This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/kpkQZ1JRBGDsdpw2S7PhHOrH2sk.roa File: kpkQZ1JRBGDsdpw2S7PhHOrH2sk.roa (raw, json) Hash identifier: 1g42TuSvfx7CAeQyCRx+Kb/lF/daUXgAcMyfGE+Fng4= Subject key identifier: 92:99:10:67:52:51:04:60:EC:76:9C:36:4B:B3:E1:1C:EA:C7:DA:C9 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA54B51BF817B2B353BC4050FAF9556 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/kpkQZ1JRBGDsdpw2S7PhHOrH2sk.roa Signing time: Thu 01 Jan 2026 22:19:48 +0000 ROA not before: Thu 01 Jan 2026 22:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 45.83.188.0/22 maxlen: 24 45.85.224.0/22 maxlen: 24 45.86.248.0/22 maxlen: 24 45.87.22.0/24 maxlen: 24 45.88.120.0/24 maxlen: 24 45.88.122.0/24 maxlen: 24 45.129.232.0/22 maxlen: 24 45.133.252.0/24 maxlen: 24 45.133.254.0/24 maxlen: 24 45.136.72.0/22 maxlen: 24 45.143.192.0/24 maxlen: 24 45.143.194.0/24 maxlen: 24 45.144.216.0/22 maxlen: 24 45.146.52.0/24 maxlen: 24 45.146.56.0/22 maxlen: 24 45.148.24.0/24 maxlen: 24 45.149.0.0/24 maxlen: 24 45.150.92.0/24 maxlen: 24 45.150.94.0/24 maxlen: 24 45.154.136.0/24 maxlen: 24 45.154.139.0/24 maxlen: 24 45.157.96.0/23 maxlen: 24 45.157.113.0/24 maxlen: 24 45.157.114.0/24 maxlen: 24 45.157.115.0/24 maxlen: 24 45.159.244.0/23 maxlen: 24 45.159.247.0/24 maxlen: 24 89.36.36.0/24 maxlen: 24 89.38.38.0/24 maxlen: 24 89.46.46.0/24 maxlen: 24 89.251.1.0/24 maxlen: 24 89.251.3.0/24 maxlen: 24 136.144.16.0/24 maxlen: 24 136.144.18.0/24 maxlen: 24 136.144.24.0/24 maxlen: 24 136.144.32.0/24 maxlen: 24 136.144.34.0/24 maxlen: 24 185.51.193.0/24 maxlen: 24 185.51.194.0/23 maxlen: 23 185.114.60.0/22 maxlen: 22 185.227.32.0/24 maxlen: 24 185.243.244.0/24 maxlen: 24 185.243.246.0/24 maxlen: 24 188.208.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:4b:51:bf:81:7b:2b:35:3b:c4:05:0f:af:95:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9299106752510460ec769c364bb3e11ceac7dac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:b1:ea:bd:c0:83:7f:5f:bb:91:7b:f2:94: 72:1d:df:07:ed:28:e6:ae:43:46:75:65:ca:90:e0: cb:56:1f:04:26:9c:51:f7:1f:1b:8b:34:ed:1a:c0: 16:49:71:2e:a1:03:0c:ea:9a:ac:c3:68:98:ee:88: c3:e2:1e:39:7f:b6:c1:c1:26:44:df:1c:ce:52:c6: 4e:a1:c5:a8:a8:18:13:2f:54:38:e7:11:ac:17:f3: a5:d7:7d:26:25:9a:31:5c:3d:7a:35:d9:7a:b6:af: 8e:3b:05:88:41:90:96:31:f3:85:82:f7:ce:b2:ee: a7:68:26:0c:26:f4:d1:d9:37:e2:07:21:f7:24:9f: 10:16:a8:ed:19:8c:a0:a8:d9:f2:01:fd:d8:9d:77: 12:f2:88:18:10:36:5f:13:bf:34:2a:26:a9:1a:22: 18:ba:ce:ff:62:e0:ac:e2:b0:80:0a:08:19:0b:f7: e4:43:b6:95:24:37:bb:b3:a6:cf:21:63:2b:d2:e9: 2c:a3:64:62:cf:32:04:70:bc:2e:06:c2:f6:98:ef: 85:ad:c6:56:6f:6e:e6:fb:91:7f:84:73:8c:33:19: a6:af:6e:66:4a:52:aa:eb:14:a3:0e:13:9a:60:20: 4e:2d:d7:c3:cd:30:4a:9e:0f:5e:5b:ff:e5:64:54: c8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:99:10:67:52:51:04:60:EC:76:9C:36:4B:B3:E1:1C:EA:C7:DA:C9 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/kpkQZ1JRBGDsdpw2S7PhHOrH2sk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.188.0/22 45.85.224.0/22 45.86.248.0/22 45.87.22.0/24 