This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/kvnj2cNsUgWmKqruiHTj8IAxW0w.roa File: kvnj2cNsUgWmKqruiHTj8IAxW0w.roa (raw, json) Hash identifier: 2sBzVhGKmjkLG0YmT86Sdiztaegp2q/NY0RQl2BxzZI= Subject key identifier: 92:F9:E3:D9:C3:6C:52:05:A6:2A:AA:EE:88:74:E3:F0:80:31:5B:4C Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc Certificate serial: 019B7EA4C8CE7F8C7433B2305E3565C67C51 Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/kvnj2cNsUgWmKqruiHTj8IAxW0w.roa Signing time: Fri 02 Jan 2026 12:18:07 +0000 ROA not before: Fri 02 Jan 2026 12:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12969 IP address blocks: 5.23.64.0/19 maxlen: 19 5.23.64.0/20 maxlen: 20 5.23.80.0/20 maxlen: 20 46.239.192.0/18 maxlen: 18 46.239.192.0/19 maxlen: 19 46.239.224.0/19 maxlen: 19 62.145.128.0/19 maxlen: 19 81.15.0.0/17 maxlen: 17 88.149.0.0/17 maxlen: 17 89.160.128.0/17 maxlen: 17 185.21.16.0/22 maxlen: 22 185.21.16.0/23 maxlen: 23 185.21.18.0/23 maxlen: 23 185.24.0.0/22 maxlen: 22 185.24.0.0/23 maxlen: 23 193.4.0.0/19 maxlen: 19 193.4.4.0/24 maxlen: 24 193.4.5.0/24 maxlen: 24 193.4.6.0/24 maxlen: 24 193.4.48.0/21 maxlen: 21 193.4.56.0/23 maxlen: 23 193.4.60.0/22 maxlen: 22 193.4.64.0/18 maxlen: 18 193.4.128.0/17 maxlen: 17 194.144.0.0/16 maxlen: 16 213.176.128.0/19 maxlen: 19 213.176.131.0/24 maxlen: 24 213.213.128.0/19 maxlen: 19 213.220.64.0/18 maxlen: 18 217.9.128.0/20 maxlen: 20 217.151.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:c8:ce:7f:8c:74:33:b2:30:5e:35:65:c6:7c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc Validity Not Before: Jan 2 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92f9e3d9c36c5205a62aaaee8874e3f080315b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:dd:6b:09:65:67:9a:98:35:ec:b9:b0:4e: c2:ce:69:e9:00:c4:97:64:47:07:aa:03:ad:ce:4d: b9:ce:45:0b:65:cd:9d:51:e8:46:7b:f0:45:e4:1c: 56:a1:54:6e:ea:40:61:82:c0:e0:fb:0b:1f:19:c4: 62:89:a0:2f:ac:50:6e:9e:af:10:a1:c1:8c:e7:c9: 39:c7:88:11:d0:30:d7:62:c1:b5:29:dc:3a:94:92: fd:1c:a3:62:ad:71:eb:ce:95:16:d9:f0:6d:07:28: b4:81:b9:93:a7:2e:05:9a:9b:dc:77:e5:e4:94:d5: ec:76:37:b7:cc:b7:6b:67:37:26:64:d9:7d:47:37: ec:3c:b6:06:34:92:20:27:9a:c9:e2:19:b3:26:ca: 93:52:e2:ef:2e:d8:70:b4:c7:a1:b5:21:8f:8b:76: 1a:de:66:6e:6d:58:90:24:c2:d7:f8:d6:2d:61:99: ba:0a:28:ef:fd:98:ba:e5:54:5e:22:b9:40:69:c7: 4d:29:12:2a:be:89:61:48:bd:32:25:03:5f:86:fd: 6a:4a:6b:8d:56:6d:c3:83:61:ba:d0:d2:85:93:4c: cd:db:8c:3e:81:c6:c7:9a:07:85:94:2d:1f:27:6e: 56:5e:0d:d4:5f:a7:91:6e:d8:a1:2d:23:a9:98:51: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F9:E3:D9:C3:6C:52:05:A6:2A:AA:EE:88:74:E3:F0:80:31:5B:4C X509v3 Authority Key Identifier: keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/kvnj2cNsUgWmKqruiHTj8IAxW0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.23.64.0/19 46.239.192.0/18 62.145.128.0/19 81.15.0.0/17 88.149.0.0/17 89.160.128.0/17 