This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/k212pOftYaKL3__dZMrFZE2MH5E.roa File: k212pOftYaKL3__dZMrFZE2MH5E.roa (raw, json) Hash identifier: PKolWasV9tkUQ7UVtjo0IH2y7lrM7NWS9+jgOePyuP8= Subject key identifier: 93:6D:76:A4:E7:ED:61:A2:8B:DF:FF:DD:64:CA:C5:64:4D:8C:1F:91 Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a Certificate serial: 019B79113BEBA3019C1E2C8D7DF550A157AB Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/k212pOftYaKL3__dZMrFZE2MH5E.roa Signing time: Thu 01 Jan 2026 10:18:51 +0000 ROA not before: Thu 01 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197589 IP address blocks: 46.235.136.0/21 maxlen: 21 85.204.112.0/22 maxlen: 22 89.42.0.0/21 maxlen: 21 94.176.44.0/22 maxlen: 22 94.177.68.0/22 maxlen: 22 185.96.20.0/22 maxlen: 22 2a04:d680::/29 maxlen: 29 2a04:d680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3b:eb:a3:01:9c:1e:2c:8d:7d:f5:50:a1:57:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=936d76a4e7ed61a28bdfffdd64cac5644d8c1f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e2:53:22:a5:bc:6a:17:32:b3:86:d4:c0:de: 69:39:c1:b2:6e:cc:af:c8:9e:b7:29:d5:61:33:c3: 14:39:9d:99:3e:6c:49:ab:d8:b8:70:cb:a6:d6:dd: b3:bf:83:da:ef:68:5c:b4:c9:ed:e3:e5:6d:6f:b3: fe:45:2e:f2:f5:fa:ad:99:49:17:b1:76:8e:78:16: 7f:44:19:55:bb:21:1d:0c:be:ad:f1:61:84:d9:2c: 2a:ed:38:29:16:1c:57:c5:ff:9c:70:69:3f:57:58: 40:93:76:c5:da:72:69:4d:45:39:04:95:86:52:3e: b3:34:d5:e1:83:85:63:64:31:d7:4f:10:2f:08:0b: d6:bc:72:f2:b3:f0:1d:bd:9b:4c:8c:33:8b:88:6c: 05:b1:b1:98:2e:da:af:38:db:b4:73:ee:f6:ce:e9: 29:6c:eb:b7:84:3e:73:b8:de:6b:06:76:7d:74:ef: df:82:78:57:1a:fc:2a:58:f6:14:39:8e:33:11:77: 4f:f4:8a:9c:b3:68:2e:6f:49:de:e1:f9:87:b0:19: 71:53:53:23:b9:84:01:66:df:46:98:2e:85:63:d9: f3:39:c1:fc:84:53:84:04:60:7f:b0:5e:30:c5:53: 1a:d7:1e:82:69:69:c7:49:dc:6e:fb:39:cc:1e:bb: 2b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6D:76:A4:E7:ED:61:A2:8B:DF:FF:DD:64:CA:C5:64:4D:8C:1F:91 X509v3 Authority Key Identifier: keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/k212pOftYaKL3__dZMrFZE2MH5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.136.0/21 85.204.112.0/22 89.42.0.0/21 94.176.44.0/22 94.177.68.0/22 185.96.20.0/22 IPv6: 2a04:d680::/29 Signature Algorithm: sha256WithRSAEncryption 32:19:94:be:2a:65:48:24:69:9f:a5:41:0a:a3:0e:f8:0e:bf: ca:59:62:66:ba:e5:b1:d7:2e:94:bd:0e:12:a1:3f:ee:64:86: 