This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/KcP5p58okuuNNOE7nZKijS0h5d0.roa File: KcP5p58okuuNNOE7nZKijS0h5d0.roa (raw, json) Hash identifier: trAbLBWzYhP0G3HzsAhTpryuzhVNFiHQ+IsTczUb860= Subject key identifier: 29:C3:F9:A7:9F:28:92:EB:8D:34:E1:3B:9D:92:A2:8D:2D:21:E5:DD Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C75A7536078C01D0423FE2FCCE1377 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/KcP5p58okuuNNOE7nZKijS0h5d0.roa Signing time: Thu 01 Jan 2026 04:18:32 +0000 ROA not before: Thu 01 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3168 IP address blocks: 62.89.197.0/24 maxlen: 24 62.89.206.0/24 maxlen: 24 62.89.207.0/24 maxlen: 24 178.176.129.0/24 maxlen: 24 178.176.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5a:75:36:07:8c:01:d0:42:3f:e2:fc:ce:13:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29c3f9a79f2892eb8d34e13b9d92a28d2d21e5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ab:5a:8f:8a:fd:67:9d:9d:ef:81:6f:f6:52: ff:2e:6d:d6:da:a1:db:f7:d7:05:af:40:56:ea:bc: b0:f0:67:61:11:47:d9:25:30:f5:02:38:85:36:41: 37:ad:68:af:71:c6:39:a3:1a:e1:06:96:74:d6:b9: 9f:09:3d:a3:ea:f3:22:b2:97:40:db:86:ba:a9:4f: 5c:c5:cf:67:1b:9d:f2:90:38:6f:02:2c:62:7e:61: 39:c3:e3:e5:09:86:24:69:8b:49:ba:a8:d3:66:72: d0:c2:08:73:7f:3f:6f:a3:78:51:59:ff:a1:8a:f7: 82:af:ae:67:70:29:cd:e2:1e:b2:24:41:4b:36:50: 0f:76:83:d4:05:71:35:40:9e:6a:3d:57:2f:ce:cd: 2a:ab:98:35:82:c9:69:e7:71:96:71:47:f2:02:64: 20:f6:0e:dd:9d:f2:a1:fc:de:b4:49:5c:de:93:f4: 7d:8a:e9:58:86:8c:44:04:2f:b8:13:35:47:ef:8b: 92:38:df:f8:e8:10:d5:b2:7e:71:27:47:9c:36:0e: f2:94:f9:29:f7:ed:40:9f:e2:b9:f5:fe:98:44:55: 78:67:52:da:bb:1d:9c:b6:97:a8:99:75:b8:27:4c: 8c:e0:78:9c:d4:97:75:93:ef:53:e8:0d:f5:3d:21: b7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C3:F9:A7:9F:28:92:EB:8D:34:E1:3B:9D:92:A2:8D:2D:21:E5:DD X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/KcP5p58okuuNNOE7nZKijS0h5d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.89.197.0/24 62.89.206.0/23 178.176.129.0/24 178.176.132.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:93:07:80:7f:be:03:da:62:e5:a2:5e:f8:6b:27:f0:8e:70: eb:fd:4e:74:be:e7:9a:10:54:06:19:c9:72:7b:f4:07:bf:a1: 84:33:12:99:1b:24:e8:00:24:4f:ef:f5:bb:83:4e:f0:24:fc: 54:e8:9b:8d:b3:c3:92:b1:9e:9c:93:3c:c0:ee:4b:f3:40:60: 96:17:a8:d6:c7:8b:f0:26:42:a5:5d:ba:fc:59:c1:61:1e:7d: 7c:6f:53:e9:e6:b0:ac:29:00:ec:67:f9:7a:a3:7e:98:86:94: d4:ef:e8:dd:2c:28:a5:93:d7:2d:42:c5:f7:6b:79:64:3f:b2: 67:fb:e6:2f:8a:26:cf:77:73:2f:36:41:53:f6:fe:a1:57:d2: 74:74:ca:d8:52:6f:29:21:04:eb:4c:9c:74:fd:0d:f2:85:06: d4:f6:0e:d6:87:16:44:65:ed:df:fc:58:dd:d4:c2:3c:46:2b: bd:d1:31:e8:ed:a8:bf:79:8e:07:f1:ca:10:1c:4b:bf:9a:0d: 5e:11:15:de:1c:89:97:9e:7d:3a:12:d7:c2:2f:33:6a:91:8a: 14:0e:78:60:f6:3a:08:47:85:00:5a:51:20:50:7d:64:b9:5f: 0d:a9:95:18:8d:5a:3b:e6:3a:11:c8:0d:76:83:61:e0:47:c7: f1:1d:fe:ce -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3x1p1NgeMAdBCP+L8zhN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWMzZjlhNzlmMjg5MmViOGQzNGUxM2I5ZDkyYTI4ZDJkMjFlNWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKtaj4r9Z52d74Fv9lL/Lm3W2qHb 99cFr0BW6ryw8GdhEUfZJTD1AjiFNkE3rWivccY5oxrhBpZ01rmfCT2j6vMispdA 24a6qU9cxc9nG53ykDhvAixifmE5w+PlCYYkaYtJuqjTZnLQwghzfz9vo3hRWf+h iveCr65ncCnN4h6yJEFLNlAPdoPUBXE1QJ5qPVcvzs0qq5g1gslp53GWcUfyAmQg 9g7dnfKh/N60SVzek/R9iulYhoxEBC+4EzVH74uSON/46BDVsn5xJ0ecNg7ylPkp 9+1An+K59f6YRFV4Z1Laux2ctpeomXW4J0yM4Hic1Jd1k+9T6A31PSG3GQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCnD+aefKJLrjTThO52Soo0tIeXdMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvS2NQNXA1OG9rdXVOTk9FN25aS2lqUzBoNWQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPlnFAwQB PlnOAwQAsrCBAwQAsrCEMA0GCSqGSIb3DQEBCwUAA4IBAQAdkweAf74D2mLlol74 ayfwjnDr/U50vueaEFQGGclye/QHv6GEMxKZGyToACRP7/W7g07wJPxU6JuNs8OS sZ6ckzzA7kvzQGCWF6jWx4vwJkKlXbr8WcFhHn18b1Pp5rCsKQDsZ/l6o36YhpTU 7+jdLCilk9ctQsX3a3lkP7Jn++YviibPd3MvNkFT9v6hV9J0dMrYUm8pIQTrTJx0 /Q3yhQbU9g7WhxZEZe3f/Fjd1MI8Riu90THo7ai/eY4H8coQHEu/mg1eERXeHImX nn06EtfCLzNqkYoUDnhg9joIR4UAWlEgUH1kuV8NqZUYjVo75joRyA12g2HgR8fx Hf7O -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:47 2026 by rpki-client