This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/kZmtDVSVgGgMJpsJJq7KdIdsgFo.roa File: kZmtDVSVgGgMJpsJJq7KdIdsgFo.roa (raw, json) Hash identifier: moH8+GUYjx+o0sIRMBUZYrzqVp98614FZz0mBDXmkqg= Subject key identifier: 91:99:AD:0D:54:95:80:68:0C:26:9B:09:26:AE:CA:74:87:6C:80:5A Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C760663039B0D0E2CC47A23FE9A9C7 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/kZmtDVSVgGgMJpsJJq7KdIdsgFo.roa Signing time: Thu 01 Jan 2026 04:18:33 +0000 ROA not before: Thu 01 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20632 IP address blocks: 46.47.192.0/18 maxlen: 18 62.182.128.0/21 maxlen: 21 79.171.8.0/21 maxlen: 21 80.247.176.0/20 maxlen: 20 81.3.128.0/18 maxlen: 18 81.24.128.0/20 maxlen: 20 82.140.64.0/18 maxlen: 18 82.140.93.0/24 maxlen: 24 82.196.64.0/19 maxlen: 19 84.204.0.0/17 maxlen: 17 84.204.132.0/22 maxlen: 22 84.204.136.0/24 maxlen: 24 84.204.138.0/24 maxlen: 24 84.204.139.0/24 maxlen: 24 84.204.140.0/22 maxlen: 22 84.204.144.0/20 maxlen: 20 84.204.160.0/20 maxlen: 20 84.204.176.0/21 maxlen: 21 84.204.188.0/22 maxlen: 22 84.204.192.0/18 maxlen: 18 84.204.230.0/24 maxlen: 24 91.193.212.0/22 maxlen: 22 93.153.128.0/17 maxlen: 17 93.153.144.0/21 maxlen: 21 93.153.158.0/24 maxlen: 24 93.153.161.0/24 maxlen: 24 93.153.162.0/24 maxlen: 24 94.25.248.0/21 maxlen: 21 95.137.0.0/17 maxlen: 17 109.74.112.0/20 maxlen: 20 109.124.64.0/18 maxlen: 18 109.124.108.0/22 maxlen: 22 195.5.128.0/19 maxlen: 19 195.144.224.0/19 maxlen: 19 212.14.160.0/19 maxlen: 19 212.44.64.0/19 maxlen: 19 212.119.160.0/19 maxlen: 19 213.154.160.0/21 maxlen: 21 213.154.168.0/21 maxlen: 21 213.154.176.0/21 maxlen: 21 213.154.184.0/21 maxlen: 21 213.168.32.0/19 maxlen: 19 213.172.0.0/19 maxlen: 19 213.182.160.0/19 maxlen: 19 217.195.64.0/19 maxlen: 19 2a03:d000:9008::/46 maxlen: 46 2a03:d000:9008::/48 maxlen: 48 2a03:d000:9009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:60:66:30:39:b0:d0:e2:cc:47:a2:3f:e9:a9:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9199ad0d549580680c269b0926aeca74876c805a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:66:f1:da:11:01:ca:92:26:17:82:eb:1d: 4a:c8:7e:15:32:b9:26:f9:5f:c5:41:ce:0f:fc:a2: 73:89:ca:69:bc:2c:e4:70:2f:58:22:a5:d2:7c:ae: ed:a5:34:a0:74:23:88:d9:22:ad:05:91:3f:79:ad: 9a:d5:16:13:d7:67:29:d9:a1:19:fd:c8:be:b4:5d: 28:7b:d3:02:6b:3b:aa:5d:a7:c4:f6:e3:26:3a:37: aa:45:cd:20:d1:b4:f2:27:e7:9d:5c:2c:31:9c:23: 6e:9c:f8:92:b1:98:ce:5a:78:2c:3a:57:0e:9e:53: 80:5a:4b:d4:ed:73:46:70:92:ef:33:f1:9e:da:2b: 8d:ae:b4:93:15:55:74:3f:25:f9:d6:79:86:64:fb: 86:8b:d2:79:09:18:71:b4:3d:f3:28:c7:6b:88:70: c5:3f:aa:95:a5:e9:47:4d:36:f8:e5:ef:b5:a1:17: 5e:f3:66:00:3d:b8:ae:f2:50:11:3a:be:87:81:87: 4f:46:fd:06:dd:01:0a:6f:d1:58:d9:d7:ee:33:7f: b1:90:d7:a3:be:c2:e1:7b:89:4f:21:9d:90:4d:0c: bd:3e:07:c6:80:82:fb:82:10:12:ed:10:2e:ab:6c: 1b:5b:ff:fe:c7:60:a3:06:7f:dd:38:44:b3:ab:ae: d3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:99:AD:0D:54:95:80:68:0C:26:9B:09:26:AE:CA:74:87:6C:80:5A