This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/ko-Q7LLvFsw5WF05orPV8WuNqes.roa File: ko-Q7LLvFsw5WF05orPV8WuNqes.roa (raw, json) Hash identifier: oTLm+1SrVPlHWBf3GeVb9tQ4axZ9crvJ02hBJG+8zeM= Subject key identifier: 92:8F:90:EC:B2:EF:16:CC:39:58:5D:39:A2:B3:D5:F1:6B:8D:A9:EB Certificate issuer: /CN=e1584910124af776e30e5acf055d6bae1761a536 Certificate serial: 019B79EC5621B0D7E9DFA656499A93F7DD8D Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/ko-Q7LLvFsw5WF05orPV8WuNqes.roa Signing time: Thu 01 Jan 2026 14:18:10 +0000 ROA not before: Thu 01 Jan 2026 14:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 95.128.158.0/24 maxlen: 24 2a13:3c0:4::/46 maxlen: 46 2a13:3c0:8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:56:21:b0:d7:e9:df:a6:56:49:9a:93:f7:dd:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536 Validity Not Before: Jan 1 14:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=928f90ecb2ef16cc39585d39a2b3d5f16b8da9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:ed:ec:86:ce:e5:02:7a:18:9b:4e:28:5b: d6:b0:a8:b1:67:ee:04:5e:27:7f:7c:de:18:25:9e: 91:1d:bc:fd:d9:9f:3b:ae:2f:43:61:4e:28:98:64: 8d:6d:e7:01:ad:ee:8e:96:03:f6:12:76:1c:c3:65: 9f:9c:d7:aa:84:9a:9c:a7:76:bc:5d:ba:48:4e:c5: 2e:2c:08:70:b4:46:78:91:a8:17:e3:30:5d:76:a7: 97:af:d2:2c:a8:b7:ce:cc:39:68:8b:42:fc:1b:68: 7a:ca:12:b6:6b:ab:fd:9b:3f:62:a0:9e:97:12:68: a1:f8:50:20:a4:e1:e5:dd:3e:0e:a6:89:27:a0:67: d0:11:01:c5:5b:22:08:3c:fb:ca:21:a8:c5:c8:3d: 37:47:3e:1f:67:6e:b8:51:c4:91:1c:33:70:92:b0: f6:fa:e1:8b:a8:f5:9b:5a:aa:e3:5e:0c:c6:71:15: ec:2b:6c:d5:72:70:72:3e:e9:48:f3:55:55:f9:d9: 0f:37:4d:5d:17:c8:50:26:7c:e0:b3:02:ed:5b:b6: ef:6b:9c:36:b1:7a:d8:79:8e:6e:8a:c6:07:c1:ad: da:1a:ad:89:e4:60:f5:6a:25:18:fb:86:95:22:e6: 78:40:4d:25:58:5e:1f:64:4e:7a:d7:98:65:59:3e: 38:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8F:90:EC:B2:EF:16:CC:39:58:5D:39:A2:B3:D5:F1:6B:8D:A9:EB X509v3 Authority Key Identifier: keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/ko-Q7LLvFsw5WF05orPV8WuNqes.