This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/KSszcmUpPo8JBR4sfrdc2vv2aRg.roa File: KSszcmUpPo8JBR4sfrdc2vv2aRg.roa (raw, json) Hash identifier: ew+549kVqxTodrfZ3xKjeuTH8QTf9/NbVOyVAUCiCUA= Subject key identifier: 29:2B:33:72:65:29:3E:8F:09:05:1E:2C:7E:B7:5C:DA:FB:F6:69:18 Certificate issuer: /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c Certificate serial: 019B797E9092D19FF9AB43850BFD0D6B24FC Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/KSszcmUpPo8JBR4sfrdc2vv2aRg.roa Signing time: Thu 01 Jan 2026 12:18:16 +0000 ROA not before: Thu 01 Jan 2026 12:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208666 IP address blocks: 31.193.185.0/24 maxlen: 24 83.229.2.0/24 maxlen: 24 147.236.164.0/24 maxlen: 24 147.236.165.0/24 maxlen: 24 213.255.192.0/24 maxlen: 24 216.150.30.0/23 maxlen: 23 216.150.30.0/24 maxlen: 24 216.150.31.0/24 maxlen: 24 2a09:b300::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:90:92:d1:9f:f9:ab:43:85:0b:fd:0d:6b:24:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c Validity Not Before: Jan 1 12:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=292b337265293e8f09051e2c7eb75cdafbf66918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:8e:c9:6c:df:0e:51:18:43:17:9f:40:af: 2d:b3:55:81:1b:75:b2:04:a2:93:e5:0e:1c:cd:40: 6e:0c:70:06:47:c7:22:a9:7f:44:f4:ae:58:60:c5: 31:6f:57:6f:46:18:b9:ec:85:cd:7b:8b:2b:63:96: 68:7b:5a:dd:a4:d9:00:86:3e:0c:c1:1b:bd:78:81: fb:46:8e:76:1f:ac:72:af:ee:0c:b9:d4:3b:57:d2: 03:84:ad:74:9d:e2:4f:ec:9d:93:ae:36:ab:5a:ef: 50:f2:fb:90:15:fe:64:fc:ae:de:77:41:15:c9:15: f9:97:db:6f:86:04:e5:eb:8b:fd:24:90:00:e5:35: 10:a5:b3:86:e5:c9:61:bc:07:16:4d:e5:44:62:97: 0e:fc:85:e2:b2:5f:ef:3c:6f:22:3f:25:24:95:f8: 5c:28:cd:23:93:c2:dc:2b:b6:c3:9b:71:66:61:ff: 2f:12:53:df:f5:5a:bf:0f:c3:22:3b:08:d1:8a:42: 54:a9:90:6c:de:86:07:41:4a:47:06:d2:37:9a:ff: e4:43:30:d5:9a:51:dd:15:f4:32:b9:5f:d1:c0:38: df:23:d1:73:44:3d:b1:7f:a7:f3:d9:b4:23:25:43: 73:7d:f1:eb:e6:ff:21:2a:1d:2b:80:7d:3a:b6:a2: 00:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2B:33:72:65:29:3E:8F:09:05:1E:2C:7E:B7:5C:DA:FB:F6:69:18 X509v3 Authority Key Identifier: keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/KSszcmUpPo8JBR4sfrdc2vv2aRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.185.0/24 83.229.2.0/24 147.236.164.0/23 213.255.192.0/24 216.150.30.0/23 IPv6: 2a09:b300::/29 Signature Algorithm: sha256WithRSAEncryption