This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/KxTglRyWg1Vk5Nlgojsd-zoBodE.roa File: KxTglRyWg1Vk5Nlgojsd-zoBodE.roa (raw, json) Hash identifier: 4UBJSdEaGZbZghsCNuNXs6XNkSix+gwopuGp8HYkjpA= Subject key identifier: 2B:14:E0:95:1C:96:83:55:64:E4:D9:60:A2:3B:1D:FB:3A:01:A1:D1 Certificate issuer: /CN=58d3e953b5fe17a531c9cf71560748df41ff714a Certificate serial: 019B7BA4EEB2234FDB70477F2FF63A85E8C2 Authority key identifier: 58:D3:E9:53:B5:FE:17:A5:31:C9:CF:71:56:07:48:DF:41:FF:71:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNPpU7X-F6Uxyc9xVgdI30H_cUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/KxTglRyWg1Vk5Nlgojsd-zoBodE.roa Signing time: Thu 01 Jan 2026 22:19:25 +0000 ROA not before: Thu 01 Jan 2026 22:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56537 IP address blocks: 193.22.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.crl rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft rsync://rpki.ripe.net/repository/DEFAULT/WNPpU7X-F6Uxyc9xVgdI30H_cUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ee:b2:23:4f:db:70:47:7f:2f:f6:3a:85:e8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d3e953b5fe17a531c9cf71560748df41ff714a Validity Not Before: Jan 1 22:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b14e0951c96835564e4d960a23b1dfb3a01a1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:70:22:70:08:aa:fb:e9:f7:49:7d:84:46:07: 0a:31:9a:9a:d4:c3:c7:f9:f3:4a:a1:32:78:c8:d3: fc:3e:c9:10:68:84:89:74:d2:f2:38:f7:f6:13:77: bb:84:72:92:bc:04:2a:4b:fe:7d:e0:79:65:5f:bd: 44:b2:aa:c8:17:33:03:aa:fc:b8:1a:ee:f2:30:d9: 6f:a7:f5:4f:c7:ba:8e:c9:9e:21:b9:d1:b5:80:b5: d2:a7:29:88:35:12:a7:ac:64:f4:ce:57:3e:e2:7b: d7:4a:f7:81:24:eb:b5:6e:87:84:8b:bc:2a:40:8d: 81:1e:5b:55:57:d1:4a:ee:65:30:c1:ea:48:6f:49: 3a:47:58:ea:19:07:6c:e1:b7:bd:1e:64:81:38:09: bc:5c:5c:64:72:34:86:a4:44:ce:a1:22:84:14:e8: cd:8f:7d:a0:9f:f0:c6:b2:4d:2f:4b:86:d3:be:99: 65:3e:53:37:7c:50:d6:92:6e:3d:b7:ed:11:65:cd: 73:c2:3d:55:d5:04:02:83:e0:2b:a3:b0:ea:dc:bd: 7e:4c:1c:9f:b5:27:72:88:03:de:ac:11:a2:68:c1: 41:90:95:36:98:cb:16:19:2f:31:6d:10:2b:af:db: ef:14:50:82:eb:dc:0d:c2:a3:5c:1d:89:7e:49:17: 31:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:14:E0:95:1C:96:83:55:64:E4:D9:60:A2:3B:1D:FB:3A:01:A1:D1 X509v3 Authority Key Identifier: keyid:58:D3:E9:53:B5:FE:17:A5:31:C9:CF:71:56:07:48:DF:41:FF:71:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNPpU7X-F6Uxyc9xVgdI30H_cUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/KxTglRyWg1Vk5Nlgojsd-zoBodE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.88.