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.158.0/24 IPv6: 2a13:3c0:4::-2a13:3c0:b:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 60:20:29:72:89:b5:ae:7d:0b:44:4a:e1:95:49:82:04:f9:c7: 7f:3d:77:a9:29:46:94:aa:55:d1:95:e4:d0:e4:28:01:a6:20: f9:d0:dc:85:44:68:38:f7:e5:9b:9c:90:12:1c:bf:d7:e7:fe: 60:dd:b5:75:dd:e9:40:13:54:d4:db:bb:7f:11:b8:61:cb:e4: da:cf:f1:81:2a:07:20:63:64:9d:a9:6c:53:47:22:df:a1:b7: 50:c4:77:01:06:b9:c2:7f:f4:9b:48:24:67:4f:17:ec:c5:03: a9:0f:06:85:db:1d:5d:47:ca:80:2f:15:08:3d:70:b1:cf:6f: 8e:09:e3:38:57:74:62:8d:c3:a6:0c:e4:6c:e3:bd:ed:48:fa: d5:3e:a2:4a:65:3d:8f:81:15:d6:5c:7f:26:c4:00:a9:27:10: cd:56:7d:42:e1:86:07:12:4b:80:bb:9f:b1:05:c5:15:b7:e5: 88:3d:9f:a5:ab:66:8c:b0:b3:7c:39:25:60:3e:9e:b1:6a:a2: 71:4f:b5:e6:e8:61:e8:f0:5c:49:0f:63:87:19:ed:b6:55:66: 2b:c3:cf:50:cd:30:a2:05:2d:b7:f9:9f:6a:a0:43:40:1a:91: 59:f2:47:30:e7:20:fa:7e:f5:9c:eb:e1:12:fd:84:fd:ea:a1: c7:2e:c0:76 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt57FYhsNfp36ZWSZqT992NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTg0OTEwMTI0YWY3NzZlMzBlNWFjZjA1NWQ2YmFlMTc2 MWE1MzYwHhcNMjYwMTAxMTQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjhmOTBlY2IyZWYxNmNjMzk1ODVkMzlhMmIzZDVmMTZiOGRhOWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiDt7IbO5QJ6GJtOKFvWsKixZ+4E Xid/fN4YJZ6RHbz92Z87ri9DYU4omGSNbecBre6OlgP2EnYcw2WfnNeqhJqcp3a8 XbpITsUuLAhwtEZ4kagX4zBddqeXr9IsqLfOzDloi0L8G2h6yhK2a6v9mz9ioJ6X Emih+FAgpOHl3T4OpoknoGfQEQHFWyIIPPvKIajFyD03Rz4fZ264UcSRHDNwkrD2 +uGLqPWbWqrjXgzGcRXsK2zVcnByPulI81VV+dkPN01dF8hQJnzgswLtW7bva5w2 sXrYeY5uisYHwa3aGq2J5GD1aiUY+4aVIuZ4QE0lWF4fZE5615hlWT44PwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJKPkOyy7xbMOVhdOaKz1fFrjanrMB8GA1UdIwQY MBaAFOFYSRASSvd24w5azwVda64XYaU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZoSkVCSks5M2JqRGxyUEJWMXJyaGRocFRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MjE1ZTAtOWFiOC00YTEzLWE2MDUt MzFhYjMyZmY3YzY4LzEva28tUTdMTHZGc3c1V0YwNW9yUFY4V3VOcWVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83MjE1ZTAtOWFiOC00YTEzLWE2MDUtMzFhYjMyZmY3YzY4 LzEvNFZoSkVCSks5M2JqRGxyUEJWMXJyaGRocFRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAX4CeMBoE AgACMBQwEgMHAioTA8AABAMHAioTA8AACDANBgkqhkiG9w0BAQsFAAOCAQEAYCAp com1rn0LRErhlUmCBPnHfz13qSlGlKpV0ZXk0OQoAaYg+dDchURoOPflm5yQEhy/ 1+f+YN21dd3pQBNU1Nu7fxG4Ycvk2s/xgSoHIGNknalsU0ci36G3UMR3AQa5wn/0 m0gkZ08X7MUDqQ8GhdsdXUfKgC8VCD1wsc9vjgnjOFd0Yo3DpgzkbOO97Uj61T6i SmU9j4EV1lx/JsQAqScQzVZ9QuGGBxJLgLufsQXFFbfliD2fpatmjLCzfDklYD6e sWqicU+15uhh6PBcSQ9jhxnttlVmK8PPUM0wogUtt/mfaqBDQBqRWfJHMOcg+n71 nOvhEv2E/eqhxy7Adg== -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:49 2026 by rpki-client