This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/KEjUQVlN-kYa2GK1u7oIUmkIKDw.roa File: KEjUQVlN-kYa2GK1u7oIUmkIKDw.roa (raw, json) Hash identifier: XXTQdFb/FE8pQqJgVu712tdHVCXz3R+MnP7POS5nFQU= Subject key identifier: 28:48:D4:41:59:4D:FA:46:1A:D8:62:B5:BB:BA:08:52:69:08:28:3C Certificate issuer: /CN=6d2203ec1e5a6c266cca39b9af1abe2cb20b195a Certificate serial: 019B77C69C87BA950CFB14E6C0283B7578FA Authority key identifier: 6D:22:03:EC:1E:5A:6C:26:6C:CA:39:B9:AF:1A:BE:2C:B2:0B:19:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/KEjUQVlN-kYa2GK1u7oIUmkIKDw.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203200 IP address blocks: 185.122.76.0/22 maxlen: 24 2a10:d340:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.mft rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9c:87:ba:95:0c:fb:14:e6:c0:28:3b:75:78:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2203ec1e5a6c266cca39b9af1abe2cb20b195a Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2848d441594dfa461ad862b5bbba08526908283c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:ee:07:3b:bf:7f:94:be:ba:46:7f:74:3b: fb:18:96:29:e2:df:a1:28:d1:f9:27:3a:0b:a8:3f: 51:2f:94:65:c1:e7:31:1b:7e:af:17:ed:90:56:11: b8:a8:a9:3b:8c:ae:8e:e9:68:a7:2b:19:2a:f2:8e: 96:9e:45:7b:d3:9c:fc:ed:7a:ff:ea:48:bc:a7:5d: 66:27:5e:e7:b9:1d:fa:5d:26:86:3a:93:c9:53:53: 91:64:6a:aa:46:1f:1a:c9:5e:3e:36:9e:87:9a:7c: bb:8b:43:9b:77:1d:74:4d:c3:72:f2:be:dd:fe:af: d9:14:c1:96:46:61:65:17:b8:b3:33:08:7b:82:61: c8:79:a9:68:7a:6c:80:87:76:f1:c9:1a:81:af:d1: 18:6f:e4:58:4d:5c:3a:11:10:3d:55:e5:e7:6a:3b: 74:db:e2:6d:b1:b8:d1:86:db:64:38:ab:ad:d6:2a: 4c:2a:b6:4f:bc:c7:bf:80:b7:c7:1a:36:3b:90:34: 44:3c:5b:e6:84:47:4a:cd:c4:27:b8:25:8b:b8:18: c8:fe:b9:5a:a7:88:fd:15:c4:dd:c5:ef:09:63:4a: c4:48:95:07:57:85:5e:d1:a6:da:3f:1b:4a:09:67: eb:e3:66:22:46:6e:bf:d7:8f:a0:ba:49:ff:cd:e6: 2c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:48:D4:41:59:4D:FA:46:1A:D8:62:B5:BB:BA:08:52:69:08:28:3C X509v3 Authority Key Identifier: keyid:6D:22:03:EC:1E:5A:6C:26:6C:CA:39:B9:AF:1A:BE:2C:B2:0B:19:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/KEjUQVlN-kYa2GK1u7oIUmkIKDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.76.0/22 IPv6: 2a10:d340:1::/48 Signature Algorithm: sha256WithRSAEncryption 6e:6b:b5:11:15:f5:79:e2:a6:b9:b0:f2:10:6c:43:99:2b:7b: 3f:51:94:bb:ca:d4:40:f3:c4:3d:61:0d:d5:11:82:fa:85:27: 