a7:e2:9d:e7:dd:b5:1c:d6:27:d7:dc:1e:39:7f:29:15:57:91: f0:c5:4d:de:a3:c2:5a:41:13:99:2a:97:fd:5b:75:28:13:23: b3:2a:3e:d8:cb:05:4c:8c:c0:2f:7a:1a:70:ba:8b:f4:c8:47: 2e:75:f2:63:36:ee:47:ca:02:45:08:d5:a1:1b:2a:53:83:0c: 6b:df:2e:64:d5:51:7a:1c:60:8e:83:f7:dd:63:89:19:87:1e: 73:40:68:ac:ac:c5:74:03:58:0b:5c:4a:02:3f:c5:98:ab:df: 52:57:a7:24:54:51:01:17:86:d8:65:fe:1d:18:5b:57:ca:8e: d1:b9:29:82:4d:82:73:84:78:6b:f0:1d:d6:53:41:81:b8:80: 5d:0c:fb:06:2c:18:3d:8e:28:74:a3:a0:2d:25:69:7b:9e:1e: 4f:63:ce:3c:68:4c:6f:66:33:18:92:5e:14:02:70:c4:42:bf: 42:fe:cf:5d:26:e5:5a:bb:6f:41:d4:cc:47:e9:1c:f6:99:f1: bf:f8:ce:d4:29:73:bd:31:74:bd:2b:1b:5a:0a:41:cd:21:a0: 56:3f:fa:b4:1b:65:fc:02:68:7e:8e:15:40:6b:aa:9d:0f:48: 41:05:13:20:20:73:e8:e4:86:60:fa:cb:02:49:d4:2e:4b:a2: 5f:ff:5a:59 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt5fpCS0Z/5q0OFC/0NayT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MDFhZGVkYmM5YzhmMWM2Y2YyMzg5ZmM3Zjc0MWVkZjRm MTlmMmMwHhcNMjYwMTAxMTIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTJiMzM3MjY1MjkzZThmMDkwNTFlMmM3ZWI3NWNkYWZiZjY2OTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHWOyWzfDlEYQxefQK8ts1WBG3Wy BKKT5Q4czUBuDHAGR8ciqX9E9K5YYMUxb1dvRhi57IXNe4srY5Zoe1rdpNkAhj4M wRu9eIH7Ro52H6xyr+4MudQ7V9IDhK10neJP7J2TrjarWu9Q8vuQFf5k/K7ed0EV yRX5l9tvhgTl64v9JJAA5TUQpbOG5clhvAcWTeVEYpcO/IXisl/vPG8iPyUklfhc KM0jk8LcK7bDm3FmYf8vElPf9Vq/D8MiOwjRikJUqZBs3oYHQUpHBtI3mv/kQzDV mlHdFfQyuV/RwDjfI9FzRD2xf6fz2bQjJUNzffHr5v8hKh0rgH06tqIAAwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFCkrM3JlKT6PCQUeLH63XNr79mkYMB8GA1UdIwQY MBaAFGQBre28nI8cbPI4n8f3Qe308Z8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85OGM4NjAtNTI5OC00ODQ2LWJlYWEt MzU2YzA5NmJjNmY5LzEvS1NzemNtVXBQbzhKQlI0c2ZyZGMydnYyYVJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85OGM4NjAtNTI5OC00ODQ2LWJlYWEtMzU2YzA5NmJjNmY5 LzEvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAH8G5AwQA U+UCAwQBk+ykAwQA1f/AAwQB2JYeMA0EAgACMAcDBQMqCbMAMA0GCSqGSIb3DQEB CwUAA4IBAQCn4p3n3bUc1ifX3B45fykVV5HwxU3eo8JaQROZKpf9W3UoEyOzKj7Y ywVMjMAvehpwuov0yEcudfJjNu5HygJFCNWhGypTgwxr3y5k1VF6HGCOg/fdY4kZ hx5zQGisrMV0A1gLXEoCP8WYq99SV6ckVFEBF4bYZf4dGFtXyo7RuSmCTYJzhHhr 8B3WU0GBuIBdDPsGLBg9jih0o6AtJWl7nh5PY848aExvZjMYkl4UAnDEQr9C/s9d JuVau29B1MxH6Rz2mfG/+M7UKXO9MXS9KxtaCkHNIaBWP/q0G2X8Amh+jhVAa6qd D0hBBRMgIHPo5IZg+ssCSdQuS6Jf/1pZ -----END CERTIFICATE-----Generated at Tue Jan 13 00:09:48 2026 by rpki-client