This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Kg1pxmiChPV6fz5fVLcqDVZPGVA.roa File: Kg1pxmiChPV6fz5fVLcqDVZPGVA.roa (raw, json) Hash identifier: SRNE2+sx9FNGp2a8VnJm35Y0pORouHxk0y7BXf1WH74= Subject key identifier: 2A:0D:69:C6:68:82:84:F5:7A:7F:3E:5F:54:B7:2A:0D:56:4F:19:50 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019B77C67206EC232E6A05D71D75A3C1B814 Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Kg1pxmiChPV6fz5fVLcqDVZPGVA.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29582 IP address blocks: 80.95.19.0/24 maxlen: 24 93.152.240.0/24 maxlen: 24 93.152.246.0/24 maxlen: 24 93.152.247.0/24 maxlen: 24 95.158.145.0/24 maxlen: 24 2a00:e200:103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:72:06:ec:23:2e:6a:05:d7:1d:75:a3:c1:b8:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a0d69c6688284f57a7f3e5f54b72a0d564f1950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:31:bf:eb:26:85:eb:a9:18:38:85:28:9f: f1:32:6f:7c:cc:a9:0f:ce:31:ed:c0:c4:9c:ff:af: a6:ce:c7:3c:ba:e9:96:16:f9:59:6c:af:d7:82:28: 63:30:e7:7d:1a:40:5e:9a:a0:64:8d:46:b5:b8:4d: e8:50:6e:a4:91:5b:6c:c2:3e:ff:32:84:38:ff:cf: 50:12:2c:81:77:79:bc:95:86:0c:11:47:bd:0b:25: 39:72:0e:1e:84:7b:70:51:4e:0e:d9:b9:1c:9b:c9: 64:66:5c:0e:d3:6b:49:af:05:03:e6:ba:54:a4:4c: c7:cf:ad:cf:34:eb:4d:55:b7:99:a6:df:70:e9:b2: 1f:4d:73:a8:08:68:99:34:25:eb:ad:a8:72:a3:20: fb:cc:3b:d3:39:13:c6:e7:a1:e3:45:50:5e:50:a5: 24:24:1a:fb:89:b6:57:6f:12:ed:fb:95:c4:50:92: e8:17:b7:93:8a:f6:8a:08:92:94:31:aa:67:94:45: cd:d7:34:9d:d1:53:79:a6:ea:f3:32:f4:1c:a0:d7: 29:cf:c0:35:ea:80:3b:0f:98:83:f5:25:74:23:af: 9f:91:48:b5:fe:95:f0:f9:94:2f:d5:c9:ba:c9:04: 82:1e:fb:de:a1:f1:1a:83:0d:f5:6c:a6:de:85:ac: f2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0D:69:C6:68:82:84:F5:7A:7F:3E:5F:54:B7:2A:0D:56:4F:19:50 X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Kg1pxmiChPV6fz5fVLcqDVZPGVA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.95.19.0/24 93.152.240.0/24 93.152.246.0/23 95.158.145.0/24 IPv6: 2a00:e200:103::/48 Signature Algorithm: sha256WithRSAEncryption 67:e4:89:90:a6:2b:4b:cc:55:c9:5b:d6:b9:37:77:c1:7d:bc: 1e:4e:5d:7c:89:2c:64:68:8b:b9:59:44:4a:8c:5e:48:3e:97: db:a8:13:35:aa:9b:15:ce:19:05:85:d8:06:cc:c7:d3:26:6c: 8f:ac:df:78:64:ab:01:6c:82:40:cc:00:19:aa:c2:de:e7:92: 5c:bc:2b:91:e5:a6:e4:7d:bf:53:d9:59:41:43:f3:0f:6a:83: 34:ee:67:04:36:1a:2d:d7:d2:31:80:03:2e:61:c8:14:22:72: 2e:3d:2d:70:24:83:ac:1e:25:6a:7f:b2:08:5b:37:04:e2:23: 2d:84:94:47:1e:b1:82:6a:92:83:e0:b2:8e:33:dc:af:84:9d: a3:57:42:fc:19:ea:2a:8c:9e:5f:3f:f6:f7:2c:d5:1e:c5:d7: 1b:ca:6e:ef:4b:af:cc:1c:8b:b8:5d:a0:c3:72:2c:35:ab:b8: 40:8a:91:2b:51:a6:75:cc:76:3c:b6:45:41:c1:c7:c7:cc:4d: e9:82:12:6d:cf:8a:e6:71:5d:4b:f8:fb:16:5e:c1:05:77:eb: cd:f1:57:dc:ab:bd:68:91:32:b5:21:f1:51:ba:1d:c2:77:01: ea:33:6b:76:c2:81:16:36:a6:c1:37:18:72:20:93:e2:ee:c7: 2e:0e:7c:df -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt3xnIG7CMuagXXHXWjwbgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTBkNjljNjY4ODI4NGY1N2E3ZjNlNWY1NGI3MmEwZDU2NGYxOTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiExv+smheupGDiFKJ/xMm98zKkP zjHtwMSc/6+mzsc8uumWFvlZbK/XgihjMOd9GkBemqBkjUa1uE3oUG6kkVtswj7/ MoQ4/89QEiyBd3m8lYYMEUe9CyU5cg4ehHtwUU4O2bkcm8lkZlwO02tJrwUD5rpU pEzHz63PNOtNVbeZpt9w6bIfTXOoCGiZNCXrrahyoyD7zDvTORPG56HjRVBeUKUk JBr7ibZXbxLt+5XEUJLoF7eTivaKCJKUMapnlEXN1zSd0VN5purzMvQcoNcpz8A1 6oA7D5iD9SV0I6+fkUi1/pXw+ZQv1cm6yQSCHvveofEagw31bKbehazy4QIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFCoNacZogoT1en8+X1S3Kg1WTxlQMB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvS2cxcHhtaUNoUFY2Zno1ZlZMY3FEVlpQR1ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAUF8TAwQA XZjwAwQBXZj2AwQAX56RMA8EAgACMAkDBwAqAOIAAQMwDQYJKoZIhvcNAQELBQAD ggEBAGfkiZCmK0vMVclb1rk3d8F9vB5OXXyJLGRoi7lZREqMXkg+l9uoEzWqmxXO GQWF2AbMx9MmbI+s33hkqwFsgkDMABmqwt7nkly8K5HlpuR9v1PZWUFD8w9qgzTu ZwQ2Gi3X0jGAAy5hyBQici49LXAkg6weJWp/sghbNwTiIy2ElEcesYJqkoPgso4z 3K+EnaNXQvwZ6iqMnl8/9vcs1R7F1xvKbu9Lr8wci7hdoMNyLDWruECKkStRpnXM djy2RUHBx8fMTemCEm3PiuZxXUv4+xZewQV3683xV9yrvWiRMrUh8VG6HcJ3Aeoz a3bCgRY2psE3GHIgk+Luxy4OfN8= -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:27 2026 by rpki-client