This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/kiz7IlKh-UDi6rS-liSvr-XLZj0.roa File: kiz7IlKh-UDi6rS-liSvr-XLZj0.roa (raw, json) Hash identifier: fYE3W6s3a7j6dTVOVi+YslQybRuhNmifh/ujnuOCMOM= Subject key identifier: 92:2C:FB:22:52:A1:F9:40:E2:EA:B4:BE:96:24:AF:AF:E5:CB:66:3D Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605 Certificate serial: 019B7F15AD47D97154A59695418FFDC90DE6 Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/kiz7IlKh-UDi6rS-liSvr-XLZj0.roa Signing time: Fri 02 Jan 2026 14:21:25 +0000 ROA not before: Fri 02 Jan 2026 14:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29577 IP address blocks: 92.249.56.0/22 maxlen: 22 92.249.56.0/24 maxlen: 24 92.249.57.0/24 maxlen: 24 92.249.58.0/24 maxlen: 24 92.249.59.0/24 maxlen: 24 176.101.32.0/20 maxlen: 20 176.101.32.0/24 maxlen: 24 176.101.33.0/24 maxlen: 24 176.101.34.0/24 maxlen: 24 176.101.35.0/24 maxlen: 24 176.101.36.0/24 maxlen: 24 176.101.37.0/24 maxlen: 24 176.101.38.0/24 maxlen: 24 176.101.39.0/24 maxlen: 24 176.101.40.0/24 maxlen: 24 176.101.41.0/24 maxlen: 24 176.101.42.0/24 maxlen: 24 176.101.43.0/24 maxlen: 24 176.101.44.0/24 maxlen: 24 176.101.45.0/24 maxlen: 24 176.101.46.0/24 maxlen: 24 176.101.47.0/24 maxlen: 24 176.101.48.0/21 maxlen: 21 176.101.48.0/24 maxlen: 24 176.101.49.0/24 maxlen: 24 176.101.50.0/24 maxlen: 24 176.101.51.0/24 maxlen: 24 176.101.52.0/24 maxlen: 24 176.101.53.0/24 maxlen: 24 176.101.54.0/24 maxlen: 24 176.101.55.0/24 maxlen: 24 194.146.148.0/22 maxlen: 22 194.146.148.0/24 maxlen: 24 194.146.149.0/24 maxlen: 24 194.146.150.0/24 maxlen: 24 194.146.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ad:47:d9:71:54:a5:96:95:41:8f:fd:c9:0d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605 Validity Not Before: Jan 2 14:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=922cfb2252a1f940e2eab4be9624afafe5cb663d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:03:6e:50:c9:68:3c:b2:41:be:25:d8:0c:fd: 51:34:b5:20:c9:a4:70:00:56:b5:88:a0:7b:dc:50: 26:30:11:62:c9:f4:53:d8:a2:a2:05:5d:67:d1:82: e7:fd:b1:f7:92:28:e0:06:d7:bc:8c:c6:e3:9c:bb: b4:71:bf:4f:a8:dd:47:6e:35:86:e3:40:33:35:de: 6b:7e:ea:3e:8a:12:51:b0:02:ec:b6:f0:ef:2c:30: c3:5d:75:77:5d:d6:8a:5b:7b:93:83:a6:52:ff:b9: 73:f7:f6:ae:4b:be:6b:a2:8e:70:f6:40:38:67:4d: 28:be:ce:e6:1e:97:4a:fe:74:1b:a7:c5:be:b3:25: 54:b8:3e:c6:83:2e:6f:3e:f1:ba:ba:11:52:1a:ec: 57:45:cc:a9:df:34:4a:de:7e:48:b3:a4:34:57:af: ae:75:78:b8:3c:53:3e:58:b1:88:bc:3a:5c:f1:f3: 03:bc:8c:43:12:fd:67:8d:6e:5b:2c:4e:90:cc:82: 29:30:95:b7:f7:18:ae:24:7b:00:80:41:e6:dc:1a: 3e:69:a9:fb:7c:cf:6f:6d:48:3d:31:31:4e:bf:e3: da:d4:97:6b:52:92:72:c2:0b:aa:74:1e:a6:0e:d5: ed:53:ab:6f:4b:e7:12:78:8a:fb:f3:6d:10:f9:7e: 