This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/kvQ545VBeKJ16540o8TuObo3Lms.roa File: kvQ545VBeKJ16540o8TuObo3Lms.roa (raw, json) Hash identifier: 6nWlGmTGLlqKlb5UMIbOgwBINXEzC37TRE8Q0aoo66Y= Subject key identifier: 92:F4:39:E3:95:41:78:A2:75:EB:9E:34:A3:C4:EE:39:BA:37:2E:6B Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f Certificate serial: 019B79104515BC6A8DDDAEF2D0C06E450EFF Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/kvQ545VBeKJ16540o8TuObo3Lms.roa Signing time: Thu 01 Jan 2026 10:17:47 +0000 ROA not before: Thu 01 Jan 2026 10:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8683 IP address blocks: 149.20.96.0/22 maxlen: 22 149.20.100.0/22 maxlen: 22 149.20.104.0/22 maxlen: 22 149.20.108.0/22 maxlen: 22 213.248.196.0/23 maxlen: 23 213.248.198.0/23 maxlen: 23 213.248.228.0/23 maxlen: 23 213.248.230.0/23 maxlen: 23 213.248.232.0/21 maxlen: 21 213.248.240.0/21 maxlen: 21 213.248.249.0/24 maxlen: 24 213.248.252.0/23 maxlen: 23 2a01:618:8000::/33 maxlen: 33 2a01:618:8000::/40 maxlen: 40 2a01:61c:1000::/40 maxlen: 40 2a01:61c:1100::/40 maxlen: 40 2a01:61c:1900::/40 maxlen: 40 2a01:61c:1a00::/40 maxlen: 40 2a01:61c:1d00::/40 maxlen: 40 2a01:61c:1f00::/40 maxlen: 40 2a01:61c:2000::/40 maxlen: 40 2a01:61c:2100::/40 maxlen: 40 2a01:61c:2a00::/40 maxlen: 40 2a01:61c:2f00::/40 maxlen: 40 2a01:61c:f001::/48 maxlen: 48 2a01:61c:f002::/48 maxlen: 48 2a01:61c:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:45:15:bc:6a:8d:dd:ae:f2:d0:c0:6e:45:0e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92f439e3954178a275eb9e34a3c4ee39ba372e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:8f:e2:88:c5:b9:8e:d0:d0:c1:28:59:86: 73:e6:12:67:53:ae:3f:0a:ab:01:c9:b0:ab:52:c2: 02:2a:69:79:d1:f4:e0:62:d0:9f:4c:47:39:c4:4e: c5:ca:88:69:58:b4:12:da:f7:f8:7d:d7:e9:5c:e8: b2:4e:ed:2a:d9:0d:c3:13:1a:18:21:ae:57:c6:d4: dc:9e:fc:c6:99:fb:12:05:b3:ab:2c:d1:64:87:26: ac:60:08:35:21:c8:d3:bd:d3:f9:cf:d2:46:17:27: f7:59:6a:e3:e8:0b:ea:73:df:0f:e2:a2:78:82:fd: ae:cc:6e:7e:8e:3d:4d:f6:79:ad:3c:73:31:4e:c5: c3:19:9f:2a:88:35:a1:d6:79:d4:fc:6c:83:41:d4: c1:b1:c1:e0:62:20:60:b9:d3:66:5f:f0:c3:bf:c7: 5f:ac:8f:f2:56:d1:f3:52:dd:71:72:1a:b6:5b:db: 1f:2a:ee:77:5f:26:fd:58:4c:40:35:5b:eb:fc:3c: 0c:a7:2f:e6:af:2b:cd:ea:16:2a:a6:27:ef:59:bf: d4:b5:c0:cd:9f:c1:54:95:94:61:a0:a4:0e:33:1b: 4a:2a:13:32:72:57:74:ad:b1:16:d0:49:41:bd:82: d8:e9:c5:dd:66:06:5c:6b:f0:5f:91:ba:04:22:86: e8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F4:39:E3:95:41:78:A2:75:EB:9E:34:A3:C4:EE:39:BA:37:2E:6B X509v3 Authority Key Identifier: keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/kvQ545VBeKJ16540o8TuObo3Lms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.20.96.0/20 213.248.196.0/22 213.248.228.0-213.248.247.255 213.248.249.0/24 213.248.252.0/23 IPv6: 2a01:618:8000::/33 