This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/kvDWTPZdtJw4dreKhDQ02HQ-FgU.roa File: kvDWTPZdtJw4dreKhDQ02HQ-FgU.roa (raw, json) Hash identifier: arPRJW9UIAefVV+dDtxzXJ70kBfJH7sjg22GevhJflw= Subject key identifier: 92:F0:D6:4C:F6:5D:B4:9C:38:76:B7:8A:84:34:34:D8:74:3E:16:05 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019BA77B005922748553950108D2D7F88DEC Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/kvDWTPZdtJw4dreKhDQ02HQ-FgU.roa Signing time: Sat 10 Jan 2026 10:36:54 +0000 ROA not before: Sat 10 Jan 2026 10:36:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 62.192.110.0/24 maxlen: 24 194.231.132.0/24 maxlen: 24 194.231.135.0/24 maxlen: 24 194.231.137.0/24 maxlen: 24 194.231.138.0/24 maxlen: 24 194.231.140.0/24 maxlen: 24 194.231.142.0/24 maxlen: 24 194.231.148.0/24 maxlen: 24 194.231.199.0/24 maxlen: 24 194.231.200.0/24 maxlen: 24 194.231.202.0/23 maxlen: 24 194.231.213.0/24 maxlen: 24 194.231.214.0/24 maxlen: 24 194.231.222.0/24 maxlen: 24 194.231.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a7:7b:00:59:22:74:85:53:95:01:08:d2:d7:f8:8d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 10 10:36:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92f0d64cf65db49c3876b78a843434d8743e1605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e3:a3:47:ec:1a:96:97:c7:75:d3:3a:e2:43: e9:41:5e:67:12:ec:d1:c7:7d:b7:18:c0:49:19:14: 35:61:cc:0a:f0:20:06:8c:e7:24:dc:42:69:ee:d1: ff:ce:d2:75:b2:b5:49:24:29:c7:30:4d:30:1b:bf: d2:53:68:c5:3b:f4:44:9f:85:93:e3:a8:18:bf:a6: e7:2a:da:62:d8:e3:3a:9c:98:b2:a8:e9:cb:7e:01: 07:7b:03:be:1b:0b:e4:cb:66:08:cc:be:93:36:dc: 2a:12:db:2a:c3:bb:cf:a3:59:c1:3a:1b:47:05:2b: 17:b1:ff:90:27:a3:01:67:53:91:21:9e:0e:ff:95: d1:b1:3c:73:3c:ff:bc:99:f4:8c:65:12:83:9f:17: 28:82:c6:fe:52:9b:d4:a5:c1:7f:26:64:ce:14:e1: b2:7d:56:e5:4e:29:38:28:4c:17:d5:21:de:a5:f6: 1e:8a:49:f8:a1:5d:da:14:d0:36:4c:a4:24:9c:9a: dc:30:e3:d7:24:f3:a7:9c:c8:dc:71:a5:68:71:0a: 4d:bb:c4:5e:f0:dc:3d:ac:03:42:86:5c:51:e0:ad: f8:0c:da:a0:e7:48:a8:3f:f4:87:9f:54:5a:7e:0f: 82:77:10:70:2e:58:55:fe:a8:5b:d0:ad:b6:57:6c: 92:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F0:D6:4C:F6:5D:B4:9C:38:76:B7:8A:84:34:34:D8:74:3E:16:05 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/kvDWTPZdtJw4dreKhDQ02HQ-FgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.110.0/24 194.231.132.0/24 194.231.135.0/24 194.231.137.0-194.231.138.255 