This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/kKa1XAZi28YxfpB3mEQct4rM5D8.roa File: kKa1XAZi28YxfpB3mEQct4rM5D8.roa (raw, json) Hash identifier: WRwHyOAs556xA5lR2SanPEOIWdbcPQ5+gONgps5Y/Wo= Subject key identifier: 90:A6:B5:5C:06:62:DB:C6:31:7E:90:77:98:44:1C:B7:8A:CC:E4:3F Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27 Certificate serial: 019B76EB2807902F9A96D32FB83B4D9C6072 Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/kKa1XAZi28YxfpB3mEQct4rM5D8.roa Signing time: Thu 01 Jan 2026 00:18:01 +0000 ROA not before: Thu 01 Jan 2026 00:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 2.58.180.0/22 maxlen: 22 168.168.0.0/21 maxlen: 21 168.168.8.0/22 maxlen: 22 168.168.12.0/23 maxlen: 23 168.168.14.0/24 maxlen: 24 168.168.15.0/24 maxlen: 24 168.168.24.0/24 maxlen: 24 168.168.32.0/22 maxlen: 22 168.168.40.0/22 maxlen: 22 168.168.44.0/22 maxlen: 22 168.168.48.0/21 maxlen: 21 168.168.56.0/23 maxlen: 23 168.168.60.0/22 maxlen: 22 168.168.64.0/24 maxlen: 24 168.168.80.0/20 maxlen: 20 168.168.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:28:07:90:2f:9a:96:d3:2f:b8:3b:4d:9c:60:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27 Validity Not Before: Jan 1 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90a6b55c0662dbc6317e907798441cb78acce43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:24:6f:17:51:26:72:b5:72:43:25:8c:c7:7d: a8:2c:07:56:d0:8a:fe:87:5a:af:ee:79:0f:dc:32: fb:bb:25:d3:45:21:bf:20:e5:1b:87:d5:16:2c:e9: f1:49:a1:3a:05:c0:fd:0e:4a:de:c6:58:9e:c9:48: bc:8d:38:1e:86:25:83:8c:b3:23:fe:6c:bb:41:ae: a5:50:6c:a7:13:42:1f:97:0a:59:e7:30:cb:d7:a4: 95:37:08:e9:fa:c0:f4:48:b9:cc:1f:99:8c:68:90: d7:43:eb:49:69:6c:45:4e:3c:27:b6:6a:cb:ef:a5: 3a:36:8d:4f:ef:7d:97:d0:b4:95:ec:23:29:d1:c9: 6b:2f:4a:0a:8a:55:05:99:9f:77:16:2f:2f:6a:65: 5d:eb:4d:84:df:e1:49:7b:72:81:69:22:a8:13:fe: 54:4f:59:d0:be:76:7c:b6:6e:0b:10:09:27:9a:79: c0:6c:84:04:ea:94:96:71:ae:df:95:f5:90:e1:03: da:2a:40:25:66:b7:b5:bb:13:b1:88:d1:ae:39:1c: a0:0f:97:c9:30:e0:36:91:4d:13:a8:d8:fb:18:4c: c4:0a:2e:b8:80:ef:d1:1f:90:57:eb:93:a3:25:2c: ba:0b:03:bc:de:44:d6:b9:9b:15:5d:9a:44:36:fb: a1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A6:B5:5C:06:62:DB:C6:31:7E:90:77:98:44:1C:B7:8A:CC:E4:3F X509v3 Authority Key Identifier: keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/kKa1XAZi28YxfpB3mEQct4rM5D8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.180.0/22 168.168.0.0/20 168.168.24.0/24 168.168.32.0/22 168.168.40.0-168.168.57.255 168.168.60.0-168.168.64.255 168.168.80.0-168.168.127.255 Signature Algorithm: