This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/kWFBLyUBTvbzusgV_UpooCs9BmI.roa File: kWFBLyUBTvbzusgV_UpooCs9BmI.roa (raw, json) Hash identifier: C7RWuvHqnRmXJ+YGjt/KFK6eJ1YPoddfOOX7abEUYvs= Subject key identifier: 91:61:41:2F:25:01:4E:F6:F3:BA:C8:15:FD:4A:68:A0:2B:3D:06:62 Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274 Certificate serial: 019B77C74366096D1224793305E834866FA2 Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/kWFBLyUBTvbzusgV_UpooCs9BmI.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20612 IP address blocks: 185.222.12.0/22 maxlen: 24 194.242.34.0/24 maxlen: 24 2001:67c:20ac::/48 maxlen: 48 2a0c:d000::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:43:66:09:6d:12:24:79:33:05:e8:34:86:6f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274 Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9161412f25014ef6f3bac815fd4a68a02b3d0662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:09:d2:ca:59:d2:50:a2:5b:34:08:5f:59: e9:6c:8c:7b:1b:ee:b8:d0:a0:a8:ff:95:82:67:20: b9:3e:63:d2:13:6e:e8:05:8b:52:00:b1:a3:2d:78: e8:d6:81:af:6f:34:56:8c:7c:a2:2b:c5:fe:4e:ff: 4e:38:f3:32:9d:40:9a:70:a1:54:73:e9:d0:1d:4e: c7:73:09:f5:e5:f1:96:39:d6:26:f3:61:8f:d3:30: 13:1d:c0:db:8a:8b:2b:2a:22:77:ca:f3:6e:82:89: 5e:dc:49:54:67:cc:91:26:68:cd:9a:c1:37:fb:b9: 41:e2:d1:c1:70:fc:92:8b:78:cd:ce:5a:bc:0e:4f: d7:58:68:51:c9:93:25:ea:96:70:c2:67:f0:45:b2: 0f:2b:b2:8c:76:74:72:7c:9a:c5:73:ef:20:22:83: 9c:a4:0e:99:70:a1:4c:c3:48:71:37:15:1c:19:59: 02:d6:d5:b0:97:32:b1:73:df:5c:3d:af:4b:ce:9e: ec:80:21:ba:2d:e2:90:5f:37:a7:de:5e:b6:50:79: c1:d1:bf:96:bb:2a:f0:71:7c:44:6c:35:8e:95:3b: dc:0e:6b:a6:ae:ba:2c:57:1c:d8:72:de:c3:d9:fe: 22:73:75:ed:fc:8d:03:a4:ea:a4:3a:6a:97:54:c6: a0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:61:41:2F:25:01:4E:F6:F3:BA:C8:15:FD:4A:68:A0:2B:3D:06:62 X509v3 Authority Key Identifier: keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/kWFBLyUBTvbzusgV_UpooCs9BmI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.12.0/22 194.242.34.0/24 IPv6: 2001:67c:20ac::/48 2a0c:d000::/29 Signature Algorithm: sha256WithRSAEncryption 3b:67:f4:ad:5c:51:4e:bc:f8:7e:b6:3c:d6:0a:63:fc:f7:b2: 1b:21:c1:13:ca:ff:12:be:81:81:ac:21:0e:85:ee:cb:5a:46: 8d:32:90:52:7f:73:7f:07:3c:ea:e0:6e:d4:86:37:62:eb:98: 1e:54:78:f1:01:d0:09:6e:83:ac:4a:f6:0d:64:cb:da:83:96: 9d:1e:49:68:27:a7:1b:cf:11:0e:0b:81:c9:25:64:c0:4e:a2: f3:0f:5f:59:c6:7b:f9:21:37:e4:0d:ce:26:f5:8c:03:25:dc: f3:80:38:a6:90:4c:95:43:8c:7f:d3:5f:24:48:37:5a:c2:a2: d8:b8:f9:e3:ad:5d:b3:80:ec:f0:55:80:58:5f:05:4c:0f:84: 03:4e:30:02:e2:de:45:df:1f:5f:24:2d:18:b3:1f:92:60:6f: d7:07:af:1f:8a:b4:9f:e0:07:4b:0d:fe:4f:3b:68:e8:53:96: a1:6a:48:b2:50:eb:99:c2:00:97:6a:0c:28:f1:91:76:34:21: de:ab:09:54:8d:44:8a:7a:88:df:5f:52:c7:8a:4b:44:8b:de: ee:87:f3:31:04:0e:fb:21:ad:1d:2b:a1:5c:b7:d0:3c:71:71: 77:09:0a:d7:cd:e5:68:b9:72:d3:9c:83:57:90:d5:e2:d4:20: 67:dd:ca:77 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt3x0NmCW0SJHkzBeg0hm+iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTA4YTZkODY4YWI5ZTliZGIxMDQ3MmZiZWMzMWM5NjZl OTQyNzQwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTYxNDEyZjI1MDE0ZWY2ZjNiYWM4MTVmZDRhNjhhMDJiM2QwNjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutsJ0spZ0lCiWzQIX1npbIx7G+64 0KCo/5WCZyC5PmPSE27oBYtSALGjLXjo1oGvbzRWjHyiK8X+Tv9OOPMynUCacKFU c+nQHU7Hcwn15fGWOdYm82GP0zATHcDbiosrKiJ3yvNugole3ElUZ8yRJmjNmsE3 +7lB4tHBcPySi3jNzlq8Dk/XWGhRyZMl6pZwwmfwRbIPK7KMdnRyfJrFc+8gIoOc pA6ZcKFMw0hxNxUcGVkC1tWwlzKxc99cPa9Lzp7sgCG6LeKQXzen3l62UHnB0b+W uyrwcXxEbDWOlTvcDmumrrosVxzYct7D2f4ic3Xt/I0DpOqkOmqXVMagXwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJFhQS8lAU7287rIFf1KaKArPQZiMB8GA1UdIwQY MBaAFE+Qim2GirnpvbEEcvvsMclm6UJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVDS2JZYUt1ZW05c1FSeS0td3h5V2JwUW5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80ZDc3ZDktYjBhMy00OGFkLWFhMmEt MWM2ZWU1YmJlYjY2LzEva1dGQkx5VUJUdmJ6dXNnVl9VcG9vQ3M5Qm1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80ZDc3ZDktYjBhMy00OGFkLWFhMmEtMWM2ZWU1YmJlYjY2 LzEvVDVDS2JZYUt1ZW05c1FSeS0td3h5V2JwUW5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCud4MAwQA wvIiMBYEAgACMBADBwAgAQZ8IKwDBQMqDNAAMA0GCSqGSIb3DQEBCwUAA4IBAQA7 Z/StXFFOvPh+tjzWCmP897IbIcETyv8SvoGBrCEOhe7LWkaNMpBSf3N/Bzzq4G7U hjdi65geVHjxAdAJboOsSvYNZMvag5adHkloJ6cbzxEOC4HJJWTATqLzD19Zxnv5 ITfkDc4m9YwDJdzzgDimkEyVQ4x/018kSDdawqLYuPnjrV2zgOzwVYBYXwVMD4QD TjAC4t5F3x9fJC0Ysx+SYG/XB68firSf4AdLDf5PO2joU5ahakiyUOuZwgCXagwo 8ZF2NCHeqwlUjUSKeojfX1LHiktEi97uh/MxBA77Ia0dK6Fct9A8cXF3CQrXzeVo uXLTnINXkNXi1CBn3cp3 -----END CERTIFICATE-----Generated at Sun Jan 11 16:13:04 2026 by rpki-client