This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/K_kctLzaNMQhFHN8joV117TaoeQ.roa File: K_kctLzaNMQhFHN8joV117TaoeQ.roa (raw, json) Hash identifier: vYf0k8T0+nNX++AoHAW2e73Jb3z/XutqucqoGOIMVv0= Subject key identifier: 2B:F9:1C:B4:BC:DA:34:C4:21:14:73:7C:8E:85:75:D7:B4:DA:A1:E4 Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a Certificate serial: 019B7CECBC738006D34A6B9E2EF98ECBC77D Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/K_kctLzaNMQhFHN8joV117TaoeQ.roa Signing time: Fri 02 Jan 2026 04:17:28 +0000 ROA not before: Fri 02 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35506 IP address blocks: 84.205.192.0/24 maxlen: 24 84.205.193.0/24 maxlen: 24 84.205.194.0/24 maxlen: 24 84.205.195.0/24 maxlen: 24 84.205.196.0/24 maxlen: 24 84.205.197.0/24 maxlen: 24 84.205.198.0/24 maxlen: 24 84.205.199.0/24 maxlen: 24 84.205.200.0/24 maxlen: 24 84.205.201.0/24 maxlen: 24 84.205.202.0/24 maxlen: 24 84.205.203.0/24 maxlen: 24 84.205.204.0/24 maxlen: 24 84.205.205.0/24 maxlen: 24 84.205.206.0/24 maxlen: 24 84.205.207.0/24 maxlen: 24 84.205.212.0/23 maxlen: 23 84.205.212.0/24 maxlen: 24 84.205.213.0/24 maxlen: 24 84.205.214.0/24 maxlen: 24 84.205.215.0/24 maxlen: 24 84.205.216.0/24 maxlen: 24 84.205.217.0/24 maxlen: 24 84.205.218.0/24 maxlen: 24 84.205.219.0/24 maxlen: 24 84.205.220.0/24 maxlen: 24 84.205.221.0/24 maxlen: 24 84.205.222.0/24 maxlen: 24 84.205.223.0/24 maxlen: 24 84.205.224.0/24 maxlen: 24 84.205.225.0/24 maxlen: 24 84.205.226.0/24 maxlen: 24 84.205.227.0/24 maxlen: 24 84.205.228.0/24 maxlen: 24 84.205.229.0/24 maxlen: 24 84.205.230.0/24 maxlen: 24 84.205.231.0/24 maxlen: 24 84.205.232.0/24 maxlen: 24 84.205.233.0/24 maxlen: 24 84.205.234.0/24 maxlen: 24 84.205.235.0/24 maxlen: 24 84.205.236.0/24 maxlen: 24 84.205.237.0/24 maxlen: 24 84.205.238.0/24 maxlen: 24 84.205.239.0/24 maxlen: 24 84.205.240.0/24 maxlen: 24 84.205.241.0/24 maxlen: 24 84.205.242.0/24 maxlen: 24 84.205.243.0/24 maxlen: 24 84.205.244.0/24 maxlen: 24 84.205.245.0/24 maxlen: 24 84.205.246.0/24 maxlen: 24 84.205.247.0/24 maxlen: 24 84.205.248.0/24 maxlen: 24 84.205.249.0/24 maxlen: 24 84.205.250.0/24 maxlen: 24 84.205.251.0/24 maxlen: 24 84.205.252.0/23 maxlen: 23 84.205.254.0/24 maxlen: 24 84.205.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:bc:73:80:06:d3:4a:6b:9e:2e:f9:8e:cb:c7:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a Validity Not Before: Jan 2 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bf91cb4bcda34c42114737c8e8575d7b4daa1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2d:2f:1b:02:86:34:4c:82:4f:ee:ba:21:9e: c3:1b:7c:1f:3a:7b:cf:31:96:62:f9:c4:20:31:54: c1:1b:93:97:83:a5:bf:ad:e2:10:09:d6:c8:11:ba: 2b:e8:c5:ac:e1:46:18:d9:e3:fb:8d:52:ff:e1:eb: 16:e6:67:92:13:42:ab:b9:75:71:8a:83:21:8a:42: 59:c8:c8:09:7a:f9:29:8d:71:7d:2f:de:4f:46:c6: 64:cb:a9:8a:4d:b3:7a:3b:be:88:26:92:1b:08:4d: 11:e9:e5:93:88:82:b3:d5:74:f3:70:65:eb:0a:95: 88:5f:8e:37:c8:5e:bc:87:aa:de:d1:9a:d8:52:35: bb:4d:04:14:ee:ef:78:2c:8c:f1:b0:09:4d:93:fc: d9:67:52:36:bf:48:40:55:7c:e8:f5:55:04:01:21: 