This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/kKQ76IVT9y8M1Y6gmaYWYOnxmC0.roa File: kKQ76IVT9y8M1Y6gmaYWYOnxmC0.roa (raw, json) Hash identifier: Pe2plYPXj2VJbitKAI9QQJcmWUwozx13yiIOtxGQ0bE= Subject key identifier: 90:A4:3B:E8:85:53:F7:2F:0C:D5:8E:A0:99:A6:16:60:E9:F1:98:2D Certificate issuer: /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b Certificate serial: 019B92F0E255B63264F09985E8DB115F5FCC Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/kKQ76IVT9y8M1Y6gmaYWYOnxmC0.roa Signing time: Tue 06 Jan 2026 10:53:38 +0000 ROA not before: Tue 06 Jan 2026 10:53:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49436 IP address blocks: 185.250.168.0/22 maxlen: 22 195.42.158.0/23 maxlen: 23 2a0c:f47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:f0:e2:55:b6:32:64:f0:99:85:e8:db:11:5f:5f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b Validity Not Before: Jan 6 10:53:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90a43be88553f72f0cd58ea099a61660e9f1982d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:eb:ad:02:c0:54:5d:21:d2:b5:3d:5e:5b: 26:55:36:74:0b:ce:75:84:8d:be:66:84:22:8d:aa: e7:e7:b9:8b:70:54:8e:0d:0b:77:b1:b2:9b:43:4a: d4:b5:4b:fa:8d:a9:36:dd:29:9d:1c:4d:80:0c:ec: ef:1d:95:7b:b9:98:bb:75:ff:94:7b:5c:f5:ff:01: 29:f7:d7:4a:58:60:e0:7f:8e:20:a1:05:51:d2:e3: 3e:9a:c2:b5:58:55:03:b2:26:d2:e5:9f:0b:85:8d: 4e:e0:03:6a:f1:4f:9f:6b:15:36:33:b8:9a:d0:02: e4:f1:24:22:37:51:90:be:b9:61:c6:20:38:2d:f0: 8f:f1:0e:20:a8:55:b3:f0:32:3d:a8:42:66:29:6b: bc:42:dc:b2:04:54:0c:79:56:76:16:01:b8:4f:db: c0:1c:1e:94:70:9d:8f:d8:7a:5b:43:bd:2b:02:ab: 1f:83:24:c4:d0:6f:dc:fe:b0:00:57:24:0a:d5:2f: e8:87:26:fb:3b:da:20:91:09:ea:95:58:8f:b4:be: 3f:03:83:d7:29:c8:d3:09:a8:c1:15:2a:09:15:10: 08:fb:19:84:b4:0b:84:3b:76:81:f3:d7:28:ad:5c: de:46:7c:eb:95:12:56:df:f8:da:47:a1:3a:d4:4b: 2c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A4:3B:E8:85:53:F7:2F:0C:D5:8E:A0:99:A6:16:60:E9:F1:98:2D X509v3 Authority Key Identifier: keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/kKQ76IVT9y8M1Y6gmaYWYOnxmC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.168.0/22 195.42.158.0/23 IPv6: 2a0c:f47::/32 Signature Algorithm: sha256WithRSAEncryption 6d:02:7f:73:cd:fd:b8:62:93:86:f4:6d:f2:59:93:72:71:62: ae:d1:35:0b:3c:22:39:1d:32:4c:28:5d:3f:a1:95:7b:18:20: f6:c8:8c:f6:0e:54:a3:e5:1f:57:58:ea:86:29:e0:ac:7c:5d: 