This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/kpxq5zY_AOALikDUXUFvXYNdRfs.roa File: kpxq5zY_AOALikDUXUFvXYNdRfs.roa (raw, json) Hash identifier: FL3y+deP5I2TMabNn/Dx02wi2/efi3Jsxm4N2XxeLTk= Subject key identifier: 92:9C:6A:E7:36:3F:00:E0:0B:8A:40:D4:5D:41:6F:5D:83:5D:45:FB Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAE5AD246E4C84EE4EE74C42365C46 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/kpxq5zY_AOALikDUXUFvXYNdRfs.roa Signing time: Thu 01 Jan 2026 00:17:44 +0000 ROA not before: Thu 01 Jan 2026 00:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 931 IP address blocks: 5.226.52.0/22 maxlen: 24 43.225.88.0/23 maxlen: 24 45.139.6.0/23 maxlen: 24 46.249.97.0/24 maxlen: 24 155.254.96.0/22 maxlen: 24 178.173.232.0/22 maxlen: 24 178.173.236.0/22 maxlen: 24 178.173.242.0/23 maxlen: 24 178.173.244.0/22 maxlen: 24 185.215.246.0/24 maxlen: 24 188.209.156.0/22 maxlen: 24 188.253.8.0/22 maxlen: 24 188.253.28.0/22 maxlen: 24 188.253.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e5:ad:24:6e:4c:84:ee:4e:e7:4c:42:36:5c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=929c6ae7363f00e00b8a40d45d416f5d835d45fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:91:13:77:64:6c:01:4f:ed:f1:1e:e3:46:16: 15:88:e5:9f:56:e3:5d:8b:f7:6d:b2:30:ab:bc:c4: 73:c9:00:a0:b4:bf:eb:85:92:79:11:7d:ff:5c:ee: c9:1e:90:71:9d:d3:9c:98:65:ae:59:c3:1e:74:d2: 3a:aa:2f:d5:6b:e1:2f:dd:4c:df:22:2b:24:9d:fc: 55:af:c0:6a:ec:be:55:7f:af:18:f2:3d:b7:1d:8c: a1:a1:36:14:0a:3f:d8:c3:3e:5f:cd:46:fb:3d:40: 7d:cc:1e:e2:a8:17:34:64:10:3c:85:37:3b:72:0f: 1e:02:ad:c6:57:25:9b:10:70:2d:b8:34:01:5d:45: 9c:62:84:98:6e:30:5f:4a:df:6b:a1:c9:72:c1:b1: f7:da:37:08:be:11:a9:8f:b1:b4:0d:fd:57:59:3b: 1f:51:cc:02:9e:be:66:eb:eb:76:fb:a3:33:86:85: 9b:e9:a8:9b:86:bc:d5:b2:b2:1b:af:7a:2d:16:e9: 48:51:d1:9a:ec:28:14:e6:eb:8f:70:31:f4:ff:e6: 95:37:34:1c:01:e5:8e:ae:71:e5:ec:d6:34:08:a8: 11:9b:d1:10:e0:f2:80:26:e0:34:c9:e9:63:b8:26: 21:02:2a:8e:3c:20:4c:14:e1:c2:8b:9e:53:1f:57: 53:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9C:6A:E7:36:3F:00:E0:0B:8A:40:D4:5D:41:6F:5D:83:5D:45:FB X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/kpxq5zY_AOALikDUXUFvXYNdRfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.52.0/22 43.225.88.0/23 45.139.6.0/23 46.249.97.0/24 155.254.96.0/22 178.173.232.0/21 