This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/KSxgyXQgmuvgD3hsIbjoWlYRqkk.roa File: KSxgyXQgmuvgD3hsIbjoWlYRqkk.roa (raw, json) Hash identifier: MfPYx4d8dGraW1R0Aep23IPqwadZP9+eAkLv5cmiWoM= Subject key identifier: 29:2C:60:C9:74:20:9A:EB:E0:0F:78:6C:21:B8:E8:5A:56:11:AA:49 Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Certificate serial: 019B7C12DDD2EC0258A39CB28E1D5C5B111C Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/KSxgyXQgmuvgD3hsIbjoWlYRqkk.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29884 IP address blocks: 137.174.128.0/21 maxlen: 21 155.204.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:dd:d2:ec:02:58:a3:9c:b2:8e:1d:5c:5b:11:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=292c60c974209aebe00f786c21b8e85a5611aa49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:33:48:ee:aa:d5:09:5e:d7:75:74:71:87: 3d:f5:04:a7:58:79:21:ae:94:99:2b:f8:59:1b:be: 1f:12:c1:2d:b2:ff:18:60:5c:69:ad:4e:da:fa:30: 8e:59:70:d0:4f:7e:64:1d:69:63:b5:04:df:e9:6b: 68:b4:5a:4b:95:46:df:17:9c:b4:68:22:e6:0a:ef: 53:75:2d:7d:df:58:b4:78:22:95:7d:c5:56:8d:09: 05:fe:ee:b6:60:8d:87:a2:13:b9:80:d3:0f:96:1a: e7:78:c4:77:7d:be:00:f2:97:c0:07:c5:56:30:34: aa:0d:40:a8:31:0e:80:da:6e:0d:0c:2d:bf:74:d6: b9:55:2d:7a:62:f6:4a:74:48:f2:93:43:52:bb:36: f0:62:d6:cc:3e:b3:31:4c:d8:7b:38:ff:fc:f9:61: 91:85:a6:43:89:bd:32:1c:4d:f9:8b:92:46:ce:46: 02:21:02:6c:4e:25:ad:89:ed:fc:76:df:f2:fe:0f: 7e:85:e3:b2:63:aa:db:bc:5b:96:08:c3:98:14:82: cc:e6:26:97:ec:dd:9a:10:d9:5e:f8:f7:2a:b0:e9: df:17:d8:22:e9:45:6e:52:6a:54:f5:d9:c5:fa:44: 84:c9:44:d1:d8:bf:f1:f1:60:c2:a5:66:37:3f:0d: d0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2C:60:C9:74:20:9A:EB:E0:0F:78:6C:21:B8:E8:5A:56:11:AA:49 X509v3 Authority Key Identifier: keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/KSxgyXQgmuvgD3hsIbjoWlYRqkk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.174.128.0/21 155.204.144.0/21 Signature Algorithm: sha256WithRSAEncryption 0e:08:8b:49:18:fb:c4:14:a4:ed:78:fe:16:f4:d5:ca:7d:b8: 5a:32:f2:8b:31:41:e2:9e:18:8f:71:f0:32:b3:7e:59:0b:b2: 32:39:27:7f:bf:81:b8:1e:a8:75:44:46:29:57:25:c4:89:86: 07:ea:f2:00:ae:8a:b3:20:45:99:f2:32:43:14:cd:f6:85:34: a7:d2:89:81:e8:13:2a:ec:56:42:ae:63:54:fb:6b:55:c0:03: ad:5d:a8:c4:cf:7b:ee:6d:8c:46:bb:87:13:dc:6f:83:0e:9d: 1b:d5:3a:b6:84:84:e6:61:89:33:24:fc:0e:3c:2f:7a:a9:47: 66:ff:ff:65:37:ec:65:4c:50:a1:5b:ff:e5:42:0f:12:c5:d0: 79:91:42:9e:ad:ea:7a:dc:89:5f:0b:8b:df:9c:11:29:98:42: 9b:33:75:ee:fc:39:87:3e:0e:e6:3e:6c:b9:fc:78:52:74:79: a7:3b:19:b8:17:ab:53:86:a8:80:9b:c0:9b:43:6e:f8:bd:e1: 18:00:02:28:dc:a6:ea:9c:9f:de:c1:e6:bf:ec:35:94:de:af: 0d:77:06:6e:a2:36:4f:89:25:28:ee:6e:c7:87:ff:cf:42:e6: 68:55:38:b4:34:92:4b:63:6e:91:ed:b2:6f:06:71:86:4e:c7: 7f:ee:08:88 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Et3S7AJYo5yyjh1cWxEcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm Nzk2NzgwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTJjNjBjOTc0MjA5YWViZTAwZjc4NmMyMWI4ZTg1YTU2MTFhYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhwzSO6q1Qle13V0cYc99QSnWHkh rpSZK/hZG74fEsEtsv8YYFxprU7a+jCOWXDQT35kHWljtQTf6WtotFpLlUbfF5y0 aCLmCu9TdS1931i0eCKVfcVWjQkF/u62YI2HohO5gNMPlhrneMR3fb4A8pfAB8VW MDSqDUCoMQ6A2m4NDC2/dNa5VS16YvZKdEjyk0NSuzbwYtbMPrMxTNh7OP/8+WGR haZDib0yHE35i5JGzkYCIQJsTiWtie38dt/y/g9+heOyY6rbvFuWCMOYFILM5iaX 7N2aENle+PcqsOnfF9gi6UVuUmpU9dnF+kSEyUTR2L/x8WDCpWY3Pw3QpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCksYMl0IJrr4A94bCG46FpWEapJMB8GA1UdIwQY MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt NTkxY2FmNTM2ZWNjLzEvS1N4Z3lYUWdtdXZnRDNoc0liam9XbFlScWtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDia6AAwQD m8yQMA0GCSqGSIb3DQEBCwUAA4IBAQAOCItJGPvEFKTteP4W9NXKfbhaMvKLMUHi nhiPcfAys35ZC7IyOSd/v4G4Hqh1REYpVyXEiYYH6vIAroqzIEWZ8jJDFM32hTSn 0omB6BMq7FZCrmNU+2tVwAOtXajEz3vubYxGu4cT3G+DDp0b1Tq2hITmYYkzJPwO PC96qUdm//9lN+xlTFChW//lQg8SxdB5kUKerep63IlfC4vfnBEpmEKbM3Xu/DmH Pg7mPmy5/HhSdHmnOxm4F6tThqiAm8CbQ274veEYAAIo3KbqnJ/ewea/7DWU3q8N dwZuojZPiSUo7m7Hh//PQuZoVTi0NJJLY26R7bJvBnGGTsd/7giI -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:41 2026 by rpki-client