This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/kVFojVLVm1YI6NJxxAhwn-frs_I.roa File: kVFojVLVm1YI6NJxxAhwn-frs_I.roa (raw, json) Hash identifier: DzeJbFI8o+hinCZ6vh2cut6N8Di25xDzaQzjLygSt7c= Subject key identifier: 91:51:68:8D:52:D5:9B:56:08:E8:D2:71:C4:08:70:9F:E7:EB:B3:F2 Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3 Certificate serial: 019B7F1348682521EB72515F9806DD835F79 Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/kVFojVLVm1YI6NJxxAhwn-frs_I.roa Signing time: Fri 02 Jan 2026 14:18:48 +0000 ROA not before: Fri 02 Jan 2026 14:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34863 IP address blocks: 46.226.128.0/21 maxlen: 24 62.106.77.0/24 maxlen: 24 81.23.32.0/20 maxlen: 24 81.23.33.0/24 maxlen: 24 81.23.34.0/24 maxlen: 24 85.204.20.0/23 maxlen: 24 85.204.21.0/24 maxlen: 24 85.204.24.0/23 maxlen: 24 85.204.25.0/24 maxlen: 24 89.35.96.0/20 maxlen: 24 176.116.26.0/24 maxlen: 24 185.2.252.0/22 maxlen: 24 185.63.48.0/22 maxlen: 24 185.252.195.0/24 maxlen: 24 188.94.200.0/21 maxlen: 24 188.94.200.0/24 maxlen: 24 188.94.201.0/24 maxlen: 24 188.94.202.0/23 maxlen: 23 188.94.204.0/22 maxlen: 22 188.94.206.0/24 maxlen: 24 194.30.173.0/24 maxlen: 24 2a00:fc8::/32 maxlen: 32 2a00:7820::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:48:68:25:21:eb:72:51:5f:98:06:dd:83:5f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3 Validity Not Before: Jan 2 14:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9151688d52d59b5608e8d271c408709fe7ebb3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f2:e6:92:60:64:9e:75:a4:93:6f:b2:b3:84: 1c:c5:be:4f:ac:2c:e0:04:2d:a4:37:bc:24:84:07: 39:c9:52:72:09:ac:2d:16:76:71:68:51:9b:90:98: 6b:88:0c:9e:8a:77:d8:b4:f7:04:90:29:2f:3e:5a: f5:97:e1:0c:37:8d:1d:9f:e2:e4:ad:76:46:ea:27: 04:d0:8c:03:7c:35:65:92:fb:3c:3b:77:06:dd:14: ab:a6:94:fd:5f:fc:99:c8:b5:96:10:d4:24:27:b6: e3:11:30:a7:4f:19:9a:28:70:12:18:3d:e3:73:40: 95:33:38:e3:7c:d9:b2:50:2b:c4:47:7b:d5:8d:ac: 4a:84:ce:52:cb:a1:32:d6:66:80:cf:82:43:43:26: 1b:72:82:84:19:69:f5:5b:a2:c8:11:75:2e:4d:de: 05:30:a1:fa:1e:33:bb:19:c9:45:19:41:3a:04:69: f9:ab:eb:5d:90:9b:b6:a8:55:d4:b5:d9:38:38:ba: 43:c2:b3:31:7c:15:39:d3:24:74:7d:72:48:2e:50: 14:a8:8e:2c:75:23:ef:47:ee:20:35:fc:33:5d:92: dd:6c:5a:01:33:a3:5e:3b:cc:7f:fb:7d:7c:5f:eb: e4:c0:ec:ab:67:a6:04:0f:83:21:55:e8:92:fb:e0: 30:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:51:68:8D:52:D5:9B:56:08:E8:D2:71:C4:08:70:9F:E7:EB:B3:F2 X509v3 Authority Key Identifier: keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/kVFojVLVm1YI6NJxxAhwn-frs_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.128.0/21 62.106.77.0/24 81.23.32.0/20 