This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/kb5QsyYCWAXreqKDSNly_eUOWbs.roa File: kb5QsyYCWAXreqKDSNly_eUOWbs.roa (raw, json) Hash identifier: R6T+O7UNp0e/weGB+lvgWkopq769WLtdhPDiexDGO0w= Subject key identifier: 91:BE:50:B3:26:02:58:05:EB:7A:A2:83:48:D9:72:FD:E5:0E:59:BB Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780 Certificate serial: 019B7C8000168C186614534653DDE75BCE2D Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/kb5QsyYCWAXreqKDSNly_eUOWbs.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42687 IP address blocks: 185.203.176.0/22 maxlen: 24 185.203.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:00:16:8c:18:66:14:53:46:53:dd:e7:5b:ce:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780 Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91be50b326025805eb7aa28348d972fde50e59bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:07:b5:86:18:ef:19:0c:9b:14:4a:11:af:3e: 0d:b9:2b:2f:43:d1:5b:d9:65:ab:e3:a2:58:ab:e5: e9:d4:33:bf:b6:74:82:ef:13:97:e1:7f:7c:d1:f0: bf:d9:a5:c2:fb:74:6f:35:49:b1:15:1f:ed:e2:21: ca:94:ea:5f:c5:8e:78:2b:bb:96:97:d9:a6:08:7e: fe:f6:6a:3a:81:10:cf:6a:23:96:41:aa:cc:0a:82: 9e:87:e6:ba:d8:34:5d:37:0f:d9:b2:11:e5:e4:49: 6e:e3:c8:d0:c3:44:6b:ae:81:6f:9e:0a:ff:40:6a: f9:8b:98:74:2f:18:3f:69:e1:08:b5:64:fa:6d:44: 97:4e:95:f7:88:6f:ed:e9:59:58:a6:43:b9:13:57: a0:0f:1e:45:38:65:22:5a:31:61:21:23:78:76:3a: c6:f6:5f:89:02:cc:29:ba:43:07:a3:d0:b7:ac:8a: 9e:ee:34:72:1d:7b:ca:57:32:a6:a0:4d:b5:9f:06: 1b:ec:2e:20:c0:4b:c3:bb:a6:c8:de:99:44:e7:41: d6:33:2b:09:27:5b:e6:e4:cc:31:9c:2e:1f:ec:22: e0:cc:ba:cb:d8:62:df:0a:04:29:0c:01:16:79:d6: b7:c2:2f:4d:7a:ba:d3:e4:91:1d:3c:66:2d:50:ee: 2d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BE:50:B3:26:02:58:05:EB:7A:A2:83:48:D9:72:FD:E5:0E:59:BB X509v3 Authority Key Identifier: keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/kb5QsyYCWAXreqKDSNly_eUOWbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.176.0/22 Signature Algorithm: sha256WithRSAEncryption 92:6c:a3:c4:68:79:79:c4:f8:2b:85:43:14:68:a7:69:a0:f4: 01:b0:54:34:0d:b5:48:74:f1:a9:56:2d:27:c8:3e:f6:3a:73: 5f:16:24:5d:30:1d:53:7b:30:e7:3b:5e:01:fb:7e:a6:e7:cb: 3e:e5:75:ee:a7:b6:31:d4:cf:d5:dd:65:d0:53:98:e3:31:00: 01:a1:cd:e2:dd:5d:79:3a:a5:bd:3d:ff:73:10:eb:0a:b4:e8: ff:4d:82:77:8e:11:ce:cb:82:44:9c:45:05:81:38:fd:11:48: c3:76:ac:35:4c:5c:5b:69:bf:58:30:66:bb:9f:af:59:fa:99: 3b:69:68:14:45:86:90:d8:cb:df:4e:d0:bd:c4:0b:f7:49:29: 10:6c:f4:03:02:d8:a2:b4:ca:6a:6b:cf:5a:75:2e:5b:ea:d9: 5f:bb:24:bf:af:bd:7e:cf:17:69:b2:df:18:fc:7f:be:37:5c: ce:7c:22:e2:77:1f:3a:ec:78:83:4b:45:ff:09:ca:10:58:10: 27:d3:55:86:63:67:31:93:15:a6:9b:98:4b:08:49:53:98:df: b5:58:21:4c:58:8e:2f:db:cd:0e:41:49:fa:5b:fd:1b:ce:eb: d2:44:fd:df:7b:41:4c:8e:35:02:34:79:a9:c2:4a:32:d4:9c: f6:88:7e:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gAAWjBhmFFNGU93nW84tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTY0MDNjZjczMjIxYzExN2VhNDliYzkyMzRmZTZmNGEx MWQ3ODAwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWJlNTBiMzI2MDI1ODA1ZWI3YWEyODM0OGQ5NzJmZGU1MGU1OWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5we1hhjvGQybFEoRrz4NuSsvQ9Fb 2WWr46JYq+Xp1DO/tnSC7xOX4X980fC/2aXC+3RvNUmxFR/t4iHKlOpfxY54K7uW l9mmCH7+9mo6gRDPaiOWQarMCoKeh+a62DRdNw/ZshHl5Elu48jQw0RrroFvngr/ QGr5i5h0Lxg/aeEItWT6bUSXTpX3iG/t6VlYpkO5E1egDx5FOGUiWjFhISN4djrG 9l+JAswpukMHo9C3rIqe7jRyHXvKVzKmoE21nwYb7C4gwEvDu6bI3plE50HWMysJ J1vm5MwxnC4f7CLgzLrL2GLfCgQpDAEWeda3wi9NerrT5JEdPGYtUO4t4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJG+ULMmAlgF63qig0jZcv3lDlm7MB8GA1UdIwQY MBaAFIPmQDz3MiHBF+pJvJI0/m9KEdeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1aQVBQY3lJY0VYNmttOGtqVC1iMG9SMTRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wOWMzYjEtNzJlYi00MzNhLTk2Y2It NDg3NzdhYTk2MWU5LzEva2I1UXN5WUNXQVhyZXFLRFNObHlfZVVPV2JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8wOWMzYjEtNzJlYi00MzNhLTk2Y2ItNDg3NzdhYTk2MWU5 LzEvZy1aQVBQY3lJY0VYNmttOGtqVC1iMG9SMTRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucuwMA0G CSqGSIb3DQEBCwUAA4IBAQCSbKPEaHl5xPgrhUMUaKdpoPQBsFQ0DbVIdPGpVi0n yD72OnNfFiRdMB1TezDnO14B+36m58s+5XXup7Yx1M/V3WXQU5jjMQABoc3i3V15 OqW9Pf9zEOsKtOj/TYJ3jhHOy4JEnEUFgTj9EUjDdqw1TFxbab9YMGa7n69Z+pk7 aWgURYaQ2MvfTtC9xAv3SSkQbPQDAtiitMpqa89adS5b6tlfuyS/r71+zxdpst8Y /H++N1zOfCLidx867HiDS0X/CcoQWBAn01WGY2cxkxWmm5hLCElTmN+1WCFMWI4v 280OQUn6W/0bzuvSRP3fe0FMjjUCNHmpwkoy1Jz2iH6u -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:32 2026 by rpki-client