This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/KoSeXgfi6kdR60VA93UZ9REi_2M.roa File: KoSeXgfi6kdR60VA93UZ9REi_2M.roa (raw, json) Hash identifier: VBbggabUlX8/caVzOmeZ8ptR/8qvA/cVBY2qiQj/eDc= Subject key identifier: 2A:84:9E:5E:07:E2:EA:47:51:EB:45:40:F7:75:19:F5:11:22:FF:63 Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694 Certificate serial: 019B7FF14CD7FC73A1ED54A31F70E41BDB09 Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/KoSeXgfi6kdR60VA93UZ9REi_2M.roa Signing time: Fri 02 Jan 2026 18:21:18 +0000 ROA not before: Fri 02 Jan 2026 18:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39405 IP address blocks: 45.153.92.0/22 maxlen: 24 93.93.40.0/21 maxlen: 24 141.0.200.0/21 maxlen: 24 185.116.128.0/22 maxlen: 24 185.117.16.0/22 maxlen: 24 185.224.32.0/22 maxlen: 22 185.224.32.0/24 maxlen: 24 185.224.33.0/24 maxlen: 24 185.224.34.0/24 maxlen: 24 185.244.72.0/22 maxlen: 24 185.246.24.0/22 maxlen: 22 185.246.24.0/24 maxlen: 24 185.246.25.0/24 maxlen: 24 185.247.86.0/23 maxlen: 24 185.249.184.0/22 maxlen: 24 185.253.92.0/22 maxlen: 24 193.84.73.0/24 maxlen: 24 2a01:6600::/32 maxlen: 32 2a0c:4400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:4c:d7:fc:73:a1:ed:54:a3:1f:70:e4:1b:db:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694 Validity Not Before: Jan 2 18:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a849e5e07e2ea4751eb4540f77519f51122ff63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4d:a4:7a:b0:5b:cb:92:e3:88:e9:30:4d:0c: d1:09:13:72:3f:c5:7f:f0:4e:9f:dd:84:4a:49:42: e6:48:d5:64:3f:b4:1b:fd:61:6e:86:03:de:01:7d: 6b:61:53:a8:a2:2d:16:ab:20:b9:55:a6:64:4a:52: c7:52:b5:43:19:9c:6a:ea:07:ac:75:d5:43:57:0b: b6:d3:81:54:98:bf:4a:1b:2e:6f:13:8e:19:5a:87: c5:7c:33:d4:f5:94:47:63:26:88:9a:8c:e5:cf:8f: ee:6c:c5:e6:9b:c9:eb:49:4a:a8:e1:83:fa:ae:97: bb:9f:1d:be:2a:a7:6f:21:ed:48:38:ef:c5:42:c5: 11:af:57:61:81:99:33:67:21:9a:98:5a:de:c6:2b: 15:94:90:a1:ba:01:95:e1:4d:87:f8:55:1b:df:86: 89:6a:3a:0c:61:57:7f:a3:c6:0d:d9:7b:8f:ee:6d: 95:59:5d:0d:5b:2e:8a:35:aa:8b:c8:af:59:37:a9: ce:45:a2:2d:6f:4a:72:22:58:98:39:94:7a:c4:18: 8c:d9:76:85:00:e2:e0:03:e5:7a:2a:66:c9:50:85: 40:99:28:fa:19:0f:7e:9b:92:e5:60:22:20:22:88: 2f:f4:ae:62:5d:68:2b:3c:71:43:3d:1e:e8:82:ae: 5c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:84:9E:5E:07:E2:EA:47:51:EB:45:40:F7:75:19:F5:11:22:FF:63 X509v3 Authority Key Identifier: keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/KoSeXgfi6kdR60VA93UZ9REi_2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.92.0/22 93.93.40.0/21 141.0.200.0/21 185.116.128.0/22 185.117.16.0/22 185.224.32.0/22 