178.173.242.0-178.173.247.255 185.215.246.0/24 188.209.156.0/22 188.253.8.0/22 188.253.28.0/22 188.253.104.0/21 Signature Algorithm: sha256WithRSAEncryption 67:6e:3b:f4:a3:2c:5a:45:b3:b1:14:a1:82:72:c4:5e:f6:06: ac:ea:04:73:84:21:55:22:2e:a2:7e:8f:ae:52:58:4b:4c:40: 2c:31:75:61:63:43:84:94:cc:06:f7:f5:12:f7:3f:ec:e0:ba: 25:87:fb:e4:dc:8c:cd:fe:19:16:b2:ef:b1:ec:10:43:91:b3: 94:d5:76:d2:2d:6e:78:68:a1:10:82:8d:87:5c:9c:2e:a6:e3: 6d:4e:80:32:da:02:f2:46:b3:c7:06:00:d9:32:85:8c:c0:6d: d6:f1:3f:df:f6:75:87:bb:f4:fd:b4:13:17:e7:fb:d5:47:ac: 0f:82:5f:3c:e1:73:7f:43:0e:b3:eb:86:33:77:15:05:01:39: 5b:80:69:ca:37:2e:86:df:f1:30:a6:0c:62:94:d0:4c:80:83: 44:66:84:1a:69:67:61:ad:ce:5f:57:70:81:a9:bb:44:cb:26: 23:70:93:79:93:d7:0c:7f:d5:fb:4f:f5:43:b3:ee:32:d8:f6: 35:94:bd:61:7d:3a:0f:45:66:f1:af:94:3c:1e:37:3c:7c:50: 34:36:77:5e:9c:17:21:8b:cc:9c:56:a5:09:9f:63:9c:aa:5e: 66:8b:21:08:99:6c:79:d4:1d:47:e4:55:d6:65:c1:d7:f6:87: 3a:f3:52:58 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZt26uWtJG5MhO5O50xCNlxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjljNmFlNzM2M2YwMGUwMGI4YTQwZDQ1ZDQxNmY1ZDgzNWQ0NWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZETd2RsAU/t8R7jRhYViOWfVuNd i/dtsjCrvMRzyQCgtL/rhZJ5EX3/XO7JHpBxndOcmGWuWcMedNI6qi/Va+Ev3Uzf IisknfxVr8Bq7L5Vf68Y8j23HYyhoTYUCj/Ywz5fzUb7PUB9zB7iqBc0ZBA8hTc7 cg8eAq3GVyWbEHAtuDQBXUWcYoSYbjBfSt9roclywbH32jcIvhGpj7G0Df1XWTsf UcwCnr5m6+t2+6MzhoWb6aibhrzVsrIbr3otFulIUdGa7CgU5uuPcDH0/+aVNzQc AeWOrnHl7NY0CKgRm9EQ4PKAJuA0yeljuCYhAiqOPCBMFOHCi55TH1dTkwIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFJKcauc2PwDgC4pA1F1Bb12DXUX7MB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEva3B4cTV6WV9BT0FMaWtEVVhVRnZYWU5kUmZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQCBeI0AwQB K+FYAwQBLYsGAwQALvlhAwQCm/5gAwQDsq3oMAwDBAGyrfIDBAOyrfADBAC51/YD BAK80ZwDBAK8/QgDBAK8/RwDBAO8/WgwDQYJKoZIhvcNAQELBQADggEBAGduO/Sj LFpFs7EUoYJyxF72BqzqBHOEIVUiLqJ+j65SWEtMQCwxdWFjQ4SUzAb39RL3P+zg uiWH++TcjM3+GRay77HsEEORs5TVdtItbnhooRCCjYdcnC6m421OgDLaAvJGs8cG ANkyhYzAbdbxP9/2dYe79P20Exfn+9VHrA+CXzzhc39DDrPrhjN3FQUBOVuAaco3 Lobf8TCmDGKU0EyAg0RmhBppZ2Gtzl9XcIGpu0TLJiNwk3mT1wx/1ftP9UOz7jLY 9jWUvWF9Og9FZvGvlDweNzx8UDQ2d16cFyGLzJxWpQmfY5yqXmaLIQiZbHnUHUfk VdZlwdf2hzrzUlg= -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:23 2026 by rpki-client