This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/1Kvv6sx0rZVONCzJAQ9yJJI0fuY.roa File: 1Kvv6sx0rZVONCzJAQ9yJJI0fuY.roa (raw, json) Hash identifier: 7/TdPMTJa+xAQgIxwuTawOuvVxvCTpJMqykow3dXsmk= Subject key identifier: D4:AB:EF:EA:CC:74:AD:95:4E:34:2C:C9:01:0F:72:24:92:34:7E:E6 Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6 Certificate serial: 019B7C7EDC0FB2D52D0128DD259E76C8715D Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/1Kvv6sx0rZVONCzJAQ9yJJI0fuY.roa Signing time: Fri 02 Jan 2026 02:17:27 +0000 ROA not before: Fri 02 Jan 2026 02:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6677 IP address blocks: 31.209.192.0/18 maxlen: 18 85.220.0.0/17 maxlen: 17 157.157.0.0/16 maxlen: 16 157.157.2.0/24 maxlen: 24 157.157.4.0/24 maxlen: 24 157.157.136.0/24 maxlen: 24 192.147.34.0/24 maxlen: 24 194.105.224.0/19 maxlen: 19 194.105.224.0/24 maxlen: 24 212.30.192.0/19 maxlen: 19 212.30.212.0/24 maxlen: 24 213.167.128.0/19 maxlen: 19 213.167.150.0/24 maxlen: 24 213.167.152.0/24 maxlen: 24 2001:1a98::/29 maxlen: 29 2001:1a98::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:dc:0f:b2:d5:2d:01:28:dd:25:9e:76:c8:71:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6 Validity Not Before: Jan 2 02:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4abefeacc74ad954e342cc9010f722492347ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6a:ca:52:a9:19:97:59:af:1b:21:e4:a5:2d: 6f:26:29:20:92:ba:45:03:0b:0e:1f:16:a7:85:a1: d0:ce:79:17:9a:b4:8e:ce:9f:4c:81:e4:f0:24:c6: be:b7:bb:63:90:aa:ea:04:59:c2:2d:f1:7f:b1:19: 6f:cb:a1:1a:91:3f:a8:20:83:c7:18:09:dd:aa:29: df:59:b8:79:61:a0:d8:b9:86:38:16:b7:34:21:69: 97:e1:4d:0b:df:0f:d2:6a:e1:80:f0:c2:29:33:ba: 8d:2f:c0:d3:3c:b5:c3:43:25:76:c1:27:00:7e:74: 64:1e:dd:22:44:a5:af:34:61:ff:f5:01:32:39:22: 20:8e:e1:4a:1f:3b:5c:e6:2f:87:76:3f:02:7f:f4: 8d:06:9f:33:89:ff:5b:7f:88:6e:c5:49:63:eb:d0: 27:79:85:0e:88:85:2a:2e:b0:d5:93:20:08:c1:df: f6:f3:8b:c5:68:7c:36:8b:9d:0b:b3:cc:10:17:19: 78:72:1c:fa:8b:a3:dd:e0:fb:56:43:4b:92:35:d6: 14:91:72:a3:39:a1:50:85:f4:60:60:77:aa:04:ab: be:f0:e7:61:89:a8:46:20:2c:5a:65:93:c2:b0:56: 64:8a:ca:36:14:8d:1d:ba:b7:87:67:6a:3e:08:79: 4a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AB:EF:EA:CC:74:AD:95:4E:34:2C:C9:01:0F:72:24:92:34:7E:E6 X509v3 Authority Key Identifier: keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/1Kvv6sx0rZVONCzJAQ9yJJI0fuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.209.192.0/18 85.220.0.0/17 157.157.0.0/16 192.147.34.0/24 