45.88.120.0/24 45.88.122.0/24 45.129.232.0/22 45.133.252.0/24 45.133.254.0/24 45.136.72.0/22 45.143.192.0/24 45.143.194.0/24 45.144.216.0/22 45.146.52.0/24 45.146.56.0/22 45.148.24.0/24 45.149.0.0/24 45.150.92.0/24 45.150.94.0/24 45.154.136.0/24 45.154.139.0/24 45.157.96.0/23 45.157.113.0-45.157.115.255 45.159.244.0/23 45.159.247.0/24 89.36.36.0/24 89.38.38.0/24 89.46.46.0/24 89.251.1.0/24 89.251.3.0/24 136.144.16.0/24 136.144.18.0/24 136.144.24.0/24 136.144.32.0/24 136.144.34.0/24 185.51.193.0-185.51.195.255 185.114.60.0/22 185.227.32.0/24 185.243.244.0/24 185.243.246.0/24 188.208.38.0/23 Signature Algorithm: sha256WithRSAEncryption bc:da:4e:97:eb:5b:5b:a7:7a:ec:a6:3d:09:0c:7a:46:4f:ee: 3a:d0:7d:9e:54:c5:25:4d:8b:b7:56:5d:03:ce:20:55:bb:be: 70:38:2b:73:08:20:05:d6:f8:54:ec:ac:7e:01:7c:92:c5:46: 13:16:cb:47:56:0e:2c:29:43:8d:7a:3f:cf:b6:7a:d8:5b:26: 58:8d:2f:17:7a:f4:b8:8e:c9:8e:40:ea:f9:12:4e:e1:cc:30: 5a:f3:6e:90:9b:02:02:cc:0b:44:f0:53:8e:12:71:8f:c7:8a: c4:8d:c7:6e:32:8f:0d:d5:29:2d:3b:98:4b:87:02:a1:15:8b: 5c:ae:ac:ac:9d:e5:be:42:ab:e9:89:cf:bd:7b:5b:92:13:46: c9:9c:e0:ee:8c:27:46:b6:7e:76:8c:f0:45:49:ec:9a:96:3f: 86:e7:af:ba:29:fd:3b:18:98:9c:37:46:71:14:4f:06:d0:7d: bc:25:ec:cd:8b:e1:84:05:85:63:ef:af:3d:46:a3:bc:4e:59: cf:a0:84:fa:40:ef:78:9e:3b:47:86:37:ad:ed:47:4d:0b:5e: 34:44:d9:09:16:85:ea:cb:e4:a7:96:5b:bf:52:14:d8:87:a3: 60:56:9f:c9:bc:81:c7:0f:c4:22:fb:22:45:05:2c:8f:50:26: 8f:60:f9:28 -----BEGIN CERTIFICATE----- MIIGBzCCBO+gAwIBAgISAZt7pUtRv4F7KzU7xAUPr5VWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mjk5MTA2NzUyNTEwNDYwZWM3NjljMzY0YmIzZTExY2VhYzdkYWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMCx6r3Ag39fu5F78pRyHd8H7Sjm rkNGdWXKkODLVh8EJpxR9x8bizTtGsAWSXEuoQMM6pqsw2iY7ojD4h45f7bBwSZE 3xzOUsZOocWoqBgTL1Q45xGsF/Ol130mJZoxXD16Ndl6tq+OOwWIQZCWMfOFgvfO su6naCYMJvTR2TfiByH3JJ8QFqjtGYygqNnyAf3YnXcS8ogYEDZfE780KiapGiIY us7/YuCs4rCACggZC/fkQ7aVJDe7s6bPIWMr0ukso2RizzIEcLwuBsL2mO+FrcZW b27m+5F/hHOMMxmmr25mSlKq6xSjDhOaYCBOLdfDzTBKng9eW//lZFTIswIDAQAB o4IDEzCCAw8wHQYDVR0OBBYEFJKZEGdSUQRg7HacNkuz4Rzqx9rJMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEva3BrUVoxSlJCR0RzZHB3MlM3UGhIT3JIMnNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBJwYIKwYBBQUHAQcBAf8EggEWMIIBEjCCAQ4EAgABMIIB BgMEAi1TvAMEAi1V4AMEAi1W+AMEAC1XFgMEAC1YeAMEAC1YegMEAi2B6AMEAC2F /AMEAC2F/gMEAi2ISAMEAC2PwAMEAC2PwgMEAi2Q2AMEAC2SNAMEAi2SOAMEAC2U GAMEAC2VAAMEAC2WXAMEAC2WXgMEAC2aiAMEAC2aiwMEAS2dYDAMAwQALZ1xAwQC LZ1wAwQBLZ/0AwQALZ/3AwQAWSQkAwQAWSYmAwQAWS4uAwQAWfsBAwQAWfsDAwQA iJAQAwQAiJASAwQAiJAYAwQAiJAgAwQAiJAiMAwDBAC5M8EDBAK5M8ADBAK5cjwD BAC54yADBAC58/QDBAC58/YDBAG80CYwDQYJKoZIhvcNAQELBQADggEBALzaTpfr W1uneuymPQkMekZP7jrQfZ5UxSVNi7dWXQPOIFW7vnA4K3MIIAXW+FTsrH4BfJLF RhMWy0dWDiwpQ416P8+2ethbJliNLxd69LiOyY5A6vkSTuHMMFrzbpCbAgLMC0Tw U44ScY/HisSNx24yjw3VKS07mEuHAqEVi1yurKyd5b5Cq+mJz717W5ITRsmc4O6M J0a2fnaM8EVJ7JqWP4bnr7op/TsYmJw3RnEUTwbQfbwl7M2L4YQFhWPvrz1Go7xO Wc+ghPpA73ieO0eGN63tR00LXjRE2QkWherL5KeWW79SFNiHo2BWn8m8gccPxCL7 IkUFLI9QJo9g+Sg= -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:00 2026 by rpki-client