66:b8:98:e2:06:c2:5c:53:87:ba:4b:8f:ce:9a:c1: eb:68:e5:51:95:63:9f:63:8c:6d:3d:2a:9a:15:b4: 4b:46:e2:6b:f5:70:36:d4:93:2a:37:ec:51:70:5e: 0e:b2:9a:b0:13:dc:67:bc:df:58:ba:ae:7e:21:aa: c0:7c:f1:fc:cf:3b:de:ee:80:0a:95:81:86:3c:e0: 42:36:62:e1:4c:51:f0:95:f2:0d:5c:86:b4:00:0c: 7f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F9:1C:B4:BC:DA:34:C4:21:14:73:7C:8E:85:75:D7:B4:DA:A1:E4 X509v3 Authority Key Identifier: keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/K_kctLzaNMQhFHN8joV117TaoeQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.205.192.0/20 84.205.212.0-84.205.255.255 Signature Algorithm: sha256WithRSAEncryption 13:f1:05:73:b1:03:3b:52:e8:21:b7:dc:f3:b9:2b:55:40:54: e3:37:8c:c3:1c:25:8a:74:d8:c5:4e:a5:43:0f:b5:b8:8e:ba: be:6d:f9:1a:b1:02:21:77:b5:75:10:2e:81:69:56:85:1e:e6: f8:4d:af:b4:63:06:25:09:fa:d7:f9:bb:08:7a:e7:82:61:4c: 60:2e:02:4b:3b:5c:f7:7c:2c:97:58:56:5b:44:31:b9:9a:40: 55:1d:61:d4:22:88:2f:17:85:fd:ce:b6:ee:b6:98:02:6e:e6: 41:16:9b:cc:20:d3:7b:c1:2a:b2:c1:5d:71:3e:b9:d1:a2:5f: 79:43:f6:fc:a5:d2:ed:7d:14:22:06:13:7a:55:cb:e2:85:a2: 23:9b:a4:43:1f:dd:69:8d:cd:9b:69:b5:d4:3b:f1:10:7f:ec: 97:9e:19:9e:62:5f:f7:3d:d0:c9:68:97:f3:37:a3:53:7d:02: 01:a6:32:b5:c7:75:8f:18:23:93:7c:be:84:9b:63:ce:40:39: 32:de:63:ce:cb:21:36:bf:a8:32:14:03:c0:7d:b4:9e:96:a1: 3f:b6:01:00:5d:c9:7f:8f:95:b7:c8:80:8f:b8:ee:01:2b:85: d0:ef:25:76:4e:d0:d2:92:f2:04:0a:d6:4f:14:db:39:56:9d: 9a:87:62:4d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt87LxzgAbTSmueLvmOy8d9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Y2M4ODBmMGExMmM3Yjk0ZjcxZDliMmU1YjAyOGE3MGQx ZmEzNGEwHhcNMjYwMTAyMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmY5MWNiNGJjZGEzNGM0MjExNDczN2M4ZTg1NzVkN2I0ZGFhMWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5C0vGwKGNEyCT+66IZ7DG3wfOnvP MZZi+cQgMVTBG5OXg6W/reIQCdbIEbor6MWs4UYY2eP7jVL/4esW5meSE0KruXVx ioMhikJZyMgJevkpjXF9L95PRsZky6mKTbN6O76IJpIbCE0R6eWTiIKz1XTzcGXr CpWIX443yF68h6re0ZrYUjW7TQQU7u94LIzxsAlNk/zZZ1I2v0hAVXzo9VUEASFm uJjiBsJcU4e6S4/OmsHraOVRlWOfY4xtPSqaFbRLRuJr9XA21JMqN+xRcF4Ospqw E9xnvN9Yuq5+IarAfPH8zzve7oAKlYGGPOBCNmLhTFHwlfINXIa0AAx/LwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFCv5HLS82jTEIRRzfI6Fdde02qHkMB8GA1UdIwQY MBaAFBXMiA8KEse5T3HZsuWwKKcNH6NKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81OTg2ZjEtODYzZi00ZWVjLTg1NTEt MGE4ZmU2NDM0YmY4LzEvS19rY3RMemFOTVFoRkhOOGpvVjExN1Rhb2VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81OTg2ZjEtODYzZi00ZWVjLTg1NTEtMGE4ZmU2NDM0YmY4 LzEvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQEVM3AMAsD BAJUzdQDAwFUzDANBgkqhkiG9w0BAQsFAAOCAQEAE/EFc7EDO1LoIbfc87krVUBU 4zeMwxwlinTYxU6lQw+1uI66vm35GrECIXe1dRAugWlWhR7m+E2vtGMGJQn61/m7 CHrngmFMYC4CSztc93wsl1hWW0QxuZpAVR1h1CKILxeF/c627raYAm7mQRabzCDT e8EqssFdcT650aJfeUP2/KXS7X0UIgYTelXL4oWiI5ukQx/daY3Nm2m11DvxEH/s l54ZnmJf9z3QyWiX8zejU30CAaYytcd1jxgjk3y+hJtjzkA5Mt5jzsshNr+oMhQD wH20npahP7YBAF3Jf4+Vt8iAj7juASuF0O8ldk7Q0pLyBArWTxTbOVadmodiTQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:51 2026 by rpki-client