This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kvtpvw4Uh8dY42MbqQZh7tEJVXA.roa File: kvtpvw4Uh8dY42MbqQZh7tEJVXA.roa (raw, json) Hash identifier: m3lRPpdscTmI/Dzq2M3eNxi5XWIDwocLeVjs590NFfw= Subject key identifier: 92:FB:69:BF:0E:14:87:C7:58:E3:63:1B:A9:06:61:EE:D1:09:55:70 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B8145E56EE5FA3E546B7D59CB39A59E1B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kvtpvw4Uh8dY42MbqQZh7tEJVXA.roa Signing time: Sat 03 Jan 2026 00:33:20 +0000 ROA not before: Sat 03 Jan 2026 00:33:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214024 IP address blocks: 151.241.128.0/22 maxlen: 24 151.245.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:45:e5:6e:e5:fa:3e:54:6b:7d:59:cb:39:a5:9e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 3 00:33:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92fb69bf0e1487c758e3631ba90661eed1095570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a0:25:2b:56:bd:1b:aa:24:97:ee:b9:ed:ec: 77:ab:e0:f7:d7:c3:30:3f:d6:28:bf:36:23:3a:30: 82:72:70:59:c0:d5:39:2e:f4:4a:d7:93:af:e0:c5: ce:68:50:a0:b8:2c:f2:7a:29:7f:d1:a8:8e:e9:09: 72:ea:7f:ee:4b:a8:d2:36:d0:d9:50:21:b5:a7:3b: fc:2e:7e:21:04:47:f4:15:41:5e:0c:d1:62:e8:6b: 95:36:58:84:fe:6d:39:76:a0:b3:ec:fd:c0:4e:cf: 41:f0:71:6e:32:f5:0b:5a:01:2b:e8:7c:95:90:3e: b9:4a:1c:d4:74:13:0e:b6:c2:f6:47:8f:5a:92:82: 7e:0a:56:85:22:58:74:6b:fe:56:3b:fb:43:32:51: 09:a1:29:d1:64:d1:2d:49:ba:84:2c:e2:c6:4a:f5: cc:c0:4d:c6:af:04:37:5a:8c:e1:bc:4b:b0:3b:09: df:d0:44:3b:75:0f:c4:bd:51:78:2a:38:2c:70:6e: fd:92:12:78:c8:5d:f3:e9:3a:65:2d:bf:3c:6a:36: 70:5f:9f:70:97:c5:72:0d:c1:8a:78:e7:64:09:5c: 7b:10:4c:23:32:e2:f3:e6:da:37:9f:2b:3c:5d:57: 71:c4:a6:f9:46:fc:d4:22:08:6e:4b:b5:ff:11:a8: f2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FB:69:BF:0E:14:87:C7:58:E3:63:1B:A9:06:61:EE:D1:09:55:70 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kvtpvw4Uh8dY42MbqQZh7tEJVXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.128.0/22 151.245.108.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:19:30:dd:0c:cb:55:29:2e:20:02:c8:44:fd:1a:29:52:5e: b9:dc:f2:10:a6:17:f3:07:cf:7e:2b:6a:35:97:60:c2:85:38: 8d:0d:ea:07:7d:e7:41:dc:a5:2b:4f:48:05:6b:29:5b:71:97: a1:08:69:05:ca:cf:e3:7e:1f:45:66:3e:82:e8:93:cc:cb:87: b9:51:cc:ff:63:63:c9:2b:6e:ea:13:53:e9:2a:79:15:61:41: 38:00:2b:89:d2:a0:f1:2c:bf:6c:96:0e:0c:66:bf:92:fe:fd: 70:1a:08:9b:b7:ac:47:5b:fd:80:34:d9:ee:ff:bc:01:7c:d4: 1e:5e:7b:03:a0:58:1c:65:d0:dd:90:41:69:71:3e:8a:cc:f5: 1f:13:96:1b:2c:61:53:c3:ca:9b:56:c5:8a:64:cd:f6:b3:50: dd:9f:3d:6b:0c:aa:71:78:01:de:18:61:a2:52:13:3b:c5:3a: 60:fd:9f:40:89:db:40:20:16:5f:ce:4a:c1:1c:2d:a7:48:6f: b6:7f:f8:79:3b:f0:d6:1c:e4:d7:9b:5b:11:19:6d:1f:72:b7: f6:ec:13:07:97:d3:d8:5e:1a:9e:97:94:d9:39:9f:cf:52:52: 78:b6:ff:de:1d:09:f1:78:46:e8:80:ea:d6:4c:c8:47:8c:c7: b0:34:35:5d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuBReVu5fo+VGt9Wcs5pZ4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAzMDAzMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmZiNjliZjBlMTQ4N2M3NThlMzYzMWJhOTA2NjFlZWQxMDk1NTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaAlK1a9G6okl+657ex3q+D318Mw P9YovzYjOjCCcnBZwNU5LvRK15Ov4MXOaFCguCzyeil/0aiO6Qly6n/uS6jSNtDZ UCG1pzv8Ln4hBEf0FUFeDNFi6GuVNliE/m05dqCz7P3ATs9B8HFuMvULWgEr6HyV kD65ShzUdBMOtsL2R49akoJ+ClaFIlh0a/5WO/tDMlEJoSnRZNEtSbqELOLGSvXM wE3GrwQ3WozhvEuwOwnf0EQ7dQ/EvVF4KjgscG79khJ4yF3z6TplLb88ajZwX59w l8VyDcGKeOdkCVx7EEwjMuLz5to3nys8XVdxxKb5RvzUIghuS7X/Eajy0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJL7ab8OFIfHWONjG6kGYe7RCVVwMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEva3Z0cHZ3NFVoOGRZNDJNYnFRWmg3dEVKVlhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCl/GAAwQA l/VsMA0GCSqGSIb3DQEBCwUAA4IBAQCcGTDdDMtVKS4gAshE/RopUl653PIQphfz B89+K2o1l2DChTiNDeoHfedB3KUrT0gFaylbcZehCGkFys/jfh9FZj6C6JPMy4e5 Ucz/Y2PJK27qE1PpKnkVYUE4ACuJ0qDxLL9slg4MZr+S/v1wGgibt6xHW/2ANNnu /7wBfNQeXnsDoFgcZdDdkEFpcT6KzPUfE5YbLGFTw8qbVsWKZM32s1Ddnz1rDKpx eAHeGGGiUhM7xTpg/Z9AidtAIBZfzkrBHC2nSG+2f/h5O/DWHOTXm1sRGW0fcrf2 7BMHl9PYXhqel5TZOZ/PUlJ4tv/eHQnxeEbogOrWTMhHjMewNDVd -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:11 2026 by rpki-client