This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/Kpzhj_95i4E4aJjNSYc2BTV8EAk.roa File: Kpzhj_95i4E4aJjNSYc2BTV8EAk.roa (raw, json) Hash identifier: idu2KS48f2h5e79Q1R66rhjvET6BFhf6C4kPWcByyac= Subject key identifier: 2A:9C:E1:8F:FF:79:8B:81:38:68:98:CD:49:87:36:05:35:7C:10:09 Certificate issuer: /CN=598fa4201344d4107f792eee2566c62d65714e2d Certificate serial: 019B7B3640B50F915CF6DB072FA7AE4D5AB2 Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/Kpzhj_95i4E4aJjNSYc2BTV8EAk.roa Signing time: Thu 01 Jan 2026 20:18:31 +0000 ROA not before: Thu 01 Jan 2026 20:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203324 IP address blocks: 217.61.137.0/24 maxlen: 24 217.61.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:40:b5:0f:91:5c:f6:db:07:2f:a7:ae:4d:5a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d Validity Not Before: Jan 1 20:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a9ce18fff798b81386898cd49873605357c1009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:af:5d:4a:2e:52:f0:00:0e:8f:d0:72:68:1d: 92:ee:b9:d9:3d:8e:c1:45:ac:cf:b7:6b:a3:1a:41: 7f:25:0a:bd:fc:ec:76:56:8d:f6:64:da:ea:48:a6: 2b:50:49:86:ba:8d:8d:e9:5c:79:f9:40:78:38:06: 6a:5e:f8:cd:c0:75:e4:29:fc:db:f5:ba:fc:a3:76: 2a:e8:99:cf:cd:74:36:ef:09:99:db:54:62:66:1e: cb:61:32:0b:85:cf:cf:48:43:14:7e:7a:0c:1f:e1: 0c:9f:6b:1f:e0:8c:da:a6:75:73:56:2f:a2:81:3b: c0:08:37:b9:6b:3c:4e:e9:a2:b4:0f:f6:a6:0b:81: 0e:bd:f1:32:22:58:12:3d:f8:61:13:3c:cc:95:6f: 84:84:a8:bb:9a:35:05:62:34:b2:7d:76:31:c8:af: be:ef:6a:6c:12:5c:87:43:12:69:9e:ce:4f:da:b0: 0f:c5:8a:d6:31:43:ea:54:45:c6:6a:5a:32:b9:23: 04:17:50:ed:0c:d5:27:4a:21:d5:68:74:ae:0e:41: 33:c2:ec:0b:46:db:78:82:f8:9a:c9:5c:1e:26:92: 51:dd:50:c4:c8:29:28:fb:7a:3d:2d:45:4c:f2:26: a3:1f:c4:db:c8:57:d4:c9:ff:03:88:cb:e5:f1:6e: 00:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9C:E1:8F:FF:79:8B:81:38:68:98:CD:49:87:36:05:35:7C:10:09 X509v3 Authority Key Identifier: keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/Kpzhj_95i4E4aJjNSYc2BTV8EAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.61.137.0-217.61.138.255 Signature Algorithm: sha256WithRSAEncryption 9f:8f:51:98:f0:13:fd:4e:87:08:2e:dd:98:9c:48:18:81:82: e9:9b:c3:b0:30:5b:31:3f:69:12:6d:a8:51:97:d1:f0:81:56: dd:2f:a8:10:e3:87:0d:08:ee:4b:07:a1:51:09:95:ee:8a:d0: 3d:25:09:1e:39:c5:92:7f:32:8f:55:64:7f:06:56:d5:69:6e: e9:b2:7d:9b:b7:bc:94:bf:aa:0a:f6:7a:92:ac:3d:da:21:9e: 6e:fd:ed:b8:ac:35:c2:e3:ef:27:b3:56:82:b9:88:33:8e:2c: 54:4a:58:7d:94:40:eb:cd:30:2e:f2:23:c4:13:ee:76:dd:d7: f0:9b:65:73:93:ae:1c:43:d8:51:41:27:f8:c3:3d:6f:25:d4: 21:b0:d2:85:56:ae:43:f1:ba:6d:54:02:98:83:99:3f:c8:60: 85:8e:ce:c1:64:e3:40:06:65:b0:3f:57:ec:7e:2c:84:95:a7: 9b:e9:b2:42:6c:54:54:ae:87:40:07:b7:02:22:fc:e6:33:4c: 4b:c4:c8:df:51:5a:d4:49:51:66:01:a5:af:af:f2:fb:9f:53: 34:ad:33:49:69:df:f5:b2:7b:ce:a8:a3:e6:db:fc:d7:05:4e: a7:b2:6f:cd:13:20:9f:b7:a2:c8:7a:f0:a6:a7:70:75:83:44: a8:1f:d8:26 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NkC1D5Fc9tsHL6euTVqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5OGZhNDIwMTM0NGQ0MTA3Zjc5MmVlZTI1NjZjNjJkNjU3 MTRlMmQwHhcNMjYwMTAxMjAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTljZTE4ZmZmNzk4YjgxMzg2ODk4Y2Q0OTg3MzYwNTM1N2MxMDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a9dSi5S8AAOj9ByaB2S7rnZPY7B RazPt2ujGkF/JQq9/Ox2Vo32ZNrqSKYrUEmGuo2N6Vx5+UB4OAZqXvjNwHXkKfzb 9br8o3Yq6JnPzXQ27wmZ21RiZh7LYTILhc/PSEMUfnoMH+EMn2sf4IzapnVzVi+i gTvACDe5azxO6aK0D/amC4EOvfEyIlgSPfhhEzzMlW+EhKi7mjUFYjSyfXYxyK++ 72psElyHQxJpns5P2rAPxYrWMUPqVEXGaloyuSMEF1DtDNUnSiHVaHSuDkEzwuwL Rtt4gviayVweJpJR3VDEyCko+3o9LUVM8iajH8TbyFfUyf8DiMvl8W4AhwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCqc4Y//eYuBOGiYzUmHNgU1fBAJMB8GA1UdIwQY MBaAFFmPpCATRNQQf3ku7iVmxi1lcU4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84MzhlZjEtNzM5My00ZmJkLWI2N2It NjY0YjhmMDNkMTgwLzEvS3B6aGpfOTVpNEU0YUpqTlNZYzJCVFY4RUFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84MzhlZjEtNzM5My00ZmJkLWI2N2ItNjY0YjhmMDNkMTgw LzEvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADZPYkD BADZPYowDQYJKoZIhvcNAQELBQADggEBAJ+PUZjwE/1Ohwgu3ZicSBiBgumbw7Aw WzE/aRJtqFGX0fCBVt0vqBDjhw0I7ksHoVEJle6K0D0lCR45xZJ/Mo9VZH8GVtVp bumyfZu3vJS/qgr2epKsPdohnm797bisNcLj7yezVoK5iDOOLFRKWH2UQOvNMC7y I8QT7nbd1/CbZXOTrhxD2FFBJ/jDPW8l1CGw0oVWrkPxum1UApiDmT/IYIWOzsFk 40AGZbA/V+x+LISVp5vpskJsVFSuh0AHtwIi/OYzTEvEyN9RWtRJUWYBpa+v8vuf UzStM0lp3/Wye86oo+bb/NcFTqeyb80TIJ+3osh68KancHWDRKgf2CY= -----END CERTIFICATE-----Generated at Mon Jan 26 13:46:15 2026 by rpki-client