This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/khVNUt72gqEtLTFHrFGFydtaf9g.roa File: khVNUt72gqEtLTFHrFGFydtaf9g.roa (raw, json) Hash identifier: bNy/lOF0EYLu7hmaQcENeHKBy5qTO7PagdNW8TUDKr4= Subject key identifier: 92:15:4D:52:DE:F6:82:A1:2D:2D:31:47:AC:51:85:C9:DB:5A:7F:D8 Certificate issuer: /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae Certificate serial: 019B7BA4D8C2D75BFC6A8E6AC2AF884B955F Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/khVNUt72gqEtLTFHrFGFydtaf9g.roa Signing time: Thu 01 Jan 2026 22:19:19 +0000 ROA not before: Thu 01 Jan 2026 22:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35575 IP address blocks: 46.149.240.0/20 maxlen: 20 84.19.32.0/19 maxlen: 19 84.19.32.0/21 maxlen: 21 84.19.40.0/21 maxlen: 21 84.19.48.0/21 maxlen: 21 84.19.56.0/21 maxlen: 21 88.211.64.0/18 maxlen: 18 88.211.64.0/21 maxlen: 21 88.211.72.0/21 maxlen: 21 88.211.80.0/20 maxlen: 20 88.211.96.0/21 maxlen: 21 88.211.104.0/21 maxlen: 21 88.211.112.0/21 maxlen: 21 88.211.120.0/22 maxlen: 22 88.211.124.0/23 maxlen: 23 88.211.126.0/23 maxlen: 23 185.25.236.0/22 maxlen: 22 185.152.216.0/22 maxlen: 22 185.219.92.0/22 maxlen: 22 188.127.64.0/19 maxlen: 19 209.42.0.0/23 maxlen: 23 2a02:29d0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d8:c2:d7:5b:fc:6a:8e:6a:c2:af:88:4b:95:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae Validity Not Before: Jan 1 22:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92154d52def682a12d2d3147ac5185c9db5a7fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8c:d6:fa:1c:5c:71:89:aa:fd:32:26:47:cc: 91:4d:09:e0:bd:c9:75:8c:71:80:d2:ce:f8:32:e2: 50:6a:24:c2:6e:09:f7:eb:89:6a:1b:e3:36:03:de: cf:da:5d:21:f8:98:99:9b:2a:39:aa:0c:20:3c:53: 57:fc:64:40:0d:5c:2d:99:86:2e:2b:7f:3b:53:ef: 8a:f9:b5:d7:cf:cf:80:57:e1:76:12:8c:b6:06:de: 46:73:5c:43:cd:e3:63:f0:8e:25:6f:56:62:82:79: af:71:46:4b:62:6b:14:b2:58:35:59:e8:53:e2:f5: 08:72:74:2a:c9:b1:5e:bb:de:79:7f:7f:60:02:a2: 42:4e:d3:df:9f:27:f9:43:56:3c:81:3f:57:dd:60: 03:8c:90:b7:71:50:c3:5c:ed:df:a4:a2:05:5e:e6: cf:c9:91:f7:95:35:27:65:4f:50:92:69:07:60:45: 26:68:20:a1:80:46:0b:de:ce:a0:47:c5:9c:51:a4: e4:0c:2a:c4:21:91:c7:cf:c0:55:ce:da:9b:c0:60: 43:f8:93:8e:a3:62:10:49:01:74:a4:65:82:ea:48: 05:cb:d4:59:5e:2b:de:e1:de:ca:57:c4:ae:db:cf: 7c:09:00:63:64:24:15:ab:8f:99:79:f5:f9:d3:60: 88:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:15:4D:52:DE:F6:82:A1:2D:2D:31:47:AC:51:85:C9:DB:5A:7F:D8 X509v3 Authority Key Identifier: keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/khVNUt72gqEtLTFHrFGFydtaf9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.240.0/20 84.19.32.0/19 88.211.64.0/18 185.25.236.0/22 185.152.216.0/22 