This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KSaT-CFeKPhxXfMaqLpx82W1rRs.roa File: KSaT-CFeKPhxXfMaqLpx82W1rRs.roa (raw, json) Hash identifier: gb1/X0FzUKvSvZ2GAhRUDRW8UaB2tgcY5p8WoJN13hM= Subject key identifier: 29:26:93:F8:21:5E:28:F8:71:5D:F3:1A:A8:BA:71:F3:65:B5:AD:1B Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1B74298331313F8E9E4520A191F37 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KSaT-CFeKPhxXfMaqLpx82W1rRs.roa Signing time: Fri 02 Jan 2026 18:21:46 +0000 ROA not before: Fri 02 Jan 2026 18:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 45.9.118.0/24 maxlen: 24 45.9.120.0/24 maxlen: 24 45.9.122.0/24 maxlen: 24 45.86.244.0/24 maxlen: 24 45.95.97.0/24 maxlen: 24 45.130.128.0/24 maxlen: 24 45.133.208.0/24 maxlen: 24 45.134.184.0/24 maxlen: 24 45.141.176.0/24 maxlen: 24 45.146.91.0/24 maxlen: 24 45.146.180.0/24 maxlen: 24 45.151.104.0/24 maxlen: 24 45.154.58.0/24 maxlen: 24 45.154.228.0/24 maxlen: 24 85.209.130.0/24 maxlen: 24 185.164.59.0/24 maxlen: 24 192.156.217.0/24 maxlen: 24 193.8.1.0/24 maxlen: 24 193.23.245.0/24 maxlen: 24 193.39.245.0/24 maxlen: 24 193.254.234.0/24 maxlen: 24 193.254.235.0/24 maxlen: 24 194.62.30.0/24 maxlen: 24 194.62.66.0/24 maxlen: 24 195.66.26.0/24 maxlen: 24 195.158.192.0/24 maxlen: 24 2a0f:e7c4:10::/48 maxlen: 48 2a11:3500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b7:42:98:33:13:13:f8:e9:e4:52:0a:19:1f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=292693f8215e28f8715df31aa8ba71f365b5ad1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:75:37:85:73:66:f4:09:88:7e:94:36:47:9b: 49:5c:05:43:59:cf:c1:8c:98:44:96:2e:3d:3e:c9: 4c:8d:16:1c:b4:dd:0b:a8:74:df:cc:5f:b5:cd:fe: 9d:53:ea:da:51:f1:49:e8:3f:28:1f:f7:a3:4d:aa: 25:4f:20:50:ca:32:bd:e4:88:7c:7f:36:9d:3d:53: be:da:21:e8:92:bc:4e:dc:0b:1b:a3:cb:11:35:6f: f0:e1:89:34:52:5a:c2:17:f3:07:f4:a8:df:69:0b: da:a4:ff:fb:c5:be:9d:43:6a:94:b8:98:2a:ca:4e: df:0b:bb:55:07:14:54:bd:c6:55:e9:76:cf:a5:b5: 0e:01:db:77:05:a3:46:12:60:0f:cd:31:d1:ee:a2: 4d:40:e7:fe:d2:7e:26:12:c8:c4:a2:21:c3:91:e3: ff:60:fd:bb:e2:e1:47:36:22:ab:99:2e:53:a0:6e: f7:c3:71:79:d3:6e:c1:fc:8b:31:53:b8:09:09:81: 41:98:64:81:53:e9:c7:8f:61:3e:8e:29:19:8c:13: 75:be:f7:ac:49:c8:bb:e7:73:77:b0:4f:3c:26:f8: ec:21:33:bf:69:98:46:35:92:1b:e2:a1:7a:d6:c8: 45:dd:4f:b1:ca:d2:ca:71:72:aa:2d:d9:12:b4:b2: 49:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:26:93:F8:21:5E:28:F8:71:5D:F3:1A:A8:BA:71:F3:65:B5:AD:1B X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KSaT-CFeKPhxXfMaqLpx82W1rRs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.118.0/24 45.9.120.0/24 45.9.122.0/24 45.86.244.0/24 45.95.97.0/24 45.130.128.0/24 45.133.208.0/24 