85.204.20.0/23 85.204.24.0/23 89.35.96.0/20 176.116.26.0/24 185.2.252.0/22 185.63.48.0/22 185.252.195.0/24 188.94.200.0/21 194.30.173.0/24 IPv6: 2a00:fc8::/32 2a00:7820::/32 Signature Algorithm: sha256WithRSAEncryption 7c:15:54:04:8d:a8:35:6d:d9:b0:42:73:10:ae:cd:e8:00:6c: 78:86:a2:18:e0:eb:05:f7:c6:39:37:b4:01:0a:bf:68:69:05: 3f:94:30:fe:d9:69:59:c2:ca:7f:b4:b6:9c:f1:0f:c5:c3:79: 1e:0d:c0:56:01:2a:fe:c8:23:ef:e6:fc:68:13:cd:e0:a7:fc: 05:95:8e:d2:e9:1d:43:e8:46:8d:8f:23:b2:fd:46:59:d8:93: f0:44:9d:58:73:93:4f:64:62:f1:99:f8:51:e1:c8:b8:fa:92: 5a:c1:bc:4f:ba:85:d2:bf:64:39:46:17:76:21:38:8a:17:bc: 05:31:4f:af:d1:af:dd:7d:31:69:ca:95:0d:f1:51:4e:de:8f: ca:61:1f:9f:e3:fa:14:77:c3:53:db:bf:dd:87:cc:a9:fd:2f: 40:2e:d9:77:54:61:7f:7a:3d:89:43:14:b3:05:52:89:0c:d4: 80:26:26:10:42:07:c3:ac:31:97:1b:df:a3:4c:7a:e4:87:06: 27:aa:87:4a:b6:2c:89:08:a6:6b:0e:fb:76:aa:6a:f0:79:13: 5b:2b:77:81:b6:fd:7c:15:0f:ac:ca:bb:93:5f:a6:b7:cf:37: f6:dc:d4:de:b5:59:20:4d:04:fe:c6:29:e3:9b:0d:0d:70:7f: 6b:76:25:05 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISAZt/E0hoJSHrclFfmAbdg195MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNjMzMzg4YTdhNWNmZTlhN2NhMTlmZDc0YzkyMmRjYjEy NTY5ZDMwHhcNMjYwMTAyMTQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTUxNjg4ZDUyZDU5YjU2MDhlOGQyNzFjNDA4NzA5ZmU3ZWJiM2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/LmkmBknnWkk2+ys4Qcxb5PrCzg BC2kN7wkhAc5yVJyCawtFnZxaFGbkJhriAyeinfYtPcEkCkvPlr1l+EMN40dn+Lk rXZG6icE0IwDfDVlkvs8O3cG3RSrppT9X/yZyLWWENQkJ7bjETCnTxmaKHASGD3j c0CVMzjjfNmyUCvER3vVjaxKhM5Sy6Ey1maAz4JDQyYbcoKEGWn1W6LIEXUuTd4F MKH6HjO7GclFGUE6BGn5q+tdkJu2qFXUtdk4OLpDwrMxfBU50yR0fXJILlAUqI4s dSPvR+4gNfwzXZLdbFoBM6NeO8x/+318X+vkwOyrZ6YED4MhVeiS++AwfwIDAQAB o4ICYTCCAl0wHQYDVR0OBBYEFJFRaI1S1ZtWCOjSccQIcJ/n67PyMB8GA1UdIwQY MBaAFHJjM4inpc/pp8oZ/XTJItyxJWnTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5Yzct MTM4Yzg0MTdhZTkzLzEva1ZGb2pWTFZtMVlJNk5KeHhBaHduLWZyc19JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5YzctMTM4Yzg0MTdhZTkz LzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBOBAIAATBIAwQDLuKAAwQA PmpNAwQEURcgAwQBVcwUAwQBVcwYAwQEWSNgAwQAsHQaAwQCuQL8AwQCuT8wAwQA ufzDAwQDvF7IAwQAwh6tMBQEAgACMA4DBQAqAA/IAwUAKgB4IDANBgkqhkiG9w0B AQsFAAOCAQEAfBVUBI2oNW3ZsEJzEK7N6ABseIaiGODrBffGOTe0AQq/aGkFP5Qw /tlpWcLKf7S2nPEPxcN5Hg3AVgEq/sgj7+b8aBPN4Kf8BZWO0ukdQ+hGjY8jsv1G WdiT8ESdWHOTT2Ri8Zn4UeHIuPqSWsG8T7qF0r9kOUYXdiE4ihe8BTFPr9Gv3X0x acqVDfFRTt6PymEfn+P6FHfDU9u/3YfMqf0vQC7Zd1Rhf3o9iUMUswVSiQzUgCYm EEIHw6wxlxvfo0x65IcGJ6qHSrYsiQimaw77dqpq8HkTWyt3gbb9fBUPrMq7k1+m t8839tzU3rVZIE0E/sYp45sNDXB/a3YlBQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:32:46 2026 by rpki-client