This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/KedsxwMx1vS4wxET3Dft1ZVYZdM.roa File: KedsxwMx1vS4wxET3Dft1ZVYZdM.roa (raw, json) Hash identifier: absKcImfV1TnjcpSLnLKauDQBXXCFX2CsdZyDNeGTWY= Subject key identifier: 29:E7:6C:C7:03:31:D6:F4:B8:C3:11:13:DC:37:ED:D5:95:58:65:D3 Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413 Certificate serial: 019BEB490745C746B11FACBCF55C918BD75C Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/KedsxwMx1vS4wxET3Dft1ZVYZdM.roa Signing time: Fri 23 Jan 2026 14:36:30 +0000 ROA not before: Fri 23 Jan 2026 14:36:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57172 IP address blocks: 37.123.208.0/23 maxlen: 23 37.123.208.0/24 maxlen: 24 109.202.96.0/21 maxlen: 21 109.202.97.0/24 maxlen: 24 109.232.224.0/21 maxlen: 21 109.232.226.0/24 maxlen: 24 188.95.50.0/24 maxlen: 24 188.95.54.0/24 maxlen: 24 188.95.55.0/24 maxlen: 24 213.152.160.0/19 maxlen: 19 2a00:1678::/32 maxlen: 32 2a00:1678:be1::/48 maxlen: 48 2a00:1678:be2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:49:07:45:c7:46:b1:1f:ac:bc:f5:5c:91:8b:d7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413 Validity Not Before: Jan 23 14:36:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29e76cc70331d6f4b8c31113dc37edd5955865d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:94:b8:f9:a9:b7:14:c4:bc:54:91:06:6e: 79:33:d7:f3:f6:dc:be:f3:6b:b5:b0:e1:c1:41:61: 8c:4c:ab:e6:1d:f1:8c:b3:5c:38:69:15:60:f4:2d: 9c:bf:68:5e:22:c4:5c:95:fd:31:e0:05:28:16:ff: 20:9e:3f:38:14:b3:df:ab:01:ab:ba:80:40:21:0f: 49:72:f1:2b:b1:f6:55:22:b2:85:f0:2e:50:70:10: a7:2e:3b:eb:4d:e0:58:ba:83:21:25:14:78:eb:d3: f0:2e:2c:10:52:db:45:4d:2f:6d:6e:46:a9:b3:90: 5d:ae:ac:ba:bd:f6:a5:78:8d:cc:6d:04:a5:1c:a6: 01:cc:f9:ff:14:7f:25:21:7e:d2:bd:cf:67:1f:a2: fc:8d:c0:62:58:7e:23:56:1e:c9:f5:c3:6c:bd:10: 0e:bc:9e:4a:c9:02:c1:78:f7:4c:14:53:03:69:b1: 75:51:30:d0:54:1c:0d:b3:49:a5:7b:bd:c3:1b:4d: 7c:66:6b:c4:4d:a9:6a:2a:40:54:f3:47:e2:7e:26: 3f:77:78:da:10:74:6e:91:1c:b6:51:69:c5:9d:fa: 91:a2:69:8f:fe:eb:18:6e:f9:07:ff:46:fb:f7:6a: 42:d8:cd:a8:50:13:92:91:92:3e:98:e6:7d:0d:09: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E7:6C:C7:03:31:D6:F4:B8:C3:11:13:DC:37:ED:D5:95:58:65:D3 X509v3 Authority Key Identifier: keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/KedsxwMx1vS4wxET3Dft1ZVYZdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.123.208.0/23 109.202.96.0/21 109.232.224.0/21 188.95.50.0/24 188.95.54.0/23 