This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/kCKqTs638qn6J_8JJ-poI9l0Sog.roa File: kCKqTs638qn6J_8JJ-poI9l0Sog.roa (raw, json) Hash identifier: Z+5AWGocje8hAa8n/k4vU3BHmFeSFgOfghGGeAR/iw0= Subject key identifier: 90:22:AA:4E:CE:B7:F2:A9:FA:27:FF:09:27:EA:68:23:D9:74:4A:88 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA488CA2DB288E2A068394D4E1178EE Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/kCKqTs638qn6J_8JJ-poI9l0Sog.roa Signing time: Thu 01 Jan 2026 22:18:59 +0000 ROA not before: Thu 01 Jan 2026 22:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 2.59.40.0/24 maxlen: 24 2.59.41.0/24 maxlen: 24 2.59.42.0/24 maxlen: 24 2.59.43.0/24 maxlen: 24 45.93.201.0/24 maxlen: 24 45.153.70.0/24 maxlen: 24 45.153.71.0/24 maxlen: 24 80.76.60.0/24 maxlen: 24 91.198.220.0/24 maxlen: 24 93.93.207.0/24 maxlen: 24 176.53.160.0/24 maxlen: 24 176.53.161.0/24 maxlen: 24 176.53.162.0/24 maxlen: 24 176.53.163.0/24 maxlen: 24 185.192.247.0/24 maxlen: 24 185.251.20.0/24 maxlen: 24 193.160.208.0/24 maxlen: 24 193.160.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:88:ca:2d:b2:88:e2:a0:68:39:4d:4e:11:78:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9022aa4eceb7f2a9fa27ff0927ea6823d9744a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4d:1f:20:b5:1b:2d:0c:53:a2:99:d6:bd:6a: aa:d4:85:fa:26:28:09:07:1c:9c:60:98:dc:c0:4e: 7e:69:0c:0e:4f:7b:3c:68:21:a5:7e:8b:3a:10:b1: 0e:c7:00:40:92:b6:72:7d:b5:21:74:35:df:96:9c: 13:bf:db:65:b6:82:e6:02:7e:28:f0:50:8f:9f:1b: 1c:dd:25:e2:59:ba:4b:96:50:b5:89:a9:63:36:82: 01:37:bf:42:e2:22:51:9d:ed:ce:44:c6:13:ed:54: fd:45:c1:c6:bc:3e:53:d7:44:49:e6:28:c3:11:e1: 4f:d1:4d:d1:b0:57:e3:b4:f1:e9:6e:8e:ce:a7:bd: 72:5b:ed:09:c3:9e:ce:5d:2f:7b:9f:85:38:92:49: c7:2f:70:ff:3d:b2:8d:41:46:e6:ac:43:4f:9a:45: e1:64:5b:36:20:fc:15:19:03:9f:cf:12:e0:f8:88: 83:60:ad:49:16:78:c6:1b:d4:39:5b:e4:24:54:18: ea:5e:b8:c9:ba:6a:27:9a:65:78:c2:39:3d:75:db: 2f:bc:46:26:4d:60:79:fe:7f:2e:8a:2a:71:e7:f5: 80:c3:2d:26:54:b2:69:d5:52:62:6a:4e:8c:2d:5f: a3:49:f2:7d:8a:9b:86:f4:2f:50:04:4f:ac:13:2a: a3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:22:AA:4E:CE:B7:F2:A9:FA:27:FF:09:27:EA:68:23:D9:74:4A:88 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/kCKqTs638qn6J_8JJ-poI9l0Sog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.40.0/22 