This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KitxkCQ22ALsXf8w4Ib_P6Ul_ug.roa File: KitxkCQ22ALsXf8w4Ib_P6Ul_ug.roa (raw, json) Hash identifier: poHNANehriWJjZCtRRP3tpSy9GWBMww2iUIscWoGviA= Subject key identifier: 2A:2B:71:90:24:36:D8:02:EC:5D:FF:30:E0:86:FF:3F:A5:25:FE:E8 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84DDCCAB97C1FA9A040C0E56461C87 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KitxkCQ22ALsXf8w4Ib_P6Ul_ug.roa Signing time: Fri 02 Jan 2026 16:22:52 +0000 ROA not before: Fri 02 Jan 2026 16:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395222 IP address blocks: 217.60.128.0/22 maxlen: 24 217.60.132.0/22 maxlen: 24 217.60.136.0/22 maxlen: 24 217.60.140.0/22 maxlen: 24 217.60.152.0/22 maxlen: 24 217.60.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:dd:cc:ab:97:c1:fa:9a:04:0c:0e:56:46:1c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a2b71902436d802ec5dff30e086ff3fa525fee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bc:d2:d2:8f:43:e5:32:2c:17:37:82:0f:9a: 5e:43:af:aa:95:be:43:bc:45:b9:82:e2:0d:06:ab: 67:ec:2e:2c:66:86:4d:c2:bc:df:ee:d0:9b:b8:70: 7c:74:c5:e0:67:6f:70:6e:82:84:11:04:63:38:00: 95:cf:90:fb:51:65:74:4e:e5:dc:b7:fa:91:16:a3: bd:8d:06:c6:22:34:52:dc:96:66:83:2b:1b:29:52: 4d:e9:45:a8:aa:b1:8f:2d:bd:8c:00:06:1e:db:26: b6:f9:35:8a:60:4e:3b:05:f2:78:b0:49:8a:ac:cc: 15:41:1d:dd:2a:85:a8:db:36:2a:4b:dc:04:01:f8: f5:21:59:43:a4:fd:50:81:63:c7:4f:6b:c3:39:86: 54:71:48:1d:35:f8:05:5e:7e:4b:59:00:51:d6:d7: 90:95:38:a8:5e:b4:4c:82:42:65:00:b3:b6:72:a3: 42:88:0c:82:13:f8:3b:8b:f1:9b:62:95:fe:78:3f: a4:c1:0d:41:98:35:97:9c:e9:d7:80:40:76:b3:9a: 98:d1:63:d1:5e:8c:ed:db:8b:09:b3:47:de:ff:cc: 85:2b:8e:89:1e:f6:6b:05:89:4b:4d:d7:85:b5:3f: 13:b2:27:dd:b7:e4:d9:8a:2d:b3:21:0a:76:a3:25: 70:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2B:71:90:24:36:D8:02:EC:5D:FF:30:E0:86:FF:3F:A5:25:FE:E8 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KitxkCQ22ALsXf8w4Ib_P6Ul_ug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.128.0/20 217.60.152.0/21 Signature Algorithm: sha256WithRSAEncryption 61:b4:20:67:03:be:41:01:b5:51:89:f3:c4:0a:13:c5:92:9a: ba:77:d5:ab:0f:c1:32:03:18:b4:b3:22:ce:11:2d:7b:75:de: f3:34:a7:7f:42:38:6c:28:63:f0:59:32:7d:c5:fc:f3:58:20: 4d:e5:6b:f9:58:f8:f3:57:ef:97:fc:20:5e:30:f2:37:b5:b1: ae:4d:6c:85:78:4d:13:1a:87:ab:e1:f0:a6:1d:05:10:e0:a9: 56:62:36:9e:71:b3:7c:c8:0f:6c:26:10:7b:4a:fd:c8:c2:c3: e7:77:36:65:56:62:67:09:f3:cb:d4:11:bd:d0:e2:ad:6f:1a: 4f:0b:23:fc:05:e9:21:b2:15:6f:88:ba:0f:c4:17:1f:7a:c0: c3:4a:2b:fd:37:74:30:8f:ce:11:44:8a:b0:75:2e:9f:af:b9: 44:e9:4b:79:56:f6:f2:48:12:a7:e7:0c:fa:9a:04:2a:2f:da: 98:ed:16:d8:00:cf:20:77:46:b0:4e:03:81:2e:95:87:b0:f1: 6a:22:3e:fc:74:23:72:7d:00:f5:a2:c0:96:84:d7:a7:fe:95: 8d:1c:32:b1:8d:ab:48:0e:a7:ec:8c:f0:e1:7e:5b:c8:9f:69: 29:68:1f:fa:b3:8c:1f:7c:22:1e:65:fd:7b:c0:3a:14:85:3a: aa:ab:6e:c2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hN3Mq5fB+poEDA5WRhyHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTJiNzE5MDI0MzZkODAyZWM1ZGZmMzBlMDg2ZmYzZmE1MjVmZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbzS0o9D5TIsFzeCD5peQ6+qlb5D vEW5guINBqtn7C4sZoZNwrzf7tCbuHB8dMXgZ29wboKEEQRjOACVz5D7UWV0TuXc t/qRFqO9jQbGIjRS3JZmgysbKVJN6UWoqrGPLb2MAAYe2ya2+TWKYE47BfJ4sEmK rMwVQR3dKoWo2zYqS9wEAfj1IVlDpP1QgWPHT2vDOYZUcUgdNfgFXn5LWQBR1teQ lTioXrRMgkJlALO2cqNCiAyCE/g7i/GbYpX+eD+kwQ1BmDWXnOnXgEB2s5qY0WPR Xozt24sJs0fe/8yFK46JHvZrBYlLTdeFtT8Tsifdt+TZii2zIQp2oyVwhwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCorcZAkNtgC7F3/MOCG/z+lJf7oMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvS2l0eGtDUTIyQUxzWGY4dzRJYl9QNlVsX3VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQE2TyAAwQD 2TyYMA0GCSqGSIb3DQEBCwUAA4IBAQBhtCBnA75BAbVRifPEChPFkpq6d9WrD8Ey Axi0syLOES17dd7zNKd/QjhsKGPwWTJ9xfzzWCBN5Wv5WPjzV++X/CBeMPI3tbGu TWyFeE0TGoer4fCmHQUQ4KlWYjaecbN8yA9sJhB7Sv3IwsPndzZlVmJnCfPL1BG9 0OKtbxpPCyP8BekhshVviLoPxBcfesDDSiv9N3Qwj84RRIqwdS6fr7lE6Ut5Vvby SBKn5wz6mgQqL9qY7RbYAM8gd0awTgOBLpWHsPFqIj78dCNyfQD1osCWhNen/pWN HDKxjatIDqfsjPDhflvIn2kpaB/6s4wffCIeZf17wDoUhTqqq27C -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:53 2026 by rpki-client