2a01:61c:1000::/39 2a01:61c:1900::-2a01:61c:1aff:ffff:ffff:ffff:ffff:ffff 2a01:61c:1d00::/40 2a01:61c:1f00::-2a01:61c:21ff:ffff:ffff:ffff:ffff:ffff 2a01:61c:2a00::/40 2a01:61c:2f00::/40 2a01:61c:f001::-2a01:61c:f002:ffff:ffff:ffff:ffff:ffff 2a01:61c:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 1c:0d:df:f1:99:8b:79:c5:46:d0:8c:97:61:19:0a:e9:55:2c: 1c:c6:d1:f8:e3:ff:1b:d2:30:1d:ae:c8:e2:e8:8d:fa:cc:5e: 01:7f:c8:f6:06:3c:a3:51:d8:45:e4:6b:ec:cc:2e:b4:6d:fb: f9:f4:00:82:71:89:ee:ff:10:2c:a2:2b:0a:cf:e8:b7:79:60: 76:37:f4:63:9c:7d:ad:2e:e3:7e:92:f0:6e:d2:26:48:23:64: 90:7d:74:0a:46:be:28:4d:15:f2:34:7f:19:87:29:63:cc:84: 19:0c:e5:24:a9:f5:88:0f:4d:ee:e8:aa:81:3d:96:2b:66:9b: 48:76:6f:10:2c:ad:e8:74:88:74:bc:ca:d9:aa:b2:59:24:40: e8:c4:36:b6:d1:64:b2:fb:b0:fd:c5:8f:e3:0d:c8:20:36:94: 40:06:55:60:7c:ad:8c:6f:9e:e2:6b:b1:0e:52:da:ec:9a:c7: 20:70:87:43:52:d0:14:33:c5:d9:a1:c1:b7:28:90:30:d7:7d: 08:12:9d:4e:00:c5:fe:02:7a:40:4c:a1:63:59:67:42:16:59: b5:9e:e4:6f:2c:96:dc:68:02:86:f4:e2:af:b9:2a:b1:22:e3: cb:cf:bd:1f:25:8a:82:08:35:3b:25:b7:ce:44:80:c7:9b:df: 2b:7d:b8:d5 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgISAZt5EEUVvGqN3a7y0MBuRQ7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMmVjYzZjYzU5MDNhZWEwZGI2MTIwMGY0Y2NkNGY4MjRj ZGQ1NGYwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmY0MzllMzk1NDE3OGEyNzVlYjllMzRhM2M0ZWUzOWJhMzcyZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVWP4ojFuY7Q0MEoWYZz5hJnU64/ CqsBybCrUsICKml50fTgYtCfTEc5xE7FyohpWLQS2vf4fdfpXOiyTu0q2Q3DExoY Ia5XxtTcnvzGmfsSBbOrLNFkhyasYAg1IcjTvdP5z9JGFyf3WWrj6Avqc98P4qJ4 gv2uzG5+jj1N9nmtPHMxTsXDGZ8qiDWh1nnU/GyDQdTBscHgYiBgudNmX/DDv8df rI/yVtHzUt1xchq2W9sfKu53Xyb9WExANVvr/DwMpy/mryvN6hYqpifvWb/UtcDN n8FUlZRhoKQOMxtKKhMycld0rbEW0ElBvYLY6cXdZgZca/BfkboEIobojQIDAQAB o4ICnTCCApkwHQYDVR0OBBYEFJL0OeOVQXiideueNKPE7jm6Ny5rMB8GA1UdIwQY MBaAFGIuzGzFkDrqDbYSAPTM1PgkzdVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUt MzQ2MzY4ODI3ZTY4LzEva3ZRNTQ1VkJlS0oxNjU0MG84VHVPYm8zTG1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUtMzQ2MzY4ODI3ZTY4 LzEvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGyBggrBgEFBQcBBwEB/wSBojCBnzAsBAIAATAmAwQElRRg AwQC1fjEMAwDBALV+OQDBAPV+PADBADV+PkDBAHV+PwwbwQCAAIwaQMGByoBBhiA AwYBKgEGHBAwEAMGACoBBhwZAwYAKgEGHBoDBgAqAQYcHTAQAwYAKgEGHB8DBgEq AQYcIAMGACoBBhwqAwYAKgEGHC8wEgMHACoBBhzwAQMHACoBBhzwAgMHACoBBhz/ /zANBgkqhkiG9w0BAQsFAAOCAQEAHA3f8ZmLecVG0IyXYRkK6VUsHMbR+OP/G9Iw Ha7I4uiN+sxeAX/I9gY8o1HYReRr7MwutG37+fQAgnGJ7v8QLKIrCs/ot3lgdjf0 Y5x9rS7jfpLwbtImSCNkkH10Cka+KE0V8jR/GYcpY8yEGQzlJKn1iA9N7uiqgT2W K2abSHZvECyt6HSIdLzK2aqyWSRA6MQ2ttFksvuw/cWP4w3IIDaUQAZVYHytjG+e 4muxDlLa7JrHIHCHQ1LQFDPF2aHBtyiQMNd9CBKdTgDF/gJ6QEyhY1lnQhZZtZ7k byyW3GgChvTir7kqsSLjy8+9HyWKggg1OyW3zkSAx5vfK3241Q== -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:25 2026 by rpki-client