This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/koMekijqP-w-hV1xkItLMIte5TI.roa File: koMekijqP-w-hV1xkItLMIte5TI.roa (raw, json) Hash identifier: qrmsUlbTAaKkSWTEyxYUk3wrBnnPPwrk02ct3U7Q8vs= Subject key identifier: 92:83:1E:92:28:EA:3F:EC:3E:85:5D:71:90:8B:4B:30:8B:5E:E5:32 Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a Certificate serial: 019C31D38AEC6F78D0C54870C6BCC13D12D0 Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/koMekijqP-w-hV1xkItLMIte5TI.roa Signing time: Fri 06 Feb 2026 07:21:12 +0000 ROA not before: Fri 06 Feb 2026 07:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44056 IP address blocks: 31.135.224.0/20 maxlen: 24 31.135.226.0/23 maxlen: 23 31.135.227.0/24 maxlen: 24 31.135.228.0/22 maxlen: 22 31.135.232.0/22 maxlen: 22 31.135.236.0/23 maxlen: 23 31.135.236.0/24 maxlen: 24 46.148.128.0/20 maxlen: 20 46.148.128.0/22 maxlen: 22 46.148.129.0/24 maxlen: 24 46.148.130.0/24 maxlen: 24 46.148.132.0/22 maxlen: 22 46.148.143.0/24 maxlen: 24 83.97.104.0/21 maxlen: 21 91.195.130.0/23 maxlen: 23 91.230.146.0/24 maxlen: 24 91.237.186.0/23 maxlen: 23 91.237.186.0/24 maxlen: 24 91.237.187.0/24 maxlen: 24 109.196.64.0/20 maxlen: 24 109.196.64.0/22 maxlen: 22 109.196.64.0/24 maxlen: 24 109.196.67.0/24 maxlen: 24 109.196.68.0/22 maxlen: 22 109.196.68.0/24 maxlen: 24 109.196.69.0/24 maxlen: 24 109.196.72.0/22 maxlen: 22 109.196.72.0/24 maxlen: 24 109.196.73.0/24 maxlen: 24 109.196.74.0/24 maxlen: 24 109.196.75.0/24 maxlen: 24 109.196.76.0/22 maxlen: 22 109.196.76.0/24 maxlen: 24 109.196.77.0/24 maxlen: 24 109.196.78.0/24 maxlen: 24 109.196.79.0/24 maxlen: 24 176.125.192.0/19 maxlen: 19 176.125.192.0/24 maxlen: 24 176.125.194.0/24 maxlen: 24 176.125.195.0/24 maxlen: 24 195.2.238.0/23 maxlen: 23 2a13:2940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:31:d3:8a:ec:6f:78:d0:c5:48:70:c6:bc:c1:3d:12:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a Validity Not Before: Feb 6 07:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92831e9228ea3fec3e855d71908b4b308b5ee532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:83:d2:09:cc:f4:a0:5e:e0:d4:6c:a7:14:41: c5:c0:a7:0e:6d:bb:41:71:4b:d0:49:67:b0:af:7b: 33:ee:2c:90:84:76:b7:bc:e6:63:20:72:55:c1:fe: 65:b7:49:e3:a6:36:38:70:4c:09:05:bb:c2:95:bd: e0:ca:aa:f9:00:48:1a:f0:d6:43:94:28:69:36:29: 2a:85:37:29:df:77:8b:6b:a4:94:6b:10:c0:44:e6: 89:01:e4:61:5d:9f:b8:3a:0b:51:3c:7a:c3:b3:4d: 30:33:f4:c7:5a:07:7b:78:85:bf:1f:aa:8e:40:27: bb:87:f9:eb:4f:59:9c:35:62:e3:17:be:1f:08:dc: 2a:5c:8a:c3:72:40:d5:b8:ee:09:91:e2:b0:e2:69: eb:86:8a:a8:17:31:6c:d9:70:e2:1f:0b:96:32:5c: ad:4b:da:b7:08:ab:6c:e4:f1:bd:1d:3f:2f:44:a9: c0:21:d6:31:8a:de:9c:5c:8c:c3:df:63:73:96:bb: 8f:9f:1f:48:b0:0c:50:e2:d9:58:f0:8d:19:0a:c4: 0a:e7:8e:bd:99:d3:a2:48:a2:c8:db:01:08:d5:0e: 83:06:9a:64:e2:a8:68:b4:da:46:c0:31:d4:42:71: da:90:9a:bf:27:3d:f2:be:53:e6:4a:3b:0c:81:34: 