This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/K-3AW1zodZQo96foEv6vSPWnznA.roa File: K-3AW1zodZQo96foEv6vSPWnznA.roa (raw, json) Hash identifier: 3dK44a2XFe/Ax80oJyqlgMjQENi9InYwps3O9K6x3VI= Subject key identifier: 2B:ED:C0:5B:5C:E8:75:94:28:F7:A7:E8:12:FE:AF:48:F5:A7:CE:70 Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa Certificate serial: 019B7CED104E01406B5CACB308C32EB90E04 Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/K-3AW1zodZQo96foEv6vSPWnznA.roa Signing time: Fri 02 Jan 2026 04:17:49 +0000 ROA not before: Fri 02 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59545 IP address blocks: 92.63.160.0/21 maxlen: 24 92.63.160.0/24 maxlen: 24 92.63.161.0/24 maxlen: 24 92.63.162.0/24 maxlen: 24 92.63.163.0/24 maxlen: 24 109.205.199.0/24 maxlen: 32 141.138.144.0/21 maxlen: 24 141.138.145.0/24 maxlen: 24 141.138.146.0/24 maxlen: 24 141.138.147.0/24 maxlen: 24 141.138.148.0/24 maxlen: 24 141.138.149.0/24 maxlen: 24 141.138.151.0/24 maxlen: 24 178.20.248.0/21 maxlen: 24 185.69.100.0/22 maxlen: 24 2a01:a680::/32 maxlen: 64 2a01:a680:a1::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:10:4e:01:40:6b:5c:ac:b3:08:c3:2e:b9:0e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa Validity Not Before: Jan 2 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bedc05b5ce8759428f7a7e812feaf48f5a7ce70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6f:44:55:1d:6a:9c:5a:38:92:da:94:b9:48: b6:0c:e0:62:bb:64:1d:fb:dd:09:d5:7d:16:59:ea: f5:85:df:24:87:71:7d:86:3c:72:e0:3a:41:1c:28: 78:06:ae:77:76:99:54:7c:79:11:af:9b:a8:af:4a: 6a:00:7f:61:56:6d:3a:2c:d8:a3:ba:52:57:32:0b: 7b:03:24:d7:0c:70:d8:98:02:4f:cb:1b:30:38:67: cb:ad:ba:77:6d:13:3a:4f:06:ae:87:42:73:54:7b: c6:c5:b9:87:66:ce:dd:c6:9e:a4:2f:7c:be:d6:0c: f4:42:88:17:b1:b7:f7:d3:15:6f:e0:f4:c6:19:76: 5c:b0:f5:89:fb:09:73:a3:8d:54:ad:0d:fd:c4:01: 8a:ee:83:7a:5a:bd:1a:2b:4f:31:09:14:dd:37:73: e0:93:b3:65:d3:68:b5:08:45:17:5c:e7:c1:d8:bd: d7:78:ce:bc:5a:b1:27:fe:05:c8:e2:24:db:48:50: c8:0e:d9:16:7a:07:97:cf:22:55:f2:46:08:31:02: 74:55:14:d5:ea:09:99:17:d7:00:0c:78:f3:0c:48: 9c:91:9c:50:07:e9:fc:94:69:12:43:32:a4:3f:2f: ba:aa:be:15:ff:b6:0e:66:2e:b3:98:eb:81:03:1c: 14:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:ED:C0:5B:5C:E8:75:94:28:F7:A7:E8:12:FE:AF:48:F5:A7:CE:70 X509v3 Authority Key Identifier: keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/K-3AW1zodZQo96foEv6vSPWnznA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.63.160.0/21 