This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/KxBvAyccf-9KNR7XcfENvV7BG2A.roa File: KxBvAyccf-9KNR7XcfENvV7BG2A.roa (raw, json) Hash identifier: XbvB1YWfNONmSqL2//OKA3cnfbk/wWIRkQaPtz1eP/Y= Subject key identifier: 2B:10:6F:03:27:1C:7F:EF:4A:35:1E:D7:71:F1:0D:BD:5E:C1:1B:60 Certificate issuer: /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25 Certificate serial: 019B7DCA5B314860846A125ACDFD1F78D94A Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/KxBvAyccf-9KNR7XcfENvV7BG2A.roa Signing time: Fri 02 Jan 2026 08:19:32 +0000 ROA not before: Fri 02 Jan 2026 08:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208785 IP address blocks: 152.89.116.0/24 maxlen: 24 152.89.117.0/24 maxlen: 24 152.89.118.0/24 maxlen: 32 152.89.119.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:5b:31:48:60:84:6a:12:5a:cd:fd:1f:78:d9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25 Validity Not Before: Jan 2 08:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b106f03271c7fef4a351ed771f10dbd5ec11b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:95:19:b2:57:08:a5:f5:ef:c7:c7:f4:63:c5: ba:9b:c7:4d:ed:f0:c8:55:75:56:d8:e6:0f:a1:3e: 9b:71:c7:50:02:5d:7f:d5:01:7e:f1:4b:df:65:54: 74:ca:8f:9d:b2:e6:ab:70:83:85:c3:7e:04:bf:46: a6:73:90:c7:fa:a4:b7:fc:2c:fd:db:2a:d9:50:85: e0:a3:c4:5e:19:fa:36:cf:02:50:3b:65:c7:54:fb: 73:29:48:fe:35:b9:00:69:92:5c:29:4f:a6:37:95: b3:c5:d5:16:26:cd:53:d8:3b:9d:f3:78:01:56:f3: 6d:79:f0:ef:24:ca:95:05:d2:79:81:d8:5a:76:e9: 0e:e4:a0:98:a4:9c:18:7d:5e:21:ee:f9:e8:9c:f5: f1:c2:82:bf:1f:76:86:70:6e:6f:ae:a0:82:fd:01: 6f:2c:dc:10:68:4f:a6:46:b1:a7:8f:58:0d:d9:cf: a3:5f:07:85:74:b0:16:aa:51:13:a0:f3:4e:06:5a: 31:65:a1:4c:4e:ba:9a:af:d6:e1:cd:74:80:26:cf: 8d:6b:bc:3b:11:94:4a:ed:25:3a:19:a7:98:40:49: b4:03:49:93:45:25:ab:28:3c:cd:6d:02:76:02:e3: c2:16:b7:25:47:39:d2:cb:7a:de:6d:2e:0e:36:5f: 25:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:10:6F:03:27:1C:7F:EF:4A:35:1E:D7:71:F1:0D:BD:5E:C1:1B:60 X509v3 Authority Key Identifier: keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/KxBvAyccf-9KNR7XcfENvV7BG2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.116.0/22 Signature Algorithm: sha256WithRSAEncryption 62:bb:71:e8:27:55:21:d7:c2:bd:58:80:8d:2b:b6:0f:48:05: ee:eb:ac:36:15:bf:ee:4b:13:20:77:99:f0:88:25:31:49:51: c1:cf:c6:78:cd:0f:56:3f:97:fb:df:db:fc:cc:a2:77:e1:16: aa:28:95:85:4f:de:69:5d:d6:0e:43:55:15:33:09:c0:a5:ec: c7:94:bc:61:47:8d:9e:5f:23:2c:29:ab:0e:ad:1c:7c:d2:73: ce:ca:6a:d0:50:c5:c3:0c:dc:dc:14:f0:03:c8:d8:1f:ed:e4: 21:89:96:9b:3f:1a:86:39:5b:84:2c:2a:3d:f1:dc:b6:c0:3b: a8:3a:8c:8e:5a:19:91:88:f1:1f:d0:d7:57:42:5d:14:81:59: 57:77:50:80:d9:0f:ca:0d:ba:e4:87:0c:f5:ac:ee:2d:d5:98: aa:fc:59:3f:53:6b:ed:65:c5:5c:d6:6c:1d:e1:9f:33:12:c2: 04:90:b7:6a:9f:16:05:ae:e9:b9:31:3e:40:c4:0c:98:09:8d: 7a:fc:3e:62:6b:ad:58:4f:57:ff:e9:80:63:74:f7:65:eb:10: 71:64:06:82:67:e7:63:37:a8:f4:34:c9:ef:39:f3:64:88:91: a3:69:90:c1:d5:23:e1:91:be:09:15:74:49:25:07:b1:be:12: 2b:d6:e0:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ylsxSGCEahJazf0feNlKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYzVjYTA2OWVhYWFhZWM3NzVhZDBhNGVhM2I0NzYwNWI3 MjhhMjUwHhcNMjYwMTAyMDgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjEwNmYwMzI3MWM3ZmVmNGEzNTFlZDc3MWYxMGRiZDVlYzExYjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZUZslcIpfXvx8f0Y8W6m8dN7fDI VXVW2OYPoT6bccdQAl1/1QF+8UvfZVR0yo+dsuarcIOFw34Ev0amc5DH+qS3/Cz9 2yrZUIXgo8ReGfo2zwJQO2XHVPtzKUj+NbkAaZJcKU+mN5WzxdUWJs1T2Dud83gB VvNtefDvJMqVBdJ5gdhadukO5KCYpJwYfV4h7vnonPXxwoK/H3aGcG5vrqCC/QFv LNwQaE+mRrGnj1gN2c+jXweFdLAWqlEToPNOBloxZaFMTrqar9bhzXSAJs+Na7w7 EZRK7SU6GaeYQEm0A0mTRSWrKDzNbQJ2AuPCFrclRznSy3rebS4ONl8lkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCsQbwMnHH/vSjUe13HxDb1ewRtgMB8GA1UdIwQY MBaAFFDFygaeqqrsd1rQpOo7R2BbcoolMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU1YS0JwNnFxdXgzV3RDazZqdEhZRnR5aWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jZGU3OTAtNGUzYi00YTRlLWI4NGMt NTU2NTA2NzAyYTU3LzEvS3hCdkF5Y2NmLTlLTlI3WGNmRU52VjdCRzJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9jZGU3OTAtNGUzYi00YTRlLWI4NGMtNTU2NTA2NzAyYTU3 LzEvVU1YS0JwNnFxdXgzV3RDazZqdEhZRnR5aWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmFl0MA0G CSqGSIb3DQEBCwUAA4IBAQBiu3HoJ1Uh18K9WICNK7YPSAXu66w2Fb/uSxMgd5nw iCUxSVHBz8Z4zQ9WP5f739v8zKJ34RaqKJWFT95pXdYOQ1UVMwnApezHlLxhR42e XyMsKasOrRx80nPOymrQUMXDDNzcFPADyNgf7eQhiZabPxqGOVuELCo98dy2wDuo OoyOWhmRiPEf0NdXQl0UgVlXd1CA2Q/KDbrkhwz1rO4t1Ziq/Fk/U2vtZcVc1mwd 4Z8zEsIEkLdqnxYFrum5MT5AxAyYCY16/D5ia61YT1f/6YBjdPdl6xBxZAaCZ+dj N6j0NMnvOfNkiJGjaZDB1SPhkb4JFXRJJQexvhIr1uAV -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:05 2026 by rpki-client