This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/KVyFy8VhCmWDFDfi6hznjqY-CiM.roa File: KVyFy8VhCmWDFDfi6hznjqY-CiM.roa (raw, json) Hash identifier: gxDIq6BgrSNUPikORcjw6F0p9+XkSRUjM2gZnMVK/i4= Subject key identifier: 29:5C:85:CB:C5:61:0A:65:83:14:37:E2:EA:1C:E7:8E:A6:3E:0A:23 Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88 Certificate serial: 019B7E38211E70ED1749554F4B9B7FCD1B74 Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/KVyFy8VhCmWDFDfi6hznjqY-CiM.roa Signing time: Fri 02 Jan 2026 10:19:26 +0000 ROA not before: Fri 02 Jan 2026 10:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207148 IP address blocks: 5.154.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:21:1e:70:ed:17:49:55:4f:4b:9b:7f:cd:1b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88 Validity Not Before: Jan 2 10:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=295c85cbc5610a65831437e2ea1ce78ea63e0a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d9:a9:70:95:8d:3b:51:89:35:81:62:18:6f: 74:d7:fe:69:97:52:18:91:92:d0:15:e9:3b:76:7a: dd:02:b5:e6:9b:50:58:f9:03:41:cd:6e:39:76:67: ad:9f:47:5b:e8:ed:c3:72:42:30:7d:66:a7:05:a1: 7a:58:7c:11:9f:dc:32:99:ff:f0:85:89:50:80:86: a0:fc:92:57:81:d7:ad:f7:eb:59:09:08:bf:0d:4b: 6e:77:d3:19:d4:98:95:57:5d:b6:0d:53:96:e4:36: 07:79:36:41:9b:6b:00:38:98:29:dd:28:f8:78:ad: dc:56:88:6c:71:17:ae:c9:55:73:4a:ca:bf:f0:f4: 5f:90:fe:d8:a1:8c:7a:da:36:75:e8:96:de:59:c0: d7:a1:c2:47:75:bf:d5:81:2a:6b:69:4b:79:8c:af: 78:36:f4:f9:98:04:9a:bb:31:3c:de:1e:4a:13:1c: d8:6f:5f:88:41:e7:f2:cf:c3:df:8b:f6:b3:fd:90: aa:a2:33:4a:07:90:75:86:ed:01:32:c2:c6:c0:80: ca:1c:2a:2b:4c:87:19:4c:e3:eb:af:57:19:2b:55: b1:28:1a:21:02:b1:26:d5:cd:75:7a:96:be:f7:ef: ec:98:c2:5d:28:0a:b8:05:90:f0:5c:fb:18:d6:f2: 79:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5C:85:CB:C5:61:0A:65:83:14:37:E2:EA:1C:E7:8E:A6:3E:0A:23 X509v3 Authority Key Identifier: keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/KVyFy8VhCmWDFDfi6hznjqY-CiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.236.0/24 Signature Algorithm: sha256WithRSAEncryption 47:b0:a4:4b:b2:ca:82:b2:a2:09:f3:c6:df:e2:09:23:7e:70: 53:75:1d:0f:d5:4c:1b:f2:88:4b:ef:4b:d0:60:57:3d:0d:c5: 61:42:f6:b7:b0:d2:d5:93:47:ca:1a:2a:1a:d0:a1:b9:03:20: 7e:26:97:89:24:8f:92:14:a2:7b:34:50:7a:ee:e7:43:f6:a7: f8:97:47:75:fd:6d:c1:9b:1b:0b:2a:26:88:25:15:b6:66:83: e8:66:cb:5a:ed:00:02:ef:da:06:1a:0c:0d:89:f3:bc:a9:6c: 0f:14:69:dc:6a:8f:24:8c:a4:61:e7:ed:8f:dd:90:22:52:84: 47:4d:04:86:07:8f:3d:df:17:50:89:e8:3c:ff:de:99:68:ab: f0:62:6d:0c:1f:54:31:c2:19:e5:3d:6e:f4:2c:56:b8:14:f0: 6f:71:80:5e:b5:b8:ba:d6:a4:3e:58:61:20:61:70:f0:a1:2a: 92:6e:0b:84:f4:0e:cd:bd:d6:cb:45:ab:a6:41:35:d8:e1:5c: bd:e7:94:30:33:72:2d:e1:a8:63:a4:a6:d7:43:d6:cd:59:0b: 98:f9:81:0d:90:6d:77:b9:70:2d:b8:5f:24:49:a4:9f:68:af: 3b:d0:35:59:25:aa:b6:74:7d:b8:d1:00:52:49:d9:93:02:ac: 12:05:b6:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCEecO0XSVVPS5t/zRt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYTgxZjA3YTQ5M2EzZTY0Mzc1MmU2NmJkODE0NmY1Nzcx YWRmODgwHhcNMjYwMTAyMTAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTVjODVjYmM1NjEwYTY1ODMxNDM3ZTJlYTFjZTc4ZWE2M2UwYTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NmpcJWNO1GJNYFiGG901/5pl1IY kZLQFek7dnrdArXmm1BY+QNBzW45dmetn0db6O3DckIwfWanBaF6WHwRn9wymf/w hYlQgIag/JJXgdet9+tZCQi/DUtud9MZ1JiVV122DVOW5DYHeTZBm2sAOJgp3Sj4 eK3cVohscReuyVVzSsq/8PRfkP7YoYx62jZ16JbeWcDXocJHdb/VgSpraUt5jK94 NvT5mASauzE83h5KExzYb1+IQefyz8Pfi/az/ZCqojNKB5B1hu0BMsLGwIDKHCor TIcZTOPrr1cZK1WxKBohArEm1c11epa+9+/smMJdKAq4BZDwXPsY1vJ5/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFClchcvFYQplgxQ34uoc546mPgojMB8GA1UdIwQY MBaAFKuoHwekk6PmQ3UuZr2BRvV3Gt+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgt NTFjM2NjY2U3MmRmLzEvS1Z5Rnk4VmhDbVdERkRmaTZoem5qcVktQ2lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgtNTFjM2NjY2U3MmRm LzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZrsMA0G CSqGSIb3DQEBCwUAA4IBAQBHsKRLssqCsqIJ88bf4gkjfnBTdR0P1Uwb8ohL70vQ YFc9DcVhQva3sNLVk0fKGioa0KG5AyB+JpeJJI+SFKJ7NFB67udD9qf4l0d1/W3B mxsLKiaIJRW2ZoPoZsta7QAC79oGGgwNifO8qWwPFGncao8kjKRh5+2P3ZAiUoRH TQSGB4893xdQieg8/96ZaKvwYm0MH1QxwhnlPW70LFa4FPBvcYBetbi61qQ+WGEg YXDwoSqSbguE9A7NvdbLRaumQTXY4Vy955QwM3It4ahjpKbXQ9bNWQuY+YENkG13 uXAtuF8kSaSfaK870DVZJaq2dH240QBSSdmTAqwSBbZ5 -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:40 2026 by rpki-client