This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/KccCeieYRXBlQnbgMf-sVyCs8Jk.roa File: KccCeieYRXBlQnbgMf-sVyCs8Jk.roa (raw, json) Hash identifier: Ub5qzrmTy+ygKbOHKWced2Dy1lPthDUXMiJfth/M1S0= Subject key identifier: 29:C7:02:7A:27:98:45:70:65:42:76:E0:31:FF:AC:57:20:AC:F0:99 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019B7910F464ACD3633605EF805311F37EE0 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/KccCeieYRXBlQnbgMf-sVyCs8Jk.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203061 IP address blocks: 5.180.220.0/23 maxlen: 23 5.180.222.0/23 maxlen: 23 45.10.232.0/23 maxlen: 23 91.204.48.0/23 maxlen: 23 91.204.50.0/23 maxlen: 23 92.118.12.0/23 maxlen: 23 92.118.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f4:64:ac:d3:63:36:05:ef:80:53:11:f3:7e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29c7027a27984570654276e031ffac5720acf099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:dd:43:14:b0:31:14:62:be:8e:ba:f1:b6: aa:fc:28:56:0d:01:cf:a8:4a:90:4a:a4:05:aa:62: f0:58:6d:2c:98:74:51:0f:6a:49:79:43:14:ac:55: 02:7b:d5:c0:83:1c:c0:98:4c:7f:a1:35:f0:62:c7: 4a:e6:32:f5:b7:13:74:b6:6b:21:2e:20:6f:c5:14: 5f:a1:85:f0:96:c9:05:66:bd:f0:ff:db:16:a6:85: 9e:64:3e:3e:c7:f5:e9:b7:e9:b1:f8:8b:bd:9b:12: fc:34:54:99:fe:82:b9:a9:a1:bb:1b:23:2b:11:a9: 51:59:e0:f4:31:3c:43:e9:8b:c1:92:32:5c:1c:b4: c5:c0:7c:d5:22:7f:16:5c:46:7c:76:ef:7b:d4:ea: a2:7e:b9:c6:4a:7c:5b:50:98:64:9b:af:39:21:99: 8f:92:65:37:75:2d:ed:eb:ee:af:c4:93:db:0c:2c: f2:a2:ea:49:ec:c1:66:6b:64:a3:3d:49:79:6a:f9: 08:5c:6d:7d:15:c1:82:b1:33:28:28:44:78:f5:c9: eb:1a:f8:b1:26:8c:72:0b:a2:29:a9:7c:78:e4:04: be:49:91:b6:93:8f:f8:0f:63:ec:85:d4:63:3c:09: 13:0d:64:ba:04:e3:8b:6b:85:ea:a3:8a:6a:eb:cf: c8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C7:02:7A:27:98:45:70:65:42:76:E0:31:FF:AC:57:20:AC:F0:99 X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/KccCeieYRXBlQnbgMf-sVyCs8Jk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.220.0/22 45.10.232.0/23 91.204.48.0/22 92.118.12.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:92:23:72:2c:ff:8f:98:d5:04:92:c6:e1:2d:06:64:fb:31: 1a:38:dd:95:d3:96:96:f7:68:c5:83:0c:91:40:8e:77:7f:47: f6:f5:b8:8d:ff:43:f7:82:7a:c7:f0:7a:00:47:93:b3:fb:d1: 53:f1:57:81:8e:05:52:73:6e:e1:b5:f2:1f:5a:9d:53:00:82: 0e:78:e8:0e:53:bd:f5:eb:d9:d1:7f:76:07:11:ab:de:a4:5b: f9:b7:aa:98:86:aa:63:2c:4b:6a:14:f6:0b:f0:69:91:89:6f: ed:55:37:7b:6d:95:9d:fb:88:28:2e:3c:d1:40:f4:51:97:2f: b7:d4:23:de:0f:27:fd:9e:c7:f2:d1:a4:9a:6a:a8:bb:ed:d1: 2a:ea:dd:0a:34:1f:b7:01:60:58:6a:48:4c:dd:fa:36:e9:1a: 00:45:e3:e8:63:55:48:a3:c1:e5:41:f6:c3:63:c3:9e:79:e8: 14:ce:62:37:26:41:f0:dd:ec:a5:8c:46:5d:9a:26:44:01:f4: 17:93:42:dc:78:8c:fe:f7:7f:63:7b:14:22:5f:ff:2f:77:7a: 13:13:50:de:a4:8b:28:f6:84:64:60:9e:1b:e4:dd:65:d3:d3: ae:49:b5:a0:6f:83:b7:8f:c6:0e:36:37:d5:78:bb:be:70:33: 90:23:f2:71 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EPRkrNNjNgXvgFMR837gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWM3MDI3YTI3OTg0NTcwNjU0Mjc2ZTAzMWZmYWM1NzIwYWNmMDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrTdQxSwMRRivo668baq/ChWDQHP qEqQSqQFqmLwWG0smHRRD2pJeUMUrFUCe9XAgxzAmEx/oTXwYsdK5jL1txN0tmsh LiBvxRRfoYXwlskFZr3w/9sWpoWeZD4+x/Xpt+mx+Iu9mxL8NFSZ/oK5qaG7GyMr EalRWeD0MTxD6YvBkjJcHLTFwHzVIn8WXEZ8du971OqifrnGSnxbUJhkm685IZmP kmU3dS3t6+6vxJPbDCzyoupJ7MFma2SjPUl5avkIXG19FcGCsTMoKER49cnrGvix JoxyC6IpqXx45AS+SZG2k4/4D2PshdRjPAkTDWS6BOOLa4Xqo4pq68/IwwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCnHAnonmEVwZUJ24DH/rFcgrPCZMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvS2NjQ2VpZVlSWEJsUW5iZ01mLXNWeUNzOEprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCBbTcAwQB LQroAwQCW8wwAwQCXHYMMA0GCSqGSIb3DQEBCwUAA4IBAQAMkiNyLP+PmNUEksbh LQZk+zEaON2V05aW92jFgwyRQI53f0f29biN/0P3gnrH8HoAR5Oz+9FT8VeBjgVS c27htfIfWp1TAIIOeOgOU73169nRf3YHEavepFv5t6qYhqpjLEtqFPYL8GmRiW/t VTd7bZWd+4goLjzRQPRRly+31CPeDyf9nsfy0aSaaqi77dEq6t0KNB+3AWBYakhM 3fo26RoARePoY1VIo8HlQfbDY8OeeegUzmI3JkHw3eyljEZdmiZEAfQXk0LceIz+ 939jexQiX/8vd3oTE1DepIso9oRkYJ4b5N1l09OuSbWgb4O3j8YONjfVeLu+cDOQ I/Jx -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:31 2026 by rpki-client