This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa File: ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa (raw, json) Hash identifier: Ga4kbKkw40NTNAmZazaZ3aVIVvGOSEfaNiqjZ2JqONY= Subject key identifier: 92:C5:49:20:18:C6:BF:02:F8:B3:53:ED:45:14:28:44:2D:9E:51:23 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC482D6C04515405AE32794EFF3D44 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa Signing time: Thu 01 Jan 2026 14:18:06 +0000 ROA not before: Thu 01 Jan 2026 14:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200702 IP address blocks: 45.159.16.0/22 maxlen: 22 77.120.56.0/22 maxlen: 22 91.212.198.0/24 maxlen: 24 91.212.201.0/24 maxlen: 24 91.212.220.0/24 maxlen: 24 91.212.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:48:2d:6c:04:51:54:05:ae:32:79:4e:ff:3d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92c5492018c6bf02f8b353ed451428442d9e5123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ff:68:01:9d:2b:b9:77:1f:67:35:43:9b:7d: a0:43:f1:0b:2d:04:eb:f0:c2:8b:cf:87:df:a1:b4: 8f:7a:f4:78:c5:91:4c:f7:0c:9a:ce:4b:d7:31:09: d2:3d:37:00:fb:a9:77:4a:11:0d:1a:d4:7d:ad:cd: 77:a2:03:16:ee:dd:a5:fc:fe:e6:13:3f:cd:75:0c: 4b:0b:c2:f7:8a:1b:02:9d:a9:2c:cd:e6:c2:d6:30: fd:f6:4d:56:6a:37:13:25:27:61:71:f2:c6:6e:61: eb:38:d4:71:e3:54:44:f4:33:62:6a:af:cf:16:1d: de:71:ac:fc:d1:29:e8:6a:be:55:98:62:9d:20:e6: 84:30:c9:19:f2:7e:76:37:9b:7d:c0:04:f8:29:7b: cd:68:7e:69:d5:d8:03:68:84:31:cb:c6:2c:13:06: b2:18:96:3e:2f:11:66:f0:f8:45:eb:c0:82:dc:f0: 57:28:d4:0a:a0:12:78:69:d1:4f:f6:24:3a:50:d3: 59:1c:eb:33:38:da:c9:c9:13:4a:69:60:50:86:f7: fc:6a:c2:59:c3:c0:a8:eb:4a:10:d9:ee:89:fe:c7: 36:28:8b:ec:a8:29:ba:9c:ea:ea:a1:72:b5:39:bd: 32:a2:00:30:d7:d7:0f:ca:cf:87:9b:4c:4c:aa:08: 1a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C5:49:20:18:C6:BF:02:F8:B3:53:ED:45:14:28:44:2D:9E:51:23 X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.16.0/22 77.120.56.0/22 91.212.198.0/24 91.212.201.0/24 91.212.220.0/24 91.212.226.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:87:68:99:a9:70:37:c5:b1:c7:8e:90:05:eb:6c:4d:25:07: 6f:c7:b6:5f:ef:5a:ad:e9:5a:3c:c4:6b:04:b0:8f:54:c4:7d: 5b:e4:a8:3e:68:57:3d:19:eb:07:6a:04:0b:95:cf:b9:39:87: 6c:1e:71:90:0d:30:0e:bb:e7:6e:c4:85:a6:15:d7:43:0a:39: dc:98:fb:ff:ba:1c:c8:b6:0c:55:96:14:42:19:e3:6e:18:70: b2:11:6c:b2:f6:3b:1c:13:89:06:09:c0:39:d1:4f:37:f0:06: ab:1c:6e:0a:6a:fd:b4:45:6a:46:9c:8b:52:f1:de:7d:70:78: e5:31:03:b0:fc:ab:30:62:35:fd:8d:c7:f6:8c:e3:47:d6:45: f8:53:6d:b5:6b:72:29:2c:c3:a0:65:14:6b:bb:3b:a8:15:84: a4:5d:96:4a:0b:56:e1:3c:f2:99:58:89:2f:6e:c2:44:f8:25: 26:2e:33:df:d5:4a:9d:62:cc:96:60:90:67:42:ef:35:05:89: 4a:ea:88:ce:23:bc:29:89:ce:8f:c4:d0:06:5d:cb:83:62:89: 6d:c5:b0:d1:b1:85:a1:69:3b:b9:f8:35:93:11:d3:30:c8:6e: 32:d2:5f:60:cf:8f:a8:8e:a5:8a:2e:18:73:ab:1d:f1:26:93: 78:9b:22:62 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt57EgtbARRVAWuMnlO/z1EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmM1NDkyMDE4YzZiZjAyZjhiMzUzZWQ0NTE0Mjg0NDJkOWU1MTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v9oAZ0ruXcfZzVDm32gQ/ELLQTr 8MKLz4ffobSPevR4xZFM9wyazkvXMQnSPTcA+6l3ShENGtR9rc13ogMW7t2l/P7m Ez/NdQxLC8L3ihsCnakszebC1jD99k1WajcTJSdhcfLGbmHrONRx41RE9DNiaq/P Fh3ecaz80Snoar5VmGKdIOaEMMkZ8n52N5t9wAT4KXvNaH5p1dgDaIQxy8YsEway GJY+LxFm8PhF68CC3PBXKNQKoBJ4adFP9iQ6UNNZHOszONrJyRNKaWBQhvf8asJZ w8Co60oQ2e6J/sc2KIvsqCm6nOrqoXK1Ob0yogAw19cPys+Hm0xMqggahwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJLFSSAYxr8C+LNT7UUUKEQtnlEjMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEva3NWSklCakd2d0w0czFQdFJSUW9SQzJlVVNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLZ8QAwQC TXg4AwQAW9TGAwQAW9TJAwQAW9TcAwQAW9TiMA0GCSqGSIb3DQEBCwUAA4IBAQBs h2iZqXA3xbHHjpAF62xNJQdvx7Zf71qt6Vo8xGsEsI9UxH1b5Kg+aFc9GesHagQL lc+5OYdsHnGQDTAOu+duxIWmFddDCjncmPv/uhzItgxVlhRCGeNuGHCyEWyy9jsc E4kGCcA50U838AarHG4Kav20RWpGnItS8d59cHjlMQOw/KswYjX9jcf2jONH1kX4 U221a3IpLMOgZRRruzuoFYSkXZZKC1bhPPKZWIkvbsJE+CUmLjPf1UqdYsyWYJBn Qu81BYlK6ojOI7wpic6PxNAGXcuDYoltxbDRsYWhaTu5+DWTEdMwyG4y0l9gz4+o jqWKLhhzqx3xJpN4myJi -----END CERTIFICATE-----Generated at Mon Jan 26 12:26:00 2026 by rpki-client