This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/kRsxAM93E1FFqWEYTUxSevht1zw.roa File: kRsxAM93E1FFqWEYTUxSevht1zw.roa (raw, json) Hash identifier: Jokg+mCArB5GyBJJZVJTBA19eg6BqisRwPpbLMr5b5A= Subject key identifier: 91:1B:31:00:CF:77:13:51:45:A9:61:18:4D:4C:52:7A:F8:6D:D7:3C Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14AC4708BDAF1A1F6867896605CBE4 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/kRsxAM93E1FFqWEYTUxSevht1zw.roa Signing time: Fri 02 Jan 2026 14:20:19 +0000 ROA not before: Fri 02 Jan 2026 14:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25038 IP address blocks: 62.132.115.0/24 maxlen: 24 194.45.13.0/24 maxlen: 24 194.121.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:ac:47:08:bd:af:1a:1f:68:67:89:66:05:cb:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=911b3100cf77135145a961184d4c527af86dd73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f1:75:b3:b6:8a:cf:01:ab:4d:05:28:b8:88: 65:77:e1:de:98:61:65:02:5b:d3:05:03:3d:af:f1: 57:57:64:1c:07:d2:3c:de:53:2d:7e:2a:61:89:e3: 1e:87:f3:30:0e:b3:27:29:ef:81:f8:e3:76:d1:81: 91:a5:e2:8f:ce:0e:ad:75:bd:ca:4f:d8:b8:fc:c3: 3c:a9:55:57:6d:3e:ad:fc:2f:d6:fa:81:1f:9c:91: d8:f9:46:74:ea:07:d1:9b:8c:14:6d:dd:c3:62:e3: 59:9d:6c:c2:4a:50:ba:d5:b4:69:48:38:40:03:d2: e3:8e:7a:e9:d3:e8:fd:84:d3:1f:62:ff:ce:d4:44: 90:be:7a:ce:23:3d:17:23:0c:f2:8c:ac:d5:3e:26: da:9e:7b:f4:32:61:28:b2:cd:77:f0:cf:24:35:d1: af:16:f8:09:44:ed:b9:3b:7a:4a:0f:b2:e3:63:06: b3:b3:3e:b1:ed:4e:62:4c:6f:bd:f0:4f:9a:bb:8f: ba:bb:b2:2c:43:1c:33:d3:61:40:79:a0:a1:7e:e3: 6b:9b:5f:26:15:1b:66:81:20:c1:c6:22:62:15:6b: 87:c7:9a:1f:39:c5:70:c1:ac:dd:f5:1c:95:e0:3a: 1c:36:c4:96:c5:c3:10:44:d2:5f:2d:63:e3:08:be: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1B:31:00:CF:77:13:51:45:A9:61:18:4D:4C:52:7A:F8:6D:D7:3C X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/kRsxAM93E1FFqWEYTUxSevht1zw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.132.115.0/24 194.45.13.0/24 194.121.123.0/24 Signature Algorithm: sha256WithRSAEncryption 28:b2:5d:86:b1:d5:84:04:06:38:60:09:1f:ce:3c:1a:b7:0b: af:40:32:83:70:df:d7:40:c3:ac:08:7e:e3:cf:7d:31:43:df: f6:f2:10:0d:18:e7:16:27:03:b3:7d:6c:5e:d9:b0:8b:ed:67: ec:49:a3:e1:c8:7d:7f:fe:35:2f:a4:7e:01:03:23:15:cb:99: e7:cf:0c:0a:f2:5b:c7:c8:ab:5d:51:54:42:d6:7a:94:46:ff: 04:a4:47:9b:c4:3d:54:6e:e5:6a:e2:8d:50:ed:6e:46:86:51: a2:b6:94:cf:de:da:72:85:cd:59:4b:1b:e5:ee:e7:4c:d7:2e: 4c:c2:d6:10:3d:62:0b:a1:12:cf:29:4d:cc:19:85:53:7a:19: d1:b6:68:65:ee:64:ad:9d:86:99:c1:78:da:b6:6a:d7:dd:fe: 5c:d2:77:0e:0f:f0:40:f5:4a:bf:be:97:60:88:f3:6d:7f:64: 15:87:26:d8:06:ed:db:98:9d:2d:ea:da:3e:da:31:f4:68:c1: 25:a0:4c:25:ed:47:80:f7:cc:13:5c:33:e5:d7:fe:42:e7:9e: 9d:a9:d5:f3:5f:3d:3b:c1:38:67:d0:e0:3e:42:e5:2d:bc:03: d9:a7:55:cd:ff:5a:a5:79:db:c2:32:95:e9:88:6b:a9:7f:a6: cd:3e:b9:ed -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FKxHCL2vGh9oZ4lmBcvkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTFiMzEwMGNmNzcxMzUxNDVhOTYxMTg0ZDRjNTI3YWY4NmRkNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fF1s7aKzwGrTQUouIhld+HemGFl AlvTBQM9r/FXV2QcB9I83lMtfiphieMeh/MwDrMnKe+B+ON20YGRpeKPzg6tdb3K T9i4/MM8qVVXbT6t/C/W+oEfnJHY+UZ06gfRm4wUbd3DYuNZnWzCSlC61bRpSDhA A9Ljjnrp0+j9hNMfYv/O1ESQvnrOIz0XIwzyjKzVPibannv0MmEoss138M8kNdGv FvgJRO25O3pKD7LjYwazsz6x7U5iTG+98E+au4+6u7IsQxwz02FAeaChfuNrm18m FRtmgSDBxiJiFWuHx5ofOcVwwazd9RyV4DocNsSWxcMQRNJfLWPjCL5VQwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJEbMQDPdxNRRalhGE1MUnr4bdc8MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEva1JzeEFNOTNFMUZGcVdFWVRVeFNldmh0MXp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPoRzAwQA wi0NAwQAwnl7MA0GCSqGSIb3DQEBCwUAA4IBAQAosl2GsdWEBAY4YAkfzjwatwuv QDKDcN/XQMOsCH7jz30xQ9/28hANGOcWJwOzfWxe2bCL7WfsSaPhyH1//jUvpH4B AyMVy5nnzwwK8lvHyKtdUVRC1nqURv8EpEebxD1UbuVq4o1Q7W5GhlGitpTP3tpy hc1ZSxvl7udM1y5MwtYQPWILoRLPKU3MGYVTehnRtmhl7mStnYaZwXjatmrX3f5c 0ncOD/BA9Uq/vpdgiPNtf2QVhybYBu3bmJ0t6to+2jH0aMEloEwl7UeA98wTXDPl 1/5C556dqdXzXz07wThn0OA+QuUtvAPZp1XN/1qledvCMpXpiGupf6bNPrnt -----END CERTIFICATE-----Generated at Sun Jan 25 13:42:30 2026 by rpki-client