This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/KT7j6_HQv5rlMFhwBY1TdhgJ4Rc.roa File: KT7j6_HQv5rlMFhwBY1TdhgJ4Rc.roa (raw, json) Hash identifier: CMCFJ522ifdqt0xcDWNSZop/WrNivf5oelP7FfWl5vI= Subject key identifier: 29:3E:E3:EB:F1:D0:BF:9A:E5:30:58:70:05:8D:53:76:18:09:E1:17 Certificate issuer: /CN=55ac802b857fe4257223a8e55085a50b3b770ec6 Certificate serial: 019B7CED009994AD902A6E30E4F5C0360004 Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/KT7j6_HQv5rlMFhwBY1TdhgJ4Rc.roa Signing time: Fri 02 Jan 2026 04:17:45 +0000 ROA not before: Fri 02 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33941 IP address blocks: 84.21.128.0/19 maxlen: 19 84.21.136.0/22 maxlen: 22 84.21.142.0/23 maxlen: 23 84.21.145.0/24 maxlen: 24 84.21.146.0/23 maxlen: 23 84.21.150.0/23 maxlen: 23 84.21.150.0/24 maxlen: 24 84.21.151.0/24 maxlen: 24 84.21.152.0/23 maxlen: 23 84.21.152.0/24 maxlen: 24 84.21.153.0/24 maxlen: 24 2a01:570::/32 maxlen: 32 2a01:570:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:00:99:94:ad:90:2a:6e:30:e4:f5:c0:36:00:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6 Validity Not Before: Jan 2 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=293ee3ebf1d0bf9ae5305870058d53761809e117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:df:ef:a1:8d:46:83:29:d3:f6:f7:8d:46: 43:16:d6:38:a1:90:57:9d:5e:01:45:83:c8:74:18: 7e:ee:82:50:42:9d:ec:db:99:8a:89:44:07:e8:95: 89:a7:92:c7:db:61:ce:9a:6f:5e:21:27:20:9b:99: 32:24:43:56:f4:49:4d:ad:09:e7:37:18:70:17:af: b1:df:9e:c2:87:a1:bd:95:49:65:35:b9:57:c1:70: 2e:1b:d2:1a:c0:6c:a4:8e:d8:f2:43:c7:85:d6:19: f0:20:d8:aa:50:b5:2f:db:49:4a:24:d0:22:37:8a: 49:6f:5a:a9:0e:3d:71:b3:80:44:b5:4b:0e:d5:71: dc:b3:da:fd:85:6c:ec:13:cf:09:d4:bc:1c:0f:c9: f2:3f:ac:f9:97:12:20:b1:31:91:5b:86:b9:d8:94: 8f:47:cf:8f:e4:21:50:4e:ab:e6:bb:3f:14:cb:1b: 2e:56:91:1b:e4:4a:6e:66:43:68:4d:6a:ea:23:bd: da:e1:0c:b1:c9:c9:f5:7c:3f:24:77:e0:15:9e:1c: 6d:d4:60:38:dc:4f:31:c6:82:3e:5c:e8:b0:0c:58: fb:9c:ab:3f:a4:25:a4:1e:5d:1d:41:b0:bb:31:e0: a5:83:30:19:3f:0f:a1:20:a5:65:a8:28:42:cd:7a: 64:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3E:E3:EB:F1:D0:BF:9A:E5:30:58:70:05:8D:53:76:18:09:E1:17 X509v3 Authority Key Identifier: keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/KT7j6_HQv5rlMFhwBY1TdhgJ4Rc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.21.128.0/19 IPv6: 2a01:570::/32 Signature Algorithm: sha256WithRSAEncryption 62:31:e5:07:c1:5f:42:2b:23:76:7f:ba:29:94:e2:2b:cc:1f: a9:5c:4b:38:b2:20:67:9e:1c:50:f5:a3:2c:97:2a:15:37:ad: e6:2b:e3:92:11:65:be:95:c1:2e:21:df:34:63:aa:2b:6b:0f: 4c:05:f4:d7:f8:0d:fb:11:fa:e9:65:b2:ef:00:47:5b:46:75: 94:60:bd:e0:7f:f0:90:08:32:50:32:cd:d9:14:74:e1:9f:da: ac:3e:07:e3:3f:bf:93:5a:49:18:23:a2:01:33:8b:f5:fd:e6: 2d:a7:b5:bc:e8:e3:93:8e:fc:71:f0:87:8c:68:8f:18:72:fa: 97:dc:8e:93:dc:71:4e:55:05:f2:9a:e5:44:31:e5:4f:70:b3: 0c:73:34:b9:95:98:2b:4f:33:44:c2:51:81:c7:d3:8c:eb:7a: 9d:48:47:67:c8:83:4a:ac:e3:31:c8:51:e4:b9:ff:2e:6d:af: 37:8e:8e:6a:55:e7:9b:43:11:4f:ef:07:ec:90:fc:5d:e9:42: 1a:ae:b2:29:2e:4a:92:e2:29:28:54:18:fc:10:a6:23:9c:b7: 22:30:6d:2c:90:5d:60:90:14:aa:ef:77:d4:be:f6:06:d8:7d: 72:bc:65:ab:64:9e:a9:5c:82:81:ed:28:37:a9:c0:60:f3:e2: c2:3e:56:e3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87QCZlK2QKm4w5PXANgAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YWM4MDJiODU3ZmU0MjU3MjIzYThlNTUwODVhNTBiM2I3 NzBlYzYwHhcNMjYwMTAyMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTNlZTNlYmYxZDBiZjlhZTUzMDU4NzAwNThkNTM3NjE4MDllMTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqjf76GNRoMp0/b3jUZDFtY4oZBX nV4BRYPIdBh+7oJQQp3s25mKiUQH6JWJp5LH22HOmm9eIScgm5kyJENW9ElNrQnn NxhwF6+x357Ch6G9lUllNblXwXAuG9IawGykjtjyQ8eF1hnwINiqULUv20lKJNAi N4pJb1qpDj1xs4BEtUsO1XHcs9r9hWzsE88J1LwcD8nyP6z5lxIgsTGRW4a52JSP R8+P5CFQTqvmuz8UyxsuVpEb5EpuZkNoTWrqI73a4Qyxycn1fD8kd+AVnhxt1GA4 3E8xxoI+XOiwDFj7nKs/pCWkHl0dQbC7MeClgzAZPw+hIKVlqChCzXpkiQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCk+4+vx0L+a5TBYcAWNU3YYCeEXMB8GA1UdIwQY MBaAFFWsgCuFf+QlciOo5VCFpQs7dw7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80OTBmM2MtNmY3Yy00NTY0LTljNmIt NjY5NzlhMDQ4MGIwLzEvS1Q3ajZfSFF2NXJsTUZod0JZMVRkaGdKNFJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80OTBmM2MtNmY3Yy00NTY0LTljNmItNjY5NzlhMDQ4MGIw LzEvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFVBWAMA0E AgACMAcDBQAqAQVwMA0GCSqGSIb3DQEBCwUAA4IBAQBiMeUHwV9CKyN2f7oplOIr zB+pXEs4siBnnhxQ9aMslyoVN63mK+OSEWW+lcEuId80Y6oraw9MBfTX+A37Efrp ZbLvAEdbRnWUYL3gf/CQCDJQMs3ZFHThn9qsPgfjP7+TWkkYI6IBM4v1/eYtp7W8 6OOTjvxx8IeMaI8YcvqX3I6T3HFOVQXymuVEMeVPcLMMczS5lZgrTzNEwlGBx9OM 63qdSEdnyINKrOMxyFHkuf8uba83jo5qVeebQxFP7wfskPxd6UIarrIpLkqS4iko VBj8EKYjnLciMG0skF1gkBSq73fUvvYG2H1yvGWrZJ6pXIKB7Sg3qcBg8+LCPlbj -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:16 2026 by rpki-client