sha256WithRSAEncryption 71:4e:2b:1a:cc:72:5c:a2:9d:5e:36:a3:45:d1:70:9b:92:a8: f4:9d:0e:e6:57:0a:21:b0:f6:63:bd:a3:64:c9:c4:c0:e3:ef: 57:9e:51:a6:48:e2:cc:fd:5c:45:4d:3f:7f:4f:9d:4a:ca:f3: 1b:ff:e2:27:9e:d8:ef:ad:40:a5:85:fe:ee:c7:48:3f:ad:6c: 12:17:12:b9:3a:fa:1c:63:76:db:be:c4:9d:cf:d1:53:58:b0: 4d:33:30:99:40:df:42:39:aa:68:55:bd:65:9f:ea:c6:e6:ba: 84:dc:6f:59:1b:05:3b:27:49:93:f1:bf:d1:ed:ef:63:ed:eb: 4d:01:9a:c6:30:50:c4:e9:69:4b:7b:92:c5:8f:85:ec:ad:04: f3:59:4c:b7:8e:46:62:d0:b1:a4:b0:2a:90:40:6f:e8:42:03: b9:61:22:13:2a:75:3c:ac:54:5f:f8:ba:75:d0:49:06:b7:2b: ec:0d:c0:ba:c4:ff:70:d6:f0:af:ef:ad:de:c2:42:a8:99:01: 50:a4:6a:9e:ce:db:43:73:e2:40:31:4d:92:1f:aa:79:87:dc: a4:1f:3d:f4:39:8b:7f:f1:74:f7:e7:57:3f:65:d4:9a:1d:91: c0:aa:01:0d:7f:c9:16:a8:15:69:7a:2a:7e:74:1a:33:5d:2c: 06:87:e6:91 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt26ygHkC+altMvuDtNnGByMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiOTJjZjMzOTBjYWE1ODc5ZTc1OTcyOWNkOTAwOGM2ZWNh NTVhMjcwHhcNMjYwMTAxMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGE2YjU1YzA2NjJkYmM2MzE3ZTkwNzc5ODQ0MWNiNzhhY2NlNDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziRvF1EmcrVyQyWMx32oLAdW0Ir+ h1qv7nkP3DL7uyXTRSG/IOUbh9UWLOnxSaE6BcD9DkrexlieyUi8jTgehiWDjLMj /my7Qa6lUGynE0IflwpZ5zDL16SVNwjp+sD0SLnMH5mMaJDXQ+tJaWxFTjwntmrL 76U6No1P732X0LSV7CMp0clrL0oKilUFmZ93Fi8vamVd602E3+FJe3KBaSKoE/5U T1nQvnZ8tm4LEAknmnnAbIQE6pSWca7flfWQ4QPaKkAlZre1uxOxiNGuORygD5fJ MOA2kU0TqNj7GEzECi64gO/RH5BX65OjJSy6CwO83kTWuZsVXZpENvuhzwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFJCmtVwGYtvGMX6Qd5hEHLeKzOQ/MB8GA1UdIwQY MBaAFGuSzzOQyqWHnnWXKc2QCMbspVonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTVMUE01REtwWWVlZFpjcHpaQUl4dXlsV2ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xMjM0OWUtNTI4Mi00NzJhLWFlNTIt MmEwNjIyMzYyM2UwLzEva0thMVhBWmkyOFl4ZnBCM21FUWN0NHJNNUQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xMjM0OWUtNTI4Mi00NzJhLWFlNTItMmEwNjIyMzYyM2Uw LzEvYTVMUE01REtwWWVlZFpjcHpaQUl4dXlsV2ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCAjq0AwQE qKgAAwQAqKgYAwQCqKggMAwDBAOoqCgDBAGoqDgwDAMEAqioPAMEAKioQDAMAwQE qKhQAwQHqKgAMA0GCSqGSIb3DQEBCwUAA4IBAQBxTisazHJcop1eNqNF0XCbkqj0 nQ7mVwohsPZjvaNkycTA4+9XnlGmSOLM/VxFTT9/T51KyvMb/+InntjvrUClhf7u x0g/rWwSFxK5OvocY3bbvsSdz9FTWLBNMzCZQN9COapoVb1ln+rG5rqE3G9ZGwU7 J0mT8b/R7e9j7etNAZrGMFDE6WlLe5LFj4XsrQTzWUy3jkZi0LGksCqQQG/oQgO5 YSITKnU8rFRf+Lp10EkGtyvsDcC6xP9w1vCv763ewkKomQFQpGqezttDc+JAMU2S H6p5h9ykHz30OYt/8XT351c/ZdSaHZHAqgENf8kWqBVpeip+dBozXSwGh+aR -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:22 2026 by rpki-client