This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/Kx2A4QHC9gQsEflStPjFwVjhvSA.roa File: Kx2A4QHC9gQsEflStPjFwVjhvSA.roa (raw, json) Hash identifier: FMGSXjNyUjkWfrbaK6kOA/2OaW9XrZEgBYS29pUlyug= Subject key identifier: 2B:1D:80:E1:01:C2:F6:04:2C:11:F9:52:B4:F8:C5:C1:58:E1:BD:20 Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306 Certificate serial: 019B7F151F008CE1FE54806ADB6D0D5CF21D Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/Kx2A4QHC9gQsEflStPjFwVjhvSA.roa Signing time: Fri 02 Jan 2026 14:20:49 +0000 ROA not before: Fri 02 Jan 2026 14:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51487 IP address blocks: 5.253.4.0/24 maxlen: 24 5.253.5.0/24 maxlen: 24 5.253.6.0/24 maxlen: 24 5.253.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1f:00:8c:e1:fe:54:80:6a:db:6d:0d:5c:f2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306 Validity Not Before: Jan 2 14:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b1d80e101c2f6042c11f952b4f8c5c158e1bd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:a2:b1:29:da:f5:ef:59:45:f4:c9:11:a7: b0:32:1b:ea:75:22:aa:26:9d:88:9e:5a:01:fb:db: 2c:95:4f:d7:c0:2a:3d:80:78:43:59:54:e0:84:64: d6:18:3d:eb:06:32:30:42:56:f4:28:85:f5:99:a2: ec:22:12:0b:72:ef:17:34:04:e8:90:33:f9:c9:52: 55:3a:68:f4:41:c4:7a:85:2b:20:85:82:86:44:79: 50:bb:7c:18:2f:5e:eb:8b:56:db:8e:72:f3:c0:99: b9:86:ea:1d:e2:6d:1a:ff:a9:9f:8f:79:69:4f:fd: 59:1d:c9:27:a7:b9:49:0e:41:84:5f:fa:c8:da:ea: 42:fe:ed:cb:1d:a9:4d:8a:6e:2d:23:59:4f:29:c1: f1:c6:ed:67:94:63:33:e8:64:8d:c6:26:5d:3e:b3: df:45:86:53:71:21:23:58:3f:69:92:06:0e:ce:5f: 2e:7e:dd:b3:23:d9:e3:2f:51:63:b2:a5:e6:7c:6c: 61:25:5c:f6:37:c0:48:c0:34:cb:47:6a:b4:4e:fd: 86:d1:81:61:a2:75:28:7d:53:5a:20:45:e8:53:cb: 2f:92:3d:2d:82:50:57:a1:ca:1f:81:95:dd:6f:cf: f7:37:8f:fd:e8:b5:88:35:bc:ab:7e:b9:a3:16:5a: ea:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1D:80:E1:01:C2:F6:04:2C:11:F9:52:B4:F8:C5:C1:58:E1:BD:20 X509v3 Authority Key Identifier: keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/Kx2A4QHC9gQsEflStPjFwVjhvSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.4.0/22 Signature Algorithm: sha256WithRSAEncryption 67:83:ab:39:9f:5f:33:37:f4:41:9a:65:bb:95:b9:17:23:63: 1b:c8:00:aa:89:7e:f2:cd:7c:77:a0:72:65:6f:c0:67:b3:35: 83:33:1a:b4:fe:b5:32:52:ef:89:8e:aa:33:f3:37:1e:36:12: c2:fc:1e:5b:06:1b:b9:d2:29:10:7e:6b:8e:4a:b9:28:03:3b: e2:5f:fd:16:bc:cb:b9:46:34:da:d7:6c:16:21:78:a8:d8:03: c7:1f:34:19:51:54:9f:67:be:74:d9:cb:df:df:b5:ce:76:cd: 9b:a3:b4:c1:75:5e:6e:2c:91:09:b6:ad:e1:e2:7e:2c:f1:a7: ca:98:8f:ae:73:5b:e4:c2:f7:9c:db:95:4c:c8:e7:a3:37:51: 1c:cd:f2:4e:de:ef:5f:0c:22:0a:6b:c4:50:f6:4e:e1:00:04: cd:4a:88:a4:f5:a3:54:16:c7:71:a4:ee:af:e2:a4:8a:80:e7: 0a:0a:ba:17:46:05:39:00:84:94:d9:79:12:20:26:a4:07:57: e0:89:cc:7d:69:37:b9:f6:94:12:9c:d1:32:d2:09:1a:ed:83: fb:f8:cb:2c:67:c9:c8:7b:23:d7:4b:99:6d:bd:da:13:aa:90: 82:c7:e0:e6:8a:ec:01:79:6e:99:da:93:67:9d:65:9d:aa:f7: be:d1:b5:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FR8AjOH+VIBq220NXPIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzM2NmFmNmNlMGIxYTlmNjAxNzNiMTRiNWZkZGQ3ZTBi OTYzMDYwHhcNMjYwMTAyMTQyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjFkODBlMTAxYzJmNjA0MmMxMWY5NTJiNGY4YzVjMTU4ZTFiZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiCisSna9e9ZRfTJEaewMhvqdSKq Jp2InloB+9sslU/XwCo9gHhDWVTghGTWGD3rBjIwQlb0KIX1maLsIhILcu8XNATo kDP5yVJVOmj0QcR6hSsghYKGRHlQu3wYL17ri1bbjnLzwJm5huod4m0a/6mfj3lp T/1ZHcknp7lJDkGEX/rI2upC/u3LHalNim4tI1lPKcHxxu1nlGMz6GSNxiZdPrPf RYZTcSEjWD9pkgYOzl8uft2zI9njL1FjsqXmfGxhJVz2N8BIwDTLR2q0Tv2G0YFh onUofVNaIEXoU8svkj0tglBXocofgZXdb8/3N4/96LWINbyrfrmjFlrq7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCsdgOEBwvYELBH5UrT4xcFY4b0gMB8GA1UdIwQY MBaAFJ3DZq9s4LGp9gFzsUtf3dfguWMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgt ODJmNDc2YjVjZmRiLzEvS3gyQTRRSEM5Z1FzRWZsU3RQakZ3VmpodlNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgtODJmNDc2YjVjZmRi LzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBf0EMA0G CSqGSIb3DQEBCwUAA4IBAQBng6s5n18zN/RBmmW7lbkXI2MbyACqiX7yzXx3oHJl b8BnszWDMxq0/rUyUu+Jjqoz8zceNhLC/B5bBhu50ikQfmuOSrkoAzviX/0WvMu5 RjTa12wWIXio2APHHzQZUVSfZ7502cvf37XOds2bo7TBdV5uLJEJtq3h4n4s8afK mI+uc1vkwvec25VMyOejN1EczfJO3u9fDCIKa8RQ9k7hAATNSoik9aNUFsdxpO6v 4qSKgOcKCroXRgU5AISU2XkSICakB1fgicx9aTe59pQSnNEy0gka7YP7+MssZ8nI eyPXS5ltvdoTqpCCx+DmiuwBeW6Z2pNnnWWdqve+0bX5 -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:31 2026 by rpki-client