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:2c:ab:d3:dc:32:e6:4f:77:2b:8c:38:a1:2a:0c:34:06:23: 56:9b:0b:05:a7:22:2c:cf:65:2a:f8:59:f4:9f:d1:a9:8a:d1: 53:13:6b:ac:a2:cc:1a:a5:b1:14:fd:03:e5:e2:73:62:ab:be: 02:c3:7e:43:8f:be:52:0b:fd:b8:26:14:53:52:26:ac:80:de: 76:e8:e3:22:a8:b8:68:11:78:57:1b:d4:4a:f8:62:5a:3e:e0: af:b9:9f:0e:c4:e2:7a:1b:03:82:10:8c:de:84:54:87:48:85: 6f:bd:2a:a9:f0:63:db:00:62:00:b5:6c:23:ce:46:40:e1:7b: ec:e2:b0:01:f9:56:9f:08:fa:61:59:fa:1f:84:52:a1:81:4b: 44:45:5e:76:f3:03:74:81:f5:34:10:73:3d:50:fe:ad:27:30: 75:d9:61:40:09:ad:c9:e2:a3:79:a9:01:2e:cd:2f:40:8d:99: 48:ff:e8:68:65:39:8d:69:de:3e:f7:d6:25:dc:9b:4f:e2:ef: c9:a2:95:0e:0a:47:ba:a4:1a:49:b2:55:cb:8e:d5:f6:2e:55: 0e:c6:5f:80:b3:09:e0:8b:40:8c:29:28:77:99:6b:7b:cc:ac: 01:c7:55:4b:65:5c:99:d4:02:40:17:b0:df:db:46:c6:26:8c: 88:d0:2f:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pO6yI0/bcEd/L/Y6hejCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZDNlOTUzYjVmZTE3YTUzMWM5Y2Y3MTU2MDc0OGRmNDFm ZjcxNGEwHhcNMjYwMTAxMjIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjE0ZTA5NTFjOTY4MzU1NjRlNGQ5NjBhMjNiMWRmYjNhMDFhMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHAicAiq++n3SX2ERgcKMZqa1MPH +fNKoTJ4yNP8PskQaISJdNLyOPf2E3e7hHKSvAQqS/594HllX71EsqrIFzMDqvy4 Gu7yMNlvp/VPx7qOyZ4hudG1gLXSpymINRKnrGT0zlc+4nvXSveBJOu1boeEi7wq QI2BHltVV9FK7mUwwepIb0k6R1jqGQds4be9HmSBOAm8XFxkcjSGpETOoSKEFOjN j32gn/DGsk0vS4bTvpllPlM3fFDWkm49t+0RZc1zwj1V1QQCg+Aro7Dq3L1+TByf tSdyiAPerBGiaMFBkJU2mMsWGS8xbRArr9vvFFCC69wNwqNcHYl+SRcxowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCsU4JUcloNVZOTZYKI7Hfs6AaHRMB8GA1UdIwQY MBaAFFjT6VO1/helMcnPcVYHSN9B/3FKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV05QcFU3WC1GNlV4eWM5eFZnZEkzMEhfY1VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hYzM4YzQtNGI4My00MGI3LThkMGUt N2NlYWJjZTM0ZTBkLzEvS3hUZ2xSeVdnMVZrNU5sZ29qc2Qtem9Cb2RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9hYzM4YzQtNGI4My00MGI3LThkMGUtN2NlYWJjZTM0ZTBk LzEvV05QcFU3WC1GNlV4eWM5eFZnZEkzMEhfY1VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRZYMA0G CSqGSIb3DQEBCwUAA4IBAQCLLKvT3DLmT3crjDihKgw0BiNWmwsFpyIsz2Uq+Fn0 n9GpitFTE2usoswapbEU/QPl4nNiq74Cw35Dj75SC/24JhRTUiasgN526OMiqLho EXhXG9RK+GJaPuCvuZ8OxOJ6GwOCEIzehFSHSIVvvSqp8GPbAGIAtWwjzkZA4Xvs 4rAB+VafCPphWfofhFKhgUtERV528wN0gfU0EHM9UP6tJzB12WFACa3J4qN5qQEu zS9AjZlI/+hoZTmNad4+99Yl3JtP4u/JopUOCke6pBpJslXLjtX2LlUOxl+Aswng i0CMKSh3mWt7zKwBx1VLZVyZ1AJAF7Df20bGJoyI0C/P -----END CERTIFICATE-----Generated at Tue Feb 10 05:55:08 2026 by rpki-client