This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/kA7mfes0bqBl5D-bI67VpsmJV9k.roa File: kA7mfes0bqBl5D-bI67VpsmJV9k.roa (raw, json) Hash identifier: Y1kiJDLllKmeTEYbA2zY2rhRombUij5BSss+NTqpPIw= Subject key identifier: 90:0E:E6:7D:EB:34:6E:A0:65:E4:3F:9B:23:AE:D5:A6:C9:89:57:D9 Certificate issuer: /CN=6cf96a7c01d62e37acecf0786f64978905121647 Certificate serial: 019B7A5ACFFBF96B9D32BFA3C5AC863C023F Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/kA7mfes0bqBl5D-bI67VpsmJV9k.roa Signing time: Thu 01 Jan 2026 16:18:50 +0000 ROA not before: Thu 01 Jan 2026 16:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208561 IP address blocks: 185.117.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cf:fb:f9:6b:9d:32:bf:a3:c5:ac:86:3c:02:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647 Validity Not Before: Jan 1 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=900ee67deb346ea065e43f9b23aed5a6c98957d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:82:e4:ad:84:cd:13:7c:57:29:c2:4f:64:3a: 44:48:8f:07:cf:14:20:0e:36:6e:e7:8b:37:fa:d0: fb:a0:b7:01:83:06:0a:ed:1b:15:7b:42:5c:e5:1a: 24:3e:1c:39:15:20:73:60:33:c4:24:95:4a:9f:ee: 0b:ba:9f:48:f2:26:b8:63:94:b3:31:f6:c6:44:ef: bd:41:57:cd:33:95:b2:b3:1b:a0:5f:91:5a:a9:27: 74:79:47:bd:de:9a:b4:b1:a6:39:e0:1e:af:3b:9b: cf:e5:98:18:fc:c3:e4:7d:f5:a0:63:f0:97:d7:de: a1:d4:2c:dd:92:b4:50:f7:1e:2a:58:e8:2c:51:e0: 90:2b:76:88:06:0c:b8:d4:90:d9:9f:8c:dd:8a:ae: 66:64:60:4e:0c:ac:c6:4b:54:24:c9:bf:8f:16:9d: 5a:b0:e4:a2:36:07:5c:13:0c:72:7b:be:dc:7d:ee: ef:21:41:91:12:34:88:0a:94:b8:fe:36:6d:36:f9: ca:74:e8:96:50:8a:47:18:06:06:22:a1:a4:f2:73: f4:77:2b:77:45:e5:bc:1f:17:11:d1:c0:d7:74:23: 5f:b1:a0:dd:1b:b0:f4:e5:86:61:2d:58:b2:0c:b0: db:54:79:14:fb:4c:e5:9a:34:2a:2f:b5:89:be:f1: f6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0E:E6:7D:EB:34:6E:A0:65:E4:3F:9B:23:AE:D5:A6:C9:89:57:D9 X509v3 Authority Key Identifier: keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/kA7mfes0bqBl5D-bI67VpsmJV9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.132.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:bb:7e:2d:7b:6e:0f:90:7b:76:52:ec:02:05:d4:3d:b6:e8: 2c:ce:65:35:19:96:ed:2a:ac:2d:00:79:1d:90:8d:a2:7b:22: dc:da:aa:81:e2:34:79:09:55:fa:eb:02:aa:af:d0:45:71:95: eb:00:c2:9c:34:3a:d2:b2:06:0b:5f:2e:23:bb:3c:d8:50:2b: 51:ab:9d:41:55:f9:4a:98:b7:6d:d5:87:5e:fa:cd:95:68:4f: c2:8c:69:0c:dd:90:ac:b9:22:7f:66:5a:d0:00:d5:0b:9d:21: a9:84:f7:2a:28:ac:e1:cf:9c:a3:39:a0:9d:55:24:df:f1:1b: bf:4d:f3:56:b1:cb:30:d9:c5:31:04:dc:81:a3:3d:16:3a:4a: 0e:6a:ac:56:8b:98:ec:24:f3:47:bb:7a:1f:3b:6b:e8:d7:93: 87:7e:0f:4e:75:81:9f:34:fe:7c:b9:72:dd:98:b6:bd:7f:fd: 00:1b:ca:d1:58:a3:0e:5a:5d:e0:0a:c8:51:b7:47:e4:02:7f: 2c:69:97:87:da:d9:a4:7c:8c:9f:d8:66:f5:38:a4:fd:9f:a9: f8:de:56:68:80:1b:d4:28:a4:25:d7:8d:48:a5:dd:e6:43:79: bb:6d:88:ed:e1:43:14:f9:12:27:fe:9a:bf:70:70:ac:67:82: 17:b7:72:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Ws/7+WudMr+jxayGPAI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZjk2YTdjMDFkNjJlMzdhY2VjZjA3ODZmNjQ5Nzg5MDUx MjE2NDcwHhcNMjYwMTAxMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDBlZTY3ZGViMzQ2ZWEwNjVlNDNmOWIyM2FlZDVhNmM5ODk1N2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04LkrYTNE3xXKcJPZDpESI8HzxQg DjZu54s3+tD7oLcBgwYK7RsVe0Jc5RokPhw5FSBzYDPEJJVKn+4Lup9I8ia4Y5Sz MfbGRO+9QVfNM5WysxugX5FaqSd0eUe93pq0saY54B6vO5vP5ZgY/MPkffWgY/CX 196h1CzdkrRQ9x4qWOgsUeCQK3aIBgy41JDZn4zdiq5mZGBODKzGS1Qkyb+PFp1a sOSiNgdcEwxye77cfe7vIUGREjSICpS4/jZtNvnKdOiWUIpHGAYGIqGk8nP0dyt3 ReW8HxcR0cDXdCNfsaDdG7D05YZhLViyDLDbVHkU+0zlmjQqL7WJvvH2UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJAO5n3rNG6gZeQ/myOu1abJiVfZMB8GA1UdIwQY MBaAFGz5anwB1i43rOzweG9kl4kFEhZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81ZjBmMDYtNTZmNC00MWE1LTg4OWEt YjE1YjNmYmMwNGE2LzEva0E3bWZlczBicUJsNUQtYkk2N1Zwc21KVjlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy81ZjBmMDYtNTZmNC00MWE1LTg4OWEtYjE1YjNmYmMwNGE2 LzEvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXWEMA0G CSqGSIb3DQEBCwUAA4IBAQBau34te24PkHt2UuwCBdQ9tugszmU1GZbtKqwtAHkd kI2ieyLc2qqB4jR5CVX66wKqr9BFcZXrAMKcNDrSsgYLXy4juzzYUCtRq51BVflK mLdt1Yde+s2VaE/CjGkM3ZCsuSJ/ZlrQANULnSGphPcqKKzhz5yjOaCdVSTf8Ru/ TfNWscsw2cUxBNyBoz0WOkoOaqxWi5jsJPNHu3ofO2vo15OHfg9OdYGfNP58uXLd mLa9f/0AG8rRWKMOWl3gCshRt0fkAn8saZeH2tmkfIyf2Gb1OKT9n6n43lZogBvU KKQl141Ipd3mQ3m7bYjt4UMU+RIn/pq/cHCsZ4IXt3Ko -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:20 2026 by rpki-client