This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa File: Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa (raw, json) Hash identifier: 5lHGls0Q7liXh3sS1jBjBdhD/Gm1Mc/HHHU6LNM2qo8= Subject key identifier: 2A:EB:FD:0E:99:26:42:33:AC:9E:F9:C9:BB:02:D0:82:4F:16:32:DF Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9 Certificate serial: 019B7C12818B488E1E7EFDA48268CFC38E61 Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa Signing time: Fri 02 Jan 2026 00:19:06 +0000 ROA not before: Fri 02 Jan 2026 00:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62005 IP address blocks: 5.42.221.0/24 maxlen: 24 45.129.0.0/24 maxlen: 24 45.145.171.0/24 maxlen: 24 2a12:c740::/48 maxlen: 48 2a12:c740:1::/48 maxlen: 48 2a12:c740:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:81:8b:48:8e:1e:7e:fd:a4:82:68:cf:c3:8e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9 Validity Not Before: Jan 2 00:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2aebfd0e99264233ac9ef9c9bb02d0824f1632df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:11:13:2c:be:38:d4:85:72:69:f6:07:2b:ab: 04:62:86:ec:01:ca:67:ff:64:16:41:de:61:53:6a: 47:66:14:da:b9:3e:f2:51:8f:92:08:20:0d:4d:b8: 11:53:7c:0d:3d:94:80:fe:19:43:1d:19:be:2f:da: a9:14:7d:f3:8f:1e:0d:ef:e1:2e:7d:81:70:ed:19: 21:08:77:a4:70:1f:40:96:77:d0:e3:15:8d:16:d7: fc:e2:8d:98:de:5e:b2:ab:f9:65:cf:e1:cb:8a:50: 4b:e0:58:24:6b:cc:65:20:a0:14:a6:0c:8f:94:6a: f2:48:d6:64:ac:24:f2:12:89:d0:80:45:68:0c:eb: 25:24:b6:db:22:e6:24:5a:bb:30:1c:35:99:bd:63: 46:e8:e3:e3:e4:97:a8:00:39:dc:ae:d7:7d:a5:eb: 74:10:d6:fc:0f:ef:9d:f2:e2:20:2c:06:4a:3d:c6: 63:2e:8d:f3:cb:d6:a9:9c:16:23:8f:0d:60:3b:44: 8c:4f:d5:6c:0a:f8:81:06:65:83:9e:1e:ee:5a:44: 9c:f5:2e:af:ad:25:93:b2:45:46:fd:2a:f2:e4:61: 91:e0:98:7e:0a:9a:1c:3b:23:2e:a3:16:af:e1:7a: 33:ee:11:c8:39:27:f1:c0:8e:8a:84:93:03:ee:b1: 18:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EB:FD:0E:99:26:42:33:AC:9E:F9:C9:BB:02:D0:82:4F:16:32:DF X509v3 Authority Key Identifier: keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.221.0/24 45.129.0.0/24 45.145.171.0/24 IPv6: 2a12:c740::-2a12:c740:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 50:90:54:5f:aa:c0:ab:cc:eb:11:a4:ef:1a:1d:1c:e6:43:dc: 5a:b9:f8:9c:93:1b:f1:28:bf:41:40:35:13:4f:61:e9:b2:81: c5:84:76:60:a1:f7:bd:d2:52:f3:ff:f7:a1:82:b8:76:df:4e: 09:8f:f1:01:f8:24:b3:60:fb:b5:7a:b1:2a:ad:d7:e6:1b:7b: 09:0c:4d:9b:0c:48:eb:9e:d3:e1:61:6d:47:19:e8:22:c4:c9: 2f:cf:6c:a6:76:1a:34:bf:9a:8a:2c:41:d8:d8:a5:1e:e2:d4: 27:a1:ed:bb:d2:84:8c:b9:2e:54:0b:3f:e6:de:73:93:e8:48: e8:ba:74:ab:f5:7d:4c:38:9c:30:09:0a:0d:63:c3:af:f6:88: da:4e:13:d8:c2:83:22:a9:0b:c5:62:7c:e0:21:d8:e7:cc:8e: 52:ec:6f:1b:3e:0c:c0:cc:52:ae:c7:f3:7c:e3:1e:c1:ca:57: ef:44:49:53:4b:ec:49:fc:ff:99:05:95:98:79:6d:59:21:d0: 8f:6b:87:bc:a0:c4:df:0c:ae:f4:18:07:96:54:64:e1:c9:42: 3a:ec:d4:de:53:2e:fe:fd:93:57:f6:b1:aa:bd:ed:93:be:51: d2:56:70:dd:34:dd:be:2f:8c:5f:13:ca:a0:88:1f:77:38:1e: 19:78:2a:67 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt8EoGLSI4efv2kgmjPw45hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjAwNmYyYTE4NDA5MDBjNzUzNjI4MTIxYjNmYjdlYzVi ZDg5ZTkwHhcNMjYwMTAyMDAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWViZmQwZTk5MjY0MjMzYWM5ZWY5YzliYjAyZDA4MjRmMTYzMmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xETLL441IVyafYHK6sEYobsAcpn /2QWQd5hU2pHZhTauT7yUY+SCCANTbgRU3wNPZSA/hlDHRm+L9qpFH3zjx4N7+Eu fYFw7RkhCHekcB9AlnfQ4xWNFtf84o2Y3l6yq/llz+HLilBL4Fgka8xlIKAUpgyP lGrySNZkrCTyEonQgEVoDOslJLbbIuYkWrswHDWZvWNG6OPj5JeoADncrtd9pet0 ENb8D++d8uIgLAZKPcZjLo3zy9apnBYjjw1gO0SMT9VsCviBBmWDnh7uWkSc9S6v rSWTskVG/Sry5GGR4Jh+CpocOyMuoxav4Xoz7hHIOSfxwI6KhJMD7rEYjQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFCrr/Q6ZJkIzrJ75ybsC0IJPFjLfMB8GA1UdIwQY MBaAFAVgBvKhhAkAx1NigSGz+37FvYnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMt NTViM2U2NDc2YTdiLzEvS3V2OURwa21Rak9zbnZuSnV3TFFnazhXTXQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMtNTViM2U2NDc2YTdi LzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQABSrdAwQA LYEAAwQALZGrMBgEAgACMBIwEAMFBioSx0ADBwAqEsdAAAIwDQYJKoZIhvcNAQEL BQADggEBAFCQVF+qwKvM6xGk7xodHOZD3Fq5+JyTG/Eov0FANRNPYemygcWEdmCh 973SUvP/96GCuHbfTgmP8QH4JLNg+7V6sSqt1+YbewkMTZsMSOue0+FhbUcZ6CLE yS/PbKZ2GjS/moosQdjYpR7i1Ceh7bvShIy5LlQLP+bec5PoSOi6dKv1fUw4nDAJ Cg1jw6/2iNpOE9jCgyKpC8VifOAh2OfMjlLsbxs+DMDMUq7H83zjHsHKV+9ESVNL 7En8/5kFlZh5bVkh0I9rh7ygxN8MrvQYB5ZUZOHJQjrs1N5TLv79k1f2saq97ZO+ UdJWcN003b4vjF8TyqCIH3c4Hhl4Kmc= -----END CERTIFICATE-----Generated at Wed Jan 21 15:23:25 2026 by rpki-client