5a:9c:df:7f:46:a7:53:7f:b5:eb:ac:d6:49:2c:05:70:9a:80: ab:92:26:b0:eb:d3:21:37:39:7f:ef:88:7f:6c:97:db:6d:6b: 34:5d:ac:4b:3c:08:dc:83:ca:90:b1:c4:3f:60:5d:d2:5f:40: af:98:26:50:10:9a:37:49:9c:a3:5d:b3:ed:09:70:8a:b1:21: 5e:c6:09:4d:23:ad:77:a8:fa:05:0a:19:b7:23:dd:04:74:9b: 68:63:96:ba:c9:60:35:c0:08:75:bf:28:df:41:c1:99:fe:f1: 9c:a8:0c:25:69:42:5c:ba:07:99:46:f6:b8:37:62:3c:09:3a: 55:4f:a4:e3:a6:e5:73:9e:9e:a1:ca:2a:18:43:9f:93:bf:0b: 37:7f:9b:de:43:fb:13:ee:d7:ca:e9:85:d8:f2:3f:7c:7e:a8: 65:f8:f1:2d:88:09:da:bf:1d:6e:81:15:55:40:3f:73:33:49: 39:dc:8c:35:e3:64:43:0f:39:ce:75:f6:ff:c6:0d:4d:18:65: c2:fc:52:e0 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZuS8OJVtjJk8JmF6NsRX1/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmQyZGE1NDQ3ZDAwNzYxNmViZGRjMmE3MGZlYWM1ZTc3 YzRhOGIwHhcNMjYwMTA2MTA1MzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGE0M2JlODg1NTNmNzJmMGNkNThlYTA5OWE2MTY2MGU5ZjE5ODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaXrrQLAVF0h0rU9XlsmVTZ0C851 hI2+ZoQijarn57mLcFSODQt3sbKbQ0rUtUv6jak23SmdHE2ADOzvHZV7uZi7df+U e1z1/wEp99dKWGDgf44goQVR0uM+msK1WFUDsibS5Z8LhY1O4ANq8U+faxU2M7ia 0ALk8SQiN1GQvrlhxiA4LfCP8Q4gqFWz8DI9qEJmKWu8QtyyBFQMeVZ2FgG4T9vA HB6UcJ2P2HpbQ70rAqsfgyTE0G/c/rAAVyQK1S/ohyb7O9ogkQnqlViPtL4/A4PX KcjTCajBFSoJFRAI+xmEtAuEO3aB89corVzeRnzrlRJW3/jaR6E61EsslwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJCkO+iFU/cvDNWOoJmmFmDp8ZgtMB8GA1UdIwQY MBaAFLz9LaVEfQB2FuvdwqcP6sXnfEqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAwdHBVUjlBSFlXNjkzQ3B3X3F4ZWQ4U29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85MTlmZmYtMjUyZi00NzIwLWFkZTQt YmJmZTIxOTZjNmFmLzEva0tRNzZJVlQ5eThNMVk2Z21hWVdZT254bUMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS85MTlmZmYtMjUyZi00NzIwLWFkZTQtYmJmZTIxOTZjNmFm LzEvdlAwdHBVUjlBSFlXNjkzQ3B3X3F4ZWQ4U29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCufqoAwQB wyqeMA0EAgACMAcDBQAqDA9HMA0GCSqGSIb3DQEBCwUAA4IBAQBtAn9zzf24YpOG 9G3yWZNycWKu0TULPCI5HTJMKF0/oZV7GCD2yIz2DlSj5R9XWOqGKeCsfF1anN9/ RqdTf7XrrNZJLAVwmoCrkiaw69MhNzl/74h/bJfbbWs0XaxLPAjcg8qQscQ/YF3S X0CvmCZQEJo3SZyjXbPtCXCKsSFexglNI613qPoFChm3I90EdJtoY5a6yWA1wAh1 vyjfQcGZ/vGcqAwlaUJcugeZRva4N2I8CTpVT6TjpuVznp6hyioYQ5+Tvws3f5ve Q/sT7tfK6YXY8j98fqhl+PEtiAnavx1ugRVVQD9zM0k53Iw142RDDznOdfb/xg1N GGXC/FLg -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:23 2026 by rpki-client