This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/kplCRBMvz5FDjN9xs4gY-4Of8uI.roa File: kplCRBMvz5FDjN9xs4gY-4Of8uI.roa (raw, json) Hash identifier: hjMts3DkdNISVUxYtlx0WSdzxZDEcJo7GF5tm01HxYk= Subject key identifier: 92:99:42:44:13:2F:CF:91:43:8C:DF:71:B3:88:18:FB:83:9F:F2:E2 Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38D7F6FD4F9265006AE56412EF00DF Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/kplCRBMvz5FDjN9xs4gY-4Of8uI.roa Signing time: Fri 02 Jan 2026 10:20:13 +0000 ROA not before: Fri 02 Jan 2026 10:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397221 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d7:f6:fd:4f:92:65:00:6a:e5:64:12:ef:00:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92994244132fcf91438cdf71b38818fb839ff2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0c:29:04:ad:20:dd:b7:d6:5a:b3:27:47:cc: 4a:13:9c:e9:9a:5c:21:ea:2c:20:d5:50:b3:b8:7b: 3e:0c:60:c4:18:09:91:d5:73:b0:2d:53:ec:c2:ae: 9f:72:36:6d:23:db:b2:70:62:b3:1e:5e:66:6d:15: d7:8a:49:a4:c9:ae:08:c5:4b:cb:ea:30:81:c9:73: c9:e0:97:95:0a:1e:e3:e0:30:6f:d4:b0:86:cc:b6: 76:09:9a:0e:c0:4c:b9:74:fe:8e:2f:a8:98:f1:8b: 1b:4c:ae:d5:fe:dc:35:6c:d7:b7:1f:cd:30:57:23: 08:46:1f:20:3c:f6:75:16:45:8c:94:70:6c:5c:1a: 5f:04:00:0a:51:96:90:d2:ea:14:42:79:eb:f3:9b: 82:e4:5c:07:9d:ab:86:f2:9e:78:b9:36:87:e5:91: 11:ec:b4:26:cc:49:60:37:e4:f5:bb:57:f5:16:69: 9e:ab:85:68:8c:74:02:e6:9a:fd:16:a1:f1:08:20: 96:be:10:fd:dc:18:0a:40:df:dc:03:4c:e1:c1:97: 17:da:1f:32:51:fd:ce:69:f3:05:c9:73:72:99:9f: 0e:e6:b9:8d:e1:f2:6d:b8:3c:3a:5c:3e:9c:c6:fb: 45:30:19:6a:8d:db:9b:44:00:65:3e:fe:bf:b9:c3: 12:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:99:42:44:13:2F:CF:91:43:8C:DF:71:B3:88:18:FB:83:9F:F2:E2 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/kplCRBMvz5FDjN9xs4gY-4Of8uI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 23:34:4f:39:3b:3d:e9:49:7c:f8:f1:99:1c:bb:fc:f7:56:b2: fc:6a:20:56:e6:7a:27:f7:c4:d3:e5:27:ef:9a:8c:81:38:92: e0:5c:67:24:31:96:e7:7f:76:ee:b8:b7:c1:0f:1f:93:7b:41: 0a:60:66:0c:1e:02:a0:90:46:e1:ab:b8:64:24:1d:61:08:05: 1d:a2:f0:18:59:92:36:39:d7:0f:6a:85:02:52:86:9c:27:97: b8:3c:a1:fe:99:39:e9:58:4b:43:b8:7a:fd:00:6d:73:ea:91: e1:88:80:c5:66:42:92:e8:c6:3c:fe:4c:69:1a:48:a7:ef:5f: dc:e5:09:b4:7b:8c:a4:92:f2:c6:ed:2c:ef:dc:b1:4e:d4:9e: f0:5c:62:ed:f5:91:ca:de:87:8c:60:fd:b8:29:42:c9:e1:bc: c1:ee:bb:60:12:27:d5:63:52:49:51:2c:73:70:89:07:0a:3a: 7f:19:0b:7f:23:c3:2d:d0:0e:07:1d:73:17:f3:a0:4b:51:78: 95:28:66:f0:f4:a9:c8:95:30:55:c6:97:41:df:a2:b1:16:82: 9e:ad:d0:3c:29:40:7a:28:83:d4:8a:2a:b8:4d:33:de:1b:47: ce:0e:b6:64:f7:a4:7f:e5:98:da:64:5a:c8:78:24:bf:2c:d7: 19:e4:51:53 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONf2/U+SZQBq5WQS7wDfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mjk5NDI0NDEzMmZjZjkxNDM4Y2RmNzFiMzg4MThmYjgzOWZmMmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgwpBK0g3bfWWrMnR8xKE5zpmlwh 6iwg1VCzuHs+DGDEGAmR1XOwLVPswq6fcjZtI9uycGKzHl5mbRXXikmkya4IxUvL 6jCByXPJ4JeVCh7j4DBv1LCGzLZ2CZoOwEy5dP6OL6iY8YsbTK7V/tw1bNe3H80w VyMIRh8gPPZ1FkWMlHBsXBpfBAAKUZaQ0uoUQnnr85uC5FwHnauG8p54uTaH5ZER 7LQmzElgN+T1u1f1Fmmeq4VojHQC5pr9FqHxCCCWvhD93BgKQN/cA0zhwZcX2h8y Uf3OafMFyXNymZ8O5rmN4fJtuDw6XD6cxvtFMBlqjdubRABlPv6/ucMSfQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJKZQkQTL8+RQ4zfcbOIGPuDn/LiMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEva3BsQ1JCTXZ6NUZEak45eHM0Z1ktNE9mOHVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQAjNE85Oz3pSXz48Zkc u/z3VrL8aiBW5non98TT5SfvmoyBOJLgXGckMZbnf3buuLfBDx+Te0EKYGYMHgKg kEbhq7hkJB1hCAUdovAYWZI2OdcPaoUCUoacJ5e4PKH+mTnpWEtDuHr9AG1z6pHh iIDFZkKS6MY8/kxpGkin71/c5Qm0e4ykkvLG7Szv3LFO1J7wXGLt9ZHK3oeMYP24 KULJ4bzB7rtgEifVY1JJUSxzcIkHCjp/GQt/I8Mt0A4HHXMX86BLUXiVKGbw9KnI lTBVxpdB36KxFoKerdA8KUB6KIPUiiq4TTPeG0fODrZk96R/5ZjaZFrIeCS/LNcZ 5FFT -----END CERTIFICATE-----Generated at Sun Jan 25 10:53:04 2026 by rpki-client