This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/KKTxvi4QT-uw2rVsD47tdsRqIEw.roa File: KKTxvi4QT-uw2rVsD47tdsRqIEw.roa (raw, json) Hash identifier: xejVwgC/oSDE2f2FYXW8noid3jsDDlJ6in2DKcaZdI8= Subject key identifier: 28:A4:F1:BE:2E:10:4F:EB:B0:DA:B5:6C:0F:8E:ED:76:C4:6A:20:4C Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213 Certificate serial: 019B77593319A1AF02E939DEA5EBF1772B79 Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/KKTxvi4QT-uw2rVsD47tdsRqIEw.roa Signing time: Thu 01 Jan 2026 02:18:13 +0000 ROA not before: Thu 01 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41465 IP address blocks: 89.19.192.0/24 maxlen: 24 89.19.193.0/24 maxlen: 24 89.19.194.0/24 maxlen: 24 89.19.195.0/24 maxlen: 24 89.19.196.0/24 maxlen: 24 89.19.197.0/24 maxlen: 24 89.19.198.0/24 maxlen: 24 89.19.199.0/24 maxlen: 24 89.19.200.0/24 maxlen: 24 89.19.201.0/24 maxlen: 24 89.19.202.0/24 maxlen: 24 89.19.203.0/24 maxlen: 24 89.19.204.0/24 maxlen: 24 89.19.205.0/24 maxlen: 24 89.19.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:33:19:a1:af:02:e9:39:de:a5:eb:f1:77:2b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213 Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28a4f1be2e104febb0dab56c0f8eed76c46a204c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:09:ef:63:73:2d:73:e0:55:07:d8:a3:d0: 4c:64:a9:74:7e:70:2b:96:0c:9a:39:b5:7c:ea:bc: 42:9d:3a:1f:64:99:cd:03:28:72:24:3f:c1:81:65: 7c:04:2a:61:1b:90:04:f9:00:a7:53:ad:9d:02:47: e4:0e:fa:3d:47:d8:4a:71:bd:04:a0:1e:2e:42:05: 90:a2:d0:8b:77:ce:18:98:99:c0:f9:bf:2c:5b:ce: 68:71:2a:27:11:6a:ae:e8:4e:65:63:5e:c6:cd:e4: 4c:62:7b:19:2e:3b:10:1e:15:3f:bc:fe:f2:ea:9c: 3b:bc:7b:58:77:15:8f:73:21:8b:20:69:a1:86:be: 9b:20:42:4d:9f:22:fb:89:62:ae:62:d0:86:bd:18: 3f:50:3a:e2:c9:aa:9e:aa:93:43:88:a8:b8:6e:e4: 3f:5b:5a:69:94:af:9d:d9:26:4a:d5:e2:43:cb:f9: 2e:80:62:94:e3:35:83:b4:25:5a:13:b8:fa:77:65: 04:b4:29:43:21:62:6e:55:da:4b:e3:81:10:85:eb: 83:f9:8f:84:b6:75:a9:c2:a0:6d:5c:8e:63:26:a7: b4:82:cc:92:8f:2b:8a:43:ad:5b:ab:0d:9d:32:fa: 1b:d3:91:d3:00:90:a4:24:41:02:25:8e:61:c5:1c: e2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A4:F1:BE:2E:10:4F:EB:B0:DA:B5:6C:0F:8E:ED:76:C4:6A:20:4C X509v3 Authority Key Identifier: keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/KKTxvi4QT-uw2rVsD47tdsRqIEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.19.192.0-89.19.206.255 Signature