This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Kx1eIMK1ZB6OHHGc0668tmq96XA.roa File: Kx1eIMK1ZB6OHHGc0668tmq96XA.roa (raw, json) Hash identifier: lhgEO2Wo4yISCyt2s4yNXehUniTGVxp13Q/4RJVezZM= Subject key identifier: 2B:1D:5E:20:C2:B5:64:1E:8E:1C:71:9C:D3:AE:BC:B6:6A:BD:E9:70 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019B78A3755EA709DC401D10FCEB78603379 Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Kx1eIMK1ZB6OHHGc0668tmq96XA.roa Signing time: Thu 01 Jan 2026 08:18:56 +0000 ROA not before: Thu 01 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6168 IP address blocks: 151.253.180.0/23 maxlen: 24 151.253.180.0/24 maxlen: 24 151.253.181.0/24 maxlen: 24 194.170.246.0/24 maxlen: 24 195.229.47.0/24 maxlen: 24 213.42.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:75:5e:a7:09:dc:40:1d:10:fc:eb:78:60:33:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b1d5e20c2b5641e8e1c719cd3aebcb66abde970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:d8:4e:f7:88:62:01:d1:58:03:f3:3d:5b: be:84:5a:56:9e:e4:3b:83:68:2d:1b:77:03:a6:ae: e5:5c:3f:74:2b:20:f6:3d:23:9e:be:3d:7f:cc:c6: 16:95:92:d3:cf:75:76:8d:b3:c1:d7:16:7d:04:a2: 8c:35:41:59:70:72:ed:fb:4c:3e:0a:fb:e8:27:d2: 98:36:8d:4c:fa:6e:14:03:1c:7f:de:19:f1:09:e2: ce:dd:c8:de:e7:7e:42:ce:77:ca:d4:2c:43:cf:b7: 45:e4:b4:45:dc:95:1c:97:cb:2a:d3:d0:eb:25:b6: e4:d1:bf:1e:4f:3b:0f:44:bc:2e:fa:6e:81:8b:b4: a0:ad:ec:bd:51:a9:c9:fb:5c:7b:66:5a:47:33:d8: 92:46:64:1c:e4:62:34:17:d6:2b:5e:90:0a:d5:63: 24:b9:b7:ec:b8:e6:b1:d2:45:d3:c3:59:75:ca:24: af:59:a9:ce:5e:64:16:de:49:cc:7f:9b:d0:5d:d1: 20:f3:37:d5:fd:07:49:7a:75:63:43:1f:1d:47:67: 42:bc:ab:78:c7:e1:41:8c:cd:59:a6:82:40:39:aa: 12:24:95:76:7c:e7:a2:2f:c4:ce:a7:52:cf:63:59: 39:3f:fd:98:dc:91:5c:00:c2:44:e9:98:3d:aa:b5: 9d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1D:5E:20:C2:B5:64:1E:8E:1C:71:9C:D3:AE:BC:B6:6A:BD:E9:70 X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Kx1eIMK1ZB6OHHGc0668tmq96XA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.253.180.0/23 194.170.246.0/24 195.229.47.0/24 213.42.110.0/24 Signature Algorithm: sha256WithRSAEncryption 21:6b:d5:33:42:50:87:3f:67:49:42:6c:ec:54:e3:7c:49:30: 62:e1:48:3e:80:7d:df:94:da:02:46:3a:9d:c6:5a:2e:c5:01: b3:99:43:ea:85:40:c0:2a:a8:a5:b0:39:31:42:c0:af:ae:24: 25:5e:1e:98:fc:73:37:8d:89:e7:85:f2:4b:e7:56:66:50:31: 79:e3:74:74:e6:86:f2:8d:5d:8d:d1:2b:89:e5:f2:12:f9:c7: 48:b6:58:33:58:e3:c7:a2:2a:e1:dc:70:b7:41:60:cb:c4:62: 25:07:5d:e5:20:2d:df:cf:ea:1c:4b:c9:4d:9e:50:d7:9b:2d: e3:d9:03:3d:85:f6:6a:f0:ab:64:1c:ec:3d:eb:2a:1a:10:25: 5a:28:3b:5d:9a:32:39:e1:a8:b8:4e:da:53:fc:aa:d6:3e:e2: 57:5d:20:61:d9:2a:e8:5b:2b:35:40:ae:68:63:38:f8:6b:74: 9d:53:d6:a0:ab:14:08:c2:e9:24:1b:c2:ce:dc:c0:a7:d7:40: dd:ab:7b:88:16:ee:18:86:89:b8:e2:b8:cc:62:1d:3f:70:ef: ab:cd:0f:bd:62:dc:ea:b2:c0:a8:61:08:40:76:52:f0:9a:e5: 28:db:84:4e:6b:ca:d3:53:48:45:62:f6:7e:7c:be:38:0b:03: c3:31:5a:4f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4o3VepwncQB0Q/Ot4YDN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjFkNWUyMGMyYjU2NDFlOGUxYzcxOWNkM2FlYmNiNjZhYmRlOTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JjYTveIYgHRWAPzPVu+hFpWnuQ7 g2gtG3cDpq7lXD90KyD2PSOevj1/zMYWlZLTz3V2jbPB1xZ9BKKMNUFZcHLt+0w+ CvvoJ9KYNo1M+m4UAxx/3hnxCeLO3cje535CznfK1CxDz7dF5LRF3JUcl8sq09Dr Jbbk0b8eTzsPRLwu+m6Bi7Sgrey9UanJ+1x7ZlpHM9iSRmQc5GI0F9YrXpAK1WMk ubfsuOax0kXTw1l1yiSvWanOXmQW3knMf5vQXdEg8zfV/QdJenVjQx8dR2dCvKt4 x+FBjM1ZpoJAOaoSJJV2fOeiL8TOp1LPY1k5P/2Y3JFcAMJE6Zg9qrWdwQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCsdXiDCtWQejhxxnNOuvLZqvelwMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvS3gxZUlNSzFaQjZPSEhHYzA2Njh0bXE5NlhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBl/20AwQA wqr2AwQAw+UvAwQA1SpuMA0GCSqGSIb3DQEBCwUAA4IBAQAha9UzQlCHP2dJQmzs VON8STBi4Ug+gH3flNoCRjqdxlouxQGzmUPqhUDAKqilsDkxQsCvriQlXh6Y/HM3 jYnnhfJL51ZmUDF543R05obyjV2N0SuJ5fIS+cdItlgzWOPHoirh3HC3QWDLxGIl B13lIC3fz+ocS8lNnlDXmy3j2QM9hfZq8KtkHOw96yoaECVaKDtdmjI54ai4TtpT /KrWPuJXXSBh2SroWys1QK5oYzj4a3SdU9agqxQIwukkG8LO3MCn10Ddq3uIFu4Y hom44rjMYh0/cO+rzQ+9YtzqssCoYQhAdlLwmuUo24ROa8rTU0hFYvZ+fL44CwPD MVpP -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:04 2026 by rpki-client