This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/kjwAci0-xsN-FW2yHLM0zLU2az4.roa File: kjwAci0-xsN-FW2yHLM0zLU2az4.roa (raw, json) Hash identifier: ZKpTRPaiSMpihhfsD4iTWrJFTjTfyomHoD/xRGDDVIA= Subject key identifier: 92:3C:00:72:2D:3E:C6:C3:7E:15:6D:B2:1C:B3:34:CC:B5:36:6B:3E Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991 Certificate serial: 019B7BA429A8223588F3FFCA721EA604FD18 Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/kjwAci0-xsN-FW2yHLM0zLU2az4.roa Signing time: Thu 01 Jan 2026 22:18:34 +0000 ROA not before: Thu 01 Jan 2026 22:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3292 IP address blocks: 2.104.0.0/14 maxlen: 14 2.108.0.0/15 maxlen: 15 2.111.0.0/16 maxlen: 16 62.135.128.0/17 maxlen: 17 62.242.0.0/15 maxlen: 15 80.62.0.0/15 maxlen: 15 80.160.0.0/13 maxlen: 13 80.196.0.0/14 maxlen: 14 81.31.80.0/20 maxlen: 20 83.88.0.0/13 maxlen: 13 85.129.0.0/17 maxlen: 17 87.48.0.0/13 maxlen: 13 87.56.32.0/19 maxlen: 19 87.56.128.0/17 maxlen: 17 87.57.0.0/16 maxlen: 16 87.58.32.0/19 maxlen: 19 87.58.160.0/19 maxlen: 19 87.58.224.0/19 maxlen: 19 87.59.0.0/16 maxlen: 16 87.60.0.0/16 maxlen: 16 87.61.0.0/17 maxlen: 17 87.61.128.0/18 maxlen: 18 87.61.224.0/19 maxlen: 19 87.62.0.0/15 maxlen: 15 93.160.0.0/14 maxlen: 14 93.164.0.0/17 maxlen: 17 93.164.160.0/19 maxlen: 19 93.164.192.0/18 maxlen: 18 93.165.0.0/18 maxlen: 18 93.165.96.0/19 maxlen: 19 93.165.128.0/17 maxlen: 17 93.166.0.0/15 maxlen: 15 93.178.128.0/18 maxlen: 18 94.189.0.0/17 maxlen: 17 95.166.64.0/18 maxlen: 18 95.166.128.0/17 maxlen: 17 128.76.0.0/18 maxlen: 18 128.76.128.0/17 maxlen: 17 128.77.128.0/17 maxlen: 17 131.164.0.0/16 maxlen: 16 176.20.0.0/17 maxlen: 17 176.20.224.0/19 maxlen: 19 176.21.0.0/16 maxlen: 16 176.22.0.0/17 maxlen: 17 176.22.160.0/19 maxlen: 19 176.22.192.0/18 maxlen: 18 176.23.0.0/17 maxlen: 17 176.23.160.0/19 maxlen: 19 176.23.192.0/18 maxlen: 18 188.176.0.0/13 maxlen: 13 192.66.25.0/24 maxlen: 24 192.66.33.0/24 maxlen: 24 192.66.36.0/24 maxlen: 24 192.66.38.0/24 maxlen: 24 192.66.175.0/24 maxlen: 24 192.66.180.0/24 maxlen: 24 192.66.181.0/24 maxlen: 24 193.3.130.0/23 maxlen: 23 193.3.140.0/24 maxlen: 24 193.3.141.0/24 maxlen: 24 193.3.142.0/24 maxlen: 24 193.3.224.0/22 maxlen: 22 193.39.139.0/24 maxlen: 24 193.88.0.0/15 maxlen: 15 193.162.32.0/23 maxlen: 23 193.162.98.0/23 maxlen: 23 193.162.145.0/24 maxlen: 24 193.162.146.0/24 maxlen: 24 193.162.152.0/21 maxlen: 21 193.163.10.0/24 maxlen: 24 193.163.24.0/22 maxlen: 22 193.163.158.0/23 maxlen: 23 193.163.160.0/21 maxlen: 21 194.182.128.0/20 maxlen: 20 194.182.144.0/21 maxlen: 21 194.182.232.0/21 maxlen: 21 194.182.240.0/20 maxlen: 20 194.192.0.0/16 maxlen: 16 194.239.0.0/16 maxlen: 16 194.247.188.0/23 maxlen: 23 195.41.0.0/16 maxlen: 16 195.95.181.0/24 maxlen: 24 195.97.128.0/18 maxlen: 18 195.184.32.0/19 maxlen: 