This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/kLsfwbiExk-WbYVvQTPj9NzS50c.roa File: kLsfwbiExk-WbYVvQTPj9NzS50c.roa (raw, json) Hash identifier: aACPLDJWgIDelq1cz52tM9H01c1GSeDoQSNmQib+BvQ= Subject key identifier: 90:BB:1F:C1:B8:84:C6:4F:96:6D:85:6F:41:33:E3:F4:DC:D2:E7:47 Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb Certificate serial: 019BFE5E4816BC6B924B2868E3DA7A1EFC40 Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/kLsfwbiExk-WbYVvQTPj9NzS50c.roa Signing time: Tue 27 Jan 2026 07:32:30 +0000 ROA not before: Tue 27 Jan 2026 07:32:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21211 IP address blocks: 31.44.96.0/20 maxlen: 20 31.44.96.0/21 maxlen: 21 31.44.104.0/21 maxlen: 21 78.157.64.0/19 maxlen: 19 84.240.0.0/18 maxlen: 18 84.240.0.0/22 maxlen: 22 84.240.4.0/22 maxlen: 22 84.240.8.0/21 maxlen: 21 84.240.16.0/20 maxlen: 20 185.25.0.0/22 maxlen: 22 212.122.64.0/19 maxlen: 19 212.122.65.0/24 maxlen: 24 212.122.68.0/22 maxlen: 22 212.122.72.0/24 maxlen: 24 212.122.73.0/24 maxlen: 24 212.122.79.0/24 maxlen: 24 212.122.80.0/23 maxlen: 23 212.122.84.0/23 maxlen: 23 212.122.88.0/22 maxlen: 22 212.122.92.0/23 maxlen: 23 212.122.95.0/24 maxlen: 24 213.159.32.0/19 maxlen: 19 213.159.32.0/20 maxlen: 20 213.159.33.0/24 maxlen: 24 213.159.48.0/20 maxlen: 20 2a03:280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:5e:48:16:bc:6b:92:4b:28:68:e3:da:7a:1e:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a409555105040578cb296070074f45107252eeb Validity Not Before: Jan 27 07:32:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90bb1fc1b884c64f966d856f4133e3f4dcd2e747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:bd:b6:0e:c1:b9:3b:a6:2e:32:a5:09:11: 16:3f:82:02:f0:f1:8c:6d:94:41:86:5e:b8:a2:09: 92:6b:07:99:83:39:3b:b3:4b:31:93:14:d5:82:78: 62:71:5c:d0:67:57:53:8c:68:df:e5:f9:08:75:ea: ee:3d:5f:f6:69:6d:45:4c:da:c4:ac:57:58:e7:f8: a8:e5:bd:58:ab:97:26:7c:b6:f5:c6:df:d5:ba:66: bf:9e:cd:51:e9:f0:60:42:c1:c0:f0:a5:88:92:09: 69:ab:4c:cf:bc:61:32:75:7d:6f:93:4c:97:a1:0d: 24:5b:e9:45:72:cd:10:d5:54:9a:a5:91:0b:5a:1a: 69:e5:89:0b:15:53:a5:b9:d2:76:bb:10:b7:80:e3: 62:1c:53:37:72:97:b0:ce:eb:3c:a5:86:73:73:b3: 43:5a:6c:21:05:ec:7c:3f:00:62:c6:0a:c6:4a:b9: 60:cf:7b:c4:16:82:d1:bd:69:c6:78:04:eb:bf:62: e7:76:0e:d7:ea:01:3a:04:75:ec:03:d5:39:9f:c3: fd:7c:98:3d:d3:00:dc:02:64:38:8f:8f:0d:a7:81: 88:c1:15:76:12:95:2e:4e:e6:be:e9:1a:46:7a:41: 8c:1d:01:11:a4:3e:5f:2e:1f:5a:47:4c:3c:d3:17: 1e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BB:1F:C1:B8:84:C6:4F:96:6D:85:6F:41:33:E3:F4:DC:D2:E7:47 X509v3 Authority Key Identifier: keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/kLsfwbiExk-WbYVvQTPj9NzS50c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.44.96.0/20 