This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/Kj_puzGejZxspvVxkx32cAwkB0w.roa File: Kj_puzGejZxspvVxkx32cAwkB0w.roa (raw, json) Hash identifier: RowyAFEI5rR8CMQcjnFkMBK+ZHznDCHIdXxWRkgpM0U= Subject key identifier: 2A:3F:E9:BB:31:9E:8D:9C:6C:A6:F5:71:93:1D:F6:70:0C:24:07:4C Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e Certificate serial: 019B7F14BD4EB5A28C699230A8EC8E882359 Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/Kj_puzGejZxspvVxkx32cAwkB0w.roa Signing time: Fri 02 Jan 2026 14:20:23 +0000 ROA not before: Fri 02 Jan 2026 14:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48018 IP address blocks: 31.172.64.0/24 maxlen: 24 31.172.66.0/24 maxlen: 24 31.172.67.0/24 maxlen: 24 31.172.76.0/24 maxlen: 24 81.85.78.0/24 maxlen: 24 199.68.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:bd:4e:b5:a2:8c:69:92:30:a8:ec:8e:88:23:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e Validity Not Before: Jan 2 14:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a3fe9bb319e8d9c6ca6f571931df6700c24074c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:4c:03:da:f8:72:8c:24:50:83:dd:39:71: be:a2:fe:5e:be:a3:1a:fd:10:3d:97:62:93:b8:9a: 8c:40:f0:d6:a7:55:97:6c:fa:92:6b:4b:d6:b3:3f: 34:52:5d:3e:ae:81:b2:de:5e:fa:57:58:2a:a9:c0: 86:8a:4d:f2:0e:b7:40:ed:e3:5e:98:ff:82:4d:a8: 92:28:fc:f9:00:c6:8c:cd:95:50:bb:8c:00:fc:e6: 8e:6f:71:9f:34:ba:d9:0a:e1:73:99:3d:28:3c:2d: 8b:bb:b3:5b:6f:9f:9f:e9:9b:0c:20:61:98:03:1b: f1:d0:c5:a4:33:18:dc:be:9a:e2:48:25:2c:af:d6: b3:fc:97:ab:a6:38:ab:60:bb:6e:1b:08:e4:af:45: 02:c4:20:de:54:cd:8f:be:76:ef:64:b2:ef:c7:31: 18:0b:d3:cd:e6:56:22:d2:bd:55:d6:94:b9:ef:a5: 2f:18:97:28:70:31:c0:6a:5a:40:be:f8:98:2d:37: 46:3f:6d:28:aa:15:ee:d7:8b:b3:06:1c:17:cb:93: 41:60:89:23:88:59:68:cd:d4:e3:b4:4f:23:a5:37: 25:18:f4:f0:80:c6:c6:34:c4:26:a7:fa:88:30:d5: 6e:aa:dd:bd:cc:59:0e:f4:44:1e:75:5e:80:46:fa: 57:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3F:E9:BB:31:9E:8D:9C:6C:A6:F5:71:93:1D:F6:70:0C:24:07:4C X509v3 Authority Key Identifier: keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/Kj_puzGejZxspvVxkx32cAwkB0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.172.64.0/24 31.172.66.0/23 31.172.76.0/24 81.85.78.0/24 199.68.197.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:8f:d5:79:e6:af:a4:d6:3d:c2:c4:77:b4:ed:3b:84:91:8a: d8:81:ec:aa:16:36:30:ce:e0:29:76:1f:da:10:14:bc:82:f6: 3a:9b:9a:a9:0a:d0:b4:bd:9d:8a:06:41:a8:3e:b1:f6:a5:a4: 10:7c:14:5c:50:ea:11:1a:e6:16:fc:d6:06:7a:d7:d0:ed:59: 67:f8:75:fd:84:68:23:9f:e9:cd:f0:b3:2b:c4:60:e7:60:5b: f0:06:21:6c:79:39:53:7b:cd:c3:db:ca:31:0f:ed:20:22:54: d0:e4:a9:44:e8:77:07:a6:f4:19:95:d0:50:27:2e:fb:a0:e5: 53:e2:b7:5f:1d:4f:67:bf:5a:c6:fb:09:45:c4:77:d9:d5:ca: 6e:d3:74:17:0b:82:a1:b0:16:5c:10:2b:e1:59:ed:fa:e6:92: 93:f4:57:39:44:f3:ed:40:a8:7b:e8:c6:d8:e3:c3:de:f8:d9: 2d:17:84:6c:b2:63:51:77:3a:f6:5a:79:31:63:35:b9:17:8a: 51:2a:7f:90:21:a5:3e:cc:e3:b2:64:cc:f7:8c:16:f6:15:58: 33:f2:9c:a3:d3:da:6b:3f:85:6b:85:5b:ab:28:e1:2d:52:f5: e1:26:4e:8f:d6:49:a2:6e:60:f4:f4:ef:86:ed:3d:72:9b:1f: a0:44:2e:d6 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/FL1OtaKMaZIwqOyOiCNZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1 ZDAwN2UwHhcNMjYwMTAyMTQyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTNmZTliYjMxOWU4ZDljNmNhNmY1NzE5MzFkZjY3MDBjMjQwNzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN1MA9r4cowkUIPdOXG+ov5evqMa /RA9l2KTuJqMQPDWp1WXbPqSa0vWsz80Ul0+roGy3l76V1gqqcCGik3yDrdA7eNe mP+CTaiSKPz5AMaMzZVQu4wA/OaOb3GfNLrZCuFzmT0oPC2Lu7Nbb5+f6ZsMIGGY Axvx0MWkMxjcvpriSCUsr9az/JerpjirYLtuGwjkr0UCxCDeVM2PvnbvZLLvxzEY C9PN5lYi0r1V1pS576UvGJcocDHAalpAvviYLTdGP20oqhXu14uzBhwXy5NBYIkj iFlozdTjtE8jpTclGPTwgMbGNMQmp/qIMNVuqt29zFkO9EQedV6ARvpXrwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFCo/6bsxno2cbKb1cZMd9nAMJAdMMB8GA1UdIwQY MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt MWZiYzY0MWI1MGIxLzEvS2pfcHV6R2VqWnhzcHZWeGt4MzJjQXdrQjB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAH6xAAwQB H6xCAwQAH6xMAwQAUVVOAwQAx0TFMA0GCSqGSIb3DQEBCwUAA4IBAQBbj9V55q+k 1j3CxHe07TuEkYrYgeyqFjYwzuApdh/aEBS8gvY6m5qpCtC0vZ2KBkGoPrH2paQQ fBRcUOoRGuYW/NYGetfQ7Vln+HX9hGgjn+nN8LMrxGDnYFvwBiFseTlTe83D28ox D+0gIlTQ5KlE6HcHpvQZldBQJy77oOVT4rdfHU9nv1rG+wlFxHfZ1cpu03QXC4Kh sBZcECvhWe365pKT9Fc5RPPtQKh76MbY48Pe+NktF4RssmNRdzr2WnkxYzW5F4pR Kn+QIaU+zOOyZMz3jBb2FVgz8pyj09prP4VrhVurKOEtUvXhJk6P1kmibmD09O+G 7T1ymx+gRC7W -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:11 2026 by rpki-client