This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/KKBExKXUfwOl6IRwKc1wQVHh4bM.roa File: KKBExKXUfwOl6IRwKc1wQVHh4bM.roa (raw, json) Hash identifier: 92/f9xIH6P+vz8MuNOcGvz2PgbDhKT2PNZfoBm0w3Z0= Subject key identifier: 28:A0:44:C4:A5:D4:7F:03:A5:E8:84:70:29:CD:70:41:51:E1:E1:B3 Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 019B7D5C6369F76F6C1C5A656E6602F85EE0 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/KKBExKXUfwOl6IRwKc1wQVHh4bM.roa Signing time: Fri 02 Jan 2026 06:19:25 +0000 ROA not before: Fri 02 Jan 2026 06:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213250 IP address blocks: 31.214.240.0/24 maxlen: 32 134.255.221.0/24 maxlen: 32 134.255.235.0/24 maxlen: 24 134.255.236.0/24 maxlen: 32 134.255.254.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:63:69:f7:6f:6c:1c:5a:65:6e:66:02:f8:5e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Jan 2 06:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28a044c4a5d47f03a5e8847029cd704151e1e1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bc:1a:7a:c9:ed:16:e2:3a:08:ca:e2:b2:b8: 63:41:a7:3f:ae:4f:83:06:2a:36:52:0d:3d:b8:3a: 66:05:f8:15:6d:5e:69:c3:2c:51:7f:ec:58:32:37: 0e:23:3d:73:f2:86:77:a5:88:a9:76:7a:98:78:92: 51:6e:b3:61:d0:63:1f:fd:bf:81:99:cc:35:89:29: 4d:3f:78:b4:99:62:2b:c5:d7:17:02:16:f5:bf:d5: 71:91:95:23:2d:a9:86:15:dc:f3:fd:50:af:97:53: 57:b3:4c:e1:e0:73:0a:f2:8b:d7:9f:c8:c1:af:0b: c9:53:26:42:0b:21:4f:7c:ab:5d:bb:be:bb:f8:c2: 9c:e3:07:e2:12:a9:23:db:fc:b0:e2:1d:52:f2:f5: b2:6a:39:dd:c1:c1:4b:d1:36:6c:0e:35:7c:70:2c: 67:d3:65:16:f3:ee:64:7e:85:e6:a9:cf:67:ab:20: 1e:a5:d6:c5:cb:fa:7f:dd:36:ce:54:5e:40:41:f5: bf:7f:77:4d:34:1b:1c:78:34:70:68:dd:6e:c8:8a: 21:66:56:6c:40:66:c7:99:40:2c:d9:be:69:c3:3b: 34:d1:f5:92:74:89:bf:4a:7d:b0:f5:af:0e:6c:34: fa:6a:d0:aa:5c:46:00:85:0d:86:5d:69:70:22:ac: 9a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A0:44:C4:A5:D4:7F:03:A5:E8:84:70:29:CD:70:41:51:E1:E1:B3 X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/KKBExKXUfwOl6IRwKc1wQVHh4bM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.214.240.0/24 134.255.221.0/24 134.255.235.0-134.255.236.255 134.255.254.0/24 Signature Algorithm: sha256WithRSAEncryption ba:0a:0a:96:2b:06:35:9f:ab:60:a0:d9:47:30:6b:92:ab:95: ba:13:e1:07:d2:97:cc:f8:0c:49:a5:12:ae:3e:77:32:77:b7: 5b:0a:39:69:95:2e:c8:fe:7b:84:43:d5:16:bf:00:3b:3e:d1: 93:c6:73:30:ab:ed:70:5f:c9:41:00:83:4e:f2:a9:9e:12:f0: 47:77:6b:07:3b:76:f9:23:14:3e:6a:60:23:a0:e6:49:3f:77: f9:80:e0:33:4e:ee:8d:c8:8d:f6:da:14:1f:c9:dd:35:ff:3c: eb:54:32:47:3a:75:17:50:1f:ed:a3:99:0d:79:6a:1e:2e:59: 00:6c:bc:ae:f3:25:c6:12:09:d0:f2:ee:24:0b:ba:fb:9a:42: 3c:92:c8:2b:30:6a:4b:c5:3a:58:51:ad:e1:23:8b:47:69:44: 08:3c:29:89:f8:20:32:f4:12:4a:70:1d:64:fd:ab:d5:c9:82: 3a:c0:67:dc:20:71:35:0e:91:b9:47:fc:29:9a:3f:22:07:76: 1c:bf:53:63:ac:cd:4c:79:77:84:9f:72:ed:36:80:80:3f:b3: e2:57:b7:2f:0b:62:c7:a1:46:b9:35:fa:28:5d:be:ec:b3:27: 2b:1c:dd:ba:23:4a:25:ce:dc:87:0e:06:6c:86:15:be:fc:fb: ec:48:92:1c -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9XGNp929sHFplbmYC+F7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjYwMTAyMDYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGEwNDRjNGE1ZDQ3ZjAzYTVlODg0NzAyOWNkNzA0MTUxZTFlMWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bwaesntFuI6CMrisrhjQac/rk+D Bio2Ug09uDpmBfgVbV5pwyxRf+xYMjcOIz1z8oZ3pYipdnqYeJJRbrNh0GMf/b+B mcw1iSlNP3i0mWIrxdcXAhb1v9VxkZUjLamGFdzz/VCvl1NXs0zh4HMK8ovXn8jB rwvJUyZCCyFPfKtdu767+MKc4wfiEqkj2/yw4h1S8vWyajndwcFL0TZsDjV8cCxn 02UW8+5kfoXmqc9nqyAepdbFy/p/3TbOVF5AQfW/f3dNNBsceDRwaN1uyIohZlZs QGbHmUAs2b5pwzs00fWSdIm/Sn2w9a8ObDT6atCqXEYAhQ2GXWlwIqyajwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFCigRMSl1H8DpeiEcCnNcEFR4eGzMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvS0tCRXhLWFVmd09sNklSd0tjMXdRVkhoNGJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAH9bwAwQA hv/dMAwDBACG/+sDBACG/+wDBACG//4wDQYJKoZIhvcNAQELBQADggEBALoKCpYr BjWfq2Cg2Ucwa5KrlboT4QfSl8z4DEmlEq4+dzJ3t1sKOWmVLsj+e4RD1Ra/ADs+ 0ZPGczCr7XBfyUEAg07yqZ4S8Ed3awc7dvkjFD5qYCOg5kk/d/mA4DNO7o3Ijfba FB/J3TX/POtUMkc6dRdQH+2jmQ15ah4uWQBsvK7zJcYSCdDy7iQLuvuaQjySyCsw akvFOlhRreEji0dpRAg8KYn4IDL0EkpwHWT9q9XJgjrAZ9wgcTUOkblH/CmaPyIH dhy/U2OszUx5d4Sfcu02gIA/s+JXty8LYsehRrk1+ihdvuyzJysc3bojSiXO3IcO BmyGFb78++xIkhw= -----END CERTIFICATE-----Generated at Wed Jan 21 02:48:44 2026 by rpki-client