This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/KATv9TIszgZ-B1Uoi7DkR6JPCXQ.roa File: KATv9TIszgZ-B1Uoi7DkR6JPCXQ.roa (raw, json) Hash identifier: /5lbXOjfh+/6SdaUgfM3MyOsJ/JBXtRsEqHn8qkyRLY= Subject key identifier: 28:04:EF:F5:32:2C:CE:06:7E:07:55:28:8B:B0:E4:47:A2:4F:09:74 Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607 Certificate serial: 019B7C7FBD760B4CE880F98A1CE7773D480B Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/KATv9TIszgZ-B1Uoi7DkR6JPCXQ.roa Signing time: Fri 02 Jan 2026 02:18:24 +0000 ROA not before: Fri 02 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24845 IP address blocks: 194.113.40.0/23 maxlen: 23 194.113.40.0/24 maxlen: 24 194.113.41.0/24 maxlen: 24 194.246.128.0/20 maxlen: 20 194.246.144.0/21 maxlen: 21 194.246.145.0/24 maxlen: 24 194.246.147.0/24 maxlen: 24 194.246.148.0/23 maxlen: 23 194.246.150.0/23 maxlen: 23 194.246.152.0/22 maxlen: 22 194.246.152.0/24 maxlen: 24 194.246.153.0/24 maxlen: 24 194.246.160.0/19 maxlen: 19 194.246.164.0/24 maxlen: 24 194.246.165.0/24 maxlen: 24 194.246.166.0/24 maxlen: 24 194.246.167.0/24 maxlen: 24 194.246.168.0/24 maxlen: 24 194.246.169.0/24 maxlen: 24 194.246.170.0/24 maxlen: 24 194.246.171.0/24 maxlen: 24 194.246.192.0/18 maxlen: 18 194.246.224.0/24 maxlen: 24 2a00:1830::/32 maxlen: 32 2a00:1830::/48 maxlen: 48 2a00:1830:a001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:bd:76:0b:4c:e8:80:f9:8a:1c:e7:77:3d:48:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607 Validity Not Before: Jan 2 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2804eff5322cce067e0755288bb0e447a24f0974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:21:cf:db:2d:b5:0c:ce:08:f0:e7:ae:d8:25: b4:23:b7:2d:a8:62:d6:ea:86:df:47:9e:5d:3c:3a: 7d:57:3f:ba:36:63:79:85:51:a1:8b:38:dc:87:a5: d8:6d:aa:46:8e:4d:b7:85:9d:58:9f:86:d9:93:f7: 5b:f9:a9:fd:bc:e6:7f:7a:cf:f9:54:83:fb:72:31: 6a:05:2d:c7:5c:d3:7c:81:91:35:a9:e5:f3:d8:8f: 72:7a:cf:34:8b:ff:47:8b:cb:b1:59:e5:7f:76:14: cf:6f:7f:d7:8b:15:ff:d0:25:3d:79:a1:74:67:35: ca:a9:04:2e:41:54:3a:41:8d:1b:d4:4e:9f:5c:dd: f8:2e:0d:30:13:c9:60:e6:eb:82:e1:bc:62:57:4e: 46:67:de:3e:92:79:84:12:3a:da:4f:7f:fa:54:96: 86:b4:aa:fd:8b:a5:c3:d0:0b:e5:58:e8:e5:56:26: cc:08:a3:70:dd:16:72:81:03:16:3b:41:6a:30:a8: eb:2d:1f:5a:51:2a:b9:b6:af:1f:4e:2e:10:ac:65: 6f:0c:13:09:53:2a:a3:22:f3:a6:3e:9c:d2:30:e7: 2e:49:89:e9:73:b5:e1:89:ac:ec:fb:8f:87:26:a2: 73:d7:3f:cf:53:fe:51:f1:8c:c0:0d:33:fe:55:f9: 7f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:04:EF:F5:32:2C:CE:06:7E:07:55:28:8B:B0:E4:47:A2:4F:09:74 X509v3 Authority Key Identifier: keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/KATv9TIszgZ-B1Uoi7DkR6JPCXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.40.0/23 194.246.128.0-194.246.155.255 194.246.160.0-194.246.255.255 IPv6: 2a00:1830::/32 Signature Algorithm: sha256WithRSAEncryption 5d:6c:3d:ea:c4:a5:55:1f:ce:bb:3e:d0:dd:d4:d0:1c:68:ca: 40:27:62:82:ef:d6:80:4b:f2:86:58:ee:46:e5:8c:b0:7a:e6: e3:c0:7f:5e:03:22:0c:6f:14:0a:aa:97:75:3c:01:ad:fd:d9: fc:e9:81:fb:f4:36:d5:9a:2f:6b:96:95:4b:dd:c9:e6:57:9d: 66:4e:d0:a7:51:ad:64:f1:3a:64:4f:5e:5c:61:68:a6:7e:71: 36:d1:33:7d:ea:53:7b:06:ba:fd:b0:f2:aa:95:a9:c1:f4:d7: 78:cc:eb:4c:93:48:b6:fb:82:fc:36:7f:70:4e:07:0e:02:02: 74:b2:55:b4:a2:d1:85:dc:03:1c:ef:6e:09:1a:9c:f8:8f:84: 56:9f:ba:34:0a:3b:e1:15:b7:3b:08:87:10:3e:41:0a:fb:42: 32:89:8e:56:bc:1f:ee:13:1e:72:be:7d:b7:32:7c:03:a0:1c: 48:25:ab:86:4b:b9:09:21:45:c0:22:a7:f8:c2:c8:a2:0b:6b: 0e:6b:73:dc:16:a2:7b:4b:d8:a9:e4:81:14:28:04:97:54:09: 65:50:ea:8c:9e:5c:32:ea:e1:78:35:57:c5:a9:d2:f9:fc:89: 2d:45:f8:25:1a:90:6e:b2:25:05:31:c0:a1:88:04:17:5f:1c: 93:a9:9a:c8 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt8f712C0zogPmKHOd3PUgLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMTIwYzZhNmM4Y2YxNzI2ZTdkNDhlMzE0YTE2Y2NkMDVl Zjg2MDcwHhcNMjYwMTAyMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODA0ZWZmNTMyMmNjZTA2N2UwNzU1Mjg4YmIwZTQ0N2EyNGYwOTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCHP2y21DM4I8Oeu2CW0I7ctqGLW 6obfR55dPDp9Vz+6NmN5hVGhizjch6XYbapGjk23hZ1Yn4bZk/db+an9vOZ/es/5 VIP7cjFqBS3HXNN8gZE1qeXz2I9yes80i/9Hi8uxWeV/dhTPb3/XixX/0CU9eaF0 ZzXKqQQuQVQ6QY0b1E6fXN34Lg0wE8lg5uuC4bxiV05GZ94+knmEEjraT3/6VJaG tKr9i6XD0AvlWOjlVibMCKNw3RZygQMWO0FqMKjrLR9aUSq5tq8fTi4QrGVvDBMJ UyqjIvOmPpzSMOcuSYnpc7Xhiazs+4+HJqJz1z/PU/5R8YzADTP+Vfl/8wIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFCgE7/UyLM4GfgdVKIuw5EeiTwl0MB8GA1UdIwQY MBaAFCMSDGpsjPFybn1I4xShbM0F74YHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xZmFkY2UtN2ZhNy00YzRjLWJkZWQt ZTRiNzAyZjE2MTE2LzEvS0FUdjlUSXN6Z1otQjFVb2k3RGtSNkpQQ1hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xZmFkY2UtN2ZhNy00YzRjLWJkZWQtZTRiNzAyZjE2MTE2 LzEvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAnBAIAATAhAwQBwnEoMAwD BAfC9oADBALC9pgwCwMEBcL2oAMDAML2MA0EAgACMAcDBQAqABgwMA0GCSqGSIb3 DQEBCwUAA4IBAQBdbD3qxKVVH867PtDd1NAcaMpAJ2KC79aAS/KGWO5G5Yyweubj wH9eAyIMbxQKqpd1PAGt/dn86YH79DbVmi9rlpVL3cnmV51mTtCnUa1k8TpkT15c YWimfnE20TN96lN7Brr9sPKqlanB9Nd4zOtMk0i2+4L8Nn9wTgcOAgJ0slW0otGF 3AMc724JGpz4j4RWn7o0CjvhFbc7CIcQPkEK+0IyiY5WvB/uEx5yvn23MnwDoBxI JauGS7kJIUXAIqf4wsiiC2sOa3PcFqJ7S9ip5IEUKASXVAllUOqMnlwy6uF4NVfF qdL5/IktRfglGpBusiUFMcChiAQXXxyTqZrI -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:05 2026 by rpki-client