This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/KhzaAbAn3_Qsuar7p5qwswlTC_o.roa File: KhzaAbAn3_Qsuar7p5qwswlTC_o.roa (raw, json) Hash identifier: t3+nQzkQvp951a+38EJDZpoSf5luy0cimxl8a8ewvNA= Subject key identifier: 2A:1C:DA:01:B0:27:DF:F4:2C:B9:AA:FB:A7:9A:B0:B3:09:53:0B:FA Certificate issuer: /CN=706f0a161b217b9cefd3781ce2611951be419dba Certificate serial: 019B79113531F573545BED0D134C4A810C39 Authority key identifier: 70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/KhzaAbAn3_Qsuar7p5qwswlTC_o.roa Signing time: Thu 01 Jan 2026 10:18:49 +0000 ROA not before: Thu 01 Jan 2026 10:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198893 IP address blocks: 91.195.228.0/23 maxlen: 23 2001:67c:ca4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 10:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:35:31:f5:73:54:5b:ed:0d:13:4c:4a:81:0c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706f0a161b217b9cefd3781ce2611951be419dba Validity Not Before: Jan 1 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a1cda01b027dff42cb9aafba79ab0b309530bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:1c:6e:3a:43:9c:4f:fb:58:1f:70:10:d3: 36:19:13:f8:11:1c:34:40:b1:8b:62:b0:c1:fc:f6: a4:e4:d1:60:fd:7c:bc:0e:e1:d3:40:6a:e8:20:08: 3b:a6:80:d8:bd:90:43:e7:01:76:a9:1f:00:f1:e5: 3e:7c:39:ea:7d:8d:5d:d2:ea:50:9d:0a:76:f5:de: a3:36:69:bb:6d:ad:c8:5f:34:e7:45:79:4e:7a:f0: bb:d8:8c:6f:e6:8e:5b:ef:ff:a6:19:f2:cf:81:0d: f4:93:aa:83:78:3b:ee:fc:ee:cf:fc:a4:d5:97:c7: ae:92:4a:b1:65:79:9d:6b:3e:c0:58:56:88:25:06: 5d:39:be:a5:11:ee:93:8e:b2:88:4a:5a:69:15:98: 14:ac:a5:ed:90:22:51:a1:e0:11:76:c4:26:2e:93: 97:16:c3:0e:ad:87:0b:b7:3e:fa:74:8b:c0:e1:14: 73:f5:11:54:20:b2:1d:4b:64:76:d5:21:37:5f:03: a7:28:8e:a9:c8:af:80:54:1d:0b:2c:54:12:ed:3d: a7:af:a3:48:af:e1:ed:30:90:be:e8:e9:f8:d5:ad: 8b:40:29:65:6a:73:fa:05:b9:e6:f5:95:87:8a:76: ca:0e:b5:02:ff:45:f0:24:72:46:f3:6c:db:68:3e: f7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1C:DA:01:B0:27:DF:F4:2C:B9:AA:FB:A7:9A:B0:B3:09:53:0B:FA X509v3 Authority Key Identifier: keyid:70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/KhzaAbAn3_Qsuar7p5qwswlTC_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.228.0/23 IPv6: 2001:67c:ca4::/48 Signature Algorithm: sha256WithRSAEncryption cd:e7:17:3e:78:d4:bb:93:30:50:8f:ee:8f:f5:3e:50:34:9a: 13:c9:43:f4:99:a0:13:e5:34:cc:44:71:6e:83:6e:a3:1b:e4: c4:ea:a7:69:a7:2a:44:33:19:d9:80:99:b9:e6:8a:3b:b9:96: 10:64:4b:f8:58:2f:14:44:3d:7c:c9:c2:42:57:4b:ac:cd:91: 6e:22:9f:17:50:96:76:98:d8:98:20:2e:fb:fb:61:90:dc:3e: a1:2c:bd:9c:34:7a:e8:4f:a3:91:9c:c8:05:8d:7f:be:7b:ec: ab:56:23:89:de:4d:ef:75:92:30:59:6a:5d:b9:7a:49:a5:b2: b7:c6:52:c9:6a:78:48:22:cf:19:3c:91:66:5c:7a:09:bc:56: c5:14:25:8a:0c:94:b6:54:d9:80:93:15:b9:68:54:d6:ef:24: b8:7b:f9:15:5f:e4:75:c5:0b:3f:27:54:ce:ac:62:e7:d9:bd: a9:52:eb:cc:d7:df:e0:ec:8d:17:ec:40:e8:69:29:6d:4e:1a: 5d:bb:22:47:f3:bb:06:67:06:d3:22:0e:9d:ba:de:35:76:83: c7:bc:42:be:70:12:a4:ca:00:fd:8a:7d:56:e0:7b:fc:7f:ac: 03:f0:88:00:dd:4f:3d:99:89:c0:b0:fb:98:89:75:a5:d6:20: 39:9a:bc:2f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5ETUx9XNUW+0NE0xKgQw5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmYwYTE2MWIyMTdiOWNlZmQzNzgxY2UyNjExOTUxYmU0 MTlkYmEwHhcNMjYwMTAxMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTFjZGEwMWIwMjdkZmY0MmNiOWFhZmJhNzlhYjBiMzA5NTMwYmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu28cbjpDnE/7WB9wENM2GRP4ERw0 QLGLYrDB/Pak5NFg/Xy8DuHTQGroIAg7poDYvZBD5wF2qR8A8eU+fDnqfY1d0upQ nQp29d6jNmm7ba3IXzTnRXlOevC72Ixv5o5b7/+mGfLPgQ30k6qDeDvu/O7P/KTV l8eukkqxZXmdaz7AWFaIJQZdOb6lEe6TjrKISlppFZgUrKXtkCJRoeARdsQmLpOX FsMOrYcLtz76dIvA4RRz9RFUILIdS2R21SE3XwOnKI6pyK+AVB0LLFQS7T2nr6NI r+HtMJC+6On41a2LQCllanP6Bbnm9ZWHinbKDrUC/0XwJHJG82zbaD73fwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCoc2gGwJ9/0LLmq+6easLMJUwv6MB8GA1UdIwQY MBaAFHBvChYbIXuc79N4HOJhGVG+QZ26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mYzBhNGEtYTc0YS00YzJiLTgzM2It MTA0OWM5OTdiYzdhLzEvS2h6YUFiQW4zX1FzdWFyN3A1cXdzd2xUQ19vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mYzBhNGEtYTc0YS00YzJiLTgzM2ItMTA0OWM5OTdiYzdh LzEvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW8PkMA8E AgACMAkDBwAgAQZ8DKQwDQYJKoZIhvcNAQELBQADggEBAM3nFz541LuTMFCP7o/1 PlA0mhPJQ/SZoBPlNMxEcW6DbqMb5MTqp2mnKkQzGdmAmbnmiju5lhBkS/hYLxRE PXzJwkJXS6zNkW4inxdQlnaY2JggLvv7YZDcPqEsvZw0euhPo5GcyAWNf7577KtW I4neTe91kjBZal25ekmlsrfGUslqeEgizxk8kWZcegm8VsUUJYoMlLZU2YCTFblo VNbvJLh7+RVf5HXFCz8nVM6sYufZvalS68zX3+DsjRfsQOhpKW1OGl27IkfzuwZn BtMiDp263jV2g8e8Qr5wEqTKAP2KfVbge/x/rAPwiADdTz2ZicCw+5iJdaXWIDma vC8= -----END CERTIFICATE-----Generated at Wed Jan 7 14:41:24 2026 by rpki-client