This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/ktLQLQ79jgHcsxhu1BFiAsTmURc.roa File: ktLQLQ79jgHcsxhu1BFiAsTmURc.roa (raw, json) Hash identifier: eJQ6FZ55P7nS0k0ro2Z4J5rRPruHptyIHKzgVhT0dJE= Subject key identifier: 92:D2:D0:2D:0E:FD:8E:01:DC:B3:18:6E:D4:11:62:02:C4:E6:51:17 Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Certificate serial: 019B79ED4250427F00069668883620076116 Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/ktLQLQ79jgHcsxhu1BFiAsTmURc.roa Signing time: Thu 01 Jan 2026 14:19:10 +0000 ROA not before: Thu 01 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 203.202.233.0/24 maxlen: 24 2a05:d740::/30 maxlen: 30 2a05:d744::/30 maxlen: 30 2a06:e900::/30 maxlen: 30 2a06:e904::/30 maxlen: 30 2a07:4a00::/30 maxlen: 30 2a07:4a04::/30 maxlen: 30 2a0a:37c0::/30 maxlen: 30 2a0a:37c4::/30 maxlen: 30 2a0b:9800::/30 maxlen: 30 2a0b:9804::/30 maxlen: 30 2a0b:a280::/30 maxlen: 30 2a0b:a284::/30 maxlen: 30 2a0b:a300::/30 maxlen: 30 2a0b:a304::/30 maxlen: 30 2a0c:7440::/30 maxlen: 30 2a0c:7444::/30 maxlen: 30 2a0c:74c0::/30 maxlen: 30 2a0c:74c4::/30 maxlen: 30 2a0c:7540::/30 maxlen: 30 2a0c:7544::/30 maxlen: 30 2a0d:2cc0::/30 maxlen: 30 2a0d:2cc4::/30 maxlen: 30 2a0d:88c0::/30 maxlen: 30 2a0d:88c4::/30 maxlen: 30 2a0f:1180::/30 maxlen: 30 2a0f:1184::/30 maxlen: 30 2a0f:2380::/30 maxlen: 30 2a0f:2384::/30 maxlen: 30 2a0f:3380::/30 maxlen: 30 2a0f:3384::/30 maxlen: 30 2a0f:4580::/30 maxlen: 30 2a0f:4584::/30 maxlen: 30 2a0f:4680::/30 maxlen: 30 2a0f:4684::/30 maxlen: 30 2a0f:5580::/30 maxlen: 30 2a0f:5584::/30 maxlen: 30 2a0f:7100::/30 maxlen: 30 2a0f:7104::/30 maxlen: 30 2a0f:7300::/30 maxlen: 30 2a0f:7304::/30 maxlen: 30 2a0f:7c80::/30 maxlen: 30 2a0f:7c84::/30 maxlen: 30 2a0f:9fc0::/30 maxlen: 30 2a0f:9fc4::/30 maxlen: 30 2a0f:a140::/30 maxlen: 30 2a0f:a144::/30 maxlen: 30 2a0f:a500::/30 maxlen: 30 2a0f:a504::/30 maxlen: 30 2a0f:a700::/30 maxlen: 30 2a0f:a704::/30 maxlen: 30 2a0f:c780::/30 maxlen: 30 2a0f:c784::/30 maxlen: 30 2a14:4080::/30 maxlen: 30 2a14:4084::/30 maxlen: 30 2a14:4380::/30 maxlen: 30 2a14:4384::/30 maxlen: 30 2a14:4480::/30 maxlen: 30 2a14:4484::/30 maxlen: 30 2a14:4980::/30 maxlen: 30 2a14:4984::/30 maxlen: 30 2a14:4a80::/30 