1c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2C:FB:22:52:A1:F9:40:E2:EA:B4:BE:96:24:AF:AF:E5:CB:66:3D X509v3 Authority Key Identifier: keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/kiz7IlKh-UDi6rS-liSvr-XLZj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.56.0/22 176.101.32.0-176.101.55.255 194.146.148.0/22 Signature Algorithm: sha256WithRSAEncryption 79:62:9d:60:c1:48:14:64:fb:91:1d:70:b1:a3:ac:30:10:05: ec:a5:ab:a6:83:f8:89:e8:a4:32:a8:8b:92:97:ec:66:44:96: b9:a6:59:46:d7:2c:d9:fa:83:c5:24:6c:e4:76:40:78:1c:c8: ed:0f:a5:30:14:4c:6f:80:86:df:0c:bf:d1:eb:63:51:e4:9f: b7:06:06:68:0b:4a:05:e6:8f:5a:ab:c4:3c:20:78:bd:10:22: d5:c5:d4:8e:32:81:9d:02:f2:f8:30:2e:f4:a3:6c:97:f7:65: 2a:de:5b:ba:18:7e:e6:cd:46:2e:c7:ff:c8:ce:5f:7e:9a:4e: 7b:34:68:6c:e6:58:f6:93:2c:25:48:8e:3a:73:e1:b2:38:f8: 17:cc:bf:03:65:25:02:2c:64:6d:fa:25:e8:b5:f9:4b:e3:19: 56:84:82:16:66:e1:88:82:e7:63:54:cd:d3:f1:c9:17:0f:df: 4b:03:88:39:cb:fc:19:53:c0:41:a8:a6:4e:45:62:12:2c:33: 3f:43:20:1f:92:a6:c9:57:ac:83:70:de:61:84:c6:d4:77:17: 52:c4:1b:65:54:b2:e8:1c:f0:65:f5:e2:47:2e:9f:33:e4:a0: 01:7d:a5:6f:5a:d9:a5:fd:c6:40:ed:70:b8:f7:37:35:53:5f: f0:49:16:d3 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/Fa1H2XFUpZaVQY/9yQ3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDhkYzEwMjE4YWM2ZGI3OTQzMGFlN2M0NDUxNTU5MDQx N2Q2MDUwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjJjZmIyMjUyYTFmOTQwZTJlYWI0YmU5NjI0YWZhZmU1Y2I2NjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQNuUMloPLJBviXYDP1RNLUgyaRw AFa1iKB73FAmMBFiyfRT2KKiBV1n0YLn/bH3kijgBte8jMbjnLu0cb9PqN1HbjWG 40AzNd5rfuo+ihJRsALstvDvLDDDXXV3XdaKW3uTg6ZS/7lz9/auS75roo5w9kA4 Z00ovs7mHpdK/nQbp8W+syVUuD7Ggy5vPvG6uhFSGuxXRcyp3zRK3n5Is6Q0V6+u dXi4PFM+WLGIvDpc8fMDvIxDEv1njW5bLE6QzIIpMJW39xiuJHsAgEHm3Bo+aan7 fM9vbUg9MTFOv+Pa1JdrUpJywguqdB6mDtXtU6tvS+cSeIr7820Q+X4cOQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFJIs+yJSoflA4uq0vpYkr6/ly2Y9MB8GA1UdIwQY MBaAFF8I3BAhisbbeUMK58RFFVkEF9YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjct NWQzYTQyMWEwZjEwLzEva2l6N0lsS2gtVURpNnJTLWxpU3ZyLVhMWmowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjctNWQzYTQyMWEwZjEw LzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCXPk4MAwD BAWwZSADBAOwZTADBALCkpQwDQYJKoZIhvcNAQELBQADggEBAHlinWDBSBRk+5Ed cLGjrDAQBeylq6aD+InopDKoi5KX7GZElrmmWUbXLNn6g8UkbOR2QHgcyO0PpTAU TG+Aht8Mv9HrY1Hkn7cGBmgLSgXmj1qrxDwgeL0QItXF1I4ygZ0C8vgwLvSjbJf3 ZSreW7oYfubNRi7H/8jOX36aTns0aGzmWPaTLCVIjjpz4bI4+BfMvwNlJQIsZG36 Jei1+UvjGVaEghZm4YiC52NUzdPxyRcP30sDiDnL/BlTwEGopk5FYhIsMz9DIB+S pslXrINw3mGExtR3F1LEG2VUsugc8GX14kcunzPkoAF9pW9a2aX9xkDtcLj3NzVT X/BJFtM= -----END CERTIFICATE-----Generated at Mon Jan 26 05:54:25 2026 by rpki-client