This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/KjbQDiS-Vbd6ujQCdn0-I1PX3CU.roa File: KjbQDiS-Vbd6ujQCdn0-I1PX3CU.roa (raw, json) Hash identifier: gPVsFBHGjQBnxchwYG5qrhgZHIgr9/M0PqtJgTYrzpk= Subject key identifier: 2A:36:D0:0E:24:BE:55:B7:7A:BA:34:02:76:7D:3E:23:53:D7:DC:25 Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F8463C14618C5C01D3E15DA748E63A8 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/KjbQDiS-Vbd6ujQCdn0-I1PX3CU.roa Signing time: Fri 02 Jan 2026 16:22:21 +0000 ROA not before: Fri 02 Jan 2026 16:22:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43391 IP address blocks: 212.252.24.0/24 maxlen: 24 212.252.25.0/24 maxlen: 24 212.252.26.0/24 maxlen: 24 212.252.27.0/24 maxlen: 24 212.252.36.0/24 maxlen: 24 212.252.45.0/24 maxlen: 24 212.252.46.0/24 maxlen: 24 213.74.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:63:c1:46:18:c5:c0:1d:3e:15:da:74:8e:63:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a36d00e24be55b77aba3402767d3e2353d7dc25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:3c:48:25:6f:62:12:da:04:c7:5f:77:54: a6:e4:2b:9a:ea:62:71:1d:8b:38:79:66:ef:04:5b: c4:20:81:f5:5e:52:f2:d0:90:4f:da:e5:16:5c:19: bc:27:28:38:de:9f:ee:55:9f:c7:75:c2:1d:3c:c6: 09:30:91:e6:2a:ce:61:ed:ba:75:90:df:cd:e1:5f: af:91:46:e4:79:5f:19:c9:3a:bc:f3:b2:b2:f1:b5: b3:2e:9d:24:32:9a:98:21:63:b0:01:e2:87:37:dc: 98:e2:4b:4a:35:7e:f3:94:e3:e7:05:69:2e:dc:9a: 49:c7:02:7e:5c:66:cd:6f:75:b5:02:d8:d5:d9:a4: eb:b8:7a:0e:fe:78:d8:87:c0:e9:35:d4:ef:6b:69: da:5d:84:10:d3:d5:d9:47:6a:01:81:fc:ee:54:ad: 89:22:4a:19:12:8d:ce:25:60:9c:7b:40:89:8b:e4: d3:5a:d6:11:29:82:be:bf:b9:50:f3:dc:2d:f5:e6: 00:c6:96:d0:41:c1:07:fa:1e:fb:ee:d8:1c:9f:21: 7f:79:98:c2:72:8b:89:a4:91:0e:db:53:de:fe:0a: 6a:12:fe:98:ff:51:33:11:cf:ca:a2:de:c3:de:4a: d8:f7:87:8b:b5:4e:c3:b2:e5:35:ac:44:cc:7b:61: f4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:36:D0:0E:24:BE:55:B7:7A:BA:34:02:76:7D:3E:23:53:D7:DC:25 X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/KjbQDiS-Vbd6ujQCdn0-I1PX3CU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.252.24.0/22 212.252.36.0/24 212.252.45.0-212.252.46.255 213.74.4.0/24 Signature Algorithm: sha256WithRSAEncryption 73:8a:34:cf:91:85:17:74:57:7b:56:a8:19:02:db:94:eb:e8: 4c:37:7b:aa:32:bd:4f:8b:ee:d1:c0:49:af:93:3c:23:68:a9: 0b:ee:28:0c:b7:72:bc:1e:58:d3:ed:65:7d:eb:79:12:22:6c: 64:2e:71:45:07:3f:c4:bd:49:8e:f5:d1:e4:ef:4e:49:47:28: 29:36:d0:d2:6e:b4:d6:e1:a1:da:a9:b1:73:6d:0e:f2:30:ad: 25:6b:7a:9b:ba:12:77:cd:79:80:3a:e1:ff:72:2f:c3:59:1f: ad:fb:4e:7d:31:1c:76:7d:83:7f:47:41:05:0f:41:98:62:c5: 8f:e3:ac:1d:84:10:7a:70:92:20:19:d0:aa:72:77:e6:a7:e2: 90:fb:69:fd:23:a8:cd:80:70:08:00:50:86:58:a4:53:b7:bf: 06:a1:95:75:9a:61:78:95:1c:58:5a:cc:96:f7:4d:dc:90:b3: 51:42:41:aa:bf:4e:cd:b9:65:72:6f:d6:fd:f1:0c:93:43:c3: 79:4c:c7:2e:58:df:09:24:fb:c5:0e:44:35:ce:bd:a4:d5:80: 54:01:88:91:52:21:51:ab:5d:5c:c5:e5:d1:22:0d:47:76:66: 4e:44:13:0f:3f:d1:97:d7:3b:02:ac:83:76:40:53:94:41:80: e8:3e:5d:6a -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/hGPBRhjFwB0+Fdp0jmOoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTM2ZDAwZTI0YmU1NWI3N2FiYTM0MDI3NjdkM2UyMzUzZDdkYzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiE8SCVvYhLaBMdfd1Sm5Cua6mJx HYs4eWbvBFvEIIH1XlLy0JBP2uUWXBm8Jyg43p/uVZ/HdcIdPMYJMJHmKs5h7bp1 kN/N4V+vkUbkeV8ZyTq887Ky8bWzLp0kMpqYIWOwAeKHN9yY4ktKNX7zlOPnBWku 3JpJxwJ+XGbNb3W1AtjV2aTruHoO/njYh8DpNdTva2naXYQQ09XZR2oBgfzuVK2J IkoZEo3OJWCce0CJi+TTWtYRKYK+v7lQ89wt9eYAxpbQQcEH+h777tgcnyF/eZjC couJpJEO21Pe/gpqEv6Y/1EzEc/Kot7D3krY94eLtU7DsuU1rETMe2H0/wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFCo20A4kvlW3ero0AnZ9PiNT19wlMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvS2piUURpUy1WYmQ2dWpRQ2RuMC1JMVBYM0NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQC1PwYAwQA 1PwkMAwDBADU/C0DBADU/C4DBADVSgQwDQYJKoZIhvcNAQELBQADggEBAHOKNM+R hRd0V3tWqBkC25Tr6Ew3e6oyvU+L7tHASa+TPCNoqQvuKAy3crweWNPtZX3reRIi bGQucUUHP8S9SY710eTvTklHKCk20NJutNbhodqpsXNtDvIwrSVrepu6EnfNeYA6 4f9yL8NZH637Tn0xHHZ9g39HQQUPQZhixY/jrB2EEHpwkiAZ0Kpyd+an4pD7af0j qM2AcAgAUIZYpFO3vwahlXWaYXiVHFhazJb3TdyQs1FCQaq/Ts25ZXJv1v3xDJND w3lMxy5Y3wkk+8UORDXOvaTVgFQBiJFSIVGrXVzF5dEiDUd2Zk5EEw8/0ZfXOwKs g3ZAU5RBgOg+XWo= -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:08 2026 by rpki-client