This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/KTlXY_GhxQ5VW4pMYqOYscTdOZM.roa File: KTlXY_GhxQ5VW4pMYqOYscTdOZM.roa (raw, json) Hash identifier: je5ss0aWHni0ph4zaP7Hn858wJvG8bGTjlHPySsmlgw= Subject key identifier: 29:39:57:63:F1:A1:C5:0E:55:5B:8A:4C:62:A3:98:B1:C4:DD:39:93 Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d Certificate serial: 019B78A35CCE02DC8994E540DA0482EE546B Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/KTlXY_GhxQ5VW4pMYqOYscTdOZM.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208164 IP address blocks: 193.27.91.0/24 maxlen: 24 194.153.133.0/24 maxlen: 24 2a0f:2880:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5c:ce:02:dc:89:94:e5:40:da:04:82:ee:54:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29395763f1a1c50e555b8a4c62a398b1c4dd3993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:c4:94:f0:45:ea:3c:48:2e:e8:3c:79:31: 05:e7:91:51:15:b4:cc:69:fb:60:b5:19:85:12:50: a5:56:03:ec:7f:f6:33:fa:d4:e0:90:22:32:ef:3e: c8:bc:3c:88:c4:d6:61:8a:d1:99:80:bb:0a:9b:5f: f1:f3:92:12:b2:6e:c0:c2:53:a9:26:b3:0b:4f:33: 10:5f:a4:27:32:6c:97:8a:ca:05:5f:be:89:4a:e1: 9f:81:be:be:5f:a0:b7:36:50:9e:26:d9:9d:53:cc: 9a:27:10:56:63:64:ce:ae:e9:6e:77:24:a3:88:b5: 0f:71:d6:3e:8c:f5:48:59:30:fd:07:53:3f:c9:56: 1f:ad:b0:dc:30:37:47:f7:44:2f:e0:36:60:ff:57: d2:8b:35:ba:ee:63:94:36:aa:fa:54:d0:26:87:76: a3:ea:78:41:21:d0:b4:e4:94:0a:98:f4:64:22:04: e7:d8:e8:54:d7:16:47:8c:fd:56:ca:2b:ee:c6:8b: 6f:7d:ae:a4:b7:8c:58:b9:5f:2a:cd:da:ef:cb:18: c6:b7:1c:e6:93:c2:44:9b:77:3d:34:57:36:77:0f: e5:90:8a:ed:ac:d6:64:d1:22:5d:c6:cc:3d:7a:ee: 14:ad:7e:82:16:3e:cc:6a:ff:c2:4e:d9:8d:6d:1b: b2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:39:57:63:F1:A1:C5:0E:55:5B:8A:4C:62:A3:98:B1:C4:DD:39:93 X509v3 Authority Key Identifier: keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/KTlXY_GhxQ5VW4pMYqOYscTdOZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.27.91.0/24 194.153.133.0/24 IPv6: 2a0f:2880:400::/40 Signature Algorithm: sha256WithRSAEncryption a4:78:a0:7d:dd:73:b6:11:c0:46:c3:f7:eb:e7:59:1e:dd:eb: 47:0a:71:e8:14:69:34:45:8e:41:76:14:2c:08:40:74:6c:9c: df:34:99:55:c9:cb:75:75:07:8b:1a:14:bd:c0:99:1b:9e:da: 85:63:cc:80:2d:48:04:7e:d1:08:0d:b7:e9:af:82:f9:34:9a: 59:d8:03:8b:bd:32:d0:bf:bf:f7:1c:1e:ae:59:d6:91:5f:da: 0c:17:93:e9:11:45:c8:2d:eb:3b:93:02:97:d8:79:95:d1:83: 08:ed:11:9e:c3:68:af:4c:a7:ad:7d:4c:46:a2:4d:c7:fc:5f: f7:dd:f7:3a:a9:1b:d0:13:71:3d:2d:87:73:5f:11:4d:e7:25: 3a:11:6a:b5:4c:06:58:90:43:33:b1:86:86:56:fb:fd:da:d4: e3:de:16:2d:3e:f7:92:17:1c:f1:0a:b5:3d:15:ab:10:55:da: 81:53:2a:91:84:c5:37:9a:a5:e0:b3:8d:12:38:09:89:cb:85: a1:e4:da:db:10:5b:12:c2:17:49:a9:28:ca:69:17:2d:f2:17: 02:58:a7:c7:6d:6a:98:82:2d:ec:79:53:c7:17:a1:73:b7:9e: 12:51:78:9d:1f:91:ef:62:c2:d3:6b:23:69:01:a5:50:e5:dc: cb:1e:7e:0d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt4o1zOAtyJlOVA2gSC7lRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YzljMzE4OWJlYzEzNzkzMTFiZDEzNTNmYTk3NDlhNjhk ZDk5MmQwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTM5NTc2M2YxYTFjNTBlNTU1YjhhNGM2MmEzOThiMWM0ZGQzOTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EvElPBF6jxILug8eTEF55FRFbTM aftgtRmFElClVgPsf/Yz+tTgkCIy7z7IvDyIxNZhitGZgLsKm1/x85ISsm7AwlOp JrMLTzMQX6QnMmyXisoFX76JSuGfgb6+X6C3NlCeJtmdU8yaJxBWY2TOruludySj iLUPcdY+jPVIWTD9B1M/yVYfrbDcMDdH90Qv4DZg/1fSizW67mOUNqr6VNAmh3aj 6nhBIdC05JQKmPRkIgTn2OhU1xZHjP1Wyivuxotvfa6kt4xYuV8qzdrvyxjGtxzm k8JEm3c9NFc2dw/lkIrtrNZk0SJdxsw9eu4UrX6CFj7Mav/CTtmNbRuyawIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFCk5V2PxocUOVVuKTGKjmLHE3TmTMB8GA1UdIwQY MBaAFJjJwxib7BN5MRvRNT+pdJpo3ZktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEt OWM4MTZhNDA0OTBlLzEvS1RsWFlfR2h4UTVWVzRwTVlxT1lzY1RkT1pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEtOWM4MTZhNDA0OTBl LzEvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAwRtbAwQA wpmFMA4EAgACMAgDBgAqDyiABDANBgkqhkiG9w0BAQsFAAOCAQEApHigfd1zthHA RsP36+dZHt3rRwpx6BRpNEWOQXYULAhAdGyc3zSZVcnLdXUHixoUvcCZG57ahWPM gC1IBH7RCA236a+C+TSaWdgDi70y0L+/9xwerlnWkV/aDBeT6RFFyC3rO5MCl9h5 ldGDCO0RnsNor0ynrX1MRqJNx/xf9933Oqkb0BNxPS2Hc18RTeclOhFqtUwGWJBD M7GGhlb7/drU494WLT73khcc8Qq1PRWrEFXagVMqkYTFN5ql4LONEjgJicuFoeTa 2xBbEsIXSakoymkXLfIXAlinx21qmIIt7HlTxxehc7eeElF4nR+R72LC02sjaQGl UOXcyx5+DQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:12 2026 by rpki-client