This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/kAVnp8aXF-jNnIEpkFtrGOjA71Q.roa File: kAVnp8aXF-jNnIEpkFtrGOjA71Q.roa (raw, json) Hash identifier: ZozqlRSOeS+zKJOBns48YstVdkSISYcGeUrQVUA0HJM= Subject key identifier: 90:05:67:A7:C6:97:17:E8:CD:9C:81:29:90:5B:6B:18:E8:C0:EF:54 Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee Certificate serial: 019B797F2FF79701E0639D9DA03BD89BC87C Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/kAVnp8aXF-jNnIEpkFtrGOjA71Q.roa Signing time: Thu 01 Jan 2026 12:18:56 +0000 ROA not before: Thu 01 Jan 2026 12:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209523 IP address blocks: 5.198.192.0/19 maxlen: 19 5.198.193.0/24 maxlen: 24 5.198.194.0/24 maxlen: 24 45.158.68.0/22 maxlen: 22 185.97.140.0/22 maxlen: 22 185.97.140.0/24 maxlen: 24 185.97.141.0/24 maxlen: 24 2a02:e58::/32 maxlen: 32 2a02:e58:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2f:f7:97:01:e0:63:9d:9d:a0:3b:d8:9b:c8:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee Validity Not Before: Jan 1 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=900567a7c69717e8cd9c8129905b6b18e8c0ef54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:e8:97:9b:7f:48:f1:69:f1:92:d7:c8:94:0a: 17:a1:4a:6b:17:cc:db:74:02:24:6d:53:4a:e6:15: 07:57:14:0e:f1:13:6e:47:c6:8c:46:f8:af:e2:69: f1:86:7d:bf:ae:d9:75:12:10:3b:25:6c:ab:e3:17: 53:22:68:7f:40:d9:ea:5b:02:85:f8:35:11:41:81: 12:f1:72:b8:00:3c:c5:f2:b2:4e:1a:43:be:3d:39: e5:8b:ff:68:6a:a9:41:30:27:6b:ca:9b:7d:2f:8d: 66:d8:9c:5e:c5:05:75:2a:6a:15:1a:a5:43:af:c0: ee:e5:43:35:88:ea:f9:66:b6:0a:d9:b7:c6:12:6a: bd:8b:4f:a7:5c:c1:44:29:3a:e3:5e:e3:11:99:65: da:5d:a5:81:00:9d:50:cc:99:d8:fc:e7:70:09:b5: 09:8e:ce:f0:f1:4b:b6:2a:d2:f6:7f:0a:50:94:fc: 8b:4e:4a:77:ba:48:2b:7b:eb:18:8c:6b:44:c4:e3: a8:ef:3b:2a:84:11:69:4b:cc:61:2a:b7:05:97:91: 50:cd:73:67:e8:16:42:d7:1a:47:84:44:c0:27:3a: c2:13:1c:05:aa:bb:6b:ee:59:8b:89:46:59:21:60: bf:d1:aa:6a:4f:e8:85:56:05:e0:2a:1d:fd:aa:25: b0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:05:67:A7:C6:97:17:E8:CD:9C:81:29:90:5B:6B:18:E8:C0:EF:54 X509v3 Authority Key Identifier: keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/kAVnp8aXF-jNnIEpkFtrGOjA71Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.198.192.0/19 45.158.68.0/22 185.97.140.0/22 IPv6: 2a02:e58::/32 Signature Algorithm: sha256WithRSAEncryption 62:d9:4c:8b:b6:75:1e:b2:76:5a:0d:d7:c8:50:aa:6b:c6:8e: 18:37:50:6f:ac:d0:bd:d5:8b:3e:47:71:c8:1b:18:35:95:2b: 6b:d3:ad:69:ba:97:d7:56:19:7e:68:f3:9e:51:55:ac:f8:78: bf:d4:4e:28:7e:18:d8:5a:9c:1a:5a:96:e8:2f:4b:c9:26:31: d4:74:af:7f:20:83:ea:7c:bc:58:23:43:01:e7:89:e3:6d:22: 70:7b:02:1a:af:bd:98:95:5d:fd:14:4c:3e:d8:ba:ad:21:0a: f9:a4:f7:84:7a:f7:b9:5b:81:1a:2c:c5:2e:f6:0d:48:9a:4e: df:f4:6b:64:27:c9:0a:d4:ea:45:93:0d:9f:60:e9:75:4e:22: d3:68:c4:a2:dd:93:f3:26:45:de:be:28:35:62:0c:42:20:53: e1:ed:c8:78:3a:3c:3f:c8:b3:e0:98:c7:ae:e1:f0:c4:54:f8: ee:53:a8:97:b9:0e:47:28:86:33:08:04:3d:74:a0:38:cb:07: ba:8d:f2:20:b8:a3:30:4c:b7:0d:07:56:a7:5c:ed:2d:b7:3e: 7d:60:f3:fb:05:bc:4d:e6:0e:f2:e5:ad:2f:34:58:07:2e:e4: be:a6:41:f7:94:49:02:b8:4c:83:c3:73:72:59:63:9e:57:8a: 4d:9e:c1:54 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fy/3lwHgY52doDvYm8h8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkOWUzMWM5MDI5ZWU0NGJkNjgxYjUxNTMzMDMzNWM2YTFj ZmRlZWUwHhcNMjYwMTAxMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDA1NjdhN2M2OTcxN2U4Y2Q5YzgxMjk5MDViNmIxOGU4YzBlZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+eiXm39I8WnxktfIlAoXoUprF8zb dAIkbVNK5hUHVxQO8RNuR8aMRviv4mnxhn2/rtl1EhA7JWyr4xdTImh/QNnqWwKF +DURQYES8XK4ADzF8rJOGkO+PTnli/9oaqlBMCdrypt9L41m2JxexQV1KmoVGqVD r8Du5UM1iOr5ZrYK2bfGEmq9i0+nXMFEKTrjXuMRmWXaXaWBAJ1QzJnY/OdwCbUJ js7w8Uu2KtL2fwpQlPyLTkp3ukgre+sYjGtExOOo7zsqhBFpS8xhKrcFl5FQzXNn 6BZC1xpHhETAJzrCExwFqrtr7lmLiUZZIWC/0apqT+iFVgXgKh39qiWwmwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJAFZ6fGlxfozZyBKZBbaxjowO9UMB8GA1UdIwQY MBaAFC2eMckCnuRL1oG1FTMDNcahz97uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMt MDhkYTY2NTJhODY3LzEva0FWbnA4YVhGLWpObklFcGtGdHJHT2pBNzFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMtMDhkYTY2NTJhODY3 LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFBcbAAwQC LZ5EAwQCuWGMMA0EAgACMAcDBQAqAg5YMA0GCSqGSIb3DQEBCwUAA4IBAQBi2UyL tnUesnZaDdfIUKprxo4YN1BvrNC91Ys+R3HIGxg1lStr061pupfXVhl+aPOeUVWs +Hi/1E4ofhjYWpwaWpboL0vJJjHUdK9/IIPqfLxYI0MB54njbSJwewIar72YlV39 FEw+2LqtIQr5pPeEeve5W4EaLMUu9g1Imk7f9GtkJ8kK1OpFkw2fYOl1TiLTaMSi 3ZPzJkXevig1YgxCIFPh7ch4Ojw/yLPgmMeu4fDEVPjuU6iXuQ5HKIYzCAQ9dKA4 ywe6jfIguKMwTLcNB1anXO0ttz59YPP7BbxN5g7y5a0vNFgHLuS+pkH3lEkCuEyD w3NyWWOeV4pNnsFU -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:10 2026 by rpki-client