194.231.140.0/24 194.231.142.0/24 194.231.148.0/24 194.231.199.0-194.231.200.255 194.231.202.0/23 194.231.213.0-194.231.214.255 194.231.222.0/23 Signature Algorithm: sha256WithRSAEncryption 03:a1:f9:d4:3a:d4:5c:1d:65:e2:1d:cd:d9:e9:24:85:e8:29: 5e:f7:0a:66:34:42:1b:81:c0:29:50:0f:fd:f6:82:00:4a:d6: 82:4a:57:1b:53:e2:f2:d1:27:b8:80:77:ec:cd:fd:58:33:fa: b8:70:92:7e:49:01:42:50:5e:83:ec:6c:88:24:32:72:c3:f4: ac:b6:d3:9c:db:5f:4e:5b:97:7a:08:ae:45:bf:72:df:27:34: 98:86:37:7b:e5:9d:a1:c2:e2:e9:13:4b:c5:4d:78:9b:20:a8: 71:26:7b:77:24:1d:c6:2d:22:b3:16:dc:cf:8a:f5:74:17:92: 6b:6a:ba:ab:23:fc:e9:2d:0b:cf:65:e0:43:94:32:58:1d:ab: 9f:79:07:0c:f1:d8:2e:27:c5:c4:8b:50:49:6b:87:62:1e:fb: 73:97:fa:16:b3:c7:69:c8:12:5b:55:59:4a:d5:57:c8:4d:48: e4:54:86:69:fd:b1:c7:0a:17:85:67:bc:e7:87:24:47:75:e6: 23:87:7a:47:02:3d:80:fd:69:ce:13:d3:83:96:a4:83:78:70: b7:d8:3a:2c:fc:a9:4b:af:fe:35:96:b3:02:ea:b7:33:0a:f7: a0:ab:dd:d0:0f:49:a3:b2:a2:e7:fc:6b:2a:cd:a1:dd:47:d4: ff:6f:79:a6 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZunewBZInSFU5UBCNLX+I3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTEwMTAzNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmYwZDY0Y2Y2NWRiNDljMzg3NmI3OGE4NDM0MzRkODc0M2UxNjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+OjR+walpfHddM64kPpQV5nEuzR x323GMBJGRQ1YcwK8CAGjOck3EJp7tH/ztJ1srVJJCnHME0wG7/SU2jFO/REn4WT 46gYv6bnKtpi2OM6nJiyqOnLfgEHewO+Gwvky2YIzL6TNtwqEtsqw7vPo1nBOhtH BSsXsf+QJ6MBZ1ORIZ4O/5XRsTxzPP+8mfSMZRKDnxcogsb+UpvUpcF/JmTOFOGy fVblTik4KEwX1SHepfYeikn4oV3aFNA2TKQknJrcMOPXJPOnnMjccaVocQpNu8Re 8Nw9rANChlxR4K34DNqg50ioP/SHn1Rafg+CdxBwLlhV/qhb0K22V2yS9QIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFJLw1kz2XbScOHa3ioQ0NNh0PhYFMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEva3ZEV1RQWmR0Snc0ZHJlS2hEUTAySFEtRmdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAPsBuAwQA wueEAwQAwueHMAwDBADC54kDBADC54oDBADC54wDBADC544DBADC55QwDAMEAMLn xwMEAMLnyAMEAcLnyjAMAwQAwufVAwQAwufWAwQBwufeMA0GCSqGSIb3DQEBCwUA A4IBAQADofnUOtRcHWXiHc3Z6SSF6Cle9wpmNEIbgcApUA/99oIAStaCSlcbU+Ly 0Se4gHfszf1YM/q4cJJ+SQFCUF6D7GyIJDJyw/SsttOc219OW5d6CK5Fv3LfJzSY hjd75Z2hwuLpE0vFTXibIKhxJnt3JB3GLSKzFtzPivV0F5JrarqrI/zpLQvPZeBD lDJYHaufeQcM8dguJ8XEi1BJa4diHvtzl/oWs8dpyBJbVVlK1VfITUjkVIZp/bHH CheFZ7znhyRHdeYjh3pHAj2A/WnOE9ODlqSDeHC32Dos/KlLr/41lrMC6rczCveg q93QD0mjsqLn/GsqzaHdR9T/b3mm -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:55 2026 by rpki-client