This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/KtxgiXPBK2OwoC3ywjIlMfN-WUQ.roa File: KtxgiXPBK2OwoC3ywjIlMfN-WUQ.roa (raw, json) Hash identifier: 82rT1wn8tLHS3yTCKW0vJmoxGtSf+pDEWCX5BqeTJXM= Subject key identifier: 2A:DC:60:89:73:C1:2B:63:B0:A0:2D:F2:C2:32:25:31:F3:7E:59:44 Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27 Certificate serial: 019B76EB2892A91C1794B7C3ED77B0B49DA1 Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/KtxgiXPBK2OwoC3ywjIlMfN-WUQ.roa Signing time: Thu 01 Jan 2026 00:18:01 +0000 ROA not before: Thu 01 Jan 2026 00:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21874 IP address blocks: 168.168.40.0/22 maxlen: 22 168.168.44.0/22 maxlen: 22 168.168.48.0/21 maxlen: 21 168.168.56.0/23 maxlen: 23 168.168.60.0/22 maxlen: 22 168.168.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:28:92:a9:1c:17:94:b7:c3:ed:77:b0:b4:9d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27 Validity Not Before: Jan 1 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2adc608973c12b63b0a02df2c2322531f37e5944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ea:e3:0b:51:7a:17:fc:12:24:72:db:77:d3: 00:c9:52:8e:00:b8:23:13:b0:76:9f:6a:01:91:53: 0e:64:ba:df:1f:a1:28:9e:af:6e:9c:ba:83:98:c1: d2:4f:63:3e:37:6d:89:f8:55:59:cf:80:d7:08:32: b2:03:e1:77:6d:9f:c7:a3:cb:61:01:77:25:55:c0: f4:4e:15:91:7a:e7:7b:5b:10:56:9d:66:74:ed:a4: 8e:35:3b:a6:d9:ac:3a:de:84:ef:d2:f1:51:f4:3b: a0:fe:3a:35:3e:c4:b3:57:33:69:8f:b5:08:2f:64: 35:b8:76:3b:68:70:f5:e8:3d:b1:c6:72:b4:4c:0a: 68:73:d7:8b:8f:6b:1f:27:b1:c0:cc:36:59:f0:19: aa:d2:2e:d1:92:67:67:17:ac:98:d3:aa:84:37:0e: 77:cd:14:bc:77:bd:87:30:c5:cd:44:d8:c1:c4:48: a4:55:3a:cf:d6:3a:45:ec:3d:6c:ff:c4:db:0e:35: d9:be:0c:a6:ce:a3:24:ad:d0:93:f2:14:f4:38:ec: d8:e5:9b:14:7a:4b:2d:95:a0:38:db:57:98:ab:d6: 87:f1:d3:07:78:b1:da:09:4f:8f:e7:04:d1:33:48: ae:a2:69:84:02:26:6d:69:e9:49:57:1c:49:4e:f4: 7f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DC:60:89:73:C1:2B:63:B0:A0:2D:F2:C2:32:25:31:F3:7E:59:44 X509v3 Authority Key Identifier: keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/KtxgiXPBK2OwoC3ywjIlMfN-WUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.168.40.0-168.168.57.255 168.168.60.0-168.168.64.255 Signature Algorithm: sha256WithRSAEncryption 8f:55:75:f7:94:f5:7e:5e:4a:d3:59:a6:ad:47:7c:2f:2b:28: f0:a2:ef:79:99:79:b9:85:6f:d2:25:2d:cd:92:c7:47:5d:1a: 