78.157.64.0/19 84.240.0.0/18 185.25.0.0/22 212.122.64.0/19 213.159.32.0/19 IPv6: 2a03:280::/32 Signature Algorithm: sha256WithRSAEncryption 84:ec:22:f4:f9:df:90:e9:06:a3:19:cd:17:07:42:65:d5:04: c7:a6:ad:7b:eb:78:08:17:f9:99:53:93:90:5a:b1:da:50:88: c7:fd:6f:7c:b6:dd:73:db:23:22:76:4d:da:72:f2:0d:11:66: e4:62:35:3c:85:6a:14:61:af:47:91:44:31:50:f7:32:5b:1e: 53:1a:63:a2:56:ec:b7:8d:d7:c1:b7:48:d1:9e:3d:95:d7:20: 03:7e:a6:2d:71:9c:c0:34:8d:1c:69:c5:f1:92:60:6c:10:51: 94:f0:c6:09:5d:a0:37:f1:ed:0a:6e:fe:f4:13:eb:d6:a9:c0: a0:f4:06:36:28:d2:0e:f2:67:5c:0f:28:f7:de:77:a0:b2:d4: 20:65:4b:2e:61:37:19:44:c9:3c:74:71:13:e6:76:64:a7:ad: 10:4d:32:2e:6c:21:8a:b9:65:ee:fb:1d:be:2a:9e:0e:98:32: c2:3b:ca:30:1e:2a:f6:64:a0:40:ba:e9:ef:31:8c:74:78:1d: 9e:c8:e1:fd:52:e8:64:10:bf:e0:90:d4:16:17:9e:50:c7:c3: 72:37:d3:44:36:f2:c9:00:79:dd:ef:ac:01:6b:c9:da:9b:0a: 1b:3b:66:22:a8:da:f9:0e:37:49:1b:19:43:cb:90:5b:c1:86: 45:e2:46:24 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZv+XkgWvGuSSyho49p6HvxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDA5NTU1MTA1MDQwNTc4Y2IyOTYwNzAwNzRmNDUxMDcy NTJlZWIwHhcNMjYwMTI3MDczMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGJiMWZjMWI4ODRjNjRmOTY2ZDg1NmY0MTMzZTNmNGRjZDJlNzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7G9tg7BuTumLjKlCREWP4IC8PGM bZRBhl64ogmSaweZgzk7s0sxkxTVgnhicVzQZ1dTjGjf5fkIderuPV/2aW1FTNrE rFdY5/io5b1Yq5cmfLb1xt/Vuma/ns1R6fBgQsHA8KWIkglpq0zPvGEydX1vk0yX oQ0kW+lFcs0Q1VSapZELWhpp5YkLFVOludJ2uxC3gONiHFM3cpewzus8pYZzc7ND WmwhBex8PwBixgrGSrlgz3vEFoLRvWnGeATrv2Lndg7X6gE6BHXsA9U5n8P9fJg9 0wDcAmQ4j48Np4GIwRV2EpUuTua+6RpGekGMHQERpD5fLh9aR0w80xceOQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFJC7H8G4hMZPlm2Fb0Ez4/Tc0udHMB8GA1UdIwQY MBaAFEpAlVUQUEBXjLKWBwB09FEHJS7rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tDVlZSQlFRRmVNc3BZSEFIVDBVUWNsTHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81NzMxZGEtNjY2NS00MTYxLTgwYzEt NWU3OWI0NDM1ZTJjLzEva0xzZndiaUV4ay1XYllWdlFUUGo5TnpTNTBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81NzMxZGEtNjY2NS00MTYxLTgwYzEtNWU3OWI0NDM1ZTJj LzEvU2tDVlZSQlFRRmVNc3BZSEFIVDBVUWNsTHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEHyxgAwQF Tp1AAwQGVPAAAwQCuRkAAwQF1HpAAwQF1Z8gMA0EAgACMAcDBQAqAwKAMA0GCSqG SIb3DQEBCwUAA4IBAQCE7CL0+d+Q6QajGc0XB0Jl1QTHpq1763gIF/mZU5OQWrHa UIjH/W98tt1z2yMidk3acvINEWbkYjU8hWoUYa9HkUQxUPcyWx5TGmOiVuy3jdfB t0jRnj2V1yADfqYtcZzANI0cacXxkmBsEFGU8MYJXaA38e0Kbv70E+vWqcCg9AY2 KNIO8mdcDyj33negstQgZUsuYTcZRMk8dHET5nZkp60QTTIubCGKuWXu+x2+Kp4O mDLCO8owHir2ZKBAuunvMYx0eB2eyOH9UuhkEL/gkNQWF55Qx8NyN9NENvLJAHnd 76wBa8namwobO2YiqNr5DjdJGxlDy5BbwYZF4kYk -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:55 2026 by rpki-client