19 195.215.0.0/16 maxlen: 16 195.249.0.0/16 maxlen: 16 212.130.0.0/16 maxlen: 16 2001:6c8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:29:a8:22:35:88:f3:ff:ca:72:1e:a6:04:fd:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991 Validity Not Before: Jan 1 22:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=923c00722d3ec6c37e156db21cb334ccb5366b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:d5:d2:6b:e9:72:09:d2:88:53:6e:d3:b4:8a: f4:01:11:a5:4c:5e:02:0c:4d:e0:f0:3e:d2:88:14: e2:b6:2c:b2:17:7c:84:bc:a5:0c:cd:9c:66:7e:a6: f6:a5:5a:44:77:4b:8b:2a:a3:2b:bf:e7:e6:e3:03: 5f:22:ac:39:64:d8:8b:9c:fc:2f:52:65:e2:e2:85: 48:d7:d5:d7:05:7f:fe:2f:ad:19:92:73:e1:1b:87: 5e:67:e1:0a:f8:2b:d6:5c:19:cc:48:44:23:4b:2c: 61:5a:b9:fb:ad:f9:aa:00:33:57:6a:7c:19:91:13: 0f:a8:fe:aa:d6:a0:0d:20:f2:e6:f8:e4:0b:48:d7: 46:33:f0:3f:bb:0c:45:0b:22:1c:aa:b4:d8:44:1c: 6d:20:a7:8d:c2:ae:74:ee:cc:f4:5f:67:56:c6:ee: 0b:34:57:b2:ad:ea:86:50:a4:3a:c4:a4:00:ad:aa: 30:5c:97:4e:fe:11:f8:e7:9a:a0:4f:43:c1:42:3c: cb:09:e1:97:25:32:96:fb:e1:c5:02:0a:ac:5c:05: 1c:f4:22:25:8e:e5:45:3a:32:a1:c0:91:43:96:ea: 9f:bf:4c:09:0f:b1:fe:84:2e:0a:48:74:a2:4b:bf: d6:11:4a:da:cf:a5:2e:a8:1f:58:b0:3a:c4:24:e8: 18:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3C:00:72:2D:3E:C6:C3:7E:15:6D:B2:1C:B3:34:CC:B5:36:6B:3E X509v3 Authority Key Identifier: keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/kjwAci0-xsN-FW2yHLM0zLU2az4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.104.0.0-2.109.255.255 2.111.0.0/16 62.135.128.0/17 62.242.0.0/15 80.62.0.0/15 80.160.0.0/13 80.196.0.0/14 81.31.80.0/20 83.88.0.0/13 85.129.0.0/17 87.48.0.0/13 87.56.32.0/19 87.56.128.0-87.57.255.255 87.58.32.0/19 87.58.160.0/19 87.58.224.0-87.61.191.255 87.61.224.0-87.63.255.255 93.160.0.0-93.164.127.255 93.164.160.0-93.165.63.255 93.165.96.0-93.167.255.255 93.178.128.0/18 94.189.0.0/17 95.166.64.0-95.166.255.255 128.76.0.0/18 128.76.128.0/17 128.77.128.0/17 131.164.0.0/16 176.20.0.0/17 176.20.224.0-176.22.127.255 176.22.160.0-176.23.127.255 176.23.160.0-176.23.255.255 188.176.0.0/13 192.66.25.0/24 192.66.33.0/24 192.66.36.0/24 192.66.38.0/24 192.66.175.0/24 192.66.180.0/23 193.3.130.0/23 193.3.140.0-193.3.142.255 193.3.224.0/22 193.39.139.0/24 193.88.0.0/15 193.162.32.0/23 193.162.98.0/23 193.162.145.0-193.162.146.255 193.162.152.0/21 193.163.10.0/24 193.163.24.0/22 193.163.158.0-193.163.167.255 194.182.128.0-194.182.151.255 194.182.232.0-194.182.255.255 194.192.0.0/16 194.239.0.0/16 194.247.188.0/23 195.41.0.0/16 195.95.181.0/24 195.97.128.0/18 195.184.32.0/19 195.215.0.0/16 195.249.0.0/16 212.130.0.0/16 IPv6: 2001:6c8::/29 Signature Algorithm: sha256WithRSAEncryption 03:49:d0:0e:fe:22:5c:33:3f:08:7f:68:a2:ab:5f:a2:9f:31: ee:30:5a:b5:76:47:c6:37:28:84:fb:ca:55:b7:d1:05:a6:07: b5:7e:a1:99:11:0a:91:47:69:01:27:9d:7e:2e:75:d6:e4:e5: 