This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/kxe8v2_GCeDxT_0MCmWHOHxPJNM.roa File: kxe8v2_GCeDxT_0MCmWHOHxPJNM.roa (raw, json) Hash identifier: tEeXDR/COaV7Zl8LmdrHLVZAbvrGNZU+gXaNAYeV4rM= Subject key identifier: 93:17:BC:BF:6F:C6:09:E0:F1:4F:FD:0C:0A:65:87:38:7C:4F:24:D3 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019B883426332E237350D5F9DE0CD0FEA586 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/kxe8v2_GCeDxT_0MCmWHOHxPJNM.roa Signing time: Sun 04 Jan 2026 08:51:17 +0000 ROA not before: Sun 04 Jan 2026 08:51:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216050 IP address blocks: 37.49.146.0/24 maxlen: 24 37.49.149.0/24 maxlen: 24 94.74.140.0/24 maxlen: 24 109.203.160.0/24 maxlen: 24 109.203.162.0/24 maxlen: 24 109.203.164.0/24 maxlen: 24 109.203.165.0/24 maxlen: 24 109.203.167.0/24 maxlen: 24 176.46.128.0/24 maxlen: 24 176.46.131.0/24 maxlen: 24 185.34.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:88:34:26:33:2e:23:73:50:d5:f9:de:0c:d0:fe:a5:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Jan 4 08:51:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9317bcbf6fc609e0f14ffd0c0a6587387c4f24d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:2f:a3:2c:0b:73:0e:62:12:b1:e8:08:1f: df:05:df:2a:e7:c1:c7:01:48:06:fe:f3:25:02:98: 55:15:73:a0:41:91:71:f4:dd:20:7c:14:31:8a:17: f2:75:a3:73:ae:27:ac:ca:76:5e:9c:fe:69:0d:02: 79:f5:02:b7:17:5c:2b:c7:a6:af:2d:16:55:61:e3: fa:57:f4:90:7f:39:d6:54:26:0f:b6:22:c6:bb:26: 5b:14:99:1d:e4:a5:94:45:98:c6:b0:4d:74:f0:7e: 09:4d:89:2c:02:0d:b8:bf:56:6b:4c:8b:93:47:35: 78:e3:c4:4a:20:2c:41:44:6e:75:e1:00:f2:3f:2b: dd:aa:b8:3f:36:b3:7a:1a:2d:88:ed:fd:70:ff:e9: 9d:e3:b0:65:48:0d:41:d0:23:14:35:f8:ce:96:b9: 37:f1:f3:9e:1a:b8:9f:bb:71:a1:48:82:b0:1a:76: ba:8b:cb:f5:bb:5c:1d:46:a6:f1:ca:4f:c9:5d:c3: 6f:82:aa:f4:39:9e:ca:44:4f:b8:bf:40:1a:7a:7f: ad:09:ff:c3:be:0f:a9:49:7a:78:98:ff:21:a1:9e: 6d:43:0c:e7:9a:cc:d9:6d:3d:72:c1:79:c5:ca:d2: 91:2c:ac:26:1f:92:3e:a7:07:a5:8c:e6:c2:68:b4: fc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:17:BC:BF:6F:C6:09:E0:F1:4F:FD:0C:0A:65:87:38:7C:4F:24:D3 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/kxe8v2_GCeDxT_0MCmWHOHxPJNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.49.146.0/24 37.49.149.0/24 94.74.140.0/24 109.203.160.0/24 109.203.162.0/24 109.203.164.0/23 109.203.167.0/24 176.46.128.0/24 176.46.131.0/24 185.34.160.0/22 Signature Algorithm: sha256WithRSAEncryption a0:64:94:e1:36:00:41:b7:74:81:1a:d7:42:fb:51:ab:4a:36: 45:78:5f:7a:84:c1:4a:2f:2a:64:f1:8c:c1:74:a4:22:3b:2f: 96:94:db:00:fd:71:bb:dc:88:ab:f2:d7:3e:ee:29:52:c2:72: b8:f6:58:94:4f:27:e3:be:0d:1b:46:d2:b3:e9:bc:34:35:73: 7a:72:25:82:dc:2e:e3:49:d7:43:0c:b1:ab:12:a6:f4:2c:69: 63:94:23:89:e2:2a:5f:d7:e7:e8:fe:a3:fc:01:fc:b8:66:1d: 7a:96:ec:2a:6f:b6:12:5c:b5:44:a1:40:8f:47:bf:e0:f0:e5: 90:29:2e:bb:e3:85:95:e0:bc:47:3b:b3:38:70:d7:b6:01:54: 1a:57:f4:d3:d9:0a:2e:2d:b5:70:26:f1:47:e3:23:1d:1c:93: 9f:d6:7e:a4:5e:23:45:ee:d4:df:c3:2f:72:5f:7b:e9:6d:76: 4d:70:fa:c5:8f:47:5b:eb:0d:9a:de:63:ff:44:19:f6:d5:15: 89:85:84:80:de:55:49:8c:1f:b9:3d:98:73:5f:c6:4f:e8:e3: 94:17:54:c7:e7:bd:8d:d5:8b:0b:c5:de:53:f7:c0:3a:7e:d5: c8:b8:c7:d8:8f:ee:79:c2:0b:38:9a:6b:a2:b1:b9:a0:f5:51: fe:62:41:5f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZuINCYzLiNzUNX53gzQ/qWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwMTA0MDg1MTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzE3YmNiZjZmYzYwOWUwZjE0ZmZkMGMwYTY1ODczODdjNGYyNGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutkvoywLcw5iErHoCB/fBd8q58HH AUgG/vMlAphVFXOgQZFx9N0gfBQxihfydaNzriesynZenP5pDQJ59QK3F1wrx6av LRZVYeP6V/SQfznWVCYPtiLGuyZbFJkd5KWURZjGsE108H4JTYksAg24v1ZrTIuT RzV448RKICxBRG514QDyPyvdqrg/NrN6Gi2I7f1w/+md47BlSA1B0CMUNfjOlrk3 8fOeGrifu3GhSIKwGna6i8v1u1wdRqbxyk/JXcNvgqr0OZ7KRE+4v0Aaen+tCf/D vg+pSXp4mP8hoZ5tQwznmszZbT1ywXnFytKRLKwmH5I+pweljObCaLT8MwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFJMXvL9vxgng8U/9DAplhzh8TyTTMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEva3hlOHYyX0dDZUR4VF8wTUNtV0hPSHhQSk5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAJTGSAwQA JTGVAwQAXkqMAwQAbcugAwQAbcuiAwQBbcukAwQAbcunAwQAsC6AAwQAsC6DAwQC uSKgMA0GCSqGSIb3DQEBCwUAA4IBAQCgZJThNgBBt3SBGtdC+1GrSjZFeF96hMFK Lypk8YzBdKQiOy+WlNsA/XG73Iir8tc+7ilSwnK49liUTyfjvg0bRtKz6bw0NXN6 ciWC3C7jSddDDLGrEqb0LGljlCOJ4ipf1+fo/qP8Afy4Zh16luwqb7YSXLVEoUCP R7/g8OWQKS6744WV4LxHO7M4cNe2AVQaV/TT2QouLbVwJvFH4yMdHJOf1n6kXiNF 7tTfwy9yX3vpbXZNcPrFj0db6w2a3mP/RBn21RWJhYSA3lVJjB+5PZhzX8ZP6OOU F1TH572N1YsLxd5T98A6ftXIuMfYj+55wgs4mmuisbmg9VH+YkFf -----END CERTIFICATE-----Generated at Wed Jan 21 11:24:11 2026 by rpki-client