109.205.199.0/24 141.138.144.0/21 178.20.248.0/21 185.69.100.0/22 IPv6: 2a01:a680::/32 Signature Algorithm: sha256WithRSAEncryption 9e:dd:5e:1e:2d:e5:bb:a0:7c:49:8b:0b:54:31:86:31:e3:6d: 83:af:eb:d2:34:08:b7:aa:b9:45:6c:e9:87:54:dd:ac:fc:94: be:7e:e0:0c:06:b5:72:c9:53:00:e5:7b:c5:17:53:e8:86:83: d9:a7:c0:7f:d4:44:b9:02:61:d2:ee:21:49:99:d0:84:3a:f8: e7:5e:21:de:e3:51:8b:05:9e:36:78:4e:26:67:44:e7:7d:db: 8a:1c:8a:6c:51:24:be:65:9a:0b:c3:b5:d1:c5:83:bc:b2:38: 4a:ec:39:7d:5b:a9:cc:65:09:70:5d:eb:a6:c1:55:45:9b:4b: c0:fc:65:9c:06:b8:2c:2a:8d:a1:40:79:03:69:69:f4:95:28: f4:1d:bf:b3:19:00:97:7c:c0:08:8f:08:48:c5:95:77:01:94: 52:2b:02:9a:0d:fd:a8:d1:c1:a7:0d:66:e8:97:9b:9f:1f:34: 98:b4:14:42:5e:ff:27:e0:24:f4:35:5e:e6:24:82:80:56:1e: d8:bd:33:c0:8e:55:97:46:ad:22:96:67:21:d1:50:dc:78:d5: 82:ab:5e:7e:96:c5:46:81:b6:e6:b9:cc:28:0a:3e:79:84:62: 0f:ac:5d:88:18:06:5e:b1:26:af:7e:c0:ed:b9:e0:f6:f6:0e: 69:4f:a3:36 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt87RBOAUBrXKyzCMMuuQ4EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDFhZDBlN2ZjMjJiZmJhYjU2N2JlODlmNjNkOTgwNWU1 ZWI5YWEwHhcNMjYwMTAyMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmVkYzA1YjVjZTg3NTk0MjhmN2E3ZTgxMmZlYWY0OGY1YTdjZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn29EVR1qnFo4ktqUuUi2DOBiu2Qd +90J1X0WWer1hd8kh3F9hjxy4DpBHCh4Bq53dplUfHkRr5uor0pqAH9hVm06LNij ulJXMgt7AyTXDHDYmAJPyxswOGfLrbp3bRM6Twauh0JzVHvGxbmHZs7dxp6kL3y+ 1gz0QogXsbf30xVv4PTGGXZcsPWJ+wlzo41UrQ39xAGK7oN6Wr0aK08xCRTdN3Pg k7Nl02i1CEUXXOfB2L3XeM68WrEn/gXI4iTbSFDIDtkWegeXzyJV8kYIMQJ0VRTV 6gmZF9cADHjzDEickZxQB+n8lGkSQzKkPy+6qr4V/7YOZi6zmOuBAxwUBwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFCvtwFtc6HWUKPen6BL+r0j1p85wMB8GA1UdIwQY MBaAFJJBrQ5/wiv7q1Z76J9j2YBeXrmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDkt NDU0NGM2MTA5NzI5LzEvSy0zQVcxem9kWlFvOTZmb0V2NnZTUFduem5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDktNDU0NGM2MTA5NzI5 LzEva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDXD+gAwQA bc3HAwQDjYqQAwQDshT4AwQCuUVkMA0EAgACMAcDBQAqAaaAMA0GCSqGSIb3DQEB CwUAA4IBAQCe3V4eLeW7oHxJiwtUMYYx422Dr+vSNAi3qrlFbOmHVN2s/JS+fuAM BrVyyVMA5XvFF1PohoPZp8B/1ES5AmHS7iFJmdCEOvjnXiHe41GLBZ42eE4mZ0Tn fduKHIpsUSS+ZZoLw7XRxYO8sjhK7Dl9W6nMZQlwXeumwVVFm0vA/GWcBrgsKo2h QHkDaWn0lSj0Hb+zGQCXfMAIjwhIxZV3AZRSKwKaDf2o0cGnDWbol5ufHzSYtBRC Xv8n4CT0NV7mJIKAVh7YvTPAjlWXRq0ilmch0VDceNWCq15+lsVGgbbmucwoCj55 hGIPrF2IGAZesSavfsDtueD29g5pT6M2 -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:34 2026 by rpki-client