This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KBZJ1mRctxniNu4-jC0lhj_NzIY.roa File: KBZJ1mRctxniNu4-jC0lhj_NzIY.roa (raw, json) Hash identifier: w8fjrpSNujV+EKnr47ijiKU4MN/qcDh2vqU5OaUSH1w= Subject key identifier: 28:16:49:D6:64:5C:B7:19:E2:36:EE:3E:8C:2D:25:86:3F:CD:CC:86 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A34F6BA85D7F4D182777C063A40B43 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KBZJ1mRctxniNu4-jC0lhj_NzIY.roa Signing time: Thu 01 Jan 2026 08:18:47 +0000 ROA not before: Thu 01 Jan 2026 08:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215439 IP address blocks: 31.13.208.0/24 maxlen: 24 45.8.93.0/24 maxlen: 24 45.66.228.0/24 maxlen: 24 45.84.222.0/24 maxlen: 24 45.133.251.0/24 maxlen: 24 83.143.112.0/24 maxlen: 24 84.21.173.0/24 maxlen: 24 87.120.84.0/24 maxlen: 24 87.120.165.0/24 maxlen: 24 87.120.166.0/24 maxlen: 24 87.120.186.0/24 maxlen: 24 87.120.187.0/24 maxlen: 24 87.121.82.0/24 maxlen: 32 87.121.89.0/24 maxlen: 24 87.121.105.0/24 maxlen: 24 93.123.84.0/24 maxlen: 24 94.156.102.0/24 maxlen: 24 94.156.106.0/24 maxlen: 24 94.156.112.0/24 maxlen: 24 94.156.114.0/24 maxlen: 24 94.156.115.0/24 maxlen: 24 94.156.159.0/24 maxlen: 32 94.156.170.0/24 maxlen: 24 94.156.179.0/24 maxlen: 24 94.156.237.0/24 maxlen: 24 141.98.7.0/24 maxlen: 24 171.22.31.0/24 maxlen: 24 178.215.236.0/24 maxlen: 24 178.215.238.0/24 maxlen: 24 185.216.71.0/24 maxlen: 24 185.246.223.0/24 maxlen: 24 193.25.216.0/24 maxlen: 24 193.35.17.0/24 maxlen: 24 193.58.121.0/24 maxlen: 24 193.58.122.0/24 maxlen: 24 193.222.99.0/24 maxlen: 24 194.31.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4f:6b:a8:5d:7f:4d:18:27:77:c0:63:a4:0b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=281649d6645cb719e236ee3e8c2d25863fcdcc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:a9:60:5f:77:6a:cb:8e:92:20:5b:b9:89: c2:78:e9:f6:cd:0e:9f:0c:21:59:ee:b5:35:ec:fb: 18:e1:b1:91:d6:30:18:13:13:82:0f:5a:8a:a9:f2: 41:d3:47:4a:92:58:e6:3b:0b:0b:6f:e6:d1:73:e7: e0:4c:c3:f0:67:3e:e8:d1:eb:e5:ca:ad:32:ba:d9: b5:e5:6f:6e:a3:72:56:1b:c7:90:76:83:9e:fb:0a: 76:5e:7d:7c:64:86:8d:0f:59:3c:81:37:7b:0f:6c: a4:0b:df:6b:3a:13:34:1c:18:35:56:1f:f5:c0:ce: 6b:f2:35:16:25:a4:59:dc:f5:72:04:bc:56:86:f7: 12:50:09:e3:ca:9c:f0:af:98:33:b4:ad:65:d7:23: c5:3b:2d:42:0f:97:e7:98:8f:bd:60:09:64:f8:32: f8:4e:5e:fd:09:d4:2f:88:65:b9:2f:5d:c4:25:9f: 75:75:67:62:92:1d:cb:5f:e3:e8:78:0b:d4:13:89: 3b:15:0f:00:ea:c3:6d:3a:6c:d0:cc:b2:43:ac:b4: 7a:5c:3c:d3:a0:07:8f:0f:d3:a5:7d:3a:24:5b:58: 2f:e2:e5:ff:4d:52:8a:1c:27:37:75:da:56:d6:b0: 50:66:f9:98:e9:1d:ac:3b:30:b9:cc:a5:87:28:c9: 19:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:16:49:D6:64:5C:B7:19:E2:36:EE:3E:8C:2D:25:86:3F:CD:CC:86 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KBZJ1mRctxniNu4-jC0lhj_NzIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.208.0/24 45.8.93.0/24 45.66.228.0/24 45.84.222.0/24 