This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/KqW4k975xNj0cUtZycmmIX1XgM4.roa File: KqW4k975xNj0cUtZycmmIX1XgM4.roa (raw, json) Hash identifier: o6fUVQ6g1g7jq909fubDW5lnQqRTlZGnY1BR5GgXL0k= Subject key identifier: 2A:A5:B8:93:DE:F9:C4:D8:F4:71:4B:59:C9:C9:A6:21:7D:57:80:CE Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05 Certificate serial: 019B7F80BC8D75A8ECCF033F6846444F4705 Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/KqW4k975xNj0cUtZycmmIX1XgM4.roa Signing time: Fri 02 Jan 2026 16:18:21 +0000 ROA not before: Fri 02 Jan 2026 16:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 5.8.255.0/24 maxlen: 24 93.119.18.0/24 maxlen: 24 188.240.194.0/23 maxlen: 23 195.189.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:bc:8d:75:a8:ec:cf:03:3f:68:46:44:4f:47:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05 Validity Not Before: Jan 2 16:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2aa5b893def9c4d8f4714b59c9c9a6217d5780ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:13:b3:84:55:b0:bb:7a:8a:0f:48:96:1f:2c: b4:19:08:f4:c6:11:44:ae:b3:f3:38:8e:4e:36:ff: 39:b8:77:2f:74:9e:2e:d4:26:ae:48:60:97:5b:01: fd:4c:57:9c:12:17:2e:88:f6:4c:7c:b9:a7:0e:0a: 12:a3:09:47:a8:39:cc:13:19:a2:ae:fd:c4:e7:37: 4c:3d:a4:89:c1:a5:aa:77:3d:ac:4d:0b:b4:84:cb: cb:e9:cb:3d:bf:74:b6:ab:eb:5b:24:27:fa:48:b8: 27:fb:fb:e0:82:16:cf:b8:2c:27:26:f8:48:0e:5e: 56:54:e1:58:71:af:b6:6e:f1:0a:55:6b:93:cb:3d: 32:41:95:2a:75:74:01:16:0c:ac:c9:1f:67:8a:01: 77:e6:fb:0a:2c:8c:e3:b6:4a:70:92:f5:e4:13:d4: ca:f9:5c:51:33:53:17:44:c8:f4:33:c5:ed:0a:19: b8:88:87:ab:02:ca:65:ba:3f:03:34:e8:24:21:f6: bf:39:94:5c:bb:cb:d0:5c:14:20:17:6d:14:b5:44: ea:e4:0a:69:dc:0a:1e:f0:e0:0e:7e:40:8a:56:35: a8:a3:a0:8c:2c:7e:fb:44:63:b3:6f:9e:a6:da:76: ec:02:d6:02:18:37:f7:8f:06:88:0d:b7:c8:3b:03: a8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A5:B8:93:DE:F9:C4:D8:F4:71:4B:59:C9:C9:A6:21:7D:57:80:CE X509v3 Authority Key Identifier: keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/KqW4k975xNj0cUtZycmmIX1XgM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.255.0/24 93.119.18.0/24 188.240.194.0/23 195.189.209.0/24 Signature Algorithm: sha256WithRSAEncryption a0:f5:8a:2a:7d:de:ad:15:7d:3f:00:db:3e:00:dd:ed:06:ca: 4b:f6:b3:c7:a3:59:ca:09:38:3e:e3:22:3c:5e:a8:05:7f:51: d5:2f:2d:9c:98:66:f3:a2:a4:d2:15:c4:c5:32:f1:29:95:2a: 39:d9:cf:c1:39:a9:d5:c4:8e:b8:48:ab:cf:56:1d:86:76:3e: 6a:2e:c7:23:60:68:dc:31:42:16:e5:b8:30:10:89:91:01:dc: 1c:fc:93:8d:7f:94:6f:bf:ea:96:49:ec:ee:5d:37:fe:10:53: 1f:7e:61:58:57:49:cd:c2:0d:0a:a0:75:53:a8:b9:dc:a5:a7: b2:76:5d:02:74:ed:0c:64:7e:d5:7f:b3:5f:3c:3d:9e:10:60: d0:d1:4c:f5:f6:ad:16:dc:30:77:a7:0c:95:07:e5:5e:54:2f: 16:62:a3:d5:b5:50:ec:54:6c:91:b5:12:05:dc:f1:2d:13:5c: 34:3a:00:f5:50:09:77:34:66:d0:79:e9:0b:87:56:44:57:a5: 9d:3b:5f:48:ca:0c:4a:af:82:55:8c:90:4d:c4:9b:88:1f:82: fe:49:79:3b:00:e6:7e:f6:f6:a8:89:d5:81:2b:5b:a3:21:b3: 1d:e6:54:0f:2c:6c:c1:e4:7a:a8:2a:2a:02:59:34:2b:e7:fa: ca:5d:bb:a6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/gLyNdajszwM/aEZET0cFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNjQyYjYwN2I5NGExNDNmZjQxYzU1NGM5MTNiZDVhNjUx ZjhjMDUwHhcNMjYwMTAyMTYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWE1Yjg5M2RlZjljNGQ4ZjQ3MTRiNTljOWM5YTYyMTdkNTc4MGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBOzhFWwu3qKD0iWHyy0GQj0xhFE rrPzOI5ONv85uHcvdJ4u1CauSGCXWwH9TFecEhcuiPZMfLmnDgoSowlHqDnMExmi rv3E5zdMPaSJwaWqdz2sTQu0hMvL6cs9v3S2q+tbJCf6SLgn+/vgghbPuCwnJvhI Dl5WVOFYca+2bvEKVWuTyz0yQZUqdXQBFgysyR9nigF35vsKLIzjtkpwkvXkE9TK +VxRM1MXRMj0M8XtChm4iIerAspluj8DNOgkIfa/OZRcu8vQXBQgF20UtUTq5App 3Aoe8OAOfkCKVjWoo6CMLH77RGOzb56m2nbsAtYCGDf3jwaIDbfIOwOogQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCqluJPe+cTY9HFLWcnJpiF9V4DOMB8GA1UdIwQY MBaAFABkK2B7lKFD/0HFVMkTvVplH4wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUt MTliYzdiZGNjYmMxLzEvS3FXNGs5NzV4TmowY1V0WnljbW1JWDFYZ000LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUtMTliYzdiZGNjYmMx LzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABQj/AwQA XXcSAwQBvPDCAwQAw73RMA0GCSqGSIb3DQEBCwUAA4IBAQCg9Yoqfd6tFX0/ANs+ AN3tBspL9rPHo1nKCTg+4yI8XqgFf1HVLy2cmGbzoqTSFcTFMvEplSo52c/BOanV xI64SKvPVh2Gdj5qLscjYGjcMUIW5bgwEImRAdwc/JONf5Rvv+qWSezuXTf+EFMf fmFYV0nNwg0KoHVTqLncpaeydl0CdO0MZH7Vf7NfPD2eEGDQ0Uz19q0W3DB3pwyV B+VeVC8WYqPVtVDsVGyRtRIF3PEtE1w0OgD1UAl3NGbQeekLh1ZEV6WdO19IygxK r4JVjJBNxJuIH4L+SXk7AOZ+9vaoidWBK1ujIbMd5lQPLGzB5HqoKioCWTQr5/rK Xbum -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:39 2026 by rpki-client