This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/kf58GPD5iMVc4BLLn8IhfqKMsCY.roa File: kf58GPD5iMVc4BLLn8IhfqKMsCY.roa (raw, json) Hash identifier: Ic5aK1Q6lKzryOBda72Usz/9pqqGz+CIRUBEEUajD8w= Subject key identifier: 91:FE:7C:18:F0:F9:88:C5:5C:E0:12:CB:9F:C2:21:7E:A2:8C:B0:26 Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544 Certificate serial: 019B7910A9034D853A35C3294FE62DBFC14F Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/kf58GPD5iMVc4BLLn8IhfqKMsCY.roa Signing time: Thu 01 Jan 2026 10:18:13 +0000 ROA not before: Thu 01 Jan 2026 10:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57119 IP address blocks: 149.62.152.0/21 maxlen: 21 149.62.154.0/24 maxlen: 24 185.64.148.0/22 maxlen: 22 185.64.148.0/23 maxlen: 23 185.64.149.0/24 maxlen: 24 185.64.150.0/24 maxlen: 24 185.64.151.0/24 maxlen: 24 2a02:7680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a9:03:4d:85:3a:35:c3:29:4f:e6:2d:bf:c1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544 Validity Not Before: Jan 1 10:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91fe7c18f0f988c55ce012cb9fc2217ea28cb026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:23:09:1d:2c:88:19:c3:6b:8f:cc:a3:38: d6:ec:67:5a:17:2b:8d:42:13:36:e6:b8:38:90:03: 55:00:08:f5:82:0a:60:0d:c8:27:d2:4f:c4:d5:b5: da:33:2e:5d:7c:eb:17:56:96:c3:53:e6:27:22:a2: 4e:b0:9f:f4:8d:98:53:92:64:cc:be:da:7b:2b:68: ae:61:69:1f:f6:35:a2:74:a6:40:76:7e:ee:97:f1: e3:30:da:7d:79:ba:78:0b:66:07:9d:75:e8:a5:39: 67:77:cb:08:71:5f:1f:9c:89:36:d5:a6:d7:d4:f7: c4:41:18:a6:6d:d2:50:4e:31:b0:41:00:62:b9:ac: dd:ff:49:b3:00:9c:4b:fa:de:9a:37:02:21:53:ac: 39:32:b4:5b:80:db:df:a0:44:a4:3e:9a:16:07:c3: a4:6d:db:c1:97:e3:f9:6d:b5:f8:c3:06:59:82:62: 7f:67:fe:fb:a1:fa:00:ea:10:5f:b4:0b:2d:69:26: 0c:e3:2b:da:e2:a8:4c:c1:f0:69:cf:0b:7b:b1:a8: 9b:e5:e6:48:c7:2e:ae:85:ad:e6:80:c3:84:b2:34: bd:fe:70:4d:86:3b:17:9b:fb:99:18:5c:29:ab:6d: 0d:cd:4f:87:b6:57:50:e9:2a:1d:6d:26:75:43:29: 25:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FE:7C:18:F0:F9:88:C5:5C:E0:12:CB:9F:C2:21:7E:A2:8C:B0:26 X509v3 Authority Key Identifier: keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/kf58GPD5iMVc4BLLn8IhfqKMsCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.62.152.0/21 185.64.148.0/22 IPv6: 2a02:7680::/32 Signature Algorithm: sha256WithRSAEncryption 4a:6e:b7:3b:0d:b4:bd:f5:7a:e4:a2:0d:35:bf:21:31:ca:7e: cb:d3:15:82:f6:1c:3c:3b:0f:e0:3e:e1:ef:4c:aa:69:b6:64: ad:fe:ad:7f:01:d3:f8:b8:80:12:c0:a4:5c:08:94:81:1d:d0: 62:a6:22:94:4c:d7:41:d1:20:29:d3:0a:61:3e:63:a0:88:6a: 7f:a5:1e:d4:aa:6c:ef:3d:fc:4e:00:95:ef:0e:a4:0e:ef:60: 33:f8:3f:4c:10:0b:d8:f8:d9:ed:40:72:bb:d2:ec:4a:a9:b5: e0:f9:3a:5d:e0:66:2a:80:dc:c8:d2:4c:75:c0:60:59:12:26: 2e:01:7e:a6:d3:99:ab:da:82:d6:fa:c4:d7:5c:74:64:85:75: c8:7e:d8:12:ba:61:89:42:ff:25:94:22:fa:06:f2:54:7e:85: 28:a3:d8:24:43:81:bc:85:82:e0:03:8c:63:48:33:49:63:19: e5:c8:61:ae:f4:b0:bf:b7:02:9c:38:f8:f2:39:b2:a4:93:0a: 23:b2:fe:13:08:cf:03:0a:f1:fd:2d:e9:18:0a:b8:a1:8b:c6: e6:e4:c6:b3:4e:46:05:36:bd:9d:0c:b6:72:61:15:8f:d4:8a: 44:8a:92:02:da:2e:d0:9b:8d:f6:22:90:e0:e3:dc:a8:3c:a6: 1d:eb:e6:ff -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EKkDTYU6NcMpT+Ytv8FPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MWE4YzQyZWNlODliNWZiZmMyMTBkYzdiNTU0YzcyZWE0 ZjM1NDQwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWZlN2MxOGYwZjk4OGM1NWNlMDEyY2I5ZmMyMjE3ZWEyOGNiMDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2gjCR0siBnDa4/MozjW7GdaFyuN QhM25rg4kANVAAj1ggpgDcgn0k/E1bXaMy5dfOsXVpbDU+YnIqJOsJ/0jZhTkmTM vtp7K2iuYWkf9jWidKZAdn7ul/HjMNp9ebp4C2YHnXXopTlnd8sIcV8fnIk21abX 1PfEQRimbdJQTjGwQQBiuazd/0mzAJxL+t6aNwIhU6w5MrRbgNvfoESkPpoWB8Ok bdvBl+P5bbX4wwZZgmJ/Z/77ofoA6hBftAstaSYM4yva4qhMwfBpzwt7saib5eZI xy6uha3mgMOEsjS9/nBNhjsXm/uZGFwpq20NzU+HtldQ6SodbSZ1QykldQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJH+fBjw+YjFXOASy5/CIX6ijLAmMB8GA1UdIwQY MBaAFOQajELs6Jtfv8IQ3HtVTHLqTzVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2Yt MWQ2NjZjNDIyYzZhLzEva2Y1OEdQRDVpTVZjNEJMTG44SWhmcUtNc0NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2YtMWQ2NjZjNDIyYzZh LzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDlT6YAwQC uUCUMA0EAgACMAcDBQAqAnaAMA0GCSqGSIb3DQEBCwUAA4IBAQBKbrc7DbS99Xrk og01vyExyn7L0xWC9hw8Ow/gPuHvTKpptmSt/q1/AdP4uIASwKRcCJSBHdBipiKU TNdB0SAp0wphPmOgiGp/pR7UqmzvPfxOAJXvDqQO72Az+D9MEAvY+NntQHK70uxK qbXg+Tpd4GYqgNzI0kx1wGBZEiYuAX6m05mr2oLW+sTXXHRkhXXIftgSumGJQv8l lCL6BvJUfoUoo9gkQ4G8hYLgA4xjSDNJYxnlyGGu9LC/twKcOPjyObKkkwojsv4T CM8DCvH9LekYCrihi8bm5MazTkYFNr2dDLZyYRWP1IpEipIC2i7Qm432IpDg49yo PKYd6+b/ -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:05 2026 by rpki-client