185.244.72.0/22 185.246.24.0/22 185.247.86.0/23 185.249.184.0/22 185.253.92.0/22 193.84.73.0/24 IPv6: 2a01:6600::/32 2a0c:4400::/32 Signature Algorithm: sha256WithRSAEncryption 50:ea:09:91:0b:fd:4f:d8:73:35:7d:c9:54:3e:a0:10:d0:a3: 99:1e:37:67:7c:db:9b:d4:01:f3:97:75:5e:be:ec:dc:88:fd: 12:b0:3d:3c:08:27:fd:30:2d:83:2f:06:db:8d:e5:38:31:e7: c4:40:f8:28:63:5d:2b:c2:30:3d:5b:26:a5:cf:6d:72:bd:24: 9c:d6:48:8d:08:f4:c4:33:1e:0e:72:a3:1a:be:39:1a:53:e3: 48:3c:3c:88:86:27:5a:e5:30:58:91:e1:e9:88:66:1f:f0:f8: 14:45:9f:a3:02:76:30:9d:3c:e1:38:44:6b:d7:5c:f1:a9:37: 0e:8a:70:95:0f:23:09:81:f8:0e:51:4a:51:80:0d:d7:f8:08: b8:4b:25:3f:5e:d9:1a:93:bf:1c:f5:0d:d2:f9:d2:b7:86:7c: 91:aa:35:3d:78:23:26:aa:98:93:18:b3:37:c8:05:75:59:7f: 1c:f0:96:f6:64:f5:23:a4:f5:d1:93:3d:e6:16:6b:b5:b1:76: d3:17:e6:5e:c8:d3:ec:1c:96:f3:c3:0d:57:4b:10:ca:60:a4: cc:d6:2f:d4:ef:11:7b:01:99:f7:09:29:8d:53:01:b8:8d:31: b2:ff:c3:90:84:91:b7:ca:32:f9:d3:ed:f9:b3:78:ec:cd:8d: f1:68:02:3b -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISAZt/8UzX/HOh7VSjH3DkG9sJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YWNmNTlhYmQ0YWJiZmJmODMwYTA2MDIyNWE5NmEyMTc5 YTI2OTQwHhcNMjYwMTAyMTgyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTg0OWU1ZTA3ZTJlYTQ3NTFlYjQ1NDBmNzc1MTlmNTExMjJmZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E2kerBby5LjiOkwTQzRCRNyP8V/ 8E6f3YRKSULmSNVkP7Qb/WFuhgPeAX1rYVOooi0WqyC5VaZkSlLHUrVDGZxq6ges ddVDVwu204FUmL9KGy5vE44ZWofFfDPU9ZRHYyaImozlz4/ubMXmm8nrSUqo4YP6 rpe7nx2+KqdvIe1IOO/FQsURr1dhgZkzZyGamFrexisVlJChugGV4U2H+FUb34aJ ajoMYVd/o8YN2XuP7m2VWV0NWy6KNaqLyK9ZN6nORaItb0pyIliYOZR6xBiM2XaF AOLgA+V6KmbJUIVAmSj6GQ9+m5LlYCIgIogv9K5iXWgrPHFDPR7ogq5cqwIDAQAB o4ICYTCCAl0wHQYDVR0OBBYEFCqEnl4H4upHUetFQPd1GfURIv9jMB8GA1UdIwQY MBaAFMis9Zq9Srv7+DCgYCJalqIXmiaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQt ODM4ZWJmNDEyYTYxLzEvS29TZVhnZmk2a2RSNjBWQTkzVVo5UkVpXzJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQtODM4ZWJmNDEyYTYx LzEveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBOBAIAATBIAwQCLZlcAwQD XV0oAwQDjQDIAwQCuXSAAwQCuXUQAwQCueAgAwQCufRIAwQCufYYAwQBufdWAwQC ufm4AwQCuf1cAwQAwVRJMBQEAgACMA4DBQAqAWYAAwUAKgxEADANBgkqhkiG9w0B AQsFAAOCAQEAUOoJkQv9T9hzNX3JVD6gENCjmR43Z3zbm9QB85d1Xr7s3Ij9ErA9 PAgn/TAtgy8G243lODHnxED4KGNdK8IwPVsmpc9tcr0knNZIjQj0xDMeDnKjGr45 GlPjSDw8iIYnWuUwWJHh6YhmH/D4FEWfowJ2MJ084ThEa9dc8ak3DopwlQ8jCYH4 DlFKUYAN1/gIuEslP17ZGpO/HPUN0vnSt4Z8kao1PXgjJqqYkxizN8gFdVl/HPCW 9mT1I6T10ZM95hZrtbF20xfmXsjT7ByW88MNV0sQymCkzNYv1O8RewGZ9wkpjVMB uI0xsv/DkISRt8oy+dPt+bN47M2N8WgCOw== -----END CERTIFICATE-----Generated at Thu Jan 29 19:59:49 2026 by rpki-client