This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/kTIXQhS3eDgH0d4aWc7P6cb0ETE.roa File: kTIXQhS3eDgH0d4aWc7P6cb0ETE.roa (raw, json) Hash identifier: MfaCdUx2k2CrxyHGfLxwy3cZcMrgpr/D+m/kD8xaOjU= Subject key identifier: 91:32:17:42:14:B7:78:38:07:D1:DE:1A:59:CE:CF:E9:C6:F4:11:31 Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736 Certificate serial: 019BD77A188C4481E2E829D919FA526AE925 Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/kTIXQhS3eDgH0d4aWc7P6cb0ETE.roa Signing time: Mon 19 Jan 2026 18:17:41 +0000 ROA not before: Mon 19 Jan 2026 18:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199152 IP address blocks: 91.239.23.0/24 maxlen: 24 146.19.84.0/24 maxlen: 24 2a0a:2e80::/32 maxlen: 32 2a0a:2e81::/32 maxlen: 32 2a0a:2e82::/36 maxlen: 36 2a0a:2e83::/36 maxlen: 36 2a0a:2e84::/36 maxlen: 36 2a0a:2e85::/36 maxlen: 36 2a0a:2e86::/32 maxlen: 32 2a0a:2e86:1000::/36 maxlen: 36 2a0a:2e86:2000::/36 maxlen: 36 2a0a:2e86:3000::/36 maxlen: 36 2a0a:2e86:4000::/36 maxlen: 36 2a0a:2e86:5000::/36 maxlen: 36 2a0a:2e86:6000::/36 maxlen: 36 2a0a:2e86:7000::/36 maxlen: 36 2a0a:2e86:8000::/36 maxlen: 36 2a0a:2e86:9000::/36 maxlen: 36 2a0a:2e86:a000::/36 maxlen: 36 2a0a:2e86:b000::/36 maxlen: 36 2a0a:2e87::/32 maxlen: 32 2a11:7e41::/48 maxlen: 48 2a11:7e41:1::/48 maxlen: 48 2a11:7e41:2::/48 maxlen: 48 2a11:7e41:3::/48 maxlen: 48 2a11:7e42::/36 maxlen: 36 2a11:7e43::/36 maxlen: 36 2a11:7e44::/32 maxlen: 32 2a11:7e45::/32 maxlen: 32 2a11:8480::/32 maxlen: 32 2a11:8482::/36 maxlen: 36 2a11:8483::/36 maxlen: 36 2a11:8484::/32 maxlen: 32 2a11:df41::/32 maxlen: 32 2a11:df42::/36 maxlen: 36 2a11:df43::/36 maxlen: 36 2a11:df44::/32 maxlen: 32 2a11:df45::/32 maxlen: 32 2a11:df46::/32 maxlen: 32 2a11:df47::/32 maxlen: 32 2a12:6700::/32 maxlen: 32 2a12:6703::/36 maxlen: 36 2a12:6704::/36 maxlen: 36 2a12:6705::/32 maxlen: 32 2a12:6706::/32 maxlen: 32 2a12:6707::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:7a:18:8c:44:81:e2:e8:29:d9:19:fa:52:6a:e9:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736 Validity Not Before: Jan 19 18:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9132174214b7783807d1de1a59cecfe9c6f41131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:69:e0:e2:69:89:35:83:00:d8:4a:ed:b4:51: a3:ef:e3:a6:1d:59:70:99:d5:7c:fb:84:86:85:66: b3:f2:90:b2:49:92:1f:e1:42:3a:51:27:fa:00:b0: 1d:05:c9:29:fd:01:cf:6b:11:d1:3b:27:6a:37:3e: 7c:3f:9e:8d:c0:5c:18:b9:a4:53:68:7d:7c:ee:d6: 91:30:60:3c:ad:67:b3:08:34:d6:8c:94:5e:f3:24: 0a:fe:11:ff:75:49:9e:bc:1c:bd:87:d0:70:6d:8b: 67:0a:9e:c9:06:74:0a:79:bc:0a:11:0e:f2:74:16: d9:e9:7c:6d:60:84:db:63:f6:77:05:f5:b5:ad:7e: 3b:38:cc:70:d9:71:d9:c5:4a:40:7e:a2:4d:46:31: 56:58:02:46:2e:8f:a6:3b:86:de:cb:e6:45:74:50: 69:a8:7f:48:65:24:43:dd:76:58:4f:d5:ad:e6:80: 3e:69:30:7d:2b:19:76:43:50:a4:f1:c3:c9:47:96: a1:dc:fa:ca:de:26:2e:8c:96:b6:84:cf:5f:cd:c0: 56:16:8e:e4:7a:84:a7:45:f6:11:46:0d:24:84:da: 86:17:a6:6b:53:63:62:83:89:21:17:8e:55:ee:22: 39:a4:fc:c4:c2:b8:2d:72:de:02:db:9a:94:db:05: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:32:17:42:14:B7:78:38:07:D1:DE:1A:59:CE:CF:E9:C6:F4:11:31 X509v3 Authority Key Identifier: keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/kTIXQhS3eDgH0d4aWc7P6cb0ETE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.23.0/24 146.19.84.0/24 IPv6: 2a0a:2e80::-2a0a:2e82:fff:ffff:ffff:ffff:ffff:ffff 2a0a:2e83::/36 2a0a:2e84::/36 2a0a:2e85::/36 2a0a:2e86::/31 2a11:7e41::/46 2a11:7e42::/36 2a11:7e43::/36 2a11:7e44::/31 2a11:8480::/32 2a11:8482::/36 2a11:8483::/36 2a11:8484::/32 2a11:df41::-2a11:df42:fff:ffff:ffff:ffff:ffff:ffff 2a11:df43::/36 2a11:df44::/30 2a12:6700::/32 2a12:6703::/36 2a12:6704::/36 2a12:6705::-2a12:6707:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2c:c7:46:6b:8f:1d:47:9e:5a:5c:4c:73:eb:62:33:02:f4:3b: d9:7b:69:72:4c:ff:18:3c:b6:9d:5f:36:38:79:0b:f8:9e:70: 77:31:d6:91:96:86:ff:0f:73:17:e5:d4:72:45:3e:0b:14:ce: 4a:82:4b:a1:3b:db:1b:5f:37:b1:b1:bf:1e:da:0c:b4:07:c2: 89:4c:79:bd:74:95:58:bc:7c:6b:b0:8b:2c:c9:8a:c9:f8:4b: 25:5e:6b:cc:03:76:b8:e2:b4:e4:d3:f4:b7:d1:1d:4b:83:74: 9d:c3:52:bc:05:c7:fb:63:24:99:2e:cb:13:bb:d3:bf:cb:a1: 78:6f:7d:17:04:fc:99:32:56:98:06:b0:d9:61:ad:e9:ff:5e: 03:72:37:10:82:e1:34:0f:68:b4:7f:d6:d1:17:88:51:9a:d5: 66:3a:37:c4:62:df:1d:28:a4:ba:dd:ef:fb:64:19:8e:6b:d6: 38:25:4c:39:a5:ff:85:4e:cc:39:14:ee:7a:98:27:b7:b1:4a: 36:ce:0c:cb:d4:32:4b:a4:20:97:29:bb:f2:d9:1a:11:d7:df: 21:32:8b:86:a4:ff:4c:5d:24:91:5c:b6:a9:1a:ec:70:06:3f: e4:d8:d3:98:9e:3c:db:53:7e:ff:f0:c6:3b:78:96:07:e8:80: 8d:39:cd:ea -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZvXehiMRIHi6CnZGfpSauklMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNTAwMmJhMDg4ZDViZDA5YzE1NTNkY2VkNWIwYmYzOTA3 ZmY3MzYwHhcNMjYwMTE5MTgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTMyMTc0MjE0Yjc3ODM4MDdkMWRlMWE1OWNlY2ZlOWM2ZjQxMTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Gng4mmJNYMA2ErttFGj7+OmHVlw mdV8+4SGhWaz8pCySZIf4UI6USf6ALAdBckp/QHPaxHROydqNz58P56NwFwYuaRT aH187taRMGA8rWezCDTWjJRe8yQK/hH/dUmevBy9h9BwbYtnCp7JBnQKebwKEQ7y dBbZ6XxtYITbY/Z3BfW1rX47OMxw2XHZxUpAfqJNRjFWWAJGLo+mO4bey+ZFdFBp qH9IZSRD3XZYT9Wt5oA+aTB9Kxl2Q1Ck8cPJR5ah3PrK3iYujJa2hM9fzcBWFo7k eoSnRfYRRg0khNqGF6ZrU2Nig4khF45V7iI5pPzEwrgtct4C25qU2wXYLQIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFJEyF0IUt3g4B9HeGlnOz+nG9BExMB8GA1UdIwQY MBaAFLNQAroIjVvQnBVT3O1bC/OQf/c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2Ut YWYxZWYxZDdhZmI4LzEva1RJWFFoUzNlRGdIMGQ0YVdjN1A2Y2IwRVRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2UtYWYxZWYxZDdhZmI4 LzEvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHmBggrBgEFBQcBBwEB/wSB1jCB0zASBAIAATAMAwQAW+8X AwQAkhNUMIG8BAIAAjCBtTAPAwUHKgougAMGBCoKLoIAAwYEKgougwADBgQqCi6E AAMGBCoKLoUAAwUBKgouhgMHAioRfkEAAAMGBCoRfkIAAwYEKhF+QwADBQEqEX5E AwUAKhGEgAMGBCoRhIIAAwYEKhGEgwADBQAqEYSEMA8DBQAqEd9BAwYEKhHfQgAD BgQqEd9DAAMFAioR30QDBQAqEmcAAwYEKhJnAwADBgQqEmcEADAOAwUAKhJnBQMF AyoSZwAwDQYJKoZIhvcNAQELBQADggEBACzHRmuPHUeeWlxMc+tiMwL0O9l7aXJM /xg8tp1fNjh5C/iecHcx1pGWhv8Pcxfl1HJFPgsUzkqCS6E72xtfN7Gxvx7aDLQH wolMeb10lVi8fGuwiyzJisn4SyVea8wDdrjitOTT9LfRHUuDdJ3DUrwFx/tjJJku yxO707/LoXhvfRcE/JkyVpgGsNlhren/XgNyNxCC4TQPaLR/1tEXiFGa1WY6N8Ri 3x0opLrd7/tkGY5r1jglTDml/4VOzDkU7nqYJ7exSjbODMvUMkukIJcpu/LZGhHX 3yEyi4ak/0xdJJFctqka7HAGP+TY05iePNtTfv/wxjt4lgfogI05zeo= -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:15 2026 by rpki-client