This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/K4KaGgPmLYRO5soG4eqjbkAncaI.roa File: K4KaGgPmLYRO5soG4eqjbkAncaI.roa (raw, json) Hash identifier: +VJK/j11hj/8ZaPbxR19b24TkZkYatUXvpZgb0IWSzc= Subject key identifier: 2B:82:9A:1A:03:E6:2D:84:4E:E6:CA:06:E1:EA:A3:6E:40:27:71:A2 Certificate issuer: /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af Certificate serial: 019B7F15C155F56C2DB7FF3E37F3675A712B Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/K4KaGgPmLYRO5soG4eqjbkAncaI.roa Signing time: Fri 02 Jan 2026 14:21:30 +0000 ROA not before: Fri 02 Jan 2026 14:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 185.212.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c1:55:f5:6c:2d:b7:ff:3e:37:f3:67:5a:71:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af Validity Not Before: Jan 2 14:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b829a1a03e62d844ee6ca06e1eaa36e402771a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:c0:b5:d6:03:29:8d:18:1c:3c:f7:cb:2f: f0:ba:a3:fd:be:ab:53:18:74:b1:09:f2:51:a3:7a: 77:2c:10:2a:27:79:bb:fc:df:ac:42:f7:0d:48:cf: ee:4a:0f:61:b9:37:fb:5c:da:6e:e7:dd:69:d1:df: 0b:a5:98:28:73:00:77:c6:06:b7:fd:7c:e4:a3:71: ea:a4:a4:5d:73:fa:f4:94:c0:03:db:53:42:d9:cf: b6:35:0a:44:a1:62:a1:03:2d:f2:5b:9e:db:9a:82: 76:fb:1f:e6:31:ff:16:65:38:c6:f5:4e:8f:24:dd: 54:63:f2:f6:0d:03:85:dc:38:9a:b3:8b:c3:0a:54: 05:6d:13:4a:48:bb:38:2b:86:5f:5f:ec:2e:01:82: 74:5f:f4:5a:54:9b:8a:8f:ff:fa:88:dd:ae:73:d0: 24:a6:e9:aa:f0:41:dc:af:e0:cd:0e:8d:e0:71:41: aa:54:86:98:58:68:3b:88:f9:11:cc:ee:c0:95:a5: f3:d6:d3:c1:5f:d4:62:c9:5f:b6:fd:aa:a3:97:6c: 30:b1:8d:21:e7:f1:2a:a1:93:d1:d2:a5:71:10:bd: 1e:b6:6e:48:7c:22:ee:ee:2d:6c:e2:75:c5:b3:36: 4a:b8:e1:05:d2:70:a2:7c:32:91:6b:ab:17:8c:62: f3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:82:9A:1A:03:E6:2D:84:4E:E6:CA:06:E1:EA:A3:6E:40:27:71:A2 X509v3 Authority Key Identifier: keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/K4KaGgPmLYRO5soG4eqjbkAncaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.34.0/24 Signature Algorithm: sha256WithRSAEncryption 52:9e:d5:43:f5:7e:e4:de:ac:a8:0b:a4:74:50:d3:2d:d0:57: d6:91:6c:96:3f:51:89:6e:d4:8b:2e:ce:93:71:b0:74:13:2f: 25:09:02:25:da:22:b9:ae:86:bd:86:da:b9:53:90:a1:ab:23: 65:64:7e:6d:24:02:5d:77:15:da:15:0a:6c:a8:98:84:b0:73: 6d:c9:0c:26:8d:97:99:80:d8:75:de:dc:88:bb:3e:c4:8e:76: 11:39:ab:d6:18:e0:7f:c7:a9:83:a8:ca:80:6b:41:7b:6f:6a: 92:69:b8:f4:10:88:77:60:be:87:8e:ff:7f:20:d1:2d:bd:55: d7:04:46:3c:6e:c2:f7:08:69:c8:b3:b4:c3:bf:20:33:3f:39: 5c:78:d2:f7:8f:16:d9:c8:81:d8:5e:84:14:11:57:10:b1:4d: 7c:8f:56:69:b9:00:4c:95:0b:1f:b4:ac:1c:72:9c:31:37:e9: c2:18:bb:94:ed:1f:56:b2:e2:40:0e:b1:14:43:76:14:10:06: ca:5e:b1:4f:ec:a6:42:e8:7a:2c:f3:cd:68:0a:10:a7:51:ea: 66:71:f7:15:fa:a4:63:f7:7e:6e:dc:0f:48:c0:3b:0a:87:f9: 5b:82:b9:9a:9f:74:e7:6f:e6:fd:49:6a:bc:ba:9f:1a:17:45: 9a:c0:3c:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FcFV9Wwtt/8+N/NnWnErMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlM2JmM2QwYjc2NWYyZWE0MjQ2MWQxMjM3Y2U3ZWFkZTQz YjY4YWYwHhcNMjYwMTAyMTQyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjgyOWExYTAzZTYyZDg0NGVlNmNhMDZlMWVhYTM2ZTQwMjc3MWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTbAtdYDKY0YHDz3yy/wuqP9vqtT GHSxCfJRo3p3LBAqJ3m7/N+sQvcNSM/uSg9huTf7XNpu591p0d8LpZgocwB3xga3 /Xzko3HqpKRdc/r0lMAD21NC2c+2NQpEoWKhAy3yW57bmoJ2+x/mMf8WZTjG9U6P JN1UY/L2DQOF3Dias4vDClQFbRNKSLs4K4ZfX+wuAYJ0X/RaVJuKj//6iN2uc9Ak pumq8EHcr+DNDo3gcUGqVIaYWGg7iPkRzO7AlaXz1tPBX9RiyV+2/aqjl2wwsY0h 5/EqoZPR0qVxEL0etm5IfCLu7i1s4nXFszZKuOEF0nCifDKRa6sXjGLz/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCuCmhoD5i2ETubKBuHqo25AJ3GiMB8GA1UdIwQY MBaAFI4789C3ZfLqQkYdEjfOfq3kO2ivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82MTkyNTAtMTJlNy00ZWExLTkzOWMt NTE3NjZiOWNhODZmLzEvSzRLYUdnUG1MWVJPNXNvRzRlcWpia0FuY2FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82MTkyNTAtMTJlNy00ZWExLTkzOWMtNTE3NjZiOWNhODZm LzEvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudQiMA0G CSqGSIb3DQEBCwUAA4IBAQBSntVD9X7k3qyoC6R0UNMt0FfWkWyWP1GJbtSLLs6T cbB0Ey8lCQIl2iK5roa9htq5U5ChqyNlZH5tJAJddxXaFQpsqJiEsHNtyQwmjZeZ gNh13tyIuz7EjnYROavWGOB/x6mDqMqAa0F7b2qSabj0EIh3YL6Hjv9/INEtvVXX BEY8bsL3CGnIs7TDvyAzPzlceNL3jxbZyIHYXoQUEVcQsU18j1ZpuQBMlQsftKwc cpwxN+nCGLuU7R9WsuJADrEUQ3YUEAbKXrFP7KZC6Hos881oChCnUepmcfcV+qRj 935u3A9IwDsKh/lbgrman3Tnb+b9SWq8up8aF0WawDy1 -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:27 2026 by rpki-client