This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/kUXgXHjZh6Dhv7swtP0uScwOUOU.roa File: kUXgXHjZh6Dhv7swtP0uScwOUOU.roa (raw, json) Hash identifier: quIM8+yqzd47fNHZBFQKX0gUs534hYfsNXJItcjTlM4= Subject key identifier: 91:45:E0:5C:78:D9:87:A0:E1:BF:BB:30:B4:FD:2E:49:CC:0E:50:E5 Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4 Certificate serial: 019B7F83D913AE3CDEAF54B4866E78B4A302 Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/kUXgXHjZh6Dhv7swtP0uScwOUOU.roa Signing time: Fri 02 Jan 2026 16:21:45 +0000 ROA not before: Fri 02 Jan 2026 16:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 82.130.64.0/18 maxlen: 18 129.132.0.0/16 maxlen: 16 192.33.87.0/24 maxlen: 24 192.33.88.0/21 maxlen: 24 192.33.96.0/21 maxlen: 21 192.33.104.0/22 maxlen: 22 192.33.108.0/23 maxlen: 23 192.33.110.0/24 maxlen: 24 2001:67c:10ec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d9:13:ae:3c:de:af:54:b4:86:6e:78:b4:a3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4 Validity Not Before: Jan 2 16:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9145e05c78d987a0e1bfbb30b4fd2e49cc0e50e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:f8:77:3b:90:ad:c4:d3:c1:6c:60:5b:49: 68:1e:fd:79:1f:2b:f8:c9:9d:b2:36:9a:2e:6e:ca: 54:6f:e8:a3:80:43:a4:9d:3c:d7:d0:d4:0a:d2:f7: 7d:98:e8:d0:56:94:75:0d:08:f7:b8:6c:df:37:00: 0f:a6:d6:8a:bf:25:6a:6a:ea:b8:4a:53:4c:3c:7d: 45:f2:ed:27:90:ae:ae:a1:e2:e5:fe:b9:2c:42:66: 58:20:3f:0c:47:d3:45:81:3f:e2:dd:dd:49:81:a6: c6:a1:fc:dc:93:48:9c:ae:53:a4:5e:8f:e3:33:09: 9c:4b:89:92:e6:72:f8:38:0c:19:fa:96:aa:68:75: b6:44:91:fa:10:86:ed:0e:03:da:49:fb:2a:ce:cb: 56:02:33:fd:64:15:2f:90:12:56:66:29:32:62:79: 56:95:48:d0:33:c0:7f:f6:6b:b3:80:5e:bb:d4:d6: 5b:bc:00:a0:17:57:64:10:e5:00:68:bd:b8:a5:9a: ea:2a:a6:3a:7b:42:04:7b:a0:df:d6:ca:ca:34:82: 1b:d5:1b:d4:ac:b3:3a:20:0e:34:af:36:a5:58:e4: 05:24:18:7a:73:a9:e3:ae:4f:9f:24:45:bd:e1:25: 1f:da:08:53:bc:34:8a:e3:a4:a4:b5:83:76:f9:75: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:45:E0:5C:78:D9:87:A0:E1:BF:BB:30:B4:FD:2E:49:CC:0E:50:E5 X509v3 Authority Key Identifier: keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/kUXgXHjZh6Dhv7swtP0uScwOUOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.130.64.0/18 129.132.0.0/16 192.33.87.0-192.33.110.255 IPv6: 2001:67c:10ec::/48 Signature Algorithm: sha256WithRSAEncryption