45.134.184.0/24 45.141.176.0/24 45.146.91.0/24 45.146.180.0/24 45.151.104.0/24 45.154.58.0/24 45.154.228.0/24 85.209.130.0/24 185.164.59.0/24 192.156.217.0/24 193.8.1.0/24 193.23.245.0/24 193.39.245.0/24 193.254.234.0/23 194.62.30.0/24 194.62.66.0/24 195.66.26.0/24 195.158.192.0/24 IPv6: 2a0f:e7c4:10::/48 2a11:3500::/29 Signature Algorithm: sha256WithRSAEncryption 24:15:69:5d:24:1a:41:93:9c:e6:17:88:0c:26:b4:aa:05:11: 36:0d:eb:e7:8c:80:ca:c8:b8:9e:da:82:19:84:a3:85:97:21: c9:e6:5d:ac:6f:60:c9:97:64:30:3b:d8:be:c7:f6:51:cb:11: f2:23:8f:b6:eb:9a:66:5c:42:d3:63:c8:12:5b:95:72:21:f1: af:df:f8:2a:69:aa:e8:45:07:c7:5d:c6:92:47:ff:b3:0a:c2: d9:13:b9:78:97:16:aa:6f:4a:f9:29:14:47:d1:45:71:69:76: af:e6:6c:f4:fb:47:a6:87:6a:2a:e2:ed:56:84:8e:f0:dc:a8: b5:20:06:8f:0b:5f:50:c7:fa:f8:6e:03:d4:ce:99:89:27:9c: 56:ee:8e:0a:7e:0e:36:fc:16:ee:39:aa:47:fa:76:08:5a:63: 84:e4:6a:dd:12:67:ae:4b:aa:30:31:36:ba:3e:cc:cc:81:69: 0d:7b:60:71:7d:83:bb:a2:32:10:f3:8f:c6:93:d5:43:5e:e2: c4:84:71:4a:f7:ef:de:f2:fa:e6:c2:63:83:69:ff:34:59:bd: ec:c7:5b:59:2d:4c:ab:57:10:0b:30:62:dc:c0:1b:5d:70:d4: eb:ec:37:38:0d:4a:59:ac:4f:8e:5c:be:97:f6:b1:87:93:ec: 51:9d:9e:a1 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt/8bdCmDMTE/jp5FIKGR83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTI2OTNmODIxNWUyOGY4NzE1ZGYzMWFhOGJhNzFmMzY1YjVhZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXU3hXNm9AmIfpQ2R5tJXAVDWc/B jJhEli49PslMjRYctN0LqHTfzF+1zf6dU+raUfFJ6D8oH/ejTaolTyBQyjK95Ih8 fzadPVO+2iHokrxO3Asbo8sRNW/w4Yk0UlrCF/MH9KjfaQvapP/7xb6dQ2qUuJgq yk7fC7tVBxRUvcZV6XbPpbUOAdt3BaNGEmAPzTHR7qJNQOf+0n4mEsjEoiHDkeP/ YP274uFHNiKrmS5ToG73w3F5027B/IsxU7gJCYFBmGSBU+nHj2E+jikZjBN1vves Sci753N3sE88JvjsITO/aZhGNZIb4qF61shF3U+xytLKcXKqLdkStLJJJQIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFCkmk/ghXij4cV3zGqi6cfNlta0bMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvS1NhVC1DRmVLUGh4WGZNYXFMcHg4MlcxclJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHLBggrBgEFBQcBBwEB/wSBuzCBuDCBnQQCAAEwgZYDBAAt CXYDBAAtCXgDBAAtCXoDBAAtVvQDBAAtX2EDBAAtgoADBAAthdADBAAthrgDBAAt jbADBAAtklsDBAAtkrQDBAAtl2gDBAAtmjoDBAAtmuQDBABV0YIDBAC5pDsDBADA nNkDBADBCAEDBADBF/UDBADBJ/UDBAHB/uoDBADCPh4DBADCPkIDBADDQhoDBADD nsAwFgQCAAIwEAMHACoP58QAEAMFAyoRNQAwDQYJKoZIhvcNAQELBQADggEBACQV aV0kGkGTnOYXiAwmtKoFETYN6+eMgMrIuJ7aghmEo4WXIcnmXaxvYMmXZDA72L7H 9lHLEfIjj7brmmZcQtNjyBJblXIh8a/f+CppquhFB8ddxpJH/7MKwtkTuXiXFqpv SvkpFEfRRXFpdq/mbPT7R6aHairi7VaEjvDcqLUgBo8LX1DH+vhuA9TOmYknnFbu jgp+Djb8Fu45qkf6dghaY4Tkat0SZ65LqjAxNro+zMyBaQ17YHF9g7uiMhDzj8aT 1UNe4sSEcUr3797y+ubCY4Np/zRZvezHW1ktTKtXEAswYtzAG11w1OvsNzgNSlms T45cvpf2sYeT7FGdnqE= -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:12 2026 by rpki-client