This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ksaETBWxzm_4tSWO6-7bZDo8788.roa File: ksaETBWxzm_4tSWO6-7bZDo8788.roa (raw, json) Hash identifier: v0AB91SHigGpFT1WQXfpc5sbmJpyeS+6pk1Qxg8M1O0= Subject key identifier: 92:C6:84:4C:15:B1:CE:6F:F8:B5:25:8E:EB:EE:DB:64:3A:3C:EF:CF Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C133F80A872EF0A3158153B101764A7 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ksaETBWxzm_4tSWO6-7bZDo8788.roa Signing time: Fri 02 Jan 2026 00:19:54 +0000 ROA not before: Fri 02 Jan 2026 00:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 272827 IP address blocks: 171.22.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3f:80:a8:72:ef:0a:31:58:15:3b:10:17:64:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92c6844c15b1ce6ff8b5258eebeedb643a3cefcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:f0:68:f0:f8:03:61:ac:a7:d2:ae:d4:57: c1:cd:5d:09:38:a8:87:77:15:f0:7d:0e:1b:52:29: b7:94:09:38:46:f2:ae:9b:9d:c0:6e:91:06:24:3a: 42:a0:c4:3b:77:3e:b8:81:a8:a9:13:80:bb:2a:a9: 25:c7:3e:ef:5b:11:9f:29:30:11:69:d2:62:0b:16: 21:3a:8d:e2:2d:09:2f:e6:25:ae:15:14:7a:67:b2: 3b:f4:0e:fa:dd:96:1e:c0:ee:18:f3:5e:4a:98:1c: 12:52:30:e5:d0:47:1d:1a:82:ce:26:76:8d:49:2b: 96:df:b5:55:23:4d:54:e4:fb:b6:14:5a:fe:2d:32: 03:4d:96:15:16:c1:9a:88:78:0f:22:d4:07:05:b4: 1c:c8:34:cf:72:a6:bf:64:10:66:ff:33:d3:6b:a8: 4f:d5:d0:6f:db:73:dd:a0:0a:0a:ed:31:2d:fe:c6: 0b:11:10:59:33:18:b9:aa:7e:db:0d:9d:09:e1:d1: 3f:f6:c9:64:6a:f5:00:36:78:97:79:28:ab:e6:60: 3b:3a:e2:af:c0:c0:a1:d0:11:34:8a:e8:a3:8d:63: 10:b0:7c:06:60:8d:72:fb:82:e7:c9:12:e2:67:31: 5d:f8:6f:cc:d6:aa:27:a3:65:4b:e8:2e:18:92:d3: 5b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C6:84:4C:15:B1:CE:6F:F8:B5:25:8E:EB:EE:DB:64:3A:3C:EF:CF X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ksaETBWxzm_4tSWO6-7bZDo8788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.165.0/24 Signature Algorithm: sha256WithRSAEncryption 68:71:51:a8:2f:18:45:ae:26:31:d7:c8:76:47:8f:5d:65:cb: a7:50:e8:72:77:1d:94:22:1d:4f:45:5c:b9:ae:8b:e0:ba:a9: 67:e7:f5:f4:bc:73:37:18:d9:34:cc:49:82:b6:8f:e3:af:de: be:50:d0:6e:38:f8:61:25:b4:09:b0:e0:cb:01:20:bf:f8:63: 38:1d:29:37:a5:9f:cd:a5:87:d3:dd:35:62:4f:9e:87:92:57: 26:be:77:86:56:2c:5f:5e:07:02:65:c9:26:b3:04:68:94:08: be:10:c6:52:05:26:07:90:eb:eb:b5:f5:35:7f:70:a3:8e:d3: a8:03:7f:6e:42:20:ce:a8:3d:72:80:2b:43:90:f1:63:c8:06: db:c8:10:69:b3:3f:c1:65:00:eb:e3:86:ae:2e:ed:aa:79:a0: 72:14:f0:0d:e7:a5:1d:0c:a2:a8:9e:09:16:7f:3a:7c:43:13: 70:1e:3d:d4:6b:9e:6c:33:26:8f:26:25:da:b1:2a:b6:09:7b: 7b:be:da:6e:ed:1f:14:5e:56:09:1f:24:08:d5:23:60:a6:68: 68:6c:b2:e4:2f:94:55:02:8e:61:4e:6c:be:79:1b:df:b0:0f: aa:d7:c6:c8:b5:f0:c3:0f:ce:e6:1f:f8:be:59:5b:ee:0a:8d: 55:ca:9d:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ez+AqHLvCjFYFTsQF2SnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmM2ODQ0YzE1YjFjZTZmZjhiNTI1OGVlYmVlZGI2NDNhM2NlZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBzwaPD4A2Gsp9Ku1FfBzV0JOKiH dxXwfQ4bUim3lAk4RvKum53AbpEGJDpCoMQ7dz64gaipE4C7Kqklxz7vWxGfKTAR adJiCxYhOo3iLQkv5iWuFRR6Z7I79A763ZYewO4Y815KmBwSUjDl0EcdGoLOJnaN SSuW37VVI01U5Pu2FFr+LTIDTZYVFsGaiHgPItQHBbQcyDTPcqa/ZBBm/zPTa6hP 1dBv23PdoAoK7TEt/sYLERBZMxi5qn7bDZ0J4dE/9slkavUANniXeSir5mA7OuKv wMCh0BE0iuijjWMQsHwGYI1y+4LnyRLiZzFd+G/M1qono2VL6C4YktNbnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJLGhEwVsc5v+LUljuvu22Q6PO/PMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEva3NhRVRCV3h6bV80dFNXTzYtN2JaRG84Nzg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxalMA0G CSqGSIb3DQEBCwUAA4IBAQBocVGoLxhFriYx18h2R49dZcunUOhydx2UIh1PRVy5 rovguqln5/X0vHM3GNk0zEmCto/jr96+UNBuOPhhJbQJsODLASC/+GM4HSk3pZ/N pYfT3TViT56HklcmvneGVixfXgcCZckmswRolAi+EMZSBSYHkOvrtfU1f3CjjtOo A39uQiDOqD1ygCtDkPFjyAbbyBBpsz/BZQDr44auLu2qeaByFPAN56UdDKKongkW fzp8QxNwHj3Ua55sMyaPJiXasSq2CXt7vtpu7R8UXlYJHyQI1SNgpmhobLLkL5RV Ao5hTmy+eRvfsA+q18bItfDDD87mH/i+WVvuCo1Vyp3B -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:13 2026 by rpki-client