This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/kZtotJGtittx67Xw9ogTJ6-0m_4.roa File: kZtotJGtittx67Xw9ogTJ6-0m_4.roa (raw, json) Hash identifier: 4wTVFZNFiq62fEFOVQHFZlHy0vYQwGfzuXSPeTT7CvI= Subject key identifier: 91:9B:68:B4:91:AD:8A:DB:71:EB:B5:F0:F6:88:13:27:AF:B4:9B:FE Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Certificate serial: 019B7F140DC2DCFF64F3F37E14D1A2F16C09 Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/kZtotJGtittx67Xw9ogTJ6-0m_4.roa Signing time: Fri 02 Jan 2026 14:19:39 +0000 ROA not before: Fri 02 Jan 2026 14:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22773 IP address blocks: 84.37.40.0/22 maxlen: 24 84.37.184.0/22 maxlen: 24 84.37.196.0/22 maxlen: 24 84.37.200.0/21 maxlen: 24 84.37.208.0/21 maxlen: 24 84.37.216.0/22 maxlen: 24 84.37.224.0/20 maxlen: 24 84.37.240.0/21 maxlen: 24 84.37.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:0d:c2:dc:ff:64:f3:f3:7e:14:d1:a2:f1:6c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Validity Not Before: Jan 2 14:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=919b68b491ad8adb71ebb5f0f6881327afb49bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:da:ce:e7:88:7d:31:b4:b3:03:dc:20:fb:87: 86:34:d0:be:0b:19:6c:6f:6a:87:15:c4:19:50:57: 34:c0:47:ab:50:45:ca:96:d5:23:bb:74:49:90:c7: de:2c:92:d5:8c:5c:7f:85:41:c3:e2:42:52:b0:9d: 0a:01:17:74:d3:e3:09:26:0f:0f:ab:ac:ff:dd:00: 24:c6:fb:af:55:42:21:98:bd:4f:38:47:6e:76:f9: 21:e3:35:c1:50:58:f8:6d:2d:33:73:d6:a0:c5:c7: 02:e2:b8:32:cd:3c:39:e8:be:a7:96:08:78:42:66: 2b:ac:a6:d2:e0:04:78:0b:8b:20:11:5d:b8:df:4d: d2:8c:dd:47:e8:25:ac:18:2b:e6:84:89:51:28:5b: c9:11:23:1e:48:e1:0a:97:3c:68:b2:fd:02:0b:52: f5:91:0f:b7:e7:c8:e2:7f:3d:da:d5:a9:6d:bc:b1: dc:2a:7f:ea:24:82:35:31:8c:2c:f7:b8:63:85:c7: 95:8a:e3:04:e8:34:8d:2f:b4:ea:9e:a2:4f:a1:88: a1:81:a5:10:78:0e:94:26:4e:ec:64:8d:6f:ab:93: bd:69:98:57:c3:fe:da:84:7f:1f:0d:d5:75:d6:1a: a7:e5:29:81:78:b4:28:22:b6:39:97:d9:c9:61:c8: a3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9B:68:B4:91:AD:8A:DB:71:EB:B5:F0:F6:88:13:27:AF:B4:9B:FE X509v3 Authority Key Identifier: keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/kZtotJGtittx67Xw9ogTJ6-0m_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.37.40.0/22 84.37.184.0/22 84.37.196.0-84.37.219.255 84.37.224.0-84.37.251.255 Signature Algorithm: sha256WithRSAEncryption 74:b4:e3:b2:73:b0:14:a8:63:05:c4:00:1d:29:88:cf:ae:94: 55:e1:e5:4f:0a:77:45:d3:09:bd:8c:48:29:e1:78:64:5a:84: 1b:6f:97:a9:91:a3:e8:0b:c7:d7:0c:4f:16:86:b8:2e:c1:2e: f8:ab:17:3a:8f:bd:e0:43:6a:74:aa:1c:25:c5:83:62:a2:3b: 3e:6c:a2:38:c7:d1:97:06:a6:e3:45:d7:45:61:07:27:c9:37: 0a:7c:6f:fb:f1:f8:f1:35:12:0e:94:3f:d3:10:64:7d:90:d2: ec:da:3e:e6:d0:c6:bc:e3:8b:23:a8:d1:6a:81:df:d5:f1:9d: 33:53:68:ef:9b:04:2c:81:4a:28:16:20:03:b4:9e:72:79:96: c6:35:44:ac:7a:36:fe:1e:a0:48:1e:6a:81:6c:de:94:cf:af: fa:ae:76:9a:10:50:6f:3c:7d:92:10:8a:0b:18:e4:eb:0e:d0: 83:f8:dc:6a:7b:e5:b7:95:4b:cd:d9:1b:da:ea:2d:46:23:4f: 48:8a:31:ef:b4:d5:ab:0d:25:b8:73:6b:a0:92:a5:1d:38:68: 49:59:2d:dc:17:7c:89:78:ad:d6:45:f3:9b:c0:5e:4e:a2:ad: a9:37:73:f2:8b:1c:8c:d7:69:94:09:f8:b3:37:37:a6:5f:a1: 84:d8:f6:67 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt/FA3C3P9k8/N+FNGi8WwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky YWUzYjcwHhcNMjYwMTAyMTQxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTliNjhiNDkxYWQ4YWRiNzFlYmI1ZjBmNjg4MTMyN2FmYjQ5YmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodrO54h9MbSzA9wg+4eGNNC+Cxls b2qHFcQZUFc0wEerUEXKltUju3RJkMfeLJLVjFx/hUHD4kJSsJ0KARd00+MJJg8P q6z/3QAkxvuvVUIhmL1POEdudvkh4zXBUFj4bS0zc9agxccC4rgyzTw56L6nlgh4 QmYrrKbS4AR4C4sgEV24303SjN1H6CWsGCvmhIlRKFvJESMeSOEKlzxosv0CC1L1 kQ+358jifz3a1altvLHcKn/qJII1MYws97hjhceViuME6DSNL7TqnqJPoYihgaUQ eA6UJk7sZI1vq5O9aZhXw/7ahH8fDdV11hqn5SmBeLQoIrY5l9nJYcijFQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFJGbaLSRrYrbceu18PaIEyevtJv+MB8GA1UdIwQY MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt ZDJhZGVlZDc1NWQ4LzEva1p0b3RKR3RpdHR4NjdYdzlvZ1RKNi0wbV80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4 LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQCVCUoAwQC VCW4MAwDBAJUJcQDBAJUJdgwDAMEBVQl4AMEAlQl+DANBgkqhkiG9w0BAQsFAAOC AQEAdLTjsnOwFKhjBcQAHSmIz66UVeHlTwp3RdMJvYxIKeF4ZFqEG2+XqZGj6AvH 1wxPFoa4LsEu+KsXOo+94ENqdKocJcWDYqI7PmyiOMfRlwam40XXRWEHJ8k3Cnxv +/H48TUSDpQ/0xBkfZDS7No+5tDGvOOLI6jRaoHf1fGdM1No75sELIFKKBYgA7Se cnmWxjVErHo2/h6gSB5qgWzelM+v+q52mhBQbzx9khCKCxjk6w7Qg/jcanvlt5VL zdkb2uotRiNPSIox77TVqw0luHNroJKlHThoSVkt3Bd8iXit1kXzm8BeTqKtqTdz 8oscjNdplAn4szc3pl+hhNj2Zw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:09 2026 by rpki-client