Algorithm: sha256WithRSAEncryption a3:1b:88:fe:0a:6a:05:55:9b:3c:d9:00:82:25:7b:12:f0:e0: da:c5:62:9f:49:19:48:df:86:ff:0d:d3:76:3c:d6:d7:c5:b4: 36:11:d8:c1:79:74:81:8c:8d:1d:ed:4f:45:88:31:66:94:cf: 2f:a3:0c:23:eb:fb:59:eb:28:91:03:03:ce:a9:5d:69:18:9c: 3c:95:c5:67:6f:a5:0c:23:92:0b:e7:29:4f:9b:ba:ff:87:63: 9d:66:4a:06:4e:2c:30:25:72:cc:0d:bb:18:2b:95:2c:69:b5: b9:31:fc:2f:7b:51:d0:78:fa:3f:39:e8:5b:90:19:69:98:32: bd:aa:36:0f:3d:93:e0:c1:37:bb:33:a5:52:b9:e5:50:f3:b5: 36:e4:cb:b9:45:59:3f:98:fc:9c:9b:36:f7:44:a1:a0:49:d1: ba:28:47:13:8d:84:d7:04:af:25:4e:e9:31:7d:16:9d:6b:50: c9:db:76:71:50:b1:46:29:21:2f:d8:f2:6b:44:70:88:f9:b2: 1f:17:c8:b6:cd:14:4c:74:1a:63:b8:c8:13:ad:d8:a8:62:6b: 00:1f:29:38:e8:68:0b:2d:86:78:45:60:9c:e3:20:d0:60:7c: 88:cf:b8:a2:ec:ba:28:61:5a:23:a6:62:86:a9:d4:2b:c0:b4: 58:98:55:98 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WTMZoa8C6Tnepevxdyt5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YjgxMjFkNTU2ZGY0NTM0NTY1NTNkY2I0NWM0MTQzZjRj ZGQyMTMwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGE0ZjFiZTJlMTA0ZmViYjBkYWI1NmMwZjhlZWQ3NmM0NmEyMDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6gJ72NzLXPgVQfYo9BMZKl0fnAr lgyaObV86rxCnTofZJnNAyhyJD/BgWV8BCphG5AE+QCnU62dAkfkDvo9R9hKcb0E oB4uQgWQotCLd84YmJnA+b8sW85ocSonEWqu6E5lY17GzeRMYnsZLjsQHhU/vP7y 6pw7vHtYdxWPcyGLIGmhhr6bIEJNnyL7iWKuYtCGvRg/UDriyaqeqpNDiKi4buQ/ W1pplK+d2SZK1eJDy/kugGKU4zWDtCVaE7j6d2UEtClDIWJuVdpL44EQheuD+Y+E tnWpwqBtXI5jJqe0gsySjyuKQ61bqw2dMvob05HTAJCkJEECJY5hxRzi2QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCik8b4uEE/rsNq1bA+O7XbEaiBMMB8GA1UdIwQY MBaAFJa4Eh1VbfRTRWVT3LRcQUP0zdITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNjY1ZTYtZjk1ZC00MzQ3LTg1NjUt ZDRmNTMxN2M1ODMwLzEvS0tUeHZpNFFULXV3MnJWc0Q0N3Rkc1JxSUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kNjY1ZTYtZjk1ZC00MzQ3LTg1NjUtZDRmNTMxN2M1ODMw LzEvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAZZE8AD BABZE84wDQYJKoZIhvcNAQELBQADggEBAKMbiP4KagVVmzzZAIIlexLw4NrFYp9J GUjfhv8N03Y81tfFtDYR2MF5dIGMjR3tT0WIMWaUzy+jDCPr+1nrKJEDA86pXWkY nDyVxWdvpQwjkgvnKU+buv+HY51mSgZOLDAlcswNuxgrlSxptbkx/C97UdB4+j85 6FuQGWmYMr2qNg89k+DBN7szpVK55VDztTbky7lFWT+Y/JybNvdEoaBJ0booRxON hNcEryVO6TF9Fp1rUMnbdnFQsUYpIS/Y8mtEcIj5sh8XyLbNFEx0GmO4yBOt2Khi awAfKTjoaAsthnhFYJzjINBgfIjPuKLsuihhWiOmYoap1CvAtFiYVZg= -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:34 2026 by rpki-client