X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/kZmtDVSVgGgMJpsJJq7KdIdsgFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.47.192.0/18 62.182.128.0/21 79.171.8.0/21 80.247.176.0/20 81.3.128.0/18 81.24.128.0/20 82.140.64.0/18 82.196.64.0/19 84.204.0.0/17 84.204.132.0-84.204.136.255 84.204.138.0-84.204.183.255 84.204.188.0-84.204.255.255 91.193.212.0/22 93.153.128.0/17 94.25.248.0/21 95.137.0.0/17 109.74.112.0/20 109.124.64.0/18 195.5.128.0/19 195.144.224.0/19 212.14.160.0/19 212.44.64.0/19 212.119.160.0/19 213.154.160.0/19 213.168.32.0/19 213.172.0.0/19 213.182.160.0/19 217.195.64.0/19 IPv6: 2a03:d000:9008::/46 Signature Algorithm: sha256WithRSAEncryption 8b:21:42:b0:d7:6a:ee:84:c1:2b:9b:12:62:3d:9f:d2:55:6a: a9:29:2e:fa:b6:7d:6e:fc:69:02:e1:d3:f7:13:bd:d3:7b:de: 74:ad:c1:b6:89:34:a5:49:68:b5:0d:99:37:4f:51:8d:f3:20: 3f:85:3d:13:7a:b0:ac:fb:27:f8:84:5d:14:5f:83:2b:d9:e7: da:ea:56:f5:56:66:38:90:03:37:9d:5d:a5:39:f9:0f:05:2a: 97:14:1a:ff:c1:82:52:87:ba:fe:33:59:ad:7d:bd:8f:6a:bd: 48:70:cd:9f:8f:66:f2:59:25:5c:a9:98:bb:60:25:99:44:1b: f9:a7:ad:d2:1f:2f:6f:00:38:3a:55:0c:af:49:ff:28:6c:15: 7b:a3:49:52:90:48:31:07:a4:b4:f6:4b:eb:4b:2f:21:28:87: 5f:d7:a6:0c:a7:dc:b8:a4:d3:58:19:2a:dc:f5:d0:39:ef:74: 5e:19:c7:e3:45:9a:34:03:e7:93:cb:d8:e7:3d:a6:ba:49:ce: e6:7c:41:42:44:d0:7f:94:e1:92:4b:5f:9c:2b:c2:39:38:06: 00:de:ca:42:cc:d2:e4:eb:a3:70:e0:b2:a6:0f:61:db:35:eb: 50:18:56:c1:98:cc:e4:e9:55:e6:fe:a4:fa:2f:e3:3c:46:c3: 2e:c8:48:90 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt3x2BmMDmw0OLMR6I/6anHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTk5YWQwZDU0OTU4MDY4MGMyNjliMDkyNmFlY2E3NDg3NmM4MDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp81m8doRAcqSJheC6x1KyH4VMrkm +V/FQc4P/KJzicppvCzkcC9YIqXSfK7tpTSgdCOI2SKtBZE/ea2a1RYT12cp2aEZ /ci+tF0oe9MCazuqXafE9uMmOjeqRc0g0bTyJ+edXCwxnCNunPiSsZjOWngsOlcO nlOAWkvU7XNGcJLvM/Ge2iuNrrSTFVV0PyX51nmGZPuGi9J5CRhxtD3zKMdriHDF P6qVpelHTTb45e+1oRde82YAPbiu8lAROr6HgYdPRv0G3QEKb9FY2dfuM3+xkNej vsLhe4lPIZ2QTQy9PgfGgIL7ghAS7RAuq2wbW//+x2CjBn/dOESzq67TRQIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFJGZrQ1UlYBoDCabCSauynSHbIBaMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEva1ptdERWU1ZnR2dNSnBzSkpxN0tkSWRzZ0ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHtBggrBgEFBQcBBwEB/wSB3TCB2jCBxgQCAAEwgb8DBAYu L8ADBAM+toADBANPqwgDBARQ97ADBAZRA4ADBARRGIADBAZSjEADBAVSxEADBAdU zAAwDAMEAlTMhAMEAFTMiDAMAwQBVMyKAwQDVMywMAsDBAJUzLwDAwBUzAMEAlvB 1AMEB12ZgAMEA14Z+AMEB1+JAAMEBG1KcAMEBm18QAMEBcMFgAMEBcOQ4AMEBdQO oAMEBdQsQAMEBdR3oAMEBdWaoAMEBdWoIAMEBdWsAAMEBdW2oAMEBdnDQDAPBAIA AjAJAwcCKgPQAJAIMA0GCSqGSIb3DQEBCwUAA4IBAQCLIUKw12ruhMErmxJiPZ/S VWqpKS76tn1u/GkC4dP3E73Te950rcG2iTSlSWi1DZk3T1GN8yA/hT0TerCs+yf4 hF0UX4Mr2efa6lb1VmY4kAM3nV2lOfkPBSqXFBr/wYJSh7r+M1mtfb2Par1IcM2f j2byWSVcqZi7YCWZRBv5p63SHy9vADg6VQyvSf8obBV7o0lSkEgxB6S09kvrSy8h KIdf16YMp9y4pNNYGSrc9dA573ReGcfjRZo0A+eTy9jnPaa6Sc7mfEFCRNB/lOGS S1+cK8I5OAYA3spCzNLk66Nw4LKmD2HbNetQGFbBmMzk6VXm/qT6L+M8RsMuyEiQ -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:47 2026 by rpki-client