213.152.160.0/19 IPv6: 2a00:1678::/32 Signature Algorithm: sha256WithRSAEncryption 6c:75:92:4b:e3:fc:d8:b9:d2:6b:8c:1f:cc:7e:68:25:ef:06: d2:ad:75:12:65:bb:f5:4f:e4:b2:ce:7b:1a:a8:4d:55:c5:57: 8d:93:0e:15:d2:97:8d:11:47:32:e5:c2:94:2c:9f:d6:3f:a4: 4f:b4:10:01:55:39:d0:04:39:be:83:72:f5:c9:af:f7:30:f1: 3f:15:d7:c4:c2:ba:cf:1a:72:74:96:76:56:af:48:ed:d7:f7: 32:ac:c5:aa:65:a8:33:b8:5c:36:3e:79:9e:e1:8d:d2:9a:13: be:aa:dc:f7:75:3e:de:78:3c:24:30:8b:b0:ec:75:6a:d4:09: cd:9a:5b:dc:08:5d:7e:91:a0:71:2a:9a:5d:b6:b7:dd:3c:16: 99:c9:bb:f8:b0:55:01:a1:83:9c:fe:bb:c6:a3:8c:15:67:6b: 56:15:55:49:20:d8:45:4c:38:4a:e1:f6:3c:7f:5b:af:66:e5: 01:72:e0:11:f7:76:e8:1d:30:d6:3f:5d:b4:61:97:cd:2f:07: 8a:28:27:a9:b1:4c:96:be:c4:41:12:59:61:4b:65:d6:68:6f: 75:81:d2:72:0c:2e:e3:ae:59:6b:b7:69:d6:4f:7d:66:34:0f: 35:6d:51:b8:bf:87:03:a8:6e:5f:ad:9d:74:40:05:19:e6:2d: 4f:2f:62:e5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZvrSQdFx0axH6y89VyRi9dcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MjZiMDNjNzE3MTg0YzM2ODA4MTdlNTVlMjQ1NWY4NWQ3 M2E0MTMwHhcNMjYwMTIzMTQzNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWU3NmNjNzAzMzFkNmY0YjhjMzExMTNkYzM3ZWRkNTk1NTg2NWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7eUuPmptxTEvFSRBm55M9fz9ty+ 82u1sOHBQWGMTKvmHfGMs1w4aRVg9C2cv2heIsRclf0x4AUoFv8gnj84FLPfqwGr uoBAIQ9JcvErsfZVIrKF8C5QcBCnLjvrTeBYuoMhJRR469PwLiwQUttFTS9tbkap s5Bdrqy6vfaleI3MbQSlHKYBzPn/FH8lIX7Svc9nH6L8jcBiWH4jVh7J9cNsvRAO vJ5KyQLBePdMFFMDabF1UTDQVBwNs0mle73DG018ZmvETalqKkBU80fifiY/d3ja EHRukRy2UWnFnfqRommP/usYbvkH/0b792pC2M2oUBOSkZI+mOZ9DQltrwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFCnnbMcDMdb0uMMRE9w37dWVWGXTMB8GA1UdIwQY MBaAFAUmsDxxcYTDaAgX5V4kVfhdc6QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMt M2JmMDRhMmE5M2Q4LzEvS2Vkc3h3TXgxdlM0d3hFVDNEZnQxWlZZWmRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMtM2JmMDRhMmE5M2Q4 LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQBJXvQAwQD bcpgAwQDbejgAwQAvF8yAwQBvF82AwQF1ZigMA0EAgACMAcDBQAqABZ4MA0GCSqG SIb3DQEBCwUAA4IBAQBsdZJL4/zYudJrjB/Mfmgl7wbSrXUSZbv1T+SyznsaqE1V xVeNkw4V0peNEUcy5cKULJ/WP6RPtBABVTnQBDm+g3L1ya/3MPE/FdfEwrrPGnJ0 lnZWr0jt1/cyrMWqZagzuFw2Pnme4Y3SmhO+qtz3dT7eeDwkMIuw7HVq1AnNmlvc CF1+kaBxKppdtrfdPBaZybv4sFUBoYOc/rvGo4wVZ2tWFVVJINhFTDhK4fY8f1uv ZuUBcuAR93boHTDWP120YZfNLweKKCepsUyWvsRBEllhS2XWaG91gdJyDC7jrllr t2nWT31mNA81bVG4v4cDqG5frZ10QAUZ5i1PL2Ll -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:49 2026 by rpki-client