185.219.92.0/22 188.127.64.0/19 209.42.0.0/23 IPv6: 2a02:29d0::/32 Signature Algorithm: sha256WithRSAEncryption b7:ae:c4:28:e9:cb:55:ae:60:a2:77:87:40:ed:e1:62:08:88: 10:b7:25:bd:cd:83:dc:6f:6d:b1:81:03:1b:e5:5a:63:09:3d: 36:7e:7e:e9:5b:51:36:09:df:f0:4c:18:69:4b:8a:0b:c1:b0: b9:d0:a1:5f:bb:94:61:9b:47:38:8f:32:0e:25:a1:08:fe:55: de:77:42:f8:37:90:b6:85:fa:38:43:50:c9:61:7c:79:78:d3: 0a:d3:42:e3:93:55:af:6d:71:cb:dd:31:da:47:6d:90:80:c3: cc:fe:9b:a9:3e:66:d3:98:1e:91:d8:03:e2:df:34:f6:7d:10: 4b:9b:ac:5d:57:18:5b:62:92:d2:9b:1c:6a:5d:a6:4f:e4:c0: c5:f7:2c:04:8c:a6:2d:79:53:21:25:26:be:86:f5:4e:b3:e0: cb:54:2f:d2:01:90:9d:b4:54:ab:b0:42:e5:e7:5b:1c:a4:4a: b9:8e:e6:86:c3:08:8f:d8:2e:e0:59:43:92:40:b8:c7:24:8d: 8b:70:27:28:86:0e:52:33:8c:9d:ff:72:aa:0b:81:f2:0b:2f: 7d:f7:0e:44:c7:1c:01:41:4a:31:d3:5a:41:c3:fc:2e:02:12: d5:9a:5b:03:e1:fe:c4:d3:b5:49:5b:83:59:56:99:80:67:eb: aa:19:73:d5 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt7pNjC11v8ao5qwq+IS5VfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwY2FjOGQ1MjRhNWZlYzdmYzgzYTIzODMwZmJmOTIyNmE3 NjAxYWUwHhcNMjYwMTAxMjIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjE1NGQ1MmRlZjY4MmExMmQyZDMxNDdhYzUxODVjOWRiNWE3ZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmozW+hxccYmq/TImR8yRTQngvcl1 jHGA0s74MuJQaiTCbgn364lqG+M2A97P2l0h+JiZmyo5qgwgPFNX/GRADVwtmYYu K387U++K+bXXz8+AV+F2Eoy2Bt5Gc1xDzeNj8I4lb1ZignmvcUZLYmsUslg1WehT 4vUIcnQqybFeu955f39gAqJCTtPfnyf5Q1Y8gT9X3WADjJC3cVDDXO3fpKIFXubP yZH3lTUnZU9QkmkHYEUmaCChgEYL3s6gR8WcUaTkDCrEIZHHz8BVztqbwGBD+JOO o2IQSQF0pGWC6kgFy9RZXive4d7KV8Su2898CQBjZCQVq4+ZefX502CIXwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFJIVTVLe9oKhLS0xR6xRhcnbWn/YMB8GA1UdIwQY MBaAFMDKyNUkpf7H/IOiODD7+SJqdgGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd01ySTFTU2xfc2Y4ZzZJNE1QdjVJbXAyQWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85ZjViODEtYWU0ZC00NmE0LWJiODIt NzY1NWM4OWYxNGQ2LzEva2hWTlV0NzJncUV0TFRGSHJGR0Z5ZHRhZjlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85ZjViODEtYWU0ZC00NmE0LWJiODItNzY1NWM4OWYxNGQ2 LzEvd01ySTFTU2xfc2Y4ZzZJNE1QdjVJbXAyQWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQELpXwAwQF VBMgAwQGWNNAAwQCuRnsAwQCuZjYAwQCudtcAwQFvH9AAwQB0SoAMA0EAgACMAcD BQAqAinQMA0GCSqGSIb3DQEBCwUAA4IBAQC3rsQo6ctVrmCid4dA7eFiCIgQtyW9 zYPcb22xgQMb5VpjCT02fn7pW1E2Cd/wTBhpS4oLwbC50KFfu5Rhm0c4jzIOJaEI /lXed0L4N5C2hfo4Q1DJYXx5eNMK00Ljk1WvbXHL3THaR22QgMPM/pupPmbTmB6R 2APi3zT2fRBLm6xdVxhbYpLSmxxqXaZP5MDF9ywEjKYteVMhJSa+hvVOs+DLVC/S AZCdtFSrsELl51scpEq5juaGwwiP2C7gWUOSQLjHJI2LcCcohg5SM4yd/3KqC4Hy Cy999w5ExxwBQUox01pBw/wuAhLVmlsD4f7E07VJW4NZVpmAZ+uqGXPV -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:30 2026 by rpki-client