This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/KvL7yxkGls1fjcwm5IXbdVf-RGs.roa File: KvL7yxkGls1fjcwm5IXbdVf-RGs.roa (raw, json) Hash identifier: VuJaI3L/iNCvZlLQqiE8dBetnHe7flMiDf6yX91ASL8= Subject key identifier: 2A:F2:FB:CB:19:06:96:CD:5F:8D:CC:26:E4:85:DB:75:57:FE:44:6B Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5D01A3118997AA645A7A628E4EBBB3 Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/KvL7yxkGls1fjcwm5IXbdVf-RGs.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57321 IP address blocks: 157.25.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:01:a3:11:89:97:aa:64:5a:7a:62:8e:4e:bb:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2af2fbcb190696cd5f8dcc26e485db7557fe446b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:89:d8:58:b9:55:60:b2:86:ad:6d:99:cf:35: 61:3a:b2:5a:f4:3b:f1:f8:70:fd:97:c6:62:cd:68: 04:b4:5f:ff:66:36:ba:76:9e:c6:ef:5e:e3:23:03: bb:49:5f:bd:92:4b:9d:aa:63:c8:af:80:da:26:5e: 01:20:91:f7:f0:33:f4:fc:c9:ab:ee:e6:03:48:cc: 6a:a6:6f:bf:25:3a:81:8f:85:5f:4b:a1:89:4b:fc: 70:32:a9:3d:52:e1:db:38:33:75:7e:a2:5e:7a:7e: 28:96:ec:c1:17:67:62:84:12:5e:24:1a:c0:7f:93: 07:44:a5:2a:aa:2c:bc:bd:79:b7:54:8b:76:e7:d0: 9a:5b:d9:d9:47:d3:0b:5d:b2:ee:0a:54:ad:c9:4c: 84:04:c2:53:27:ee:31:88:50:6e:c9:14:c1:ae:9c: d2:85:c6:68:7b:a2:f9:2b:a6:91:04:bc:ce:7e:db: 99:43:92:80:f5:b3:f1:62:14:b0:73:b3:c1:15:89: c0:ed:41:09:19:29:bf:60:67:48:ca:53:73:a0:52: c6:27:1d:ea:f2:2d:ca:f3:b5:16:fd:dd:8e:41:bb: 90:19:eb:68:aa:e6:7a:2d:aa:46:8f:67:fb:56:4b: 2f:9f:8a:69:34:d3:e8:17:2b:b6:d6:67:23:c7:2f: 0f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F2:FB:CB:19:06:96:CD:5F:8D:CC:26:E4:85:DB:75:57:FE:44:6B X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/KvL7yxkGls1fjcwm5IXbdVf-RGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.25.134.0/23 Signature Algorithm: sha256WithRSAEncryption 82:ea:fe:d5:d9:68:1b:9b:0d:45:f3:98:bf:03:93:14:36:eb: 6c:73:69:ea:c4:1a:2f:4e:bc:b2:e3:c5:31:81:ed:d5:69:5b: 33:e6:41:0d:3b:00:63:5a:3d:f4:12:77:98:20:3b:44:a3:9b: 0d:8d:2b:54:0a:6f:40:1f:4a:6e:dd:26:50:3f:90:85:2c:6e: 00:90:ae:68:72:00:ac:cf:18:ba:9e:de:55:cd:ef:04:a8:a9: ae:0c:b9:43:75:17:d7:85:58:14:42:72:46:dd:a7:57:ad:79: 4c:a2:32:3f:9e:c4:50:a8:29:04:5a:7c:b4:c2:9b:f7:24:73: c0:ba:12:0c:4c:cf:f7:85:4c:e0:c4:15:41:75:ae:0b:ca:49: fc:98:49:19:f6:80:e2:28:36:74:76:6d:8e:20:76:31:58:e0: cf:5f:a9:f8:80:5c:63:83:e6:5b:96:56:82:29:7f:36:d9:98: 7c:ac:68:1d:c6:2b:4d:64:9a:85:ba:5c:48:3b:32:7d:fd:36: 49:9e:d6:8b:0e:5d:85:c0:6d:3d:50:1d:b9:57:2c:1a:89:91: 82:85:24:ab:3e:2c:cd:c3:37:ab:80:05:41:6b:f3:1c:e9:25: 75:41:db:09:ef:ef:7b:8a:45:28:29:74:01:9a:8e:7e:79:0f: 86:02:2f:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQGjEYmXqmRaemKOTruzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWYyZmJjYjE5MDY5NmNkNWY4ZGNjMjZlNDg1ZGI3NTU3ZmU0NDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyonYWLlVYLKGrW2ZzzVhOrJa9Dvx +HD9l8ZizWgEtF//Zja6dp7G717jIwO7SV+9kkudqmPIr4DaJl4BIJH38DP0/Mmr 7uYDSMxqpm+/JTqBj4VfS6GJS/xwMqk9UuHbODN1fqJeen4oluzBF2dihBJeJBrA f5MHRKUqqiy8vXm3VIt259CaW9nZR9MLXbLuClStyUyEBMJTJ+4xiFBuyRTBrpzS hcZoe6L5K6aRBLzOftuZQ5KA9bPxYhSwc7PBFYnA7UEJGSm/YGdIylNzoFLGJx3q 8i3K87UW/d2OQbuQGetoquZ6LapGj2f7Vksvn4ppNNPoFyu21mcjxy8PMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCry+8sZBpbNX43MJuSF23VX/kRrMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvS3ZMN3l4a0dsczFmamN3bTVJWGJkVmYtUkdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnRmGMA0G CSqGSIb3DQEBCwUAA4IBAQCC6v7V2Wgbmw1F85i/A5MUNutsc2nqxBovTryy48Ux ge3VaVsz5kENOwBjWj30EneYIDtEo5sNjStUCm9AH0pu3SZQP5CFLG4AkK5ocgCs zxi6nt5Vze8EqKmuDLlDdRfXhVgUQnJG3adXrXlMojI/nsRQqCkEWny0wpv3JHPA uhIMTM/3hUzgxBVBda4Lykn8mEkZ9oDiKDZ0dm2OIHYxWODPX6n4gFxjg+ZbllaC KX822Zh8rGgdxitNZJqFulxIOzJ9/TZJntaLDl2FwG09UB25VywaiZGChSSrPizN wzergAVBa/Mc6SV1QdsJ7+97ikUoKXQBmo5+eQ+GAi/f -----END CERTIFICATE-----Generated at Mon Jan 26 15:34:12 2026 by rpki-client