This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/KTiF2AJ-jYhH5MwBEq6DBqpHZIU.roa File: KTiF2AJ-jYhH5MwBEq6DBqpHZIU.roa (raw, json) Hash identifier: QZiMXdBbvocZooloHKXavt9Kr4OE8mOVpmaFum5U1Uk= Subject key identifier: 29:38:85:D8:02:7E:8D:88:47:E4:CC:01:12:AE:83:06:AA:47:64:85 Certificate issuer: /CN=767bc02a5859623f563ea84a6bb0a2920d5b3e91 Certificate serial: 019B7BA3FC641BF3CE751E07DF426BCF2692 Authority key identifier: 76:7B:C0:2A:58:59:62:3F:56:3E:A8:4A:6B:B0:A2:92:0D:5B:3E:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/KTiF2AJ-jYhH5MwBEq6DBqpHZIU.roa Signing time: Thu 01 Jan 2026 22:18:23 +0000 ROA not before: Thu 01 Jan 2026 22:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44702 IP address blocks: 5.199.184.0/22 maxlen: 22 5.199.184.0/24 maxlen: 24 5.199.185.0/24 maxlen: 24 5.199.186.0/24 maxlen: 24 5.199.187.0/24 maxlen: 24 45.142.196.0/22 maxlen: 22 45.142.196.0/24 maxlen: 24 45.142.197.0/24 maxlen: 24 45.142.198.0/24 maxlen: 24 45.142.199.0/24 maxlen: 24 79.134.128.0/20 maxlen: 20 79.134.128.0/22 maxlen: 22 79.134.128.0/23 maxlen: 23 79.134.128.0/24 maxlen: 24 79.134.129.0/24 maxlen: 24 79.134.130.0/24 maxlen: 24 79.134.131.0/24 maxlen: 24 79.134.132.0/22 maxlen: 22 79.134.132.0/24 maxlen: 24 79.134.133.0/24 maxlen: 24 79.134.134.0/24 maxlen: 24 79.134.135.0/24 maxlen: 24 79.134.136.0/22 maxlen: 22 79.134.136.0/24 maxlen: 24 79.134.137.0/24 maxlen: 24 79.134.138.0/24 maxlen: 24 79.134.139.0/24 maxlen: 24 79.134.140.0/22 maxlen: 22 79.134.140.0/24 maxlen: 24 79.134.141.0/24 maxlen: 24 79.134.142.0/24 maxlen: 24 79.134.143.0/24 maxlen: 24 79.134.144.0/22 maxlen: 22 79.134.144.0/24 maxlen: 24 79.134.145.0/24 maxlen: 24 79.134.146.0/24 maxlen: 24 79.134.147.0/24 maxlen: 24 79.134.148.0/22 maxlen: 22 79.134.148.0/24 maxlen: 24 79.134.149.0/24 maxlen: 24 79.134.150.0/24 maxlen: 24 79.134.151.0/24 maxlen: 24 79.134.152.0/22 maxlen: 22 79.134.152.0/24 maxlen: 24 79.134.153.0/24 maxlen: 24 79.134.154.0/24 maxlen: 24 79.134.155.0/24 maxlen: 24 79.134.156.0/22 maxlen: 22 79.134.156.0/24 maxlen: 24 79.134.157.0/24 maxlen: 24 79.134.158.0/24 maxlen: 24 79.134.159.0/24 maxlen: 24 185.139.220.0/22 maxlen: 22 185.139.220.0/24 maxlen: 24 185.139.221.0/24 maxlen: 24 185.139.222.0/24 maxlen: 24 185.139.223.0/24 maxlen: 24 2a07:140::/29 maxlen: 29 2a07:140::/32 maxlen: 32 2a07:141::/32 maxlen: 32 2a07:142::/32 maxlen: 32 2a07:143::/32 maxlen: 32 2a07:144::/32 maxlen: 32 2a07:145::/32 maxlen: 32 2a07:146::/32 maxlen: 32 2a07:147::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.crl rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:fc:64:1b:f3:ce:75:1e:07:df:42:6b:cf:26:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767bc02a5859623f563ea84a6bb0a2920d5b3e91 Validity Not Before: Jan 1 22:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=293885d8027e8d8847e4cc0112ae8306aa476485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:22:20:3f:dd:40:78:9d:38:ae:8c:fa:60: 48:c0:18:1b:ef:a1:21:64:bf:ac:9a:9c:7c:6b:42: 54:d3:02:98:9a:66:7e:df:ab:7c:ee:89:a9:49:12: 8c:1f:52:50:b1:bd:22:91:66:0b:63:36:f5:7d:b8: 8b:12:66:3a:a0:cd:4e:ce:2c:7d:1e:f1:df:5a:bf: 54:74:75:d4:6a:5b:c3:f5:b1:56:08:50:27:5d:8a: a9:39:1b:f4:14:08:e9:23:23:ac:01:b8:78:a0:44: ec:87:85:8c:3b:7f:7b:b9:7f:d1:85:a6:86:0e:01: cc:ad:f6:c8:3b:bd:5e:d0:17:81:d4:8e:1c:11:88: 