45.133.251.0/24 83.143.112.0/24 84.21.173.0/24 87.120.84.0/24 87.120.165.0-87.120.166.255 87.120.186.0/23 87.121.82.0/24 87.121.89.0/24 87.121.105.0/24 93.123.84.0/24 94.156.102.0/24 94.156.106.0/24 94.156.112.0/24 94.156.114.0/23 94.156.159.0/24 94.156.170.0/24 94.156.179.0/24 94.156.237.0/24 141.98.7.0/24 171.22.31.0/24 178.215.236.0/24 178.215.238.0/24 185.216.71.0/24 185.246.223.0/24 193.25.216.0/24 193.35.17.0/24 193.58.121.0-193.58.122.255 193.222.99.0/24 194.31.223.0/24 Signature Algorithm: sha256WithRSAEncryption 75:94:ea:70:cf:f0:42:c9:ca:85:40:09:56:55:63:df:35:f0: a0:a1:c1:03:f0:56:c1:6c:fc:38:1f:4f:dc:d9:6c:37:ee:31: 41:25:ad:39:c6:1b:21:24:65:fd:5b:70:84:79:be:e3:62:ed: 3a:a7:16:b9:07:f0:df:b7:4a:46:5b:a7:ac:a7:79:a9:a5:c4: 64:d3:25:d9:85:62:05:36:08:b0:6c:b8:85:1f:cd:e5:4a:27: 89:1e:46:54:8e:a8:88:89:93:83:9b:16:37:e9:74:97:1c:49: ce:c3:40:26:ba:ab:7e:2d:ba:1c:3f:7d:d1:4e:89:2a:c1:f6: 18:c8:2e:b3:33:85:38:48:4b:ae:dc:a3:d7:2d:65:a0:4b:58: d8:e5:dc:a1:12:23:3c:8a:a1:25:a2:02:69:5b:ff:fe:54:f0: 41:c0:bf:bb:26:e9:ee:39:ef:b2:56:36:de:9b:2c:95:03:5e: 00:e8:2c:29:7e:01:49:e0:4e:2b:75:3c:47:5a:b7:0e:8a:2e: 26:21:6e:e4:94:df:99:a4:c0:f9:25:e0:fb:d9:33:8f:99:14: 9f:6b:b5:af:db:ec:df:e0:1f:1f:ae:45:61:48:a5:68:ea:53: db:29:50:35:04:0a:ea:ea:86:d9:74:00:2e:94:ad:0a:83:e6: 99:a4:b6:6a -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt4o09rqF1/TRgnd8BjpAtDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODE2NDlkNjY0NWNiNzE5ZTIzNmVlM2U4YzJkMjU4NjNmY2RjYzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFKpYF93asuOkiBbuYnCeOn2zQ6f DCFZ7rU17PsY4bGR1jAYExOCD1qKqfJB00dKkljmOwsLb+bRc+fgTMPwZz7o0evl yq0yutm15W9uo3JWG8eQdoOe+wp2Xn18ZIaND1k8gTd7D2ykC99rOhM0HBg1Vh/1 wM5r8jUWJaRZ3PVyBLxWhvcSUAnjypzwr5gztK1l1yPFOy1CD5fnmI+9YAlk+DL4 Tl79CdQviGW5L13EJZ91dWdikh3LX+PoeAvUE4k7FQ8A6sNtOmzQzLJDrLR6XDzT oAePD9OlfTokW1gv4uX/TVKKHCc3ddpW1rBQZvmY6R2sOzC5zKWHKMkZNQIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFCgWSdZkXLcZ4jbuPowtJYY/zcyGMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvS0JaSjFtUmN0eG5pTnU0LWpDMGxoal9OeklZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHzBggrBgEFBQcBBwEB/wSB4zCB4DCB3QQCAAEwgdYDBAAf DdADBAAtCF0DBAAtQuQDBAAtVN4DBAAthfsDBABTj3ADBABUFa0DBABXeFQwDAME AFd4pQMEAFd4pgMEAVd4ugMEAFd5UgMEAFd5WQMEAFd5aQMEAF17VAMEAF6cZgME AF6cagMEAF6ccAMEAV6ccgMEAF6cnwMEAF6cqgMEAF6cswMEAF6c7QMEAI1iBwME AKsWHwMEALLX7AMEALLX7gMEALnYRwMEALn23wMEAMEZ2AMEAMEjETAMAwQAwTp5 AwQAwTp6AwQAwd5jAwQAwh/fMA0GCSqGSIb3DQEBCwUAA4IBAQB1lOpwz/BCycqF QAlWVWPfNfCgocED8FbBbPw4H0/c2Ww37jFBJa05xhshJGX9W3CEeb7jYu06pxa5 B/Dft0pGW6esp3mppcRk0yXZhWIFNgiwbLiFH83lSieJHkZUjqiIiZODmxY36XSX HEnOw0Amuqt+LbocP33RTokqwfYYyC6zM4U4SEuu3KPXLWWgS1jY5dyhEiM8iqEl ogJpW//+VPBBwL+7JunuOe+yVjbemyyVA14A6CwpfgFJ4E4rdTxHWrcOii4mIW7k lN+ZpMD5JeD72TOPmRSfa7Wv2+zf4B8frkVhSKVo6lPbKVA1BArq6obZdAAulK0K g+aZpLZq -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:56 2026 by rpki-client