This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/KctQwmawmalO2PKZjavuSM15QTQ.roa File: KctQwmawmalO2PKZjavuSM15QTQ.roa (raw, json) Hash identifier: zHAw8eSVFEAzK8PlGZcMDFtnQasJewBavZiVUY5u7JI= Subject key identifier: 29:CB:50:C2:66:B0:99:A9:4E:D8:F2:99:8D:AB:EE:48:CD:79:41:34 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B35F51F7A4030BE640357D175889DF2 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/KctQwmawmalO2PKZjavuSM15QTQ.roa Signing time: Thu 01 Jan 2026 20:18:12 +0000 ROA not before: Thu 01 Jan 2026 20:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 27176 IP address blocks: 5.172.181.0/24 maxlen: 24 37.77.146.0/24 maxlen: 24 193.142.242.0/24 maxlen: 24 193.142.249.0/24 maxlen: 24 193.192.1.0/24 maxlen: 24 193.192.15.0/24 maxlen: 24 213.170.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f5:1f:7a:40:30:be:64:03:57:d1:75:88:9d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29cb50c266b099a94ed8f2998dabee48cd794134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:32:f0:d5:eb:33:a9:d3:1a:b5:f1:07:3a:21: bd:df:c7:70:0d:fe:d2:68:43:88:47:60:d4:13:23: 5a:b9:70:53:79:cc:96:2f:86:d4:22:50:4b:46:4f: 1f:b3:83:00:f4:97:da:8c:55:22:5c:f2:aa:fa:93: e1:db:88:c0:f7:1b:36:09:11:fb:ee:49:15:5a:a0: a7:32:ec:7b:52:58:ae:86:ea:d8:f4:fa:cc:f0:91: b4:3b:56:f0:34:d8:fd:02:e3:0b:c7:82:23:0f:f4: 73:bd:c8:69:4d:04:cb:55:49:50:66:67:7b:67:ca: 9c:4e:5a:37:cf:86:92:fd:95:09:f5:62:95:b5:90: 2d:e5:c5:37:92:ce:95:51:0d:61:8e:7c:8e:d0:c3: 0f:de:b0:e4:8e:44:b2:7f:64:08:82:01:0c:d2:8a: 27:24:fb:37:7f:9a:3b:97:62:01:34:25:d1:e1:87: be:98:ef:46:68:db:d1:09:6a:79:d6:8f:4a:47:f8: 98:2c:80:e8:91:f6:c2:94:0b:6b:06:30:33:60:e6: 23:8f:be:57:4a:19:c9:00:a7:fd:89:0c:cb:47:2a: 7b:0d:f4:bb:44:35:b5:3c:d1:f4:43:f1:e0:08:2b: 31:e1:bb:02:8d:db:d7:64:d0:35:c9:70:60:69:78: 86:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CB:50:C2:66:B0:99:A9:4E:D8:F2:99:8D:AB:EE:48:CD:79:41:34 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/KctQwmawmalO2PKZjavuSM15QTQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.181.0/24 37.77.146.0/24 193.142.242.0/24 193.142.249.0/24 193.192.1.0/24 193.192.15.0/24 213.170.192.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:d0:c9:00:34:9c:d7:2f:49:3a:5d:ad:4d:84:49:89:45:a5: 65:98:eb:61:0d:0c:00:0b:dd:bf:64:88:33:2a:f1:82:20:a0: 2a:c0:23:f8:f8:ce:10:c8:36:cd:63:4c:db:c2:e3:1a:57:3f: e8:92:25:35:a2:34:0b:37:40:35:fb:58:dd:64:9d:c7:0e:ad: dd:81:3c:db:6d:ce:8f:40:8e:f6:35:dc:eb:a5:ec:31:8e:a8: 1b:a3:84:47:e7:21:66:a9:94:32:53:55:1b:a0:db:0f:ae:bb: 43:d2:0e:ca:95:55:4b:1d:23:60:58:89:06:39:c0:37:60:43: 01:ee:e5:49:cb:f2:63:d5:f0:57:68:30:ad:4d:ff:0b:9a:3f: 88:c7:ae:1c:31:7a:46:c4:08:e3:e0:fa:81:7c:61:a9:30:32: 7d:96:5c:3d:5e:e9:02:dc:c9:2c:d8:f0:c7:50:93:67:41:c0: 5d:13:ed:d0:b7:a8:21:0e:5d:35:e5:c4:d4:ae:16:46:0c:6c: cd:71:89:35:4d:c7:d1:02:41:70:06:aa:86:ae:11:eb:51:9b: c8:98:6c:ad:f7:34:cb:16:7a:98:d6:6e:86:a1:61:fa:f5:b6: 8d:0a:3b:94:19:fb:6b:24:59:6a:63:c5:9f:59:99:7c:ff:22: 15:9f:78:49 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt7NfUfekAwvmQDV9F1iJ3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWNiNTBjMjY2YjA5OWE5NGVkOGYyOTk4ZGFiZWU0OGNkNzk0MTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzLw1eszqdMatfEHOiG938dwDf7S aEOIR2DUEyNauXBTecyWL4bUIlBLRk8fs4MA9JfajFUiXPKq+pPh24jA9xs2CRH7 7kkVWqCnMux7UliuhurY9PrM8JG0O1bwNNj9AuMLx4IjD/RzvchpTQTLVUlQZmd7 Z8qcTlo3z4aS/ZUJ9WKVtZAt5cU3ks6VUQ1hjnyO0MMP3rDkjkSyf2QIggEM0oon JPs3f5o7l2IBNCXR4Ye+mO9GaNvRCWp51o9KR/iYLIDokfbClAtrBjAzYOYjj75X ShnJAKf9iQzLRyp7DfS7RDW1PNH0Q/HgCCsx4bsCjdvXZNA1yXBgaXiGjwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFCnLUMJmsJmpTtjymY2r7kjNeUE0MB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvS2N0UXdtYXdtYWxPMlBLWmphdnVTTTE1UVRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQABay1AwQA JU2SAwQAwY7yAwQAwY75AwQAwcABAwQAwcAPAwQC1arAMA0GCSqGSIb3DQEBCwUA A4IBAQCa0MkANJzXL0k6Xa1NhEmJRaVlmOthDQwAC92/ZIgzKvGCIKAqwCP4+M4Q yDbNY0zbwuMaVz/okiU1ojQLN0A1+1jdZJ3HDq3dgTzbbc6PQI72Ndzrpewxjqgb o4RH5yFmqZQyU1UboNsPrrtD0g7KlVVLHSNgWIkGOcA3YEMB7uVJy/Jj1fBXaDCt Tf8Lmj+Ix64cMXpGxAjj4PqBfGGpMDJ9llw9XukC3Mks2PDHUJNnQcBdE+3Qt6gh Dl015cTUrhZGDGzNcYk1TcfRAkFwBqqGrhHrUZvImGyt9zTLFnqY1m6GoWH69baN CjuUGftrJFlqY8WfWZl8/yIVn3hJ -----END CERTIFICATE-----Generated at Thu Jan 15 13:16:37 2026 by rpki-client