This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa File: KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa (raw, json) Hash identifier: d0nit13az+nF5T9ApCvkfJ3swzvKAkAdbSMfvb/nFGw= Subject key identifier: 2B:31:80:98:87:32:00:A3:DD:C2:33:D5:64:51:7F:0D:E1:AB:62:2D Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac Certificate serial: 019B7D5BFCFF339B1BEC8A7A8D9DAECC05E4 Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa Signing time: Fri 02 Jan 2026 06:18:59 +0000 ROA not before: Fri 02 Jan 2026 06:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47777 IP address blocks: 46.19.56.0/21 maxlen: 24 94.125.24.0/21 maxlen: 24 94.125.28.0/24 maxlen: 24 185.15.180.0/22 maxlen: 22 185.15.183.0/24 maxlen: 24 2a00:1b40::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:fc:ff:33:9b:1b:ec:8a:7a:8d:9d:ae:cc:05:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac Validity Not Before: Jan 2 06:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b318098873200a3ddc233d564517f0de1ab622d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5d:b2:da:c2:18:ad:ec:d7:26:4b:17:82:ae: 12:7d:87:54:85:51:26:73:54:e9:aa:11:3d:53:c6: 23:ac:a8:98:e7:4a:05:78:35:a7:b4:1a:40:48:91: 98:a3:c3:f6:e8:e5:fe:3d:ec:9d:9b:bb:f2:a2:ef: 98:e8:79:78:91:00:c6:a0:4f:97:3a:08:98:9e:1e: 7e:f8:d9:6c:f0:8d:d9:8b:43:7d:1a:3b:d3:17:d6: cc:13:f9:ec:6f:d5:ea:2e:53:dc:ea:d1:46:46:2f: 37:23:75:2e:6c:9e:7a:4e:d9:fa:28:6a:ee:ee:f0: 83:13:cb:3f:12:33:53:e5:1e:f5:fd:f1:88:4f:18: 65:b7:cc:96:91:d1:c8:bd:bb:96:c1:be:da:01:19: 99:40:25:32:20:19:29:8c:e5:6a:52:21:0b:2f:18: 95:72:60:a8:68:c8:46:f1:ab:8a:ca:a7:20:f1:cc: f7:b5:97:6c:da:24:d8:66:df:6f:60:ea:d1:12:8a: 3a:a7:54:e6:f7:84:4d:50:22:dd:18:c6:97:9b:cb: 4d:0e:d2:0b:07:ef:a2:53:a7:94:cc:46:79:12:0d: c0:97:97:99:2b:67:7a:d0:41:d6:e2:fb:8b:0f:f7: 9c:cf:be:b5:11:f2:13:b0:9f:8a:44:a0:97:d8:cd: 72:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:31:80:98:87:32:00:A3:DD:C2:33:D5:64:51:7F:0D:E1:AB:62:2D X509v3 Authority Key Identifier: keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.56.0/21 94.125.24.0/21 185.15.180.0/22 IPv6: 2a00:1b40::/32 Signature Algorithm: sha256WithRSAEncryption 6e:4c:b4:56:e2:3b:da:46:42:14:fc:bc:6f:10:a2:68:e6:36: f4:dd:a5:02:ca:f9:96:de:e0:0a:7b:08:65:c5:07:70:08:8a: 4e:e8:90:3b:7a:f9:21:cd:bd:27:fc:ba:c8:f3:6c:e2:f2:89: 9d:1e:e3:8d:32:b6:62:db:b1:a7:39:bc:64:a9:e3:c6:f9:11: 6b:51:03:f0:66:d1:8b:b3:08:fa:90:2b:2b:39:04:24:40:17: 21:82:a1:2d:7c:b0:cd:f4:81:48:f0:ac:9b:72:df:90:cd:6e: d8:fb:26:26:92:07:66:87:f7:37:d9:c3:d2:1f:c8:7f:57:87: f6:b4:60:1a:c5:19:88:d3:a9:ee:e4:74:e3:b9:b9:e7:74:32: 72:dc:41:d9:13:0c:d7:a9:05:8b:22:13:87:7d:65:83:13:e2: e3:fa:25:60:e9:3e:95:3e:71:78:21:b1:d0:45:4d:a0:a1:d0: 27:9c:4a:5e:28:60:68:62:47:0b:14:22:94:e7:6e:53:81:05: d7:12:66:bf:70:c1:ba:92:1e:e4:0c:69:91:7b:e0:1f:7a:bd: 29:74:7d:5d:be:7e:9c:ff:99:de:d9:e2:e2:a5:4c:72:50:c8: 5d:f2:fb:45:1a:17:e6:7a:ad:2c:36:95:b1:db:74:ec:c6:6c: e6:a6:f7:67 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9W/z/M5sb7Ip6jZ2uzAXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOTY1NWI1OWE4NjRjYWQ3M2NjMjk1ZjRmNzhmZjgzY2Fl ODZhYWMwHhcNMjYwMTAyMDYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjMxODA5ODg3MzIwMGEzZGRjMjMzZDU2NDUxN2YwZGUxYWI2MjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl2y2sIYrezXJksXgq4SfYdUhVEm c1TpqhE9U8YjrKiY50oFeDWntBpASJGYo8P26OX+Peydm7vyou+Y6Hl4kQDGoE+X OgiYnh5++Nls8I3Zi0N9GjvTF9bME/nsb9XqLlPc6tFGRi83I3UubJ56Ttn6KGru 7vCDE8s/EjNT5R71/fGITxhlt8yWkdHIvbuWwb7aARmZQCUyIBkpjOVqUiELLxiV cmCoaMhG8auKyqcg8cz3tZds2iTYZt9vYOrREoo6p1Tm94RNUCLdGMaXm8tNDtIL B++iU6eUzEZ5Eg3Al5eZK2d60EHW4vuLD/ecz761EfITsJ+KRKCX2M1y8wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFCsxgJiHMgCj3cIz1WRRfw3hq2ItMB8GA1UdIwQY MBaAFPGWVbWahkytc8wpX094/4PK6GqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAt MzM5ZWU3MDBhZjZmLzEvS3pHQW1JY3lBS1Bkd2pQVlpGRl9EZUdyWWkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAtMzM5ZWU3MDBhZjZm LzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDLhM4AwQD Xn0YAwQCuQ+0MA0EAgACMAcDBQAqABtAMA0GCSqGSIb3DQEBCwUAA4IBAQBuTLRW 4jvaRkIU/LxvEKJo5jb03aUCyvmW3uAKewhlxQdwCIpO6JA7evkhzb0n/LrI82zi 8omdHuONMrZi27GnObxkqePG+RFrUQPwZtGLswj6kCsrOQQkQBchgqEtfLDN9IFI 8Kybct+QzW7Y+yYmkgdmh/c32cPSH8h/V4f2tGAaxRmI06nu5HTjubnndDJy3EHZ EwzXqQWLIhOHfWWDE+Lj+iVg6T6VPnF4IbHQRU2godAnnEpeKGBoYkcLFCKU525T gQXXEma/cMG6kh7kDGmRe+Afer0pdH1dvn6c/5ne2eLipUxyUMhd8vtFGhfmeq0s NpWx23Tsxmzmpvdn -----END CERTIFICATE-----Generated at Mon Jan 12 04:03:53 2026 by rpki-client