This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/ktSQWFwbI3FpGsTRyfTaMNFXl1s.roa File: ktSQWFwbI3FpGsTRyfTaMNFXl1s.roa (raw, json) Hash identifier: zx3d6M9/eCKOvbINTMTpaKIin9u2fDnkb4axNDW8ebU= Subject key identifier: 92:D4:90:58:5C:1B:23:71:69:1A:C4:D1:C9:F4:DA:30:D1:57:97:5B Certificate issuer: /CN=6977a3116ecc9d7a429f13651613e8ad149ff324 Certificate serial: 019B7CEDB7E318CF68A3D4D05387F0A3D12E Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/ktSQWFwbI3FpGsTRyfTaMNFXl1s.roa Signing time: Fri 02 Jan 2026 04:18:32 +0000 ROA not before: Fri 02 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207108 IP address blocks: 45.154.197.0/24 maxlen: 24 185.139.7.0/24 maxlen: 24 2a12:ab46:5341::/48 maxlen: 48 2a12:ab46:5342::/48 maxlen: 48 2a12:ab46:5343::/48 maxlen: 48 2a12:ab46:5344::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b7:e3:18:cf:68:a3:d4:d0:53:87:f0:a3:d1:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324 Validity Not Before: Jan 2 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92d490585c1b2371691ac4d1c9f4da30d157975b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:88:82:06:ed:ba:2b:5d:35:7e:bd:77:c9:92: 00:e6:64:2b:81:24:cd:e1:f1:83:44:a6:78:29:d7: bf:73:04:2f:e4:19:6f:8a:2a:9a:2d:98:02:32:6f: ff:93:19:42:e5:dc:cc:ea:f3:b5:3e:ae:1f:ca:78: 35:81:4c:e3:58:75:3c:c7:5c:a2:7b:f5:56:95:c4: 47:9d:10:ba:0f:a5:3b:57:81:d6:82:75:ca:36:34: f2:39:2b:44:a9:3c:6b:29:22:77:43:87:19:26:13: 43:b2:0f:b2:e5:21:3a:6a:0c:8c:c6:2b:65:a5:07: e6:77:6c:f1:31:4d:c5:5b:3f:2b:23:17:87:75:e8: 46:f9:3c:04:38:9d:b5:07:f9:8a:ef:bf:18:b7:90: 8b:ce:4b:ec:49:4f:07:11:30:3b:79:0e:17:9a:d3: db:88:33:c9:c7:8a:bb:4b:e4:16:f8:19:eb:3b:f3: d7:4c:f2:d5:ea:21:c1:7a:4f:3f:ec:60:da:e6:26: af:a1:e2:d0:38:c8:08:77:3f:e8:5a:31:10:ae:20: d0:7e:83:3c:5a:17:ff:64:36:e5:07:70:0e:d7:4b: 9d:b9:c3:37:31:23:61:5e:ac:29:e6:eb:57:4e:6d: 93:39:e5:d7:6a:e9:ea:5c:83:fb:c8:d3:8c:cb:d8: 09:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D4:90:58:5C:1B:23:71:69:1A:C4:D1:C9:F4:DA:30:D1:57:97:5B X509v3 Authority Key Identifier: keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/ktSQWFwbI3FpGsTRyfTaMNFXl1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.197.0/24 185.139.7.0/24 IPv6: 2a12:ab46:5341::-2a12:ab46:5344:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption d0:83:11:01:5b:b6:c7:99:2c:ad:55:ee:18:8d:78:9a:9e:a8: c9:9d:31:05:10:65:76:01:cf:0c:b1:a8:df:19:a5:41:16:6d: 54:15:11:58:69:2d:9f:4b:60:b8:b2:34:0a:4e:3a:e6:c4:42: dc:01:e7:17:27:c8:94:d9:d3:df:83:3c:27:02:8a:ef:64:e7: 4c:f2:4a:45:4c:99:9c:05:d1:59:56:f5:fe:2f:75:27:8d:0f: e2:51:5c:a9:c8:0b:88:15:25:87:7d:4e:d6:4f:84:9d:4e:15: f7:a8:6b:f4:e0:8c:f5:07:86:16:34:16:53:c7:29:ab:0b:6d: c3:bc:c2:c3:24:d0:48:a2:1f:16:24:9e:a3:9d:95:94:dd:3d: a8:b5:30:42:3f:00:ad:73:86:1d:61:57:46:75:09:98:c9:8e: e5:04:86:3e:08:72:74:a4:e9:e4:bc:22:98:e7:b1:e4:1c:4e: 03:dd:b0:77:10:fd:97:14:de:f9:dc:62:c4:b0:fb:a6:bc:a0: dd:19:7a:d7:91:d6:96:d3:16:e8:f0:52:57:a5:7b:0c:81:be: b3:0c:2f:e9:46:2c:bf:cf:88:ed:c9:fd:04:29:55:8c:a2:bf: 4e:26:4c:f6:db:ff:8a:0d:87:5e:2e:42:42:89:ab:d7:c9:14: d4:52:5e:c1 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt87bfjGM9oo9TQU4fwo9EuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NzdhMzExNmVjYzlkN2E0MjlmMTM2NTE2MTNlOGFkMTQ5 ZmYzMjQwHhcNMjYwMTAyMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmQ0OTA1ODVjMWIyMzcxNjkxYWM0ZDFjOWY0ZGEzMGQxNTc5NzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYiCBu26K101fr13yZIA5mQrgSTN 4fGDRKZ4Kde/cwQv5BlviiqaLZgCMm//kxlC5dzM6vO1Pq4fyng1gUzjWHU8x1yi e/VWlcRHnRC6D6U7V4HWgnXKNjTyOStEqTxrKSJ3Q4cZJhNDsg+y5SE6agyMxitl pQfmd2zxMU3FWz8rIxeHdehG+TwEOJ21B/mK778Yt5CLzkvsSU8HETA7eQ4XmtPb iDPJx4q7S+QW+BnrO/PXTPLV6iHBek8/7GDa5iavoeLQOMgIdz/oWjEQriDQfoM8 Whf/ZDblB3AO10uducM3MSNhXqwp5utXTm2TOeXXaunqXIP7yNOMy9gJbwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFJLUkFhcGyNxaRrE0cn02jDRV5dbMB8GA1UdIwQY MBaAFGl3oxFuzJ16Qp8TZRYT6K0Un/MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTkt ZjRiN2IzOThjNjM0LzEva3RTUVdGd2JJM0ZwR3NUUnlmVGFNTkZYbDFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTktZjRiN2IzOThjNjM0 LzEvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDASBAIAATAMAwQALZrFAwQA uYsHMBoEAgACMBQwEgMHACoSq0ZTQQMHACoSq0ZTRDANBgkqhkiG9w0BAQsFAAOC AQEA0IMRAVu2x5ksrVXuGI14mp6oyZ0xBRBldgHPDLGo3xmlQRZtVBURWGktn0tg uLI0Ck465sRC3AHnFyfIlNnT34M8JwKK72TnTPJKRUyZnAXRWVb1/i91J40P4lFc qcgLiBUlh31O1k+EnU4V96hr9OCM9QeGFjQWU8cpqwttw7zCwyTQSKIfFiSeo52V lN09qLUwQj8ArXOGHWFXRnUJmMmO5QSGPghydKTp5LwimOex5BxOA92wdxD9lxTe +dxixLD7pryg3Rl615HWltMW6PBSV6V7DIG+swwv6UYsv8+I7cn9BClVjKK/TiZM 9tv/ig2HXi5CQomr18kU1FJewQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:43:20 2026 by rpki-client