194.105.224.0/19 212.30.192.0/19 213.167.128.0/19 IPv6: 2001:1a98::/29 Signature Algorithm: sha256WithRSAEncryption 32:c6:41:5c:3a:20:c6:28:64:d1:b5:15:c3:cf:dc:18:1d:1c: d3:9f:53:52:49:5a:1c:c3:f5:86:bd:9a:55:03:3c:1a:01:06: ef:85:27:7a:cb:21:c8:5f:53:ac:81:46:03:d5:2d:68:b2:0e: 56:49:0d:77:e0:71:3f:55:d2:59:8e:78:a4:9a:ee:b7:32:76: 12:0a:be:aa:fb:69:49:13:b1:62:6a:a6:e0:be:f7:77:5a:da: 5c:43:cb:14:5f:41:24:10:d9:a5:cc:8e:27:43:98:fb:99:69: 7b:7a:03:4a:57:1c:6e:bd:dc:7c:4c:4a:48:78:70:cb:44:33: 35:28:30:cf:98:7e:68:4b:30:26:f7:d6:13:e0:98:eb:30:ee: e9:34:09:b9:7a:65:e2:7f:c1:63:1e:41:a8:8d:50:01:e0:34: db:ba:f2:ec:cf:a9:f9:f5:00:79:49:82:32:74:dc:fd:89:13: 55:eb:8b:c7:5e:1d:02:e6:a7:a5:3c:06:5f:7c:3c:02:5a:88: 84:a2:88:8c:6e:3c:44:10:cb:3b:6c:59:cd:5e:89:36:68:67: 3c:5d:2b:17:ca:7c:8a:09:e9:87:1c:8b:8a:ba:75:5d:90:ad: 89:59:59:ed:eb:78:59:15:09:b0:e4:96:35:e2:85:d6:5b:7e: a7:4a:ff:06 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt8ftwPstUtASjdJZ52yHFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMjAyMTI5OTY5NTc2Y2UzNTdmYWUyNmM5YzdjZjk4YTgy NTBlYTYwHhcNMjYwMTAyMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGFiZWZlYWNjNzRhZDk1NGUzNDJjYzkwMTBmNzIyNDkyMzQ3ZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWrKUqkZl1mvGyHkpS1vJikgkrpF AwsOHxanhaHQznkXmrSOzp9MgeTwJMa+t7tjkKrqBFnCLfF/sRlvy6EakT+oIIPH GAndqinfWbh5YaDYuYY4Frc0IWmX4U0L3w/SauGA8MIpM7qNL8DTPLXDQyV2wScA fnRkHt0iRKWvNGH/9QEyOSIgjuFKHztc5i+Hdj8Cf/SNBp8zif9bf4huxUlj69An eYUOiIUqLrDVkyAIwd/284vFaHw2i50Ls8wQFxl4chz6i6Pd4PtWQ0uSNdYUkXKj OaFQhfRgYHeqBKu+8OdhiahGICxaZZPCsFZkiso2FI0dureHZ2o+CHlKWQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFNSr7+rMdK2VTjQsyQEPciSSNH7mMB8GA1UdIwQY MBaAFJMgISmWlXbONX+uJsnHz5ioJQ6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMt NWFkNThhYmZiYjFmLzEvMUt2djZzeDByWlZPTkN6SkFROXlKSkkwZnVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMtNWFkNThhYmZiYjFm LzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAvBAIAATApAwQGH9HAAwQH VdwAAwMAnZ0DBADAkyIDBAXCaeADBAXUHsADBAXVp4AwDQQCAAIwBwMFAyABGpgw DQYJKoZIhvcNAQELBQADggEBADLGQVw6IMYoZNG1FcPP3BgdHNOfU1JJWhzD9Ya9 mlUDPBoBBu+FJ3rLIchfU6yBRgPVLWiyDlZJDXfgcT9V0lmOeKSa7rcydhIKvqr7 aUkTsWJqpuC+93da2lxDyxRfQSQQ2aXMjidDmPuZaXt6A0pXHG693HxMSkh4cMtE MzUoMM+YfmhLMCb31hPgmOsw7uk0Cbl6ZeJ/wWMeQaiNUAHgNNu68uzPqfn1AHlJ gjJ03P2JE1Xri8deHQLmp6U8Bl98PAJaiISiiIxuPEQQyztsWc1eiTZoZzxdKxfK fIoJ6Ycci4q6dV2QrYlZWe3reFkVCbDkljXihdZbfqdK/wY= -----END CERTIFICATE-----Generated at Wed Jan 21 10:29:16 2026 by rpki-client