signing time: Fri 02 Jan 2026 12:20:17 +0000 ROA not before: Fri 02 Jan 2026 12:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21246 IP address blocks: 46.99.0.0/16 maxlen: 16 46.99.0.0/18 maxlen: 18 46.99.32.0/19 maxlen: 19 46.99.64.0/18 maxlen: 18 46.99.64.0/19 maxlen: 19 46.99.128.0/24 maxlen: 24 46.99.129.0/24 maxlen: 24 46.99.130.0/24 maxlen: 24 46.99.131.0/24 maxlen: 24 46.99.132.0/24 maxlen: 24 46.99.133.0/24 maxlen: 24 46.99.134.0/24 maxlen: 24 46.99.135.0/24 maxlen: 24 46.99.136.0/24 maxlen: 24 46.99.137.0/24 maxlen: 24 46.99.138.0/24 maxlen: 24 46.99.139.0/24 maxlen: 24 46.99.140.0/24 maxlen: 24 46.99.141.0/24 maxlen: 24 46.99.142.0/24 maxlen: 24 46.99.143.0/24 maxlen: 24 46.99.144.0/24 maxlen: 24 46.99.145.0/24 maxlen: 24 46.99.146.0/24 maxlen: 24 46.99.147.0/24 maxlen: 24 46.99.148.0/24 maxlen: 24 46.99.149.0/24 maxlen: 24 46.99.150.0/24 maxlen: 24 46.99.151.0/24 maxlen: 24 46.99.152.0/22 maxlen: 22 46.99.156.0/23 maxlen: 23 46.99.158.0/24 maxlen: 24 46.99.159.0/24 maxlen: 24 46.99.160.0/24 maxlen: 24 46.99.161.0/24 maxlen: 24 46.99.162.0/24 maxlen: 24 46.99.163.0/24 maxlen: 24 46.99.164.0/24 maxlen: 24 46.99.165.0/24 maxlen: 24 46.99.166.0/24 maxlen: 24 46.99.167.0/24 maxlen: 24 46.99.168.0/24 maxlen: 24 46.99.169.0/24 maxlen: 24 46.99.170.0/24 maxlen: 24 46.99.171.0/24 maxlen: 24 46.99.173.0/24 maxlen: 24 46.99.174.0/24 maxlen: 24 46.99.175.0/24 maxlen: 24 46.99.176.0/24 maxlen: 24 46.99.177.0/24 maxlen: 24 46.99.178.0/24 maxlen: 24 46.99.179.0/24 maxlen: 24 46.99.180.0/24 maxlen: 24 46.99.181.0/24 maxlen: 24 46.99.182.0/24 maxlen: 24 46.99.183.0/24 maxlen: 24 46.99.184.0/24 maxlen: 24 46.99.185.0/24 maxlen: 24 46.99.186.0/24 maxlen: 24 46.99.187.0/24 maxlen: 24 46.99.188.0/24 maxlen: 24 46.99.189.0/24 maxlen: 24 46.99.190.0/24 maxlen: 24 46.99.192.0/24 maxlen: 24 46.99.196.0/24 maxlen: 24 46.99.199.0/24 maxlen: 24 46.99.202.0/23 maxlen: 23 46.99.202.0/24 maxlen: 24 46.99.203.0/24 maxlen: 24 46.99.224.0/20 maxlen: 20 46.99.239.0/24 maxlen: 24 46.99.249.0/24 maxlen: 24 46.99.250.0/24 maxlen: 24 46.99.251.0/24 maxlen: 24 46.99.252.0/23 maxlen: 23 46.99.254.0/23 maxlen: 23 80.80.160.0/20 maxlen: 20 80.80.160.0/24 maxlen: 24 80.80.161.0/24 maxlen: 24 80.80.162.0/24 maxlen: 24 80.80.163.0/24 maxlen: 24 80.80.164.0/23 maxlen: 23 80.80.166.0/24 maxlen: 24 80.80.167.0/24 maxlen: 24 80.80.168.0/24 maxlen: 24 80.80.169.0/24 maxlen: 24 80.80.170.0/24 maxlen: 24 80.80.171.0/24 maxlen: 24 80.80.172.0/24 