This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/KfUaJnaGoAjldQlQx_gNfPDlBDo.roa File: KfUaJnaGoAjldQlQx_gNfPDlBDo.roa (raw, json) Hash identifier: Qm3Jl/tsptEy/pQrxdDz7rVbFdsrkSZMAosUglKD208= Subject key identifier: 29:F5:1A:26:76:86:A0:08:E5:75:09:50:C7:F8:0D:7C:F0:E5:04:3A Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 019B77C699FE5C270AE9E5E42B39FE339E6D Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/KfUaJnaGoAjldQlQx_gNfPDlBDo.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33659 IP address blocks: 9.142.0.0/19 maxlen: 19 138.226.0.0/20 maxlen: 20 138.226.88.0/21 maxlen: 21 170.100.128.0/22 maxlen: 22 170.100.152.0/21 maxlen: 21 170.100.192.0/21 maxlen: 21 170.100.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 11:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:99:fe:5c:27:0a:e9:e5:e4:2b:39:fe:33:9e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29f51a267686a008e5750950c7f80d7cf0e5043a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:02:fc:6c:ca:ff:fb:44:d3:7b:7a:46:84:2d: e3:fb:0c:2e:a2:12:64:48:1c:26:08:eb:2a:bc:45: 87:db:56:bf:43:9c:99:61:d9:07:b6:6f:99:e1:35: 7e:da:a4:e9:d8:80:99:a9:ba:54:e1:c9:ac:90:68: 11:06:be:e1:30:59:fd:dd:68:dc:9e:82:2a:0e:0c: ce:74:bc:d1:31:2d:3c:c0:e2:c8:7b:e6:77:10:ba: 15:77:6f:bb:55:36:15:60:6c:f0:fb:12:68:b7:99: 99:53:92:47:0a:25:73:78:79:8e:cb:30:5d:a5:ce: 56:c3:7f:56:94:60:4a:bc:e6:b9:9d:a1:51:4d:09: a0:62:19:ef:02:74:1c:39:82:ee:db:38:aa:db:58: b5:ae:e3:6a:87:70:8e:2a:e3:a4:71:ca:97:5f:08: 37:d2:eb:e7:8e:18:68:77:f9:78:73:05:d2:b2:19: 3d:2f:4e:14:4f:e6:da:68:9a:b5:86:f7:7b:93:de: cb:86:06:65:48:b2:da:6f:d1:1f:cd:da:72:52:58: 17:54:e7:c3:86:c9:44:ae:53:bb:bb:d3:88:46:9e: 6a:88:5e:18:44:d5:9d:93:44:8a:c1:33:65:37:b9: 9b:e6:0b:03:47:d5:55:3b:8d:22:55:86:e6:87:6b: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F5:1A:26:76:86:A0:08:E5:75:09:50:C7:F8:0D:7C:F0:E5:04:3A X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/KfUaJnaGoAjldQlQx_gNfPDlBDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 9.142.0.0/19 138.226.0.0/20 138.226.88.0/21 170.100.128.0/22 170.100.152.0/21 170.100.192.0-170.100.203.255 Signature Algorithm: sha256WithRSAEncryption 76:2d:53:03:bf:b2:89:71:88:fc:5b:1b:fc:44:ee:79:24:f6: 47:fe:ef:0c:98:af:b6:8b:be:5c:da:6b:90:89:a4:90:d2:cc: 59:bf:bf:90:57:01:26:63:25:2d:cc:69:5f:0d:96:84:9e:a4: 0a:75:bd:d4:a5:2b:80:d7:6c:2c:07:8a:6d:2a:8b:2e:df:b0: 27:ff:8e:46:fb:3c:80:40:4c:00:c5:03:f1:45:e6:f4:14:d5: 46:b2:16:ef:ce:a3:f1:95:3c:22:0c:2e:20:2a:88:c3:22:e2: 6c:52:94:20:93:46:39:62:39:28:8b:1b:4b:3e:05:23:56:cb: e5:57:3b:0f:b8:22:fd:9b:ea:98:0d:d7:ae:8b:53:fe:e3:b7: 3d:c7:4a:07:52:b2:b6:82:44:43:1e:16:db:1d:68:d8:06:eb: 86:f7:5b:b9:5d:29:34:53:7b:56:56:e0:24:d1:2c:54:2b:66: 18:91:3e:a4:21:34:5e:a8:4d:05:da:81:86:58:4d:ef:73:5b: 8b:8a:26:28:76:89:21:b3:c8:55:47:a5:ce:9f:32:7a:41:2e: 59:0d:39:fd:54:5b:48:3b:9a:6d:40:b5:e0:26:5a:15:fb:94: 2f:dd:c9:81:3d:41:d2:2d:41:c6:68:fc:8c:cd:0d:18:36:97: b2:db:de:7e -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt3xpn+XCcK6eXkKzn+M55tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWY1MWEyNjc2ODZhMDA4ZTU3NTA5NTBjN2Y4MGQ3Y2YwZTUwNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAL8bMr/+0TTe3pGhC3j+wwuohJk SBwmCOsqvEWH21a/Q5yZYdkHtm+Z4TV+2qTp2ICZqbpU4cmskGgRBr7hMFn93Wjc noIqDgzOdLzRMS08wOLIe+Z3ELoVd2+7VTYVYGzw+xJot5mZU5JHCiVzeHmOyzBd pc5Ww39WlGBKvOa5naFRTQmgYhnvAnQcOYLu2ziq21i1ruNqh3COKuOkccqXXwg3 0uvnjhhod/l4cwXSshk9L04UT+baaJq1hvd7k97LhgZlSLLab9EfzdpyUlgXVOfD hslErlO7u9OIRp5qiF4YRNWdk0SKwTNlN7mb5gsDR9VVO40iVYbmh2u6KQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFCn1GiZ2hqAI5XUJUMf4DXzw5QQ6MB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvS2ZVYUpuYUdvQWpsZFFsUXhfZ05mUERsQkRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQFCY4AAwQE iuIAAwQDiuJYAwQCqmSAAwQDqmSYMAwDBAaqZMADBAKqZMgwDQYJKoZIhvcNAQEL BQADggEBAHYtUwO/solxiPxbG/xE7nkk9kf+7wyYr7aLvlzaa5CJpJDSzFm/v5BX ASZjJS3MaV8NloSepAp1vdSlK4DXbCwHim0qiy7fsCf/jkb7PIBATADFA/FF5vQU 1UayFu/Oo/GVPCIMLiAqiMMi4mxSlCCTRjliOSiLG0s+BSNWy+VXOw+4Iv2b6pgN 166LU/7jtz3HSgdSsraCREMeFtsdaNgG64b3W7ldKTRTe1ZW4CTRLFQrZhiRPqQh NF6oTQXagYZYTe9zW4uKJih2iSGzyFVHpc6fMnpBLlkNOf1UW0g7mm1AteAmWhX7 lC/dyYE9QdItQcZo/IzNDRg2l7Lb3n4= -----END CERTIFICATE-----Generated at Tue Jan 20 15:34:01 2026 by rpki-client