45.93.201.0/24 45.153.70.0/23 80.76.60.0/24 91.198.220.0/24 93.93.207.0/24 176.53.160.0/22 185.192.247.0/24 185.251.20.0/24 193.160.208.0/23 Signature Algorithm: sha256WithRSAEncryption 14:55:ed:a8:ae:ed:f3:48:cb:f6:52:01:e5:52:be:63:d5:e6: 58:54:b4:a3:8a:4f:0f:67:75:51:eb:bd:05:04:80:46:3d:1c: 7c:96:74:b1:2d:e8:65:fb:df:ba:57:4a:0f:1c:51:7e:85:72: 18:73:2e:db:7c:7a:bf:a3:61:a0:07:00:7a:11:d3:79:6f:c9: 0f:e0:c0:cc:38:6b:dc:4c:7f:ba:9d:d0:f5:d3:61:cd:a6:b8: 34:1d:91:70:e0:d8:bd:2b:b4:70:a9:a6:f6:bd:97:14:58:f5: 40:1e:f2:49:dd:cb:30:e2:e2:a9:ab:18:6c:39:bc:01:f6:97: 3d:c6:44:cd:15:86:35:24:10:54:6f:98:7a:89:98:4b:42:64: 0d:b5:52:54:27:b3:f9:b5:03:57:6d:9f:be:bf:1f:97:98:7b: 3c:6d:d8:02:1e:c2:ee:dc:2d:cb:15:30:6a:cc:f9:7b:de:1d: db:c2:ad:b1:55:b1:cc:5e:f8:76:0f:d2:77:6b:66:6b:2d:b5: 65:98:05:5d:35:81:94:7f:f7:e6:f6:88:d4:87:16:6c:76:ce: 5d:ab:61:9a:82:e9:5d:41:a0:17:41:96:bc:9c:c2:67:1a:ee: ff:be:91:cf:bc:ec:75:c9:55:cd:49:03:30:2f:35:f4:f5:51: 93:0f:87:0a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt7pIjKLbKI4qBoOU1OEXjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDIyYWE0ZWNlYjdmMmE5ZmEyN2ZmMDkyN2VhNjgyM2Q5NzQ0YTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk0fILUbLQxTopnWvWqq1IX6JigJ BxycYJjcwE5+aQwOT3s8aCGlfos6ELEOxwBAkrZyfbUhdDXflpwTv9tltoLmAn4o 8FCPnxsc3SXiWbpLllC1ialjNoIBN79C4iJRne3ORMYT7VT9RcHGvD5T10RJ5ijD EeFP0U3RsFfjtPHpbo7Op71yW+0Jw57OXS97n4U4kknHL3D/PbKNQUbmrENPmkXh ZFs2IPwVGQOfzxLg+IiDYK1JFnjGG9Q5W+QkVBjqXrjJumonmmV4wjk9ddsvvEYm TWB5/n8uiipx5/WAwy0mVLJp1VJiak6MLV+jSfJ9ipuG9C9QBE+sEyqjewIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFJAiqk7Ot/Kp+if/CSfqaCPZdEqIMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEva0NLcVRzNjM4cW42Sl84SkotcG9JOWwwU29nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCAjsoAwQA LV3JAwQBLZlGAwQAUEw8AwQAW8bcAwQAXV3PAwQCsDWgAwQAucD3AwQAufsUAwQB waDQMA0GCSqGSIb3DQEBCwUAA4IBAQAUVe2oru3zSMv2UgHlUr5j1eZYVLSjik8P Z3VR670FBIBGPRx8lnSxLehl+9+6V0oPHFF+hXIYcy7bfHq/o2GgBwB6EdN5b8kP 4MDMOGvcTH+6ndD102HNprg0HZFw4Ni9K7Rwqab2vZcUWPVAHvJJ3csw4uKpqxhs ObwB9pc9xkTNFYY1JBBUb5h6iZhLQmQNtVJUJ7P5tQNXbZ++vx+XmHs8bdgCHsLu 3C3LFTBqzPl73h3bwq2xVbHMXvh2D9J3a2ZrLbVlmAVdNYGUf/fm9ojUhxZsds5d q2GaguldQaAXQZa8nMJnGu7/vpHPvOx1yVXNSQMwLzX09VGTD4cK -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:57 2026 by rpki-client