185.21.16.0/22 185.24.0.0/22 193.4.0.0/19 193.4.48.0-193.4.57.255 193.4.60.0-193.4.255.255 194.144.0.0/16 213.176.128.0/19 213.213.128.0/19 213.220.64.0/18 217.9.128.0/20 217.151.160.0/19 Signature Algorithm: sha256WithRSAEncryption 31:af:99:0f:8e:46:fd:e7:35:2a:88:36:72:42:be:ac:ae:83: dc:6d:d4:c8:dc:89:6f:64:4a:d0:fc:66:21:8e:b5:c8:97:26: ff:80:3f:1a:3e:3d:01:f9:e3:9a:3a:f4:92:8a:99:90:31:75: eb:a7:9b:f1:52:57:98:08:f5:a5:ef:b9:92:99:86:db:aa:0a: d0:e0:8c:dc:2a:27:e6:28:fa:ab:37:3d:88:a6:9a:87:b0:05: 41:cb:0b:8c:ba:9b:de:fb:ab:0e:0f:0f:86:8a:e9:33:5c:94: e5:3c:ed:f4:1b:cf:a1:62:13:b7:7e:cf:8f:8a:bf:04:de:ce: 61:98:bc:c9:7a:e9:d3:3e:ea:41:63:86:e1:ed:5e:12:7e:ea: f1:71:5c:f1:de:63:c1:1d:33:a0:5e:d5:c3:9b:f2:d6:d5:03: 2e:ff:ff:40:1a:b0:09:76:e7:f6:67:63:3c:a1:ad:ec:12:da: 26:4f:a0:93:de:e3:ad:72:4b:e4:c3:e8:41:01:c9:00:ba:a7: 07:7f:f9:9f:bc:f8:3a:8d:14:fc:29:87:5f:21:e3:f0:e9:da: 2e:43:f5:5d:57:fa:20:fa:a5:67:67:2c:cc:85:85:40:6e:99: 5e:82:f4:d9:9f:fe:58:c0:f2:d6:29:d9:de:a3:08:ae:d5:87: 5a:21:4a:21 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZt+pMjOf4x0M7IwXjVlxnxRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNjYyY2VlYjcyNjc3NGIxYjQ0YzUxZmYxZmMwZGY5MDhi ZGViYmMwHhcNMjYwMTAyMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmY5ZTNkOWMzNmM1MjA1YTYyYWFhZWU4ODc0ZTNmMDgwMzE1YjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrbdawllZ5qYNey5sE7CzmnpAMSX ZEcHqgOtzk25zkULZc2dUehGe/BF5BxWoVRu6kBhgsDg+wsfGcRiiaAvrFBunq8Q ocGM58k5x4gR0DDXYsG1Kdw6lJL9HKNirXHrzpUW2fBtByi0gbmTpy4Fmpvcd+Xk lNXsdje3zLdrZzcmZNl9RzfsPLYGNJIgJ5rJ4hmzJsqTUuLvLthwtMehtSGPi3Ya 3mZubViQJMLX+NYtYZm6Cijv/Zi65VReIrlAacdNKRIqvolhSL0yJQNfhv1qSmuN Vm3Dg2G60NKFk0zN24w+gcbHmgeFlC0fJ25WXg3UX6eRbtihLSOpmFFHWwIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFJL549nDbFIFpiqq7oh04/CAMVtMMB8GA1UdIwQY MBaAFMtmLO63JndLG0TFH/H8DfkIveu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTJZczdyY21kMHNiUk1VZjhmd04tUWk5Njd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9hOTYyYTktYWJmZi00NDk1LTg2Y2Mt YjU2YzhjY2IyOTM1LzEva3ZuajJjTnNVZ1dtS3FydWlIVGo4SUF4VzB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9hOTYyYTktYWJmZi00NDk1LTg2Y2MtYjU2YzhjY2IyOTM1 LzEveTJZczdyY21kMHNiUk1VZjhmd04tUWk5Njd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEBQUXQAME Bi7vwAMEBT6RgAMEB1EPAAMEB1iVAAMEB1mggAMEArkVEAMEArkYAAMEBcEEADAM AwQEwQQwAwQBwQQ4MAsDBALBBDwDAwDBBAMDAMKQAwQF1bCAAwQF1dWAAwQG1dxA AwQE2QmAAwQF2ZegMA0GCSqGSIb3DQEBCwUAA4IBAQAxr5kPjkb95zUqiDZyQr6s roPcbdTI3IlvZErQ/GYhjrXIlyb/gD8aPj0B+eOaOvSSipmQMXXrp5vxUleYCPWl 77mSmYbbqgrQ4IzcKifmKPqrNz2IppqHsAVBywuMupve+6sODw+GiukzXJTlPO30 G8+hYhO3fs+Pir8E3s5hmLzJeunTPupBY4bh7V4SfurxcVzx3mPBHTOgXtXDm/LW 1QMu//9AGrAJduf2Z2M8oa3sEtomT6CT3uOtckvkw+hBAckAuqcHf/mfvPg6jRT8 KYdfIePw6douQ/VdV/og+qVnZyzMhYVAbplegvTZn/5YwPLWKdneowiu1YdaIUoh -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:03 2026 by rpki-client