This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/KqncB_hyeHe0_a1-YoQ1hRmeMQ4.roa File: KqncB_hyeHe0_a1-YoQ1hRmeMQ4.roa (raw, json) Hash identifier: twSnYrjjuh/pWjqBqLxrceCunnKe+qP6gzMZl3oAKKY= Subject key identifier: 2A:A9:DC:07:F8:72:78:77:B4:FD:AD:7E:62:84:35:85:19:9E:31:0E Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C68EB487D057B6BEAA6A91664DA8C2 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/KqncB_hyeHe0_a1-YoQ1hRmeMQ4.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199738 IP address blocks: 5.154.56.0/22 maxlen: 22 5.154.56.0/24 maxlen: 24 5.154.57.0/24 maxlen: 24 5.154.58.0/24 maxlen: 24 5.154.59.0/24 maxlen: 24 84.232.55.0/24 maxlen: 24 93.114.252.0/23 maxlen: 23 93.114.252.0/24 maxlen: 24 93.114.253.0/24 maxlen: 24 109.167.58.0/23 maxlen: 23 109.167.58.0/24 maxlen: 24 109.167.59.0/24 maxlen: 24 109.167.64.0/23 maxlen: 23 109.167.64.0/24 maxlen: 24 109.167.65.0/24 maxlen: 24 109.167.92.0/23 maxlen: 23 109.167.92.0/24 maxlen: 24 109.167.93.0/24 maxlen: 24 176.227.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8e:b4:87:d0:57:b6:be:aa:6a:91:66:4d:a8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2aa9dc07f8727877b4fdad7e62843585199e310e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:62:5b:40:46:ce:3e:f9:58:f8:74:ce:fe: cc:f9:a1:e8:b5:8f:14:bc:f5:26:86:c0:0c:27:6c: d1:d2:b5:49:81:9f:9b:3a:00:bc:3b:c0:05:eb:a1: 56:94:ca:fd:e3:c3:58:ae:8a:2e:93:19:0d:40:ca: 92:91:92:79:71:f5:02:c4:5d:32:56:ed:c9:56:0e: 30:50:0a:40:af:74:52:94:b5:b9:48:1d:0e:6f:3e: f0:28:3d:d7:a8:43:58:ce:2f:9a:56:e5:98:95:92: 83:87:bd:cb:ac:82:d3:f1:42:b1:83:f9:40:4b:8f: 5f:32:f5:b4:fa:8a:78:1e:aa:0c:42:2b:38:2c:3a: 01:67:ff:a2:b9:84:04:ea:8b:37:01:44:0c:93:a9: ad:45:e5:e3:5e:2f:4b:c3:c8:01:20:d5:e5:31:e5: 69:9f:05:fe:39:51:bc:a2:28:3c:ba:48:97:1a:f5: f6:17:5c:a2:1c:0f:fd:0a:bf:d4:8b:7d:95:2c:c8: 64:7b:c6:20:e6:84:a0:f4:7f:81:cb:1b:40:c2:15: 9e:7b:72:59:a5:da:08:42:9a:e3:ab:f0:0a:29:da: a0:d4:95:46:e4:88:a5:b0:36:12:db:c6:6a:88:b3: fd:75:37:2a:59:ac:ee:99:c9:b2:cc:f6:ee:36:f4: e8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A9:DC:07:F8:72:78:77:B4:FD:AD:7E:62:84:35:85:19:9E:31:0E X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/KqncB_hyeHe0_a1-YoQ1hRmeMQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.56.0/22 84.232.55.0/24 93.114.252.0/23 109.167.58.0/23 109.167.64.0/23 109.167.92.0/23 176.227.146.0/24 Signature Algorithm: sha256WithRSAEncryption 67:03:cd:1d:1a:d6:06:19:f5:9f:a8:65:66:91:73:2a:2e:c2: 32:d3:64:24:8f:7c:0e:eb:62:52:93:84:8a:7f:98:79:dc:bb: de:9f:a5:af:5b:9c:6b:59:b8:0f:d2:0d:23:7c:3c:f5:b0:02: 12:ea:7d:03:93:39:ba:4b:b2:78:e4:f0:b8:39:b3:0a:27:55: 2e:23:7f:30:60:66:86:82:41:49:e0:f1:da:ab:ad:51:c0:1b: 61:d3:54:c0:24:6f:f7:28:f2:b2:c6:c3:c7:4c:61:8f:c6:7a: 08:3f:8f:31:0d:94:d3:45:88:d8:98:94:bd:cb:5d:ea:a0:e7: 53:65:8f:b4:19:b1:e4:6b:62:3a:ab:2e:fd:3b:17:3b:58:8e: da:77:5c:73:8d:3a:ef:2c:58:49:4f:da:69:3b:0b:6c:74:0b: 55:95:cf:e7:47:e2:53:f5:f9:3f:a8:04:45:2c:6f:f2:e5:3a: 02:f8:77:93:11:be:dd:18:3e:4a:9f:68:c7:bd:74:c1:e1:12: e1:ba:41:00:60:75:af:4d:f6:15:51:f9:76:14:af:0a:ce:77: 27:07:ff:3c:6d:16:58:01:b7:b1:ad:3d:9c:fa:14:3a:4b:bb: 53:66:1f:fc:e0:38:c4:e0:c3:49:e4:34:21:56:d0:79:0e:b0: 9e:1c:11:f8 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt3xo60h9BXtr6qapFmTajCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWE5ZGMwN2Y4NzI3ODc3YjRmZGFkN2U2Mjg0MzU4NTE5OWUzMTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuhiW0BGzj75WPh0zv7M+aHotY8U vPUmhsAMJ2zR0rVJgZ+bOgC8O8AF66FWlMr948NYrooukxkNQMqSkZJ5cfUCxF0y Vu3JVg4wUApAr3RSlLW5SB0Obz7wKD3XqENYzi+aVuWYlZKDh73LrILT8UKxg/lA S49fMvW0+op4HqoMQis4LDoBZ/+iuYQE6os3AUQMk6mtReXjXi9Lw8gBINXlMeVp nwX+OVG8oig8ukiXGvX2F1yiHA/9Cr/Ui32VLMhke8Yg5oSg9H+ByxtAwhWee3JZ pdoIQprjq/AKKdqg1JVG5IilsDYS28ZqiLP9dTcqWazumcmyzPbuNvToHQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFCqp3Af4cnh3tP2tfmKENYUZnjEOMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvS3FuY0JfaHllSGUwX2ExLVlvUTFoUm1lTVE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCBZo4AwQA VOg3AwQBXXL8AwQBbac6AwQBbadAAwQBbadcAwQAsOOSMA0GCSqGSIb3DQEBCwUA A4IBAQBnA80dGtYGGfWfqGVmkXMqLsIy02Qkj3wO62JSk4SKf5h53Lven6WvW5xr WbgP0g0jfDz1sAIS6n0Dkzm6S7J45PC4ObMKJ1UuI38wYGaGgkFJ4PHaq61RwBth 01TAJG/3KPKyxsPHTGGPxnoIP48xDZTTRYjYmJS9y13qoOdTZY+0GbHka2I6qy79 Oxc7WI7ad1xzjTrvLFhJT9ppOwtsdAtVlc/nR+JT9fk/qARFLG/y5ToC+HeTEb7d GD5Kn2jHvXTB4RLhukEAYHWvTfYVUfl2FK8KzncnB/88bRZYAbexrT2c+hQ6S7tT Zh/84DjE4MNJ5DQhVtB5DrCeHBH4 -----END CERTIFICATE-----Generated at Sun Jan 25 17:48:00 2026 by rpki-client