This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/KIQE_PA6qlqnsqTuVdgXvQjK-I0.roa File: KIQE_PA6qlqnsqTuVdgXvQjK-I0.roa (raw, json) Hash identifier: s0iOSLMdSnE0XfkwKLxNI9H4430lKBoEen6MwmkygC8= Subject key identifier: 28:84:04:FC:F0:3A:AA:5A:A7:B2:A4:EE:55:D8:17:BD:08:CA:F8:8D Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE3A6B00FC1D1256982966CDC13C75 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/KIQE_PA6qlqnsqTuVdgXvQjK-I0.roa Signing time: Fri 02 Jan 2026 04:19:05 +0000 ROA not before: Fri 02 Jan 2026 04:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22773 IP address blocks: 37.218.208.0/21 maxlen: 24 37.218.216.0/21 maxlen: 24 188.215.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3a:6b:00:fc:1d:12:56:98:29:66:cd:c1:3c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=288404fcf03aaa5aa7b2a4ee55d817bd08caf88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:42:62:fa:2e:99:38:12:33:c9:5c:b0:db:8f: ae:9d:c4:21:d9:b7:8c:a3:56:0a:e7:39:e4:26:db: 3b:64:eb:b6:ab:49:80:f4:45:aa:94:3c:99:9c:73: 80:f8:50:01:f1:9d:14:01:8a:b6:80:cb:0f:9e:43: 09:60:e6:dc:80:db:c1:71:51:e9:bf:b7:3c:1c:ce: 0b:0a:77:32:eb:2f:1e:b5:2e:e7:27:a1:5b:72:98: 8c:d1:00:d2:47:20:c1:9d:1f:e3:ce:d4:d4:f6:bb: c4:c4:d4:8e:07:07:86:f7:f2:c1:12:b9:d1:d2:64: aa:d4:a8:72:f9:23:3c:62:42:49:da:37:93:c0:ab: 7d:ac:c7:1b:31:31:12:eb:d0:e0:22:4a:55:7d:21: 6c:e7:d2:b0:1b:88:e2:22:08:f1:d5:a5:8d:c4:38: 73:ca:16:92:e1:a3:6b:33:fa:79:fa:fc:6a:f0:76: 07:7f:e8:39:92:8c:e9:8a:ac:a1:4a:9a:f3:e3:9c: 0c:44:13:cf:c2:be:a0:f4:82:da:c0:2e:ea:d9:ee: 1b:ef:e9:7e:5a:49:eb:68:25:b1:8f:3e:71:64:f2: 7b:86:d3:ab:91:6d:92:e9:c8:36:2a:2f:84:f5:5c: ea:82:2e:f7:f5:61:24:6a:12:bc:e5:c4:63:1e:18: 7c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:84:04:FC:F0:3A:AA:5A:A7:B2:A4:EE:55:D8:17:BD:08:CA:F8:8D X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/KIQE_PA6qlqnsqTuVdgXvQjK-I0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.218.208.0/20 188.215.124.0/22 Signature Algorithm: sha256WithRSAEncryption 59:02:44:0e:5f:66:36:d6:07:c5:f2:a6:0e:da:46:f4:bb:fc: 0c:f4:02:1d:9e:51:15:d0:ed:24:f7:f6:0e:56:6c:9e:fe:a1: bd:e3:60:85:88:5a:b3:f3:7b:28:14:a7:14:14:84:9c:74:34: 05:0d:3e:2d:aa:a3:ee:b4:ea:7a:3a:a2:62:b6:9d:64:85:04: f6:8e:48:5a:01:0e:a4:0f:49:ee:0f:87:c6:d1:d9:8a:2c:01: 80:94:24:0f:df:e8:06:78:27:d2:dc:d4:74:1e:e4:7a:1f:d3: 06:ad:95:1d:e4:4f:f1:96:60:c2:00:9d:d3:0d:83:de:d1:57: 53:85:89:b0:9f:00:89:7f:98:99:03:02:81:96:58:71:7b:d8: 6b:16:82:a0:e5:10:35:d0:8f:bf:53:a7:c6:74:9a:e4:45:87: e0:50:d3:c3:b2:ac:a5:9b:bd:56:52:43:5b:0d:14:fd:bf:0e: fd:ef:e3:77:64:27:32:14:30:d8:85:c8:1f:39:51:7a:8f:2c: 35:c3:9b:16:bb:71:05:85:c7:de:29:21:21:ac:bd:5a:ab:4b: 5e:35:7c:84:c4:9c:df:85:a7:b2:68:33:23:51:5f:00:48:1a: 14:c6:49:6f:b4:f5:0b:f1:0f:17:24:33:32:c3:7d:9d:d6:82: 06:13:19:dd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87jprAPwdElaYKWbNwTx1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODg0MDRmY2YwM2FhYTVhYTdiMmE0ZWU1NWQ4MTdiZDA4Y2FmODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUJi+i6ZOBIzyVyw24+uncQh2beM o1YK5znkJts7ZOu2q0mA9EWqlDyZnHOA+FAB8Z0UAYq2gMsPnkMJYObcgNvBcVHp v7c8HM4LCncy6y8etS7nJ6FbcpiM0QDSRyDBnR/jztTU9rvExNSOBweG9/LBErnR 0mSq1Khy+SM8YkJJ2jeTwKt9rMcbMTES69DgIkpVfSFs59KwG4jiIgjx1aWNxDhz yhaS4aNrM/p5+vxq8HYHf+g5kozpiqyhSprz45wMRBPPwr6g9ILawC7q2e4b7+l+ WknraCWxjz5xZPJ7htOrkW2S6cg2Ki+E9Vzqgi739WEkahK85cRjHhh8QwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCiEBPzwOqpap7Kk7lXYF70IyviNMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvS0lRRV9QQTZxbHFuc3FUdVZkZ1h2UWpLLUkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEJdrQAwQC vNd8MA0GCSqGSIb3DQEBCwUAA4IBAQBZAkQOX2Y21gfF8qYO2kb0u/wM9AIdnlEV 0O0k9/YOVmye/qG942CFiFqz83soFKcUFIScdDQFDT4tqqPutOp6OqJitp1khQT2 jkhaAQ6kD0nuD4fG0dmKLAGAlCQP3+gGeCfS3NR0HuR6H9MGrZUd5E/xlmDCAJ3T DYPe0VdThYmwnwCJf5iZAwKBllhxe9hrFoKg5RA10I+/U6fGdJrkRYfgUNPDsqyl m71WUkNbDRT9vw797+N3ZCcyFDDYhcgfOVF6jyw1w5sWu3EFhcfeKSEhrL1aq0te NXyExJzfhaeyaDMjUV8ASBoUxklvtPUL8Q8XJDMyw32d1oIGExnd -----END CERTIFICATE-----Generated at Sun Jan 25 07:36:35 2026 by rpki-client