This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/ksTitpak2u-_MSffFj8d3gLieoc.roa File: ksTitpak2u-_MSffFj8d3gLieoc.roa (raw, json) Hash identifier: Akc+ifGn4Wu7e6ztv1Jh+lSvFvn72wjh27ACIaDBeLU= Subject key identifier: 92:C4:E2:B6:96:A4:DA:EF:BF:31:27:DF:16:3F:1D:DE:02:E2:7A:87 Certificate issuer: /CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee Certificate serial: 019B7B35D7AAF323D5BF7AEF511F0C663F80 Authority key identifier: 57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/ksTitpak2u-_MSffFj8d3gLieoc.roa Signing time: Thu 01 Jan 2026 20:18:04 +0000 ROA not before: Thu 01 Jan 2026 20:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207999 IP address blocks: 95.130.0.0/22 maxlen: 22 2a0e:8d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d7:aa:f3:23:d5:bf:7a:ef:51:1f:0c:66:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee Validity Not Before: Jan 1 20:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92c4e2b696a4daefbf3127df163f1dde02e27a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:5e:ec:d3:99:ee:c7:0f:71:67:20:00:46: 3c:60:da:61:aa:64:6c:01:11:74:f3:49:9a:2d:78: f4:5b:9b:0c:d4:e7:57:39:5a:45:da:57:2f:4b:c6: 7d:e8:e4:22:68:a5:c7:c1:16:69:64:f3:76:1d:6f: d2:4a:76:e9:85:d5:9a:02:0f:25:cf:a7:86:34:07: ab:8a:98:78:f2:06:1a:fa:5e:c5:f7:01:ae:c6:c4: 58:8a:89:22:8d:59:31:75:39:4d:d6:0e:86:2b:2c: f4:9f:11:17:a5:52:e7:ee:da:37:5b:e0:cd:7b:22: 44:19:b5:45:44:77:8d:a3:52:77:de:5b:8e:88:5e: 76:19:91:54:28:dd:00:fa:06:c3:d3:57:b7:58:66: 0a:f0:55:04:f4:6e:4c:19:f5:b5:b8:ba:98:b0:10: 4b:35:cd:77:89:14:7c:07:dd:26:2e:45:40:a2:81: 8d:46:e1:41:2e:5c:dd:29:cc:83:d2:d7:77:f8:36: d0:cb:f4:9a:d2:1b:17:8a:91:7b:9d:7d:f6:bd:bc: 58:60:0e:ad:17:65:33:f3:c0:39:bb:0f:2d:2f:db: cb:26:2e:ce:87:db:46:aa:6a:95:49:33:84:a3:ac: a0:ae:67:ed:ee:18:5c:fe:74:85:20:ee:d1:f3:b6: 60:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C4:E2:B6:96:A4:DA:EF:BF:31:27:DF:16:3F:1D:DE:02:E2:7A:87 X509v3 Authority Key Identifier: keyid:57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/ksTitpak2u-_MSffFj8d3gLieoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.130.0.0/22 IPv6: 2a0e:8d80::/29 Signature Algorithm: sha256WithRSAEncryption b5:ad:34:f4:5b:4e:88:14:6d:32:66:ca:9e:d2:b2:f5:b8:7b: 67:38:c9:30:7f:9e:e5:69:69:0a:9f:63:49:6e:36:5c:ed:b6: d4:3f:c8:b7:4f:0f:c5:d7:91:12:01:ea:b1:43:51:8b:87:1d: 8a:bc:b1:29:12:d4:57:db:3b:eb:64:06:6e:0a:2a:fd:7d:0f: ea:b9:69:61:ca:98:54:ef:46:08:78:c1:25:21:6d:e2:4e:af: 1e:8d:e1:10:53:ff:f3:66:cd:05:2b:a8:e2:1d:64:9a:74:f3: d4:91:59:29:41:a0:4f:a9:35:df:72:8b:c6:cb:8d:f4:66:f0: db:4f:e8:b8:ad:8f:26:6b:2c:bb:b4:83:74:5d:e8:dc:3e:de: 66:66:63:ea:39:d9:39:f5:c7:7c:bf:2e:b5:e8:11:96:5a:c0: 99:4d:2c:28:62:19:d0:fd:0d:27:48:ee:a3:da:2d:88:02:ea: 97:31:dc:85:ce:0a:11:ed:e4:6b:72:db:44:a5:ec:32:f8:29: d3:ef:44:e8:46:5c:39:67:a9:86:76:a6:2b:c6:2f:94:17:76: 7a:03:58:08:a1:85:3a:0b:42:f0:6e:8c:ec:f0:7b:93:43:76: 0c:54:3f:57:24:f5:73:a3:41:28:d5:1e:a8:6b:f0:37:3b:d6: d9:33:f4:b3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7Ndeq8yPVv3rvUR8MZj+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NThmY2QyMmZiN2ExMWRlYThiMzdlNGMzZjYyMmFhN2E0 N2I5ZWUwHhcNMjYwMTAxMjAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmM0ZTJiNjk2YTRkYWVmYmYzMTI3ZGYxNjNmMWRkZTAyZTI3YTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdFe7NOZ7scPcWcgAEY8YNphqmRs ARF080maLXj0W5sM1OdXOVpF2lcvS8Z96OQiaKXHwRZpZPN2HW/SSnbphdWaAg8l z6eGNAeriph48gYa+l7F9wGuxsRYiokijVkxdTlN1g6GKyz0nxEXpVLn7to3W+DN eyJEGbVFRHeNo1J33luOiF52GZFUKN0A+gbD01e3WGYK8FUE9G5MGfW1uLqYsBBL Nc13iRR8B90mLkVAooGNRuFBLlzdKcyD0td3+DbQy/Sa0hsXipF7nX32vbxYYA6t F2Uz88A5uw8tL9vLJi7Oh9tGqmqVSTOEo6ygrmft7hhc/nSFIO7R87ZghQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJLE4raWpNrvvzEn3xY/Hd4C4nqHMB8GA1UdIwQY MBaAFFdY/NIvt6Ed6os35MP2Iqp6R7nuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFqODBpLTNvUjNxaXpma3dfWWlxbnBIdWU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80ZDgyMDctZTdjYi00MjMyLTgyOTAt MjUwYmVjOWRjY2ExLzEva3NUaXRwYWsydS1fTVNmZkZqOGQzZ0xpZW9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80ZDgyMDctZTdjYi00MjMyLTgyOTAtMjUwYmVjOWRjY2Ex LzEvVjFqODBpLTNvUjNxaXpma3dfWWlxbnBIdWU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCX4IAMA0E AgACMAcDBQMqDo2AMA0GCSqGSIb3DQEBCwUAA4IBAQC1rTT0W06IFG0yZsqe0rL1 uHtnOMkwf57laWkKn2NJbjZc7bbUP8i3Tw/F15ESAeqxQ1GLhx2KvLEpEtRX2zvr ZAZuCir9fQ/quWlhyphU70YIeMElIW3iTq8ejeEQU//zZs0FK6jiHWSadPPUkVkp QaBPqTXfcovGy430ZvDbT+i4rY8mayy7tIN0XejcPt5mZmPqOdk59cd8vy616BGW WsCZTSwoYhnQ/Q0nSO6j2i2IAuqXMdyFzgoR7eRrcttEpewy+CnT70ToRlw5Z6mG dqYrxi+UF3Z6A1gIoYU6C0Lwbozs8HuTQ3YMVD9XJPVzo0Eo1R6oa/A3O9bZM/Sz -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:50 2026 by rpki-client