6b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:83:1E:92:28:EA:3F:EC:3E:85:5D:71:90:8B:4B:30:8B:5E:E5:32 X509v3 Authority Key Identifier: keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/koMekijqP-w-hV1xkItLMIte5TI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.135.224.0/20 46.148.128.0/20 83.97.104.0/21 91.195.130.0/23 91.230.146.0/24 91.237.186.0/23 109.196.64.0/20 176.125.192.0/19 195.2.238.0/23 IPv6: 2a13:2940::/32 Signature Algorithm: sha256WithRSAEncryption 34:03:91:16:4d:2e:1e:0a:ca:3e:cf:bc:5a:93:7c:ae:61:3d: 76:9c:d5:2c:19:03:83:77:ec:1b:10:bc:6f:bb:aa:d9:a7:9a: 02:43:44:3d:b0:ec:da:ae:96:22:9f:6a:86:4a:fe:2a:74:a6: 2e:bd:8d:e9:a1:63:b3:25:57:0c:de:02:e9:ba:96:ab:35:e9: f5:18:bc:ab:4a:44:ac:58:d0:64:04:81:c5:7e:05:ce:b0:69: 59:27:9c:24:b7:d9:15:35:4d:6b:74:9e:58:04:67:71:1c:dc: 9d:8b:ca:17:0e:04:73:6a:98:9e:a2:6c:d6:a6:b4:8a:4f:4a: 4f:a4:07:4d:6c:14:dc:1b:42:de:81:97:fa:33:23:ed:38:96: e2:cb:3b:03:38:64:22:9c:5a:4e:c5:d3:f8:88:66:1e:39:31: 72:3e:d3:50:9d:b1:30:5a:1d:40:bd:de:6c:27:4f:ec:27:07: 36:57:01:3e:f0:16:19:ec:df:17:d6:a5:52:e7:14:bf:f1:5f: 8f:21:85:0f:a6:30:e6:d9:ee:66:01:6b:01:df:f7:5b:1c:2f: 8e:b3:d4:72:b1:d9:98:8d:d2:20:41:1d:98:30:c6:d7:88:9d: 9f:e2:1f:41:df:48:98:89:56:5b:59:79:9e:df:74:fc:98:57: fa:29:30:c1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZwx04rsb3jQxUhwxrzBPRLQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OGU5YjJlZWZiMjA1MzQyMzgyYjYwNzJhOTAzZjlkOTgz NzA3MWEwHhcNMjYwMjA2MDcyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjgzMWU5MjI4ZWEzZmVjM2U4NTVkNzE5MDhiNGIzMDhiNWVlNTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoPSCcz0oF7g1GynFEHFwKcObbtB cUvQSWewr3sz7iyQhHa3vOZjIHJVwf5lt0njpjY4cEwJBbvClb3gyqr5AEga8NZD lChpNikqhTcp33eLa6SUaxDAROaJAeRhXZ+4OgtRPHrDs00wM/THWgd7eIW/H6qO QCe7h/nrT1mcNWLjF74fCNwqXIrDckDVuO4JkeKw4mnrhoqoFzFs2XDiHwuWMlyt S9q3CKts5PG9HT8vRKnAIdYxit6cXIzD32NzlruPnx9IsAxQ4tlY8I0ZCsQK5469 mdOiSKLI2wEI1Q6DBppk4qhotNpGwDHUQnHakJq/Jz3yvlPmSjsMgTRriwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFJKDHpIo6j/sPoVdcZCLSzCLXuUyMB8GA1UdIwQY MBaAFGaOmy7vsgU0I4K2ByqQP52YNwcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMt NGMwOGZmZTEwMDc2LzEva29NZWtpanFQLXctaFYxeGtJdExNSXRlNVRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMtNGMwOGZmZTEwMDc2 LzEvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQEH4fgAwQE LpSAAwQDU2FoAwQBW8OCAwQAW+aSAwQBW+26AwQEbcRAAwQFsH3AAwQBwwLuMA0E AgACMAcDBQAqEylAMA0GCSqGSIb3DQEBCwUAA4IBAQA0A5EWTS4eCso+z7xak3yu YT12nNUsGQODd+wbELxvu6rZp5oCQ0Q9sOzarpYin2qGSv4qdKYuvY3poWOzJVcM 3gLpuparNen1GLyrSkSsWNBkBIHFfgXOsGlZJ5wkt9kVNU1rdJ5YBGdxHNydi8oX DgRzapieomzWprSKT0pPpAdNbBTcG0LegZf6MyPtOJbiyzsDOGQinFpOxdP4iGYe OTFyPtNQnbEwWh1Avd5sJ0/sJwc2VwE+8BYZ7N8X1qVS5xS/8V+PIYUPpjDm2e5m AWsB3/dbHC+Os9RysdmYjdIgQR2YMMbXiJ2f4h9B30iYiVZbWXme33T8mFf6KTDB -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:11 2026 by rpki-client