8c:3a:d5:28:cf:ca:f0:5b:cd:b5:a9:ee:76:ab:9e:a9:c4:ff: 2d:69:b6:ad:8a:4d:2b:72:ac:c3:b7:07:c1:3b:b1:8b:26:97: 9c:0b:5d:81:a9:34:3a:12:3f:ac:af:22:c4:3e:aa:65:6e:f3: 3a:aa:d3:bc:24:9d:8f:16:a1:b0:55:b7:31:d2:1e:4e:37:38: 0f:f3:66:8a:90:9a:a4:e7:f0:6b:5f:14:53:0f:7e:80:68:21: 35:2e:c9:58:dd:54:f6:c7:a3:04:dc:70:75:d4:d9:38:f2:12: 85:f5:10:9a:61:98:e3:f1:9b:4b:f7:00:c9:b7:91:b2:f1:3d: a4:ae:07:f9:32:2f:6e:e9:d0:18:ec:7d:59:8e:cc:e3:69:11: 7b:56:2d:e4:9b:cd:7d:ec:26:0e:6a:fd:2f:22:e2:12:f5:42: 27:50:80:28:04:93:34:8b:01:fd:2d:a8:b5:42:b5:cc:ac:53: 56:46:6a:5f:b9:02:06:c7:d6:b9:d2:fb:50:d2:d4:13:82:4e: c3:f1:ca:3d:b5:ee:4d:3b:95:c8:fc:6b:ae:da:03:7f:f8:14: 46:6c:99:d1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xpyHupUM+xTmwCg7dXj6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjIwM2VjMWU1YTZjMjY2Y2NhMzliOWFmMWFiZTJjYjIw YjE5NWEwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODQ4ZDQ0MTU5NGRmYTQ2MWFkODYyYjViYmJhMDg1MjY5MDgyODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DnuBzu/f5S+ukZ/dDv7GJYp4t+h KNH5JzoLqD9RL5RlwecxG36vF+2QVhG4qKk7jK6O6WinKxkq8o6WnkV705z87Xr/ 6ki8p11mJ17nuR36XSaGOpPJU1ORZGqqRh8ayV4+Np6Hmny7i0Obdx10TcNy8r7d /q/ZFMGWRmFlF7izMwh7gmHIealoemyAh3bxyRqBr9EYb+RYTVw6ERA9VeXnajt0 2+JtsbjRhttkOKut1ipMKrZPvMe/gLfHGjY7kDREPFvmhEdKzcQnuCWLuBjI/rla p4j9FcTdxe8JY0rESJUHV4Ve0abaPxtKCWfr42YiRm6/14+gukn/zeYsQQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFChI1EFZTfpGGthitbu6CFJpCCg8MB8GA1UdIwQY MBaAFG0iA+weWmwmbMo5ua8aviyyCxlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNJRDdCNWFiQ1pzeWptNXJ4cS1MTElMR1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mYzUyMmYtYjIwZi00N2FmLTgwYzYt MWE5Nzk0NGM5MWNhLzEvS0VqVVFWbE4ta1lhMkdLMXU3b0lVbWtJS0R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9mYzUyMmYtYjIwZi00N2FmLTgwYzYtMWE5Nzk0NGM5MWNh LzEvYlNJRDdCNWFiQ1pzeWptNXJ4cS1MTElMR1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuXpMMA8E AgACMAkDBwAqENNAAAEwDQYJKoZIhvcNAQELBQADggEBAG5rtREV9Xniprmw8hBs Q5krez9RlLvK1EDzxD1hDdURgvqFJ4w61SjPyvBbzbWp7narnqnE/y1ptq2KTSty rMO3B8E7sYsml5wLXYGpNDoSP6yvIsQ+qmVu8zqq07wknY8WobBVtzHSHk43OA/z ZoqQmqTn8GtfFFMPfoBoITUuyVjdVPbHowTccHXU2TjyEoX1EJphmOPxm0v3AMm3 kbLxPaSuB/kyL27p0BjsfVmOzONpEXtWLeSbzX3sJg5q/S8i4hL1QidQgCgEkzSL Af0tqLVCtcysU1ZGal+5AgbH1rnS+1DS1BOCTsPxyj217k07lcj8a67aA3/4FEZs mdE= -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:05 2026 by rpki-client