maxlen: 24 80.80.173.0/24 maxlen: 24 80.80.174.0/24 maxlen: 24 80.80.175.0/24 maxlen: 24 91.187.96.0/19 maxlen: 19 91.187.96.0/24 maxlen: 24 91.187.97.0/24 maxlen: 24 91.187.98.0/24 maxlen: 24 91.187.99.0/24 maxlen: 24 91.187.100.0/24 maxlen: 24 91.187.101.0/24 maxlen: 24 91.187.102.0/24 maxlen: 24 91.187.103.0/24 maxlen: 24 91.187.104.0/23 maxlen: 23 91.187.104.0/24 maxlen: 24 91.187.106.0/24 maxlen: 24 91.187.107.0/24 maxlen: 24 91.187.108.0/24 maxlen: 24 91.187.109.0/24 maxlen: 24 91.187.110.0/24 maxlen: 24 91.187.111.0/24 maxlen: 24 91.187.112.0/24 maxlen: 24 91.187.113.0/24 maxlen: 24 91.187.114.0/24 maxlen: 24 91.187.115.0/24 maxlen: 24 91.187.116.0/24 maxlen: 24 91.187.117.0/24 maxlen: 24 91.187.118.0/24 maxlen: 24 91.187.119.0/24 maxlen: 24 91.187.120.0/24 maxlen: 24 91.187.121.0/24 maxlen: 24 91.187.122.0/24 maxlen: 24 91.187.123.0/24 maxlen: 24 91.187.124.0/24 maxlen: 24 91.187.125.0/24 maxlen: 24 91.187.126.0/24 maxlen: 24 91.187.127.0/24 maxlen: 24 185.78.224.0/22 maxlen: 22 2a03:4b80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c5:1d:77:b9:74:1a:6b:20:0a:40:a1:bb:2d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d Validity Not Before: Jan 2 12:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2abc826b14fae3f0db263f6337e5468c1c70ac0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:45:1e:94:74:d2:d4:fa:c9:2b:65:25:af: 9f:80:e7:8a:89:6d:f5:aa:d1:91:0a:e7:ba:23:3b: 0a:f6:00:c3:99:99:0c:cb:f3:68:5c:29:b2:9e:68: 09:57:79:b4:19:71:80:45:f5:9f:da:62:dc:8f:e0: 8d:e4:4f:b2:47:00:23:ea:cc:9b:39:ca:6a:5f:43: 81:10:1d:6f:e3:ed:31:73:51:23:82:e4:b9:86:35: 91:04:1b:4c:0c:1e:11:d8:c4:d4:a0:2d:de:d0:e9: 49:14:94:4c:85:15:3e:2d:45:e8:41:66:33:b5:6e: 0b:c2:c8:ab:c3:82:63:2a:73:a7:5b:ec:d3:1e:1b: cb:e4:a2:a7:b0:de:fe:33:1a:f9:66:04:a9:ec:26: b4:b0:5a:ef:77:4c:10:a0:a4:09:be:c8:13:91:f3: 2a:4b:a2:ad:50:64:4b:b6:74:91:8a:d9:3c:8c:83: a4:55:0c:37:af:1b:ee:44:b6:5d:1f:f3:b8:cb:73: 9c:fe:3e:1c:71:fa:60:c5:80:6f:61:13:18:e2:64: 98:e8:07:c0:27:88:1c:d4:5f:07:b2:9f:84:ed:83: 43:85:89:ad:e4:d6:42:e6:27:22:3e:ca:1f:a7:bc: 64:44:7c:fa:c8:c0:c3:09:de:65:eb:ce:0f:89:a9: 06:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BC:82:6B:14:FA:E3:F0:DB:26:3F:63:37:E5:46:8C:1C:70:AC:0A X509v3 Authority Key Identifier: keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/KryCaxT64_DbJj9jN-VGjBxwrAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.99.0.0/16 80.80.160.0/20 91.187.96.0/19 185.78.224.0/22 IPv6: 