This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kTVaLkeW77Vl9y-_uCNNaTnSWQs.roa File: kTVaLkeW77Vl9y-_uCNNaTnSWQs.roa (raw, json) Hash identifier: S0n8x+aOqybKTOnxR3yhpH5Rz3mFCffzw166DxaUgXs= Subject key identifier: 91:35:5A:2E:47:96:EF:B5:65:F7:2F:BF:B8:23:4D:69:39:D2:59:0B Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Certificate serial: 019C0FDA3BD573679591E716455227EDAD0D Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kTVaLkeW77Vl9y-_uCNNaTnSWQs.roa Signing time: Fri 30 Jan 2026 17:01:26 +0000 ROA not before: Fri 30 Jan 2026 17:01:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17497 IP address blocks: 222.167.226.0/24 maxlen: 24 222.167.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:da:3b:d5:73:67:95:91:e7:16:45:52:27:ed:ad:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Validity Not Before: Jan 30 17:01:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91355a2e4796efb565f72fbfb8234d6939d2590b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ef:ea:3b:e7:68:1d:1b:9c:f2:5c:11:07:be: a4:3f:fc:2c:7d:7e:07:24:c3:3d:1f:38:02:f2:c6: ac:5d:06:2d:da:65:86:bf:f7:1a:34:e5:8b:5e:40: d0:40:e1:80:ef:82:45:14:ce:90:0f:d3:80:48:f1: 7f:b6:1e:0e:67:f6:b7:0c:d6:56:8e:40:ad:ac:0a: 5b:22:c5:61:a4:67:16:ab:85:36:1d:1f:90:de:25: 54:63:f3:9f:78:c3:d8:74:36:a0:2b:e3:38:6f:a3: a4:77:db:34:c4:75:d9:64:8d:b8:f9:34:37:f3:7e: 8f:dd:97:6f:cc:78:44:94:af:08:88:47:3b:3b:74: d5:ea:6e:86:78:37:f1:5c:4d:10:68:8e:32:9d:2a: 04:f9:e8:1d:c5:dd:da:c5:4e:73:a5:30:77:ac:73: 7e:37:20:3e:35:ff:de:ef:d2:f2:ad:d1:46:f5:7c: 2f:c0:a5:9f:08:d2:c4:d3:8f:81:e3:c1:02:5a:49: cc:12:fd:97:85:83:21:5b:79:d7:a7:ba:2d:77:92: e6:7b:a1:d6:84:fc:72:34:8a:b1:ab:a9:cb:93:67: 83:03:a6:25:fe:84:21:d2:91:90:29:11:f8:04:a7: eb:94:38:7b:64:71:b2:b6:53:8f:8e:2b:26:a2:f6: dd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:35:5A:2E:47:96:EF:B5:65:F7:2F:BF:B8:23:4D:69:39:D2:59:0B X509v3 Authority Key Identifier: keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kTVaLkeW77Vl9y-_uCNNaTnSWQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 222.167.226.0/24 222.167.249.0/24 Signature Algorithm: sha256WithRSAEncryption 52:a6:b0:46:9f:1b:76:a4:ec:cc:2c:f9:a9:39:be:0e:41:15: af:25:d6:c5:7c:da:fa:df:e9:38:ab:75:e7:13:3c:20:eb:c5: be:37:44:ee:1f:ec:73:6c:32:4c:b0:89:ac:79:03:39:1b:72: 13:9d:0a:3f:5a:3b:d2:4d:cf:3a:12:4d:e6:eb:5c:60:52:f2: 20:27:dd:df:cc:d8:99:47:01:da:e5:08:56:63:9a:91:e9:90: 57:f8:33:c2:8e:43:5f:8e:00:d1:43:a4:8c:6f:65:a1:42:cc: 52:02:a2:8e:22:26:37:ce:e0:03:93:88:48:5c:fd:61:dd:37: 63:b0:b1:35:a9:5c:3f:0c:9e:65:21:ce:12:2d:22:63:2c:e0: d4:6a:04:9c:be:c1:b3:18:11:32:6f:01:a9:86:12:b8:33:8b: f1:fe:22:97:6e:80:3f:1a:f4:27:83:da:17:fd:ca:e6:00:4e: 45:ce:31:f5:e1:e0:c7:44:43:66:26:8d:20:f1:67:66:61:6a: 6d:17:79:54:ac:20:76:0d:a8:17:38:58:05:27:de:4f:72:10: 46:c5:8d:eb:e9:a6:0b:a6:f6:5e:fb:ab:19:19:61:32:18:fd: e5:71:74:e7:7b:21:e7:64:f3:30:54:c7:7b:6b:5b:e4:11:61: 76:13:eb:0e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwP2jvVc2eVkecWRVIn7a0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1 YTkyOTQwHhcNMjYwMTMwMTcwMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTM1NWEyZTQ3OTZlZmI1NjVmNzJmYmZiODIzNGQ2OTM5ZDI1OTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e/qO+doHRuc8lwRB76kP/wsfX4H JMM9HzgC8sasXQYt2mWGv/caNOWLXkDQQOGA74JFFM6QD9OASPF/th4OZ/a3DNZW jkCtrApbIsVhpGcWq4U2HR+Q3iVUY/OfeMPYdDagK+M4b6Okd9s0xHXZZI24+TQ3 836P3ZdvzHhElK8IiEc7O3TV6m6GeDfxXE0QaI4ynSoE+egdxd3axU5zpTB3rHN+ NyA+Nf/e79LyrdFG9XwvwKWfCNLE04+B48ECWknMEv2XhYMhW3nXp7otd5Lme6HW hPxyNIqxq6nLk2eDA6Yl/oQh0pGQKRH4BKfrlDh7ZHGytlOPjismovbddQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJE1Wi5Hlu+1Zfcvv7gjTWk50lkLMB8GA1UdIwQY MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt NGEzNDhlN2JlNDQxLzEva1RWYUxrZVc3N1ZsOXktX3VDTk5hVG5TV1FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA3qfiAwQA 3qf5MA0GCSqGSIb3DQEBCwUAA4IBAQBSprBGnxt2pOzMLPmpOb4OQRWvJdbFfNr6 3+k4q3XnEzwg68W+N0TuH+xzbDJMsImseQM5G3ITnQo/WjvSTc86Ek3m61xgUvIg J93fzNiZRwHa5QhWY5qR6ZBX+DPCjkNfjgDRQ6SMb2WhQsxSAqKOIiY3zuADk4hI XP1h3TdjsLE1qVw/DJ5lIc4SLSJjLODUagScvsGzGBEybwGphhK4M4vx/iKXboA/ GvQng9oX/crmAE5FzjH14eDHRENmJo0g8WdmYWptF3lUrCB2DagXOFgFJ95PchBG xY3r6aYLpvZe+6sZGWEyGP3lcXTneyHnZPMwVMd7a1vkEWF2E+sO -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:56 2026 by rpki-client