This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/KaO-__UQ_4-yFi8MMxv305lzDlw.roa File: KaO-__UQ_4-yFi8MMxv305lzDlw.roa (raw, json) Hash identifier: MPyADIXrlTVIshlYvvPri9A+eTXT/5p1O9Y/NNCFTew= Subject key identifier: 29:A3:BE:FF:F5:10:FF:8F:B2:16:2F:0C:33:1B:F7:D3:99:73:0E:5C Certificate issuer: /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0 Certificate serial: 019B7758A1A48E707B67E8FF1B3755970989 Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/KaO-__UQ_4-yFi8MMxv305lzDlw.roa Signing time: Thu 01 Jan 2026 02:17:35 +0000 ROA not before: Thu 01 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43623 IP address blocks: 194.55.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a1:a4:8e:70:7b:67:e8:ff:1b:37:55:97:09:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0 Validity Not Before: Jan 1 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29a3befff510ff8fb2162f0c331bf7d399730e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:72:aa:81:0d:e6:0c:38:6f:76:62:d4:67: c2:eb:4a:16:7c:2d:e9:41:cc:c5:0f:2e:1a:8f:d5: 85:b5:15:d8:f8:0d:fd:19:b0:99:25:56:ac:c6:e3: 01:af:bc:4f:3d:d9:c4:35:1d:92:16:17:d9:e7:c8: da:c6:67:7a:2f:71:0e:94:93:e0:01:88:11:10:06: 9c:0f:27:fe:1e:92:2e:50:3d:4f:f4:aa:fd:57:db: e6:0b:10:b9:66:23:6f:e5:d5:b2:4b:c0:e4:8a:49: 6c:75:38:5e:cc:f5:cf:0d:08:e4:da:3b:f4:cf:c8: 64:92:b3:92:5b:0b:f6:12:a5:5b:2f:40:00:f3:25: 4a:dc:53:c1:cf:c7:7d:a8:6b:47:30:ca:82:2e:12: 82:45:20:d8:91:57:f3:61:a1:04:dc:26:34:94:2d: f4:85:73:eb:0e:cb:27:f0:16:07:42:25:a4:c7:cb: 5b:20:59:68:52:d0:a3:69:06:76:38:85:db:fe:46: 98:91:89:c5:55:ba:83:09:d1:a4:21:d0:58:74:09: 59:f0:21:02:ca:9c:bc:29:58:51:11:18:e8:15:44: ed:b2:0e:cc:da:07:ac:40:a7:a0:57:64:bb:f7:f8: ad:d0:0b:e8:5f:a2:5f:ac:cb:49:99:53:69:ca:c5: 90:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A3:BE:FF:F5:10:FF:8F:B2:16:2F:0C:33:1B:F7:D3:99:73:0E:5C X509v3 Authority Key Identifier: keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/KaO-__UQ_4-yFi8MMxv305lzDlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.39.0/24 Signature Algorithm: sha256WithRSAEncryption 44:93:d1:70:64:f5:0c:08:1d:25:a9:5c:e0:eb:ea:12:c6:46: 61:77:8c:c0:30:77:82:f3:7a:54:d7:bb:a8:f9:37:5c:18:20: 73:29:e4:fd:9c:af:44:1d:78:0a:6a:9f:93:25:34:2d:f7:b4: 4e:f8:e8:30:f4:0c:5b:c2:d6:6c:c9:11:b1:c8:33:72:6b:96: 1f:09:af:eb:d6:5f:2b:18:c6:d4:a4:9a:0a:38:8c:f3:95:1e: da:2e:8e:fb:df:56:c7:62:fc:05:46:e9:62:33:58:86:62:ac: 18:14:8e:f7:f9:31:de:d4:9a:4a:12:00:d3:84:95:4f:e8:69: 18:a1:b6:5e:96:0a:4a:d0:64:2a:00:45:ee:7b:7a:cd:f4:38: ae:d5:86:9e:16:60:b4:c3:cc:a0:cf:87:6c:ff:5b:71:77:ed: 74:73:df:32:40:ed:c4:61:c9:19:6b:50:fd:bb:32:a6:75:08: 66:be:8d:19:4b:18:79:d4:6c:04:16:38:e5:47:25:14:1b:5e: e3:24:26:42:89:07:07:c0:72:d7:a2:58:f0:2c:74:cd:41:77: 50:7c:ef:f2:f8:01:b4:0e:5f:b6:aa:e7:92:bd:5d:af:b6:56: 73:ee:ae:c0:19:90:a9:49:56:31:98:c1:2d:dc:3d:3a:f0:8d: 47:dc:f9:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WKGkjnB7Z+j/GzdVlwmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDY0YzhjMTY3ZGQyYzg3YWEzZDg4YWNiZmFlNGMyMzNm Zjc3YjAwHhcNMjYwMTAxMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWEzYmVmZmY1MTBmZjhmYjIxNjJmMGMzMzFiZjdkMzk5NzMwZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxRyqoEN5gw4b3Zi1GfC60oWfC3p QczFDy4aj9WFtRXY+A39GbCZJVasxuMBr7xPPdnENR2SFhfZ58jaxmd6L3EOlJPg AYgREAacDyf+HpIuUD1P9Kr9V9vmCxC5ZiNv5dWyS8DkiklsdThezPXPDQjk2jv0 z8hkkrOSWwv2EqVbL0AA8yVK3FPBz8d9qGtHMMqCLhKCRSDYkVfzYaEE3CY0lC30 hXPrDssn8BYHQiWkx8tbIFloUtCjaQZ2OIXb/kaYkYnFVbqDCdGkIdBYdAlZ8CEC ypy8KVhRERjoFUTtsg7M2gesQKegV2S79/it0AvoX6JfrMtJmVNpysWQrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCmjvv/1EP+PshYvDDMb99OZcw5cMB8GA1UdIwQY MBaAFOhGTIwWfdLIeqPYisv65MIz/3ewMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVaTWpCWjkwc2g2bzlpS3lfcmt3alBfZDdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jY2E2YzQtZWM3MC00NDA1LWE2YTgt NmVhYTU5YjBkNzUwLzEvS2FPLV9fVVFfNC15Rmk4TU14djMwNWx6RGx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jY2E2YzQtZWM3MC00NDA1LWE2YTgtNmVhYTU5YjBkNzUw LzEvNkVaTWpCWjkwc2g2bzlpS3lfcmt3alBfZDdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjcnMA0G CSqGSIb3DQEBCwUAA4IBAQBEk9FwZPUMCB0lqVzg6+oSxkZhd4zAMHeC83pU17uo +TdcGCBzKeT9nK9EHXgKap+TJTQt97RO+Ogw9AxbwtZsyRGxyDNya5YfCa/r1l8r GMbUpJoKOIzzlR7aLo7731bHYvwFRuliM1iGYqwYFI73+THe1JpKEgDThJVP6GkY obZelgpK0GQqAEXue3rN9Diu1YaeFmC0w8ygz4ds/1txd+10c98yQO3EYckZa1D9 uzKmdQhmvo0ZSxh51GwEFjjlRyUUG17jJCZCiQcHwHLXoljwLHTNQXdQfO/y+AG0 Dl+2queSvV2vtlZz7q7AGZCpSVYxmMEt3D068I1H3Pk9 -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:14 2026 by rpki-client