6c:bc:42:38:69:52:cd:53:32:11:42:69:80:f7:19: 2f:dd:c1:b5:a7:b1:71:a0:9f:6c:49:1b:49:1f:24: b2:79:5a:e9:4e:a4:18:be:9a:71:c5:f8:24:c0:f9: 92:99:87:74:57:6d:4a:91:c4:2e:f6:e2:a2:3e:e1: b0:e0:8d:49:ae:06:d8:30:7d:47:5b:2f:73:08:77: 77:38:c2:74:ce:47:6c:dc:5f:62:c1:cb:4e:8c:50: 63:f4:c2:f8:f8:b7:4b:ba:28:a6:0f:a2:55:3a:a5: 24:a4:ab:ea:ad:e0:5d:02:d2:19:83:c3:3e:81:da: 02:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:38:85:D8:02:7E:8D:88:47:E4:CC:01:12:AE:83:06:AA:47:64:85 X509v3 Authority Key Identifier: keyid:76:7B:C0:2A:58:59:62:3F:56:3E:A8:4A:6B:B0:A2:92:0D:5B:3E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/KTiF2AJ-jYhH5MwBEq6DBqpHZIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.184.0/22 45.142.196.0/22 79.134.128.0/19 185.139.220.0/22 IPv6: 2a07:140::/29 Signature Algorithm: sha256WithRSAEncryption 8f:a9:95:84:dc:a9:c0:a3:1c:b5:ce:40:2b:4a:e6:96:34:52: 49:1f:68:62:c7:6a:c0:c2:3c:a0:cc:04:be:f2:a9:fc:c7:f5: cd:d3:41:28:6a:af:53:1d:56:34:ad:03:42:1c:fc:ca:5b:92: 5a:f8:f8:95:04:1c:dd:5d:44:5a:8d:a9:46:1e:22:b4:44:7b: 71:f7:57:d9:3f:c7:07:ba:6c:07:4b:ee:d6:d7:ca:2d:d6:3e: d3:33:d0:f4:a7:76:62:92:2a:14:f8:b5:a3:6b:81:22:58:da: db:40:47:ba:71:4c:bc:45:1b:91:f3:d7:c0:d6:c1:35:ae:cd: 37:a5:dd:67:8d:62:34:f4:81:b2:20:36:db:1b:7a:95:a1:f5: c1:ae:88:f5:b8:c2:02:a2:9f:fb:c0:03:2c:67:33:b3:53:d2: 1b:ab:96:74:7f:54:e8:db:5f:a5:75:36:2e:34:9e:82:6b:a7: 2e:75:8d:f2:54:8f:f7:b9:58:f4:7c:34:b5:65:57:68:36:70: eb:75:e0:e3:bc:ba:1a:fa:6d:59:09:6b:70:4c:3c:60:fb:b7: c3:d7:0e:da:2f:97:32:0a:35:f4:3a:04:f8:c0:21:b7:3c:41: 08:ca:b7:ad:c6:75:81:c6:be:39:cc:ee:7c:7a:b6:c7:b1:e5: 0e:b4:88:cf -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt7o/xkG/POdR4H30JrzyaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2JjMDJhNTg1OTYyM2Y1NjNlYTg0YTZiYjBhMjkyMGQ1 YjNlOTEwHhcNMjYwMTAxMjIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTM4ODVkODAyN2U4ZDg4NDdlNGNjMDExMmFlODMwNmFhNDc2NDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfsiID/dQHidOK6M+mBIwBgb76Eh ZL+smpx8a0JU0wKYmmZ+36t87ompSRKMH1JQsb0ikWYLYzb1fbiLEmY6oM1Ozix9 HvHfWr9UdHXUalvD9bFWCFAnXYqpORv0FAjpIyOsAbh4oETsh4WMO397uX/RhaaG DgHMrfbIO71e0BeB1I4cEYhsvEI4aVLNUzIRQmmA9xkv3cG1p7FxoJ9sSRtJHySy eVrpTqQYvppxxfgkwPmSmYd0V21KkcQu9uKiPuGw4I1JrgbYMH1HWy9zCHd3OMJ0 zkds3F9iwctOjFBj9ML4+LdLuiimD6JVOqUkpKvqreBdAtIZg8M+gdoCrQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFCk4hdgCfo2IR+TMARKugwaqR2SFMB8GA1UdIwQY MBaAFHZ7wCpYWWI/Vj6oSmuwopINWz6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG52QUtsaFpZajlXUHFoS2E3Q2lrZzFiUHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jZGFiYzQtYmFlNS00ZDk5LTllMTct NjgxNTU0OGJmMzNmLzEvS1RpRjJBSi1qWWhINU13QkVxNkRCcXBIWklVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9jZGFiYzQtYmFlNS00ZDk5LTllMTctNjgxNTU0OGJmMzNm LzEvZG52QUtsaFpZajlXUHFoS2E3Q2lrZzFiUHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCBce4AwQC LY7EAwQFT4aAAwQCuYvcMA0EAgACMAcDBQMqBwFAMA0GCSqGSIb3DQEBCwUAA4IB AQCPqZWE3KnAoxy1zkArSuaWNFJJH2hix2rAwjygzAS+8qn8x/XN00Eoaq9THVY0 rQNCHPzKW5Ja+PiVBBzdXURajalGHiK0RHtx91fZP8cHumwHS+7W18ot1j7TM9D0 p3ZikioU+LWja4EiWNrbQEe6cUy8RRuR89fA1sE1rs03pd1njWI09IGyIDbbG3qV ofXBroj1uMICop/7wAMsZzOzU9Ibq5Z0f1To21+ldTYuNJ6Ca6cudY3yVI/3uVj0 fDS1ZVdoNnDrdeDjvLoa+m1ZCWtwTDxg+7fD1w7aL5cyCjX0OgT4wCG3PEEIyret xnWBxr45zO58erbHseUOtIjP -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:29 2026 by rpki-client