This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/kP2KSuj-FkQKmwr3mlICYjWYuAk.roa File: kP2KSuj-FkQKmwr3mlICYjWYuAk.roa (raw, json) Hash identifier: mJFVgN/gg79ER/d0W7J+rux4VqVkbxiEL9s7hNeViGI= Subject key identifier: 90:FD:8A:4A:E8:FE:16:44:0A:9B:0A:F7:9A:52:02:62:35:98:B8:09 Certificate issuer: /CN=6b8bacd95f1f4bd675527d326d299956862c321a Certificate serial: 019B7A5B11671F2BBE13339F5578B6696714 Authority key identifier: 6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/kP2KSuj-FkQKmwr3mlICYjWYuAk.roa Signing time: Thu 01 Jan 2026 16:19:06 +0000 ROA not before: Thu 01 Jan 2026 16:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207595 IP address blocks: 185.225.227.0/24 maxlen: 24 2a05:ba00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:11:67:1f:2b:be:13:33:9f:55:78:b6:69:67:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b8bacd95f1f4bd675527d326d299956862c321a Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90fd8a4ae8fe16440a9b0af79a5202623598b809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:fc:e8:fd:3c:72:a4:a2:e7:f5:c6:d8:5e: f3:6f:fe:b5:a5:64:3e:ad:a9:1e:f5:30:d4:6e:fb: a5:79:55:36:ce:0c:79:62:31:ba:2c:5f:1d:d7:38: be:e5:10:6e:9e:84:c7:ce:f6:0c:79:6a:96:2f:1a: fd:0e:da:a9:93:d5:e3:46:23:b2:2d:6f:29:0f:be: 3a:39:8a:44:55:93:54:bd:78:c3:3c:f8:77:57:a8: f0:97:d9:bb:cd:17:3a:56:54:75:a4:2b:6e:5a:55: 2a:58:3a:a7:cc:cb:1c:79:23:41:bf:9c:78:0d:dc: 77:47:17:04:59:a1:42:4d:a2:c1:00:74:6d:fa:49: 12:e3:75:33:b6:7f:12:cc:96:5b:b8:fe:28:9f:ee: a1:79:e8:54:24:13:b8:0d:7a:d9:0b:23:a4:80:da: fa:4f:0e:c7:d2:df:81:e4:a2:bb:c3:73:b0:11:d9: 4c:8a:7f:69:09:0f:6f:77:69:36:c4:e6:16:f8:2a: fd:17:b7:c7:67:57:eb:7e:3d:1b:76:6d:85:cf:e4: 63:a2:b2:20:2c:39:60:78:3d:80:c4:0d:9e:d6:e3: fb:99:41:81:94:1a:ae:39:e8:e6:64:05:40:3d:1d: e7:a8:e7:76:49:f0:e7:67:43:e3:fd:e6:7c:31:7d: fc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FD:8A:4A:E8:FE:16:44:0A:9B:0A:F7:9A:52:02:62:35:98:B8:09 X509v3 Authority Key Identifier: keyid:6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/kP2KSuj-FkQKmwr3mlICYjWYuAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.227.0/24 IPv6: 2a05:ba00::/32 Signature Algorithm: sha256WithRSAEncryption 25:6a:e5:57:68:0e:57:ce:e4:52:73:e6:3c:c2:3b:12:ef:6f: 76:c2:3c:ac:d7:c6:8f:63:c3:0a:94:7a:0f:49:3e:98:da:74: c3:cb:48:6d:9d:a8:4f:91:93:41:d9:fe:66:2c:52:fc:01:c0: 6a:31:8b:29:31:dd:96:a3:8b:1c:ab:84:af:d2:3a:03:f1:1f: 38:fa:0b:83:44:32:3f:f7:68:2b:1e:7d:21:01:c7:b0:e0:43: 91:8b:7b:ee:e8:18:d1:5a:7b:63:94:c9:b7:66:a1:50:9c:21: d6:dc:48:19:8a:a6:08:f0:f9:3d:31:90:8f:3e:8d:22:65:ae: d7:a8:35:16:67:a0:50:2b:90:6e:6b:ee:d6:fb:bd:33:25:6f: 08:2a:f6:81:38:ad:a8:63:79:0a:5f:bd:b0:b4:ca:e2:73:3e: 47:85:cf:f7:2e:67:99:11:3f:39:db:f8:91:1e:75:5a:5f:93: 99:b6:f9:2c:d6:6a:c2:0d:bd:1f:67:7b:41:30:ad:59:52:75: aa:e5:cb:b2:7f:69:cb:3b:46:69:77:1f:0f:c1:97:26:94:b6: d5:de:9f:83:62:1d:d9:e9:31:fe:d0:46:03:e5:1a:7a:f8:4a: f5:ad:b2:28:7e:45:af:3d:05:4a:0b:19:e4:5f:07:aa:a7:f3: cb:86:df:4e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WxFnHyu+EzOfVXi2aWcUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiOGJhY2Q5NWYxZjRiZDY3NTUyN2QzMjZkMjk5OTU2ODYy YzMyMWEwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGZkOGE0YWU4ZmUxNjQ0MGE5YjBhZjc5YTUyMDI2MjM1OThiODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRf86P08cqSi5/XG2F7zb/61pWQ+ rake9TDUbvuleVU2zgx5YjG6LF8d1zi+5RBunoTHzvYMeWqWLxr9Dtqpk9XjRiOy LW8pD746OYpEVZNUvXjDPPh3V6jwl9m7zRc6VlR1pCtuWlUqWDqnzMsceSNBv5x4 Ddx3RxcEWaFCTaLBAHRt+kkS43Uztn8SzJZbuP4on+6heehUJBO4DXrZCyOkgNr6 Tw7H0t+B5KK7w3OwEdlMin9pCQ9vd2k2xOYW+Cr9F7fHZ1frfj0bdm2Fz+RjorIg LDlgeD2AxA2e1uP7mUGBlBquOejmZAVAPR3nqOd2SfDnZ0Pj/eZ8MX38/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJD9ikro/hZECpsK95pSAmI1mLgJMB8GA1UdIwQY MBaAFGuLrNlfH0vWdVJ9Mm0pmVaGLDIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTR1czJWOGZTOVoxVW4weWJTbVpWb1lzTWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85Y2U1NTAtMmI3ZS00ZjhmLThlZTEt MTJlZDM5OTVlNWRlLzEva1AyS1N1ai1Ga1FLbXdyM21sSUNZaldZdUFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85Y2U1NTAtMmI3ZS00ZjhmLThlZTEtMTJlZDM5OTVlNWRl LzEvYTR1czJWOGZTOVoxVW4weWJTbVpWb1lzTWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAueHjMA0E AgACMAcDBQAqBboAMA0GCSqGSIb3DQEBCwUAA4IBAQAlauVXaA5XzuRSc+Y8wjsS 7292wjys18aPY8MKlHoPST6Y2nTDy0htnahPkZNB2f5mLFL8AcBqMYspMd2Wo4sc q4Sv0joD8R84+guDRDI/92grHn0hAcew4EORi3vu6BjRWntjlMm3ZqFQnCHW3EgZ iqYI8Pk9MZCPPo0iZa7XqDUWZ6BQK5Bua+7W+70zJW8IKvaBOK2oY3kKX72wtMri cz5Hhc/3LmeZET852/iRHnVaX5OZtvks1mrCDb0fZ3tBMK1ZUnWq5cuyf2nLO0Zp dx8PwZcmlLbV3p+DYh3Z6TH+0EYD5Rp6+Er1rbIofkWvPQVKCxnkXweqp/PLht9O -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:39 2026 by rpki-client