This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/KQ8fXNipeYkCVN179So0D0TWljQ.roa File: KQ8fXNipeYkCVN179So0D0TWljQ.roa (raw, json) Hash identifier: XxbQ5bE5bKEdW9jXnVZEomEiZqEsNztBM796TwnerwI= Subject key identifier: 29:0F:1F:5C:D8:A9:79:89:02:54:DD:7B:F5:2A:34:0F:44:D6:96:34 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019B77C72675C06B2DFF058568CBADC31083 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/KQ8fXNipeYkCVN179So0D0TWljQ.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198192 IP address blocks: 45.10.128.0/24 maxlen: 24 45.131.52.0/23 maxlen: 23 45.131.54.0/23 maxlen: 23 158.255.236.0/23 maxlen: 23 185.92.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:26:75:c0:6b:2d:ff:05:85:68:cb:ad:c3:10:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=290f1f5cd8a979890254dd7bf52a340f44d69634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:66:86:cf:c0:39:aa:0e:f2:a9:e3:cd:a3:12: 41:ce:3a:36:78:2d:91:a7:d0:2a:17:df:b6:37:0d: 5d:2a:c4:fa:09:19:cb:d2:30:16:c8:04:bb:db:c2: 38:0e:29:79:a3:fc:38:f7:be:48:13:2d:9a:73:b6: d4:49:b8:0b:27:0d:ed:7b:2e:0e:3c:c1:97:27:e8: 4a:a2:ff:02:74:55:42:0b:cd:0a:7e:50:5f:d4:b1: 87:98:7b:57:3c:c7:c8:08:3e:a3:00:b3:01:68:53: 85:8c:37:0d:53:93:fd:f1:cc:d3:69:3d:ee:ed:1f: 41:bf:e9:bd:11:e8:6e:22:35:83:20:f1:a7:bf:a1: 1c:b4:db:d3:3d:ef:38:8f:5c:d7:ed:8a:ed:42:f6: 45:ce:70:b8:4b:a9:62:d4:f4:4f:04:88:51:2a:cb: f2:01:e1:21:9a:8f:2e:f3:f4:47:4a:3c:fa:e2:99: f0:65:ec:4e:e5:7b:fc:06:59:10:58:8f:c5:9a:16: 4b:1b:7a:67:39:09:ae:01:f5:a8:36:07:78:af:8e: 12:bd:a1:03:23:64:e4:70:f0:da:75:59:65:a2:e2: d9:33:0f:35:5c:cb:09:61:21:f3:0e:47:80:d3:33: bc:c5:1b:ab:b8:04:a9:fb:36:bb:e2:7f:1c:10:c5: cd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0F:1F:5C:D8:A9:79:89:02:54:DD:7B:F5:2A:34:0F:44:D6:96:34 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/KQ8fXNipeYkCVN179So0D0TWljQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.128.0/24 45.131.52.0/22 158.255.236.0/23 185.92.237.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:31:2e:dd:d6:d1:9b:75:23:6b:18:49:e0:27:bd:a5:1e:1c: b0:46:fd:1b:d4:bb:42:64:7e:90:b8:20:03:48:af:18:fe:95: b3:0a:26:1d:dd:d5:26:68:63:11:7e:1e:b2:b0:89:c8:34:94: a8:ad:3b:e7:db:5e:97:a8:ad:31:19:51:7a:f6:38:2e:86:11: 07:ec:f9:de:84:ac:aa:10:ef:a1:1f:1c:fa:ef:49:07:6f:35: 9d:72:97:a3:06:cc:0e:15:f7:20:71:3f:d1:bf:65:6f:40:14: 65:b3:fa:0b:de:51:b6:76:9f:d9:77:57:30:1d:43:a2:8b:bc: 20:e7:86:a4:3f:1f:69:07:14:27:25:78:05:fc:72:04:b4:1a: b6:8b:de:3c:f6:6e:4a:b8:c0:06:e3:86:18:ad:d2:06:d1:62: 81:00:27:36:c5:1d:05:13:29:ae:d2:3a:34:c8:86:74:36:d8: 06:30:c9:89:17:7d:18:f6:2e:c4:a3:0c:fe:b1:37:fa:1c:9a: 7b:d5:8f:3a:d9:35:69:c5:05:3a:b5:4a:18:95:75:d8:5e:7b: da:bd:d7:ba:f9:b6:1a:47:33:8a:ef:73:52:af:39:e2:e3:f1: bc:cf:00:d2:b2:6d:f0:f5:76:42:4e:99:6a:6c:e5:7e:60:28: 6d:63:44:33 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xyZ1wGst/wWFaMutwxCDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTBmMWY1Y2Q4YTk3OTg5MDI1NGRkN2JmNTJhMzQwZjQ0ZDY5NjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGaGz8A5qg7yqePNoxJBzjo2eC2R p9AqF9+2Nw1dKsT6CRnL0jAWyAS728I4Dil5o/w4975IEy2ac7bUSbgLJw3tey4O PMGXJ+hKov8CdFVCC80KflBf1LGHmHtXPMfICD6jALMBaFOFjDcNU5P98czTaT3u 7R9Bv+m9EehuIjWDIPGnv6EctNvTPe84j1zX7YrtQvZFznC4S6li1PRPBIhRKsvy AeEhmo8u8/RHSjz64pnwZexO5Xv8BlkQWI/FmhZLG3pnOQmuAfWoNgd4r44SvaED I2TkcPDadVllouLZMw81XMsJYSHzDkeA0zO8xRuruASp+za74n8cEMXNPwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCkPH1zYqXmJAlTde/UqNA9E1pY0MB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvS1E4ZlhOaXBlWWtDVk4xNzlTbzBEMFRXbGpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALQqAAwQC LYM0AwQBnv/sAwQAuVztMA0GCSqGSIb3DQEBCwUAA4IBAQBMMS7d1tGbdSNrGEng J72lHhywRv0b1LtCZH6QuCADSK8Y/pWzCiYd3dUmaGMRfh6ysInINJSorTvn216X qK0xGVF69jguhhEH7PnehKyqEO+hHxz670kHbzWdcpejBswOFfcgcT/Rv2VvQBRl s/oL3lG2dp/Zd1cwHUOii7wg54akPx9pBxQnJXgF/HIEtBq2i9489m5KuMAG44YY rdIG0WKBACc2xR0FEymu0jo0yIZ0NtgGMMmJF30Y9i7Eowz+sTf6HJp71Y862TVp xQU6tUoYlXXYXnvavde6+bYaRzOK73NSrzni4/G8zwDSsm3w9XZCTplqbOV+YCht Y0Qz -----END CERTIFICATE-----Generated at Sun Jan 25 16:15:28 2026 by rpki-client