2a03:4b80::/32 Signature Algorithm: sha256WithRSAEncryption 3d:b7:c8:0e:e1:09:00:87:93:32:6c:18:81:c9:34:08:cf:08: db:81:70:73:05:f5:c9:36:5e:b1:e5:ca:9e:72:a8:43:da:9d: ca:e3:dc:07:a8:76:04:94:de:5b:60:39:60:4c:a4:ec:89:4c: 32:57:6f:89:ac:22:66:78:9a:0d:3d:3f:4e:1a:db:8c:e5:90: be:11:74:84:de:17:25:27:01:52:ee:dc:31:46:9f:c2:db:c7: 10:6c:a6:aa:e6:6b:fa:af:d3:e6:7d:96:ee:c6:87:79:c6:5f: c0:47:e8:0f:f7:c8:a1:3e:13:98:e6:9d:b3:e2:df:54:c1:bc: e6:8f:f1:ff:74:68:3d:67:b6:83:f8:33:6a:f4:db:a5:a2:c8: b6:80:5d:bd:88:07:95:47:66:f6:f4:5b:72:ce:b7:3f:f8:c4: ae:99:1b:a4:7b:f3:37:c3:3d:a3:d1:95:6c:e2:8e:40:93:0d: 01:3e:c8:3d:c3:d5:dd:7e:5a:3d:db:46:5a:4d:e6:03:24:b8: b3:d2:ac:d2:52:bd:6d:f0:ca:4e:ee:2b:cb:04:3a:74:2d:42: d7:10:20:b5:70:a3:bc:03:22:90:36:20:2c:1b:3a:91:ec:f3: ce:c1:74:c0:b5:98:fb:01:81:54:61:dc:07:3f:b0:5a:1e:ed: 56:2f:8e:88 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt+psUdd7l0GmsgCkChuy0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDFjNWJjMDkxNWEyZjdjYjE2NWIwYjdkNzEzMjEyZmE1 NzMzMmQwHhcNMjYwMTAyMTIyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWJjODI2YjE0ZmFlM2YwZGIyNjNmNjMzN2U1NDY4YzFjNzBhYzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy79FHpR00tT6yStlJa+fgOeKiW31 qtGRCue6IzsK9gDDmZkMy/NoXCmynmgJV3m0GXGARfWf2mLcj+CN5E+yRwAj6syb OcpqX0OBEB1v4+0xc1EjguS5hjWRBBtMDB4R2MTUoC3e0OlJFJRMhRU+LUXoQWYz tW4Lwsirw4JjKnOnW+zTHhvL5KKnsN7+Mxr5ZgSp7Ca0sFrvd0wQoKQJvsgTkfMq S6KtUGRLtnSRitk8jIOkVQw3rxvuRLZdH/O4y3Oc/j4ccfpgxYBvYRMY4mSY6AfA J4gc1F8Hsp+E7YNDhYmt5NZC5iciPsofp7xkRHz6yMDDCd5l684PiakGkwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFCq8gmsU+uPw2yY/YzflRowccKwKMB8GA1UdIwQY MBaAFMEBxbwJFaL3yxZbC31xMhL6VzMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jZmNkZTAtOWFhMy00YzJkLWI4Zjct OTI4ZDkxNzkxOTA3LzEvS3J5Q2F4VDY0X0RiSmo5ak4tVkdqQnh3ckFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jZmNkZTAtOWFhMy00YzJkLWI4ZjctOTI4ZDkxNzkxOTA3 LzEvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwMALmMDBARQ UKADBAVbu2ADBAK5TuAwDQQCAAIwBwMFACoDS4AwDQYJKoZIhvcNAQELBQADggEB AD23yA7hCQCHkzJsGIHJNAjPCNuBcHMF9ck2XrHlyp5yqEPancrj3AeodgSU3ltg OWBMpOyJTDJXb4msImZ4mg09P04a24zlkL4RdITeFyUnAVLu3DFGn8LbxxBspqrm a/qv0+Z9lu7Gh3nGX8BH6A/3yKE+E5jmnbPi31TBvOaP8f90aD1ntoP4M2r026Wi yLaAXb2IB5VHZvb0W3LOtz/4xK6ZG6R78zfDPaPRlWzijkCTDQE+yD3D1d1+Wj3b RlpN5gMkuLPSrNJSvW3wyk7uK8sEOnQtQtcQILVwo7wDIpA2ICwbOpHs887BdMC1 mPsBgVRh3Ac/sFoe7VYvjog= -----END CERTIFICATE-----Generated at Tue Feb 10 01:03:10 2026 by rpki-client