maxlen: 30 2a14:4a84::/30 maxlen: 30 2a14:4b80::/30 maxlen: 30 2a14:4b84::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:42:50:42:7f:00:06:96:68:88:36:20:07:61:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92d2d02d0efd8e01dcb3186ed4116202c4e65117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cf:90:3f:a9:5b:20:4a:7c:93:27:0c:ab:ea: f1:4a:a7:eb:51:b3:8b:8f:a2:27:b4:30:b8:fd:0f: 84:e3:15:fa:3d:03:e1:88:42:59:20:44:70:1b:03: 5e:60:0c:3a:83:6b:84:84:6d:43:2b:8e:d9:4c:65: 58:06:93:f2:1d:c5:18:91:7a:18:09:02:71:08:4c: cf:03:1e:0a:32:31:b2:43:1d:d2:c8:50:71:22:1e: 64:d6:07:5e:f2:4c:40:a0:f5:a8:38:77:48:aa:58: 3b:f2:8e:c0:86:d8:28:db:e0:77:f7:5f:79:a0:d9: f9:04:72:59:a1:59:ce:86:2a:66:be:7c:30:85:44: 3e:c9:36:03:d0:81:49:b6:a8:5d:3f:55:c5:48:7f: de:66:1c:a2:dd:2e:79:44:d4:54:48:5b:3c:48:6f: ad:c9:25:33:85:a9:b5:23:18:41:e7:a2:a4:ad:fa: 07:53:1e:e8:4a:fb:fd:42:10:b1:98:b6:15:ff:4b: fe:c1:0e:17:af:57:c9:ee:1b:8a:fc:20:c2:a1:61: d9:dd:d4:b5:0a:c5:c6:2e:cb:5d:69:da:3d:83:cc: 03:09:87:10:25:ba:8e:cc:e0:c9:49:8f:e2:2f:c8: 67:2c:51:b8:3c:5a:d4:9b:7b:f7:2a:ba:0c:42:e3: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D2:D0:2D:0E:FD:8E:01:DC:B3:18:6E:D4:11:62:02:C4:E6:51:17 X509v3 Authority Key Identifier: keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/ktLQLQ79jgHcsxhu1BFiAsTmURc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.202.233.0/24 IPv6: 2a05:d740::/29 2a06:e900::/29 2a07:4a00::/29 2a0a:37c0::/29 2a0b:9800::/29 2a0b:a280::/29 2a0b:a300::/29 2a0c:7440::/29 2a0c:74c0::/29 2a0c:7540::/29 2a0d:2cc0::/29 2a0d:88c0::/29 2a0f:1180::/29 2a0f:2380::/29 2a0f:3380::/29 2a0f:4580::/29 2a0f:4680::/29 2a0f:5580::/29 2a0f:7100::/29 2a0f:7300::/29 2a0f:7c80::/29 2a0f:9fc0::/29 2a0f:a140::/29 2a0f:a500::/29 2a0f:a700::/29 2a0f:c780::/29 2a14:4080::/29 2a14:4380::/29 2a14:4480::/29 2a14:4980::/29 2a14:4a80::/29 2a14:4b80::/29 Signature Algorithm: sha256WithRSAEncryption 8f:99:cb:68:4d:4e:be:9e:39:67:f3:1a:9c:bd:9b:8e:ae:06: 12:91:c5:f7:9a:33:be:67:d8:c6:52:a6:5c:79:f3:a5:e3:f9: 11:b0:54:97:ac:68:37:53:16:7a:78:76:30:d8:f5:92:39:f9: cf:e1:fd:be:11:db:0d:6e:9c:a3:8f:44:93:32:e2:a3:99:69: 04:c0:62:4e:b9:d2:e0:dd:c5:af:66:0d:a0:d7:71:20:71:bc: aa:29:bd:1f:b8:1f:38:9d:17:0c:9c:27:62:d5:c7:32:d9:7e: 43:54:e9:6a:67:57:ad:25:20:1f:3f:66:f7:40:b8:3b:16:c6: 2c:6f:b6:b7:18:27:3a:62:e1:e1:aa:87:1e:df:84:39:0f:5b: b2:7c:49:a9:17:06:d9:60:aa:c7:44:66:5f:e7:8b:8f:81:f0: ef:d7:9d:59:e5:9e:71:90:45:30:35:61:b3:4a:ee:6a:ed:c9: 41:79:99:50:69:1d:a9:d1:59:d8:75:ca:4b:fc:f4:8f:29:97: ec:ca:a4:a7:10:64:62:d4:71:7d:e1:76:65:f9:0a:59:80:92: a4:ec:c0:b5:dc:20:47:17:31:61:0c:78:24:7b:88:63:93:11: c1:e1:b3:ec:d6:6a:3a:73:93:03:68:bc:1d:32:a2:da:f9:89: b0:dc:71:98 -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgISAZt57UJQQn8ABpZoiDYgB2EWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz ZWRmNGIwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmQyZDAyZDBlZmQ4ZTAxZGNiMzE4NmVkNDExNjIwMmM0ZTY1MTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6s+QP6lbIEp8kycMq+rxSqfrUbOL j6IntDC4/Q+E4xX6PQPhiEJZIERwGwNeYAw6g2uEhG1DK47ZTGVYBpPyHcUYkXoY CQJxCEzPAx4KMjGyQx3SyFBxIh5k1gde8kxAoPWoOHdIqlg78o7Ahtgo2+B39195 oNn5BHJZoVnOhipmvnwwhUQ+yTYD0IFJtqhdP1XFSH/eZhyi3S55RNRUSFs8SG+t ySUzham1IxhB56KkrfoHUx7oSvv9QhCxmLYV/0v+wQ4Xr1fJ7huK/CDCoWHZ3dS1 CsXGLstdado9g8wDCYcQJbqOzODJSY/iL8hnLFG4PFrUm3v3KroMQuMwoQIDAQAB o4IC9zCCAvMwHQYDVR0OBBYEFJLS0C0O/Y4B3LMYbtQRYgLE5lEXMB8GA1UdIwQY MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt OTQ0OTk1N2ZkNWE1LzEva3RMUUxRNzlqZ0hjc3hodTFCRmlBc1RtVVJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1 LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwDAQCAAEwBgMEAMvK 6TCB5wQCAAIwgeADBQMqBddAAwUDKgbpAAMFAyoHSgADBQMqCjfAAwUDKguYAAMF AyoLooADBQMqC6MAAwUDKgx0QAMFAyoMdMADBQMqDHVAAwUDKg0swAMFAyoNiMAD BQMqDxGAAwUDKg8jgAMFAyoPM4ADBQMqD0WAAwUDKg9GgAMFAyoPVYADBQMqD3EA AwUDKg9zAAMFAyoPfIADBQMqD5/AAwUDKg+hQAMFAyoPpQADBQMqD6cAAwUDKg/H gAMFAyoUQIADBQMqFEOAAwUDKhREgAMFAyoUSYADBQMqFEqAAwUDKhRLgDANBgkq hkiG9w0BAQsFAAOCAQEAj5nLaE1Ovp45Z/ManL2bjq4GEpHF95ozvmfYxlKmXHnz peP5EbBUl6xoN1MWenh2MNj1kjn5z+H9vhHbDW6co49EkzLio5lpBMBiTrnS4N3F r2YNoNdxIHG8qim9H7gfOJ0XDJwnYtXHMtl+Q1TpamdXrSUgHz9m90C4OxbGLG+2 txgnOmLh4aqHHt+EOQ9bsnxJqRcG2WCqx0RmX+eLj4Hw79edWeWecZBFMDVhs0ru au3JQXmZUGkdqdFZ2HXKS/z0jymX7MqkpxBkYtRxfeF2ZfkKWYCSpOzAtdwgRxcx YQx4JHuIY5MRweGz7NZqOnOTA2i8HTKi2vmJsNxxmA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:21 2026 by rpki-client