This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/Kn1XIiFvEGGy9jGV0znKGyVVN88.roa File: Kn1XIiFvEGGy9jGV0znKGyVVN88.roa (raw, json) Hash identifier: S6dp6R29PAVMF1jsj22PyQ1rploMZXbrpKsVzrPCS0A= Subject key identifier: 2A:7D:57:22:21:6F:10:61:B2:F6:31:95:D3:39:CA:1B:25:55:37:CF Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019B7EA7435D73B6CA94955B29B8248D8E81 Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/Kn1XIiFvEGGy9jGV0znKGyVVN88.roa Signing time: Fri 02 Jan 2026 12:20:49 +0000 ROA not before: Fri 02 Jan 2026 12:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21086 IP address blocks: 92.245.160.0/22 maxlen: 24 92.245.188.0/24 maxlen: 24 92.245.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:43:5d:73:b6:ca:94:95:5b:29:b8:24:8d:8e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Jan 2 12:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a7d5722216f1061b2f63195d339ca1b255537cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:10:fc:b3:54:82:63:dd:1f:53:e3:9d:ac:18: 68:e4:26:1c:98:f7:0d:6f:fe:ac:a4:8f:ca:8b:8c: 3d:31:1d:b7:60:ea:a1:1d:7b:9a:9e:a4:c9:ff:b3: 0d:e7:7a:c7:39:f4:fb:73:bb:64:ba:89:57:53:9d: 86:87:93:0c:e1:d4:70:25:71:fc:f5:91:18:84:84: e0:11:ae:1f:d8:1b:c8:63:7e:a0:8f:8b:3b:b6:cc: c6:58:17:f1:99:d3:21:f8:76:62:fd:7c:f0:55:80: f6:e8:67:8b:66:58:a4:2d:73:8e:0c:e6:32:99:f5: 8c:aa:9e:cc:56:54:83:98:d0:82:fe:cf:62:31:2f: 5c:0b:19:99:75:96:06:48:51:a4:88:a0:e6:c9:8a: 97:13:7e:c4:2e:3b:a2:17:72:1e:91:65:ed:da:05: 75:b1:dd:db:94:e2:53:d1:89:cf:0e:67:fe:8d:5b: 6c:4f:62:81:a2:73:92:96:b2:7f:39:dd:a9:12:d5: 9c:67:aa:94:88:03:ba:ae:37:fd:84:29:96:8a:e7: b5:44:fe:c2:e6:1c:8e:c2:1a:c8:d5:c2:a0:34:42: 1d:c3:a1:64:9f:65:a3:bb:31:4e:14:89:6c:05:20: 4f:a8:e8:95:37:32:10:a5:cb:68:7c:14:dc:4a:f9: 7f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7D:57:22:21:6F:10:61:B2:F6:31:95:D3:39:CA:1B:25:55:37:CF X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/Kn1XIiFvEGGy9jGV0znKGyVVN88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.245.160.0/22 92.245.188.0/24 92.245.190.0/23 Signature Algorithm: sha256WithRSAEncryption 44:66:99:ac:28:0a:2d:a9:f6:8f:87:7f:af:79:cb:f8:29:dd: ce:a8:89:d9:3b:0b:84:81:da:05:58:e3:0c:5d:1c:3f:1d:4f: 97:bf:a8:52:60:a0:1d:65:a9:f3:a4:16:31:df:e8:bc:4e:c8: b8:a4:ae:20:63:31:5b:8a:fe:dd:51:df:9b:35:aa:7d:07:e5: 54:b6:90:65:2a:8c:67:11:12:f2:9a:28:c4:c9:f1:20:d2:23: 18:a0:46:ec:ef:b9:d3:c4:80:79:94:aa:15:b4:7c:d1:69:f6: b1:06:15:7f:74:cb:fd:f0:d6:59:3c:5d:15:19:c6:e7:70:0a: 46:c0:d3:16:aa:25:26:11:20:8e:32:91:72:b6:c8:dc:87:2c: 41:bf:eb:15:f7:61:1e:07:42:f2:fb:dc:68:22:65:ba:2a:a5: 56:ab:3e:31:73:d9:1b:d5:ff:82:21:19:b6:07:df:70:85:27: 6b:c5:12:4d:40:1e:72:b1:6b:a0:f0:51:05:94:2b:15:c1:08: b9:63:24:5b:f9:f3:54:ab:a7:6d:ed:ed:d4:7b:2f:aa:93:e0: e9:0c:15:0f:03:9f:df:79:8f:09:6e:ff:ad:fe:46:c9:8a:55: 4c:29:8a:52:c4:ab:e6:54:7a:af:a7:28:13:0c:ca:16:79:eb: 1b:48:e1:d6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+p0Ndc7bKlJVbKbgkjY6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjYwMTAyMTIyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTdkNTcyMjIxNmYxMDYxYjJmNjMxOTVkMzM5Y2ExYjI1NTUzN2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RD8s1SCY90fU+OdrBho5CYcmPcN b/6spI/Ki4w9MR23YOqhHXuanqTJ/7MN53rHOfT7c7tkuolXU52Gh5MM4dRwJXH8 9ZEYhITgEa4f2BvIY36gj4s7tszGWBfxmdMh+HZi/XzwVYD26GeLZlikLXOODOYy mfWMqp7MVlSDmNCC/s9iMS9cCxmZdZYGSFGkiKDmyYqXE37ELjuiF3IekWXt2gV1 sd3blOJT0YnPDmf+jVtsT2KBonOSlrJ/Od2pEtWcZ6qUiAO6rjf9hCmWiue1RP7C 5hyOwhrI1cKgNEIdw6Fkn2WjuzFOFIlsBSBPqOiVNzIQpctofBTcSvl/ywIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCp9VyIhbxBhsvYxldM5yhslVTfPMB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvS24xWElpRnZFR0d5OWpHVjB6bktHeVZWTjg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCXPWgAwQA XPW8AwQBXPW+MA0GCSqGSIb3DQEBCwUAA4IBAQBEZpmsKAotqfaPh3+vecv4Kd3O qInZOwuEgdoFWOMMXRw/HU+Xv6hSYKAdZanzpBYx3+i8Tsi4pK4gYzFbiv7dUd+b Nap9B+VUtpBlKoxnERLymijEyfEg0iMYoEbs77nTxIB5lKoVtHzRafaxBhV/dMv9 8NZZPF0VGcbncApGwNMWqiUmESCOMpFytsjchyxBv+sV92EeB0Ly+9xoImW6KqVW qz4xc9kb1f+CIRm2B99whSdrxRJNQB5ysWug8FEFlCsVwQi5YyRb+fNUq6dt7e3U ey+qk+DpDBUPA5/feY8Jbv+t/kbJilVMKYpSxKvmVHqvpygTDMoWeesbSOHW -----END CERTIFICATE-----Generated at Mon Jan 26 12:56:49 2026 by rpki-client