This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/KaaC6M28k9adFlDm0sQNkvGUIIw.roa File: KaaC6M28k9adFlDm0sQNkvGUIIw.roa (raw, json) Hash identifier: 2H0fCcqXWjgAUaS5LPxTPaJ+kJQB9vSGvCYiGO5pfEU= Subject key identifier: 29:A6:82:E8:CD:BC:93:D6:9D:16:50:E6:D2:C4:0D:92:F1:94:20:8C Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e Certificate serial: 019B77590D6B1CF5E83CFEDE9C74F96C1BA7 Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/KaaC6M28k9adFlDm0sQNkvGUIIw.roa Signing time: Thu 01 Jan 2026 02:18:03 +0000 ROA not before: Thu 01 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56697 IP address blocks: 185.130.216.0/22 maxlen: 24 2a06:e2c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0d:6b:1c:f5:e8:3c:fe:de:9c:74:f9:6c:1b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29a682e8cdbc93d69d1650e6d2c40d92f194208c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:96:fc:e0:38:fb:f6:9e:4a:26:4e:fa:54: 0d:0d:10:f5:00:8c:54:42:99:34:bb:c3:e0:25:cc: a8:88:64:a4:ad:47:89:e4:42:1b:07:31:c3:95:bc: 2b:d9:54:1a:56:df:41:18:a0:81:f8:d6:91:d3:6b: 68:8b:33:fd:b2:87:99:8f:07:11:b5:f3:d4:d0:7e: ba:d1:fb:bc:8a:23:55:cc:02:47:57:86:b7:61:d2: b3:45:83:35:ff:f4:c9:ab:26:2b:8e:d7:03:c0:05: 9d:5d:79:85:86:31:f4:85:ee:de:61:b0:e4:d9:00: 81:79:cb:a8:24:68:ae:8f:db:62:33:4e:55:70:8a: 41:47:a8:55:b3:cc:18:2d:ce:69:8f:81:6b:5d:e5: 23:33:f8:9e:7d:b1:cf:5e:93:81:d0:83:ab:e7:1f: fa:f9:6e:04:f3:b2:5f:fe:e6:3b:8c:8b:d2:c4:03: 1d:a2:60:79:1e:4e:5c:a1:51:c1:5b:17:34:4f:9e: 0a:c1:be:cf:7a:d2:fb:63:e4:1f:fb:78:d7:de:a7: 3c:a1:24:66:a5:5e:40:e3:cc:70:e6:7c:21:35:25: d9:88:76:ff:38:16:ea:1b:0e:df:1e:15:c6:19:b9: de:72:bd:cb:a8:0b:c0:45:63:28:2a:a2:7b:df:79: bd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A6:82:E8:CD:BC:93:D6:9D:16:50:E6:D2:C4:0D:92:F1:94:20:8C X509v3 Authority Key Identifier: keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/KaaC6M28k9adFlDm0sQNkvGUIIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.216.0/22 IPv6: 2a06:e2c0::/29 Signature Algorithm: sha256WithRSAEncryption c2:1b:5b:69:56:14:09:f1:ab:e9:0b:95:60:39:7c:45:e0:ac: ac:ef:ce:ce:39:6e:f5:ec:10:aa:fe:b7:6d:cf:89:df:42:b0: 33:2b:4c:71:2a:16:bc:c9:06:22:b5:17:0c:4b:4f:f6:bc:34: 7d:77:08:20:1e:7c:dc:d4:68:dc:a9:e6:0b:0d:e0:8e:47:f8: 01:89:07:3c:ab:47:79:f2:e0:39:a7:95:44:f8:6b:c0:48:6a: a5:97:f0:c0:2b:c1:98:33:e3:df:9c:a8:58:37:a6:1e:5d:06: 46:a7:7b:6f:76:89:ad:2f:86:02:04:da:17:3a:09:e0:70:87: f9:6c:ee:1b:48:a0:74:7b:2f:c4:4c:bb:dd:fa:07:76:be:62: 8a:32:58:98:ae:f2:65:09:d9:9b:cc:b5:b5:80:1f:30:ce:6d: 82:8e:e9:2c:db:cd:eb:48:e0:92:4a:8e:4a:77:1a:d9:cc:1f: f6:6c:15:f7:08:d1:6d:50:81:97:01:2c:9e:17:08:a5:50:87: 65:8b:5f:bc:c0:29:71:34:3a:9d:83:9e:c2:47:19:c2:3e:3e: f1:5e:06:24:af:10:87:08:f7:99:24:1b:be:7b:10:5a:2c:8b: b2:3a:d3:d3:a6:d6:b1:e7:b7:a1:5a:da:1e:40:c8:b7:81:34: 0b:37:fb:c9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WQ1rHPXoPP7enHT5bBunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiODlkODdmOGU0MWI1MDgyZDM4OTE2MDE1ZTA1OWU1NmRk MDExNGUwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWE2ODJlOGNkYmM5M2Q2OWQxNjUwZTZkMmM0MGQ5MmYxOTQyMDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs76W/OA4+/aeSiZO+lQNDRD1AIxU Qpk0u8PgJcyoiGSkrUeJ5EIbBzHDlbwr2VQaVt9BGKCB+NaR02toizP9soeZjwcR tfPU0H660fu8iiNVzAJHV4a3YdKzRYM1//TJqyYrjtcDwAWdXXmFhjH0he7eYbDk 2QCBecuoJGiuj9tiM05VcIpBR6hVs8wYLc5pj4FrXeUjM/iefbHPXpOB0IOr5x/6 +W4E87Jf/uY7jIvSxAMdomB5Hk5coVHBWxc0T54Kwb7PetL7Y+Qf+3jX3qc8oSRm pV5A48xw5nwhNSXZiHb/OBbqGw7fHhXGGbnecr3LqAvARWMoKqJ733m9EwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCmmgujNvJPWnRZQ5tLEDZLxlCCMMB8GA1UdIwQY MBaAFEuJ2H+OQbUILTiRYBXgWeVt0BFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80YmE5NzMtMGU5Zi00MzUyLTk4Mzgt NjQyZGM5MTI3NjgwLzEvS2FhQzZNMjhrOWFkRmxEbTBzUU5rdkdVSUl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi80YmE5NzMtMGU5Zi00MzUyLTk4MzgtNjQyZGM5MTI3Njgw LzEvUzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYLYMA0E AgACMAcDBQMqBuLAMA0GCSqGSIb3DQEBCwUAA4IBAQDCG1tpVhQJ8avpC5VgOXxF 4Kys787OOW717BCq/rdtz4nfQrAzK0xxKha8yQYitRcMS0/2vDR9dwggHnzc1Gjc qeYLDeCOR/gBiQc8q0d58uA5p5VE+GvASGqll/DAK8GYM+PfnKhYN6YeXQZGp3tv domtL4YCBNoXOgngcIf5bO4bSKB0ey/ETLvd+gd2vmKKMliYrvJlCdmbzLW1gB8w zm2Cjuks283rSOCSSo5KdxrZzB/2bBX3CNFtUIGXASyeFwilUIdli1+8wClxNDqd g57CRxnCPj7xXgYkrxCHCPeZJBu+exBaLIuyOtPTptax57ehWtoeQMi3gTQLN/vJ -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:21 2026 by rpki-client