This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/konyG3wRd-9i2JxpDmlDMCcy52k.roa File: konyG3wRd-9i2JxpDmlDMCcy52k.roa (raw, json) Hash identifier: 86FDIPp0O4UJXQA6vPE/wehrfqe3i/KwXCUD7kRjVEo= Subject key identifier: 92:89:F2:1B:7C:11:77:EF:62:D8:9C:69:0E:69:43:30:27:32:E7:69 Certificate issuer: /CN=94282a6078ba98fb4a6e343e7603a960e7a63442 Certificate serial: 019B7AC94C845E2F65D5255519028BB7A36C Authority key identifier: 94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/konyG3wRd-9i2JxpDmlDMCcy52k.roa Signing time: Thu 01 Jan 2026 18:19:31 +0000 ROA not before: Thu 01 Jan 2026 18:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209064 IP address blocks: 45.8.36.0/22 maxlen: 22 45.8.36.0/24 maxlen: 24 45.8.37.0/24 maxlen: 24 45.8.38.0/24 maxlen: 24 45.8.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4c:84:5e:2f:65:d5:25:55:19:02:8b:b7:a3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94282a6078ba98fb4a6e343e7603a960e7a63442 Validity Not Before: Jan 1 18:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9289f21b7c1177ef62d89c690e6943302732e769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:7d:d9:85:22:dc:b5:1c:53:2f:fb:d1:80: 56:a2:b4:25:94:70:67:ff:cd:09:69:b3:65:9d:f0: 9f:de:d0:32:6c:c3:a6:4f:b2:e2:8c:e4:99:58:1d: ed:63:7b:6c:30:da:cd:84:7d:1f:fd:c6:d1:81:53: a3:91:bd:3f:ee:bb:e9:90:df:65:8f:ab:f5:52:23: 7f:3b:c3:61:b1:99:59:54:25:22:0e:4d:d5:fe:a1: 88:e5:49:f9:41:31:b1:95:f2:f5:36:4a:6f:48:26: bd:af:56:29:6d:59:6c:a5:51:a3:94:aa:4b:68:7b: 54:8b:1b:a9:3d:ab:72:52:8c:2e:68:31:15:2b:79: bb:fc:8f:49:1b:51:cb:68:7b:1f:ab:33:e7:22:83: a5:91:d5:e1:25:32:07:aa:e1:64:29:41:80:d2:9b: 40:06:45:99:7d:10:a3:aa:6b:91:32:81:c7:68:df: 76:f2:a4:04:18:19:f9:07:32:fc:e6:58:82:5a:c7: d4:dd:e1:b3:49:f4:7c:d3:38:d4:ce:97:e2:7e:5f: 82:e4:b1:d9:31:8a:94:79:be:5a:bf:b7:db:22:7d: 05:dc:05:64:d9:d4:6d:21:9d:91:45:0a:ab:6e:46: 7b:40:a8:e5:b8:ee:c1:79:fb:fd:fd:c1:ec:b5:9b: 7c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:89:F2:1B:7C:11:77:EF:62:D8:9C:69:0E:69:43:30:27:32:E7:69 X509v3 Authority Key Identifier: keyid:94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/konyG3wRd-9i2JxpDmlDMCcy52k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.36.0/22 Signature Algorithm: sha256WithRSAEncryption 94:3b:2c:fa:eb:13:c9:ec:a5:76:42:27:d2:15:80:f4:04:d2: ee:04:00:d3:ce:0e:35:06:3b:ce:d0:7a:12:e1:29:dd:a0:32: 95:3a:ed:9f:5b:89:1c:0d:e1:b5:36:34:dd:2c:ab:50:44:19: 42:77:56:21:1e:e0:b1:93:18:64:fc:54:06:5d:79:35:61:0b: aa:b1:bd:10:ca:16:9c:de:c9:ee:66:79:ca:a2:b2:b0:37:a6: d5:90:0e:6a:58:1b:23:99:0b:de:f6:0b:4c:2d:47:d7:12:7b: a8:79:96:3d:51:5e:c7:f2:1a:5c:ba:a2:e0:a9:55:a2:05:f0: 51:3c:57:ae:c6:12:42:6a:85:46:cd:0c:28:7a:51:c3:fd:37: 23:9e:70:62:f0:68:67:16:1e:e5:9a:c9:8d:23:52:63:2a:0c: 68:3f:0a:6f:5a:33:d6:a2:42:cb:d4:2b:c0:28:40:28:83:43: 11:18:c8:da:a0:75:02:db:cf:04:bb:01:85:3a:84:e7:13:86: d0:62:f2:7e:35:01:53:0d:29:12:f8:6b:bb:7d:cd:de:55:7a: b2:e3:07:77:c2:d1:57:79:bf:d3:84:34:8a:3b:10:1a:30:a0: f6:2d:b9:74:e0:e3:55:92:ca:d1:34:15:4d:6d:11:5b:61:81: 46:8a:d6:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUyEXi9l1SVVGQKLt6NsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MjgyYTYwNzhiYTk4ZmI0YTZlMzQzZTc2MDNhOTYwZTdh NjM0NDIwHhcNMjYwMTAxMTgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mjg5ZjIxYjdjMTE3N2VmNjJkODljNjkwZTY5NDMzMDI3MzJlNzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQV92YUi3LUcUy/70YBWorQllHBn /80JabNlnfCf3tAybMOmT7LijOSZWB3tY3tsMNrNhH0f/cbRgVOjkb0/7rvpkN9l j6v1UiN/O8NhsZlZVCUiDk3V/qGI5Un5QTGxlfL1NkpvSCa9r1YpbVlspVGjlKpL aHtUixupPatyUowuaDEVK3m7/I9JG1HLaHsfqzPnIoOlkdXhJTIHquFkKUGA0ptA BkWZfRCjqmuRMoHHaN928qQEGBn5BzL85liCWsfU3eGzSfR80zjUzpfifl+C5LHZ MYqUeb5av7fbIn0F3AVk2dRtIZ2RRQqrbkZ7QKjluO7Befv9/cHstZt87wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJKJ8ht8EXfvYticaQ5pQzAnMudpMB8GA1UdIwQY MBaAFJQoKmB4upj7Sm40PnYDqWDnpjRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yYTk2YjgtMDQ2ZC00YWMzLWIyM2Qt ZDgxOTc5NGEzMmEzLzEva29ueUczd1JkLTlpMkp4cERtbERNQ2N5NTJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yYTk2YjgtMDQ2ZC00YWMzLWIyM2QtZDgxOTc5NGEzMmEz LzEvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQgkMA0G CSqGSIb3DQEBCwUAA4IBAQCUOyz66xPJ7KV2QifSFYD0BNLuBADTzg41BjvO0HoS 4SndoDKVOu2fW4kcDeG1NjTdLKtQRBlCd1YhHuCxkxhk/FQGXXk1YQuqsb0Qyhac 3snuZnnKorKwN6bVkA5qWBsjmQve9gtMLUfXEnuoeZY9UV7H8hpcuqLgqVWiBfBR PFeuxhJCaoVGzQwoelHD/TcjnnBi8GhnFh7lmsmNI1JjKgxoPwpvWjPWokLL1CvA KEAog0MRGMjaoHUC288EuwGFOoTnE4bQYvJ+NQFTDSkS+Gu7fc3eVXqy4wd3wtFX eb/ThDSKOxAaMKD2Lbl04ONVksrRNBVNbRFbYYFGitae -----END CERTIFICATE-----Generated at Mon Jan 12 01:21:50 2026 by rpki-client