0e:3e:76:25:0c:59:d4:27:dd:9e:1e:b1:f4:0e:ac:86:5f:a8: 2d:31:dc:26:99:8d:f2:8b:4b:60:73:37:e7:be:57:9f:50:9d: 31:4c:a7:ea:78:b7:ef:52:1e:24:7e:30:4a:a3:af:09:0a:37: f0:56:49:05:3c:f6:e7:db:66:05:c4:c8:40:fb:da:48:cf:c3: 25:59:d8:31:59:e0:82:11:03:a6:e1:56:2a:09:a8:95:b2:9d: 9f:7d:1b:1e:cd:17:2c:0f:14:f2:88:f7:b8:06:bd:0f:87:4d: fe:de:bf:b1:9c:90:ae:f6:15:53:82:2a:ed:ad:bc:78:99:8d: 28:eb:1e:58:86:3d:7d:81:33:a0:de:d8:8e:af:a2:9d:6a:d5: 60:93:15:13:46:f3:20:92:dc:5d:73:99:25:1f:16:fd:a0:17: 5b:fd:7e:a6:07:52:59:a2:b8:66:53:a6:b5:b5:bd:c8:87:c7: 89:6e:8e:0f:c3:cb:38:9b:c1:97:bb:ff:f9:3f:0b:f4:e0:bc: 76:1b:06:a1:3f:10:3d:20:80:33:0d:45:5f:60:c2:3c:07:7f: a5:17:a7:72 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt5ETvrowGcHiyNffVQoVerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMjc1MzFhZDk5OWI2ZDVhMDQ0MWI3NWZhZWE3ZDU3ODY1 M2U0MmEwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzZkNzZhNGU3ZWQ2MWEyOGJkZmZmZGQ2NGNhYzU2NDRkOGMxZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uJTIqW8ahcys4bUwN5pOcGybsyv yJ63KdVhM8MUOZ2ZPmxJq9i4cMum1t2zv4Pa72hctMnt4+Vtb7P+RS7y9fqtmUkX sXaOeBZ/RBlVuyEdDL6t8WGE2Swq7TgpFhxXxf+ccGk/V1hAk3bF2nJpTUU5BJWG Uj6zNNXhg4VjZDHXTxAvCAvWvHLys/AdvZtMjDOLiGwFsbGYLtqvONu0c+72zukp bOu3hD5zuN5rBnZ9dO/fgnhXGvwqWPYUOY4zEXdP9Iqcs2gub0ne4fmHsBlxU1Mj uYQBZt9GmC6FY9nzOcH8hFOEBGB/sF4wxVMa1x6CaWnHSdxu+znMHrsrEwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFJNtdqTn7WGii9//3WTKxWRNjB+RMB8GA1UdIwQY MBaAFMwnUxrZmbbVoEQbdfrqfVeGU+QqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekNkVEd0bVp0dFdnUkJ0MS11cDlWNFpUNUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85MjUyZTItNDVkZS00YmNjLThmNTgt ZmE0MTE3ZGIxNTU1LzEvazIxMnBPZnRZYUtMM19fZFpNckZaRTJNSDVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC85MjUyZTItNDVkZS00YmNjLThmNTgtZmE0MTE3ZGIxNTU1 LzEvekNkVEd0bVp0dFdnUkJ0MS11cDlWNFpUNUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDLuuIAwQC VcxwAwQDWSoAAwQCXrAsAwQCXrFEAwQCuWAUMA0EAgACMAcDBQMqBNaAMA0GCSqG SIb3DQEBCwUAA4IBAQAyGZS+KmVIJGmfpUEKow74Dr/KWWJmuuWx1y6UvQ4SoT/u ZIYOPnYlDFnUJ92eHrH0DqyGX6gtMdwmmY3yi0tgczfnvlefUJ0xTKfqeLfvUh4k fjBKo68JCjfwVkkFPPbn22YFxMhA+9pIz8MlWdgxWeCCEQOm4VYqCaiVsp2ffRse zRcsDxTyiPe4Br0Ph03+3r+xnJCu9hVTgirtrbx4mY0o6x5Yhj19gTOg3tiOr6Kd atVgkxUTRvMgktxdc5klHxb9oBdb/X6mB1JZorhmU6a1tb3Ih8eJbo4Pw8s4m8GX u//5Pwv04Lx2GwahPxA9IIAzDUVfYMI8B3+lF6dy -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:12 2026 by rpki-client