a1:d0:a5:66:6a:1b:d7:9d:c1:8e:13:7d:e8:57:7b:95:4b:b7: f7:b4:9b:98:b3:84:98:e4:5a:a0:f6:b3:6f:94:6c:d4:14:26: 76:16:10:89:74:c3:3e:57:72:33:66:de:c8:91:aa:0c:04:33: 67:a5:cd:78:2c:68:77:f5:a0:01:3f:98:33:14:c5:f4:e9:0b: 1a:72:fc:58:21:64:bd:df:5f:2b:0d:83:3f:a3:78:7a:5c:db: 31:de:22:7d:85:3f:6b:8b:8a:26:11:9b:fc:f3:bf:8a:6f:e5: b0:f9:82:4f:dd:70:a2:4d:7c:3f:4c:90:c2:dd:19:5a:de:ab: 12:97:6e:6c:fe:36:2d:49:38:25:f2:4e:40:35:38:a2:98:37: ae:a7:ff:ca:0b:c7:39:84:90:1f:9b:26:43:e3:ad:d2:04:81: 30:6c:b1:b8:23:ea:85:b6:d9:24:23:b3:15:da:a0:5a:40:13: f8:59:f1:34:5f:71:61:1e:8e:d5:e6:07:5f:a4:95:2c:2d:f2: bb:62:c4:82:89:31:e0:53:bd:11:6f:2e:fe:af:a7:36:7e:b2: 59:16:db:df:d2:d1:c8:4f:d9:31:28:70:17:0f:7e:98:5a:56: 94:75:63:bd:0f:9c:c6:21:63:a6:36:5d:db:dd:0e:52:b1:07: ea:8f:f1:d6 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt/g9kTrjzer1S0hm54tKMCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTgyNGJjNjMxY2NlZTFhZTk5ZDcxMDNhZmQyZGM3NGYx ZTI5YzQwHhcNMjYwMTAyMTYyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTQ1ZTA1Yzc4ZDk4N2EwZTFiZmJiMzBiNGZkMmU0OWNjMGU1MGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3T4dzuQrcTTwWxgW0loHv15Hyv4 yZ2yNpoubspUb+ijgEOknTzX0NQK0vd9mOjQVpR1DQj3uGzfNwAPptaKvyVqauq4 SlNMPH1F8u0nkK6uoeLl/rksQmZYID8MR9NFgT/i3d1JgabGofzck0icrlOkXo/j MwmcS4mS5nL4OAwZ+paqaHW2RJH6EIbtDgPaSfsqzstWAjP9ZBUvkBJWZikyYnlW lUjQM8B/9muzgF671NZbvACgF1dkEOUAaL24pZrqKqY6e0IEe6Df1srKNIIb1RvU rLM6IA40rzalWOQFJBh6c6njrk+fJEW94SUf2ghTvDSK46SktYN2+XW4UwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFJFF4Fx42Yeg4b+7MLT9LknMDlDlMB8GA1UdIwQY MBaAFI2oJLxjHM7hrpnXEDr9LcdPHinEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUt Mzg2YzFmOGIwNjQwLzEva1VYZ1hIalpoNkRodjdzd3RQMHVTY3dPVU9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUtMzg2YzFmOGIwNjQw LzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAfBAIAATAZAwQGUoJAAwMA gYQwDAMEAMAhVwMEAMAhbjAPBAIAAjAJAwcAIAEGfBDsMA0GCSqGSIb3DQEBCwUA A4IBAQCh0KVmahvXncGOE33oV3uVS7f3tJuYs4SY5Fqg9rNvlGzUFCZ2FhCJdMM+ V3IzZt7IkaoMBDNnpc14LGh39aABP5gzFMX06QsacvxYIWS9318rDYM/o3h6XNsx 3iJ9hT9ri4omEZv887+Kb+Ww+YJP3XCiTXw/TJDC3Rla3qsSl25s/jYtSTgl8k5A NTiimDeup//KC8c5hJAfmyZD463SBIEwbLG4I+qFttkkI7MV2qBaQBP4WfE0X3Fh Ho7V5gdfpJUsLfK7YsSCiTHgU70Rby7+r6c2frJZFtvf0tHIT9kxKHAXD36YWlaU dWO9D5zGIWOmNl3b3Q5SsQfqj/HW -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:23 2026 by rpki-client