This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/KGIqjSOreH3H9__EWSgsv_q5UGo.roa File: KGIqjSOreH3H9__EWSgsv_q5UGo.roa (raw, json) Hash identifier: ekCF76aUnH2+lo9DBtlOUYmHtEC+Vo7+j9MQd2Rw770= Subject key identifier: 28:62:2A:8D:23:AB:78:7D:C7:F7:FF:C4:59:28:2C:BF:FA:B9:50:6A Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019B77C6C8761E8A770F5E98B0D4598D89A6 Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/KGIqjSOreH3H9__EWSgsv_q5UGo.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42708 IP address blocks: 157.97.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c8:76:1e:8a:77:0f:5e:98:b0:d4:59:8d:89:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28622a8d23ab787dc7f7ffc459282cbffab9506a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b0:97:0d:52:49:a7:e0:0c:9e:37:a4:43:42: 20:7e:f2:7d:7a:17:76:85:88:4a:24:25:d4:d2:4a: 9f:54:ae:d6:cc:b1:7d:aa:01:54:fb:82:a7:71:79: 8a:04:c1:72:a2:eb:11:e5:03:94:c0:2b:64:e6:c3: 41:04:b9:12:6c:94:d2:4b:11:b1:70:85:6d:4f:81: 4a:9f:30:53:9d:4f:24:d1:70:6a:c6:ae:ac:38:20: 0c:eb:e4:47:c6:09:f2:df:c8:f2:7f:79:05:2b:bf: ce:4e:49:8f:a8:9c:99:2c:25:2d:44:12:71:b1:c2: 39:15:0d:10:07:93:ed:40:4d:4a:b3:82:80:b9:54: cf:2e:07:32:84:de:2e:30:81:98:2a:e0:d4:ea:10: 54:06:e4:d0:92:8e:a2:46:a6:b9:af:1e:58:d2:be: cc:e5:27:c0:13:9f:70:8f:df:fc:60:fa:29:8a:de: 2d:f3:9b:ba:f3:53:49:c3:0b:c2:a8:60:38:d5:95: 6b:a5:0c:7a:d2:d9:cf:d7:4a:3b:1b:76:d0:da:de: d3:d8:da:83:b7:ad:ef:2e:7b:8b:48:8a:9d:26:63: d0:12:7c:66:b3:65:ad:db:c4:96:ce:90:49:b6:77: 58:c7:fe:c1:87:db:cc:51:71:0c:2f:31:7b:a2:c3: 92:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:62:2A:8D:23:AB:78:7D:C7:F7:FF:C4:59:28:2C:BF:FA:B9:50:6A X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/KGIqjSOreH3H9__EWSgsv_q5UGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.97.120.0/24 Signature Algorithm: sha256WithRSAEncryption 35:76:d4:15:54:b7:e0:61:88:21:17:79:9a:50:53:44:ec:3b: 67:d8:af:e1:d6:c5:da:32:0c:bc:93:f8:a1:2a:fc:0e:06:fb: a8:b9:61:c4:ea:d8:0c:7e:ea:83:3b:da:52:37:c0:0f:73:df: 01:c1:e7:61:c6:ea:57:ed:9a:08:12:15:60:1c:d8:7b:c0:c0: 34:58:40:37:39:21:c1:79:dc:1c:12:30:3d:2f:c7:83:22:da: ff:b6:c3:14:f6:e8:1d:38:da:af:58:0e:f5:55:27:5e:d9:93: 2d:bd:af:ad:0a:06:a0:75:71:f8:e3:a5:a9:20:ec:2b:f1:09: d9:c5:83:3e:07:de:1c:9f:de:a8:b8:52:5b:d0:be:fb:b9:63: f9:bd:af:ea:c5:3a:a6:34:91:1c:52:b1:e5:89:62:08:e1:6c: 48:9e:a0:6f:5b:5f:10:6f:f0:4d:a7:e0:b0:4d:ce:70:67:79: 13:ce:bc:65:87:e0:47:0e:1d:34:cf:98:2c:be:9f:c1:32:d0: 53:34:ce:e8:00:1e:40:4d:85:0e:7a:7a:4d:de:b5:09:a5:31: a6:37:39:b1:27:44:73:38:80:6b:90:f6:89:be:d6:71:6e:ed: 40:a3:ac:1f:38:80:0c:d7:db:b4:62:fa:e2:6e:7b:1b:a6:df: c7:36:24:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsh2Hop3D16YsNRZjYmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODYyMmE4ZDIzYWI3ODdkYzdmN2ZmYzQ1OTI4MmNiZmZhYjk1MDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybCXDVJJp+AMnjekQ0IgfvJ9ehd2 hYhKJCXU0kqfVK7WzLF9qgFU+4KncXmKBMFyousR5QOUwCtk5sNBBLkSbJTSSxGx cIVtT4FKnzBTnU8k0XBqxq6sOCAM6+RHxgny38jyf3kFK7/OTkmPqJyZLCUtRBJx scI5FQ0QB5PtQE1Ks4KAuVTPLgcyhN4uMIGYKuDU6hBUBuTQko6iRqa5rx5Y0r7M 5SfAE59wj9/8YPopit4t85u681NJwwvCqGA41ZVrpQx60tnP10o7G3bQ2t7T2NqD t63vLnuLSIqdJmPQEnxms2Wt28SWzpBJtndYx/7Bh9vMUXEMLzF7osOSUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFChiKo0jq3h9x/f/xFkoLL/6uVBqMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvS0dJcWpTT3JlSDNIOV9fRVdTZ3N2X3E1VUdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnWF4MA0G CSqGSIb3DQEBCwUAA4IBAQA1dtQVVLfgYYghF3maUFNE7Dtn2K/h1sXaMgy8k/ih KvwOBvuouWHE6tgMfuqDO9pSN8APc98BwedhxupX7ZoIEhVgHNh7wMA0WEA3OSHB edwcEjA9L8eDItr/tsMU9ugdONqvWA71VSde2ZMtva+tCgagdXH446WpIOwr8QnZ xYM+B94cn96ouFJb0L77uWP5va/qxTqmNJEcUrHliWII4WxInqBvW18Qb/BNp+Cw Tc5wZ3kTzrxlh+BHDh00z5gsvp/BMtBTNM7oAB5ATYUOenpN3rUJpTGmNzmxJ0Rz OIBrkPaJvtZxbu1Ao6wfOIAM19u0Yvribnsbpt/HNiSF -----END CERTIFICATE-----Generated at Mon Jan 19 17:51:50 2026 by rpki-client