63:fb:b1:07:65:80:41:ea:e1:3f:a5:16:cd:74:1e:61:54:08: 00:ec:6a:4f:13:a2:16:78:17:6c:04:1f:c1:bd:be:cd:52:0c: 8f:90:75:a8:ef:b1:47:b4:2a:e9:fa:eb:f9:d3:a2:2f:32:73: f2:36:5d:8a:ac:37:d2:14:f2:5e:fe:67:9b:67:94:ca:13:88: c5:78:39:14:99:46:9e:b9:6f:04:c0:00:c1:b5:a5:da:37:ac: e9:cc:d8:3a:43:84:de:31:08:cb:6f:6a:29:fa:57:61:05:2d: e5:7c:5d:44:08:9c:5d:1f:42:8a:d4:bc:35:7f:05:bf:80:7c: 77:07:45:5d:b1:62:76:68:3c:56:af:95:c7:a3:ce:b6:08:fc: 75:bc:c9:be:ae:9c:6a:fc:50:32:b7:30:f0:bb:10:2a:35:56: 0c:3d:37:e4:a2:70:f1:cf:fd:68:f3:15:b4:93:f5:5d:77:ad: 39:57:14:66:11:11:73:72:3e:16:9b:bc:76:41:0d:fc:e9:a3: 05:18:25:26:cf:4a:07:b0:ca:d4:23:30:4d:7c:6a:c3:02:4d: cc:64:a8:40 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt26yiSqRwXlLfD7XewtJ2hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiOTJjZjMzOTBjYWE1ODc5ZTc1OTcyOWNkOTAwOGM2ZWNh NTVhMjcwHhcNMjYwMTAxMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWRjNjA4OTczYzEyYjYzYjBhMDJkZjJjMjMyMjUzMWYzN2U1OTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAverjC1F6F/wSJHLbd9MAyVKOALgj E7B2n2oBkVMOZLrfH6Eonq9unLqDmMHST2M+N22J+FVZz4DXCDKyA+F3bZ/Ho8th AXclVcD0ThWReud7WxBWnWZ07aSONTum2aw63oTv0vFR9Dug/jo1PsSzVzNpj7UI L2Q1uHY7aHD16D2xxnK0TApoc9eLj2sfJ7HAzDZZ8Bmq0i7RkmdnF6yY06qENw53 zRS8d72HMMXNRNjBxEikVTrP1jpF7D1s/8TbDjXZvgymzqMkrdCT8hT0OOzY5ZsU ekstlaA421eYq9aH8dMHeLHaCU+P5wTRM0iuommEAiZtaelJVxxJTvR/kQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFCrcYIlzwStjsKAt8sIyJTHzfllEMB8GA1UdIwQY MBaAFGuSzzOQyqWHnnWXKc2QCMbspVonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTVMUE01REtwWWVlZFpjcHpaQUl4dXlsV2ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xMjM0OWUtNTI4Mi00NzJhLWFlNTIt MmEwNjIyMzYyM2UwLzEvS3R4Z2lYUEJLMk93b0MzeXdqSWxNZk4tV1VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xMjM0OWUtNTI4Mi00NzJhLWFlNTItMmEwNjIyMzYyM2Uw LzEvYTVMUE01REtwWWVlZFpjcHpaQUl4dXlsV2ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAOoqCgD BAGoqDgwDAMEAqioPAMEAKioQDANBgkqhkiG9w0BAQsFAAOCAQEAj1V195T1fl5K 01mmrUd8Lyso8KLveZl5uYVv0iUtzZLHR10aY/uxB2WAQerhP6UWzXQeYVQIAOxq TxOiFngXbAQfwb2+zVIMj5B1qO+xR7Qq6frr+dOiLzJz8jZdiqw30hTyXv5nm2eU yhOIxXg5FJlGnrlvBMAAwbWl2jes6czYOkOE3jEIy29qKfpXYQUt5XxdRAicXR9C itS8NX8Fv4B8dwdFXbFidmg8Vq+Vx6POtgj8dbzJvq6cavxQMrcw8LsQKjVWDD03 5KJw8c/9aPMVtJP1XXetOVcUZhERc3I+Fpu8dkEN/OmjBRglJs9KB7DK1CMwTXxq wwJNzGSoQA== -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:36 2026 by rpki-client