38:c7:5c:f8:09:8a:ac:1e:bc:13:b8:89:c1:0a:ac:5a:a9:8d: 63:72:8d:e0:ce:8e:64:19:af:c2:09:95:fb:5e:14:de:a0:3d: 39:77:f4:a9:cc:0c:36:a6:35:c6:a1:e4:df:29:e6:e8:09:83: 87:07:7d:03:1c:36:8b:58:61:34:0c:46:fe:91:c6:81:68:24: 32:15:af:7b:fc:8b:83:7f:28:34:1c:eb:b6:2e:d6:f4:c6:b6: e2:96:31:47:35:70:5c:21:dd:27:ee:9a:e4:77:b2:a0:11:2f: e0:8d:3c:37:ae:3f:50:a1:02:f5:ec:1b:95:d0:46:6d:fc:e9: 74:65:ab:59:55:88:67:62:28:67:10:0b:bb:8b:97:e5:49:d0: c2:c4:a2:50:6c:03:34:c1:9e:38:a2:96:f8:3a:c8:70:0a:36: 2d:68:f6:15:8a:69:e1:05:cf:3f:e0:cc:49:7e:65:f2:89:57: 5b:a3:36:e5:eb:8a:b8:27:8a:98:ed:3e:86:e5:29:1e:22:a1: 85:0a:f0:f4 -----BEGIN CERTIFICATE----- MIIG6zCCBdOgAwIBAgISAZt7pCmoIjWI8//Kch6mBP0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOGIyNGM3NmFkODdhNmMxZmVkZmZhZjA4ZDliMTdiNDUy NDk5OTEwHhcNMjYwMTAxMjIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjNjMDA3MjJkM2VjNmMzN2UxNTZkYjIxY2IzMzRjY2I1MzY2YjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+dXSa+lyCdKIU27TtIr0ARGlTF4C DE3g8D7SiBTitiyyF3yEvKUMzZxmfqb2pVpEd0uLKqMrv+fm4wNfIqw5ZNiLnPwv UmXi4oVI19XXBX/+L60ZknPhG4deZ+EK+CvWXBnMSEQjSyxhWrn7rfmqADNXanwZ kRMPqP6q1qANIPLm+OQLSNdGM/A/uwxFCyIcqrTYRBxtIKeNwq507sz0X2dWxu4L NFeyreqGUKQ6xKQAraowXJdO/hH455qgT0PBQjzLCeGXJTKW++HFAgqsXAUc9CIl juVFOjKhwJFDluqfv0wJD7H+hC4KSHSiS7/WEUraz6UuqB9YsDrEJOgYzQIDAQAB o4ID9zCCA/MwHQYDVR0OBBYEFJI8AHItPsbDfhVtshyzNMy1Nms+MB8GA1UdIwQY MBaAFC6LJMdq2HpsH+3/rwjZsXtFJJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAt OTExOTBhMDJkYjcwLzEva2p3QWNpMC14c04tRlcyeUhMTTB6TFUyYXo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAtOTExOTBhMDJkYjcw LzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICCwYIKwYBBQUHAQcBAf8EggH6MIIB9jCCAeMEAgABMIIB 2zAKAwMDAmgDAwECbAMDAAJvAwQHPoeAAwMBPvIDAwFQPgMDA1CgAwMCUMQDBARR H1ADAwNTWAMEB1WBAAMDA1cwAwQFVzggMAsDBAdXOIADAwFXOAMEBVc6IAMEBVc6 oDAMAwQFVzrgAwQGVz2AMAsDBAVXPeADAwZXADALAwMFXaADBAddpAAwDAMEBV2k oAMEBl2lADALAwQFXaVgAwMDXaADBAZdsoADBAdevQAwCwMEBl+mQAMDAF+mAwQG gEwAAwQHgEyAAwQHgE2AAwMAg6QDBAewFAAwDAMEBbAU4AMEB7AWADAMAwQFsBag AwQHsBcAMAsDBAWwF6ADAwOwEAMDA7ywAwQAwEIZAwQAwEIhAwQAwEIkAwQAwEIm AwQAwEKvAwQBwEK0AwQBwQOCMAwDBALBA4wDBADBA44DBALBA+ADBADBJ4sDAwHB WAMEAcGiIAMEAcGiYjAMAwQAwaKRAwQAwaKSAwQDwaKYAwQAwaMKAwQCwaMYMAwD BAHBo54DBAPBo6AwDAMEB8K2gAMEA8K2kDALAwQDwrboAwMAwrYDAwDCwAMDAMLv AwQBwve8AwMAwykDBADDX7UDBAbDYYADBAXDuCADAwDD1wMDAMP5AwMA1IIwDQQC AAIwBwMFAyABBsgwDQYJKoZIhvcNAQELBQADggEBAANJ0A7+IlwzPwh/aKKrX6Kf Me4wWrV2R8Y3KIT7ylW30QWmB7V+oZkRCpFHaQEnnX4uddbk5TjHXPgJiqwevBO4 icEKrFqpjWNyjeDOjmQZr8IJlfteFN6gPTl39KnMDDamNcah5N8p5ugJg4cHfQMc NotYYTQMRv6RxoFoJDIVr3v8i4N/KDQc67Yu1vTGtuKWMUc1cFwh3SfumuR3sqAR L+CNPDeuP1ChAvXsG5XQRm386XRlq1lViGdiKGcQC7uLl+VJ0MLEolBsAzTBnjii lvg6yHAKNi1o9hWKaeEFzz/gzEl+ZfKJV1ujNuXrirgnipjtPoblKR4ioYUK8PQ= -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:18 2026 by rpki-client