This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/ckaCM0ljBckHax5w4M6j9Dmi6Rc.roa File: ckaCM0ljBckHax5w4M6j9Dmi6Rc.roa (raw, json) Hash identifier: D3AXy9P3YTGg9/JH6jTq3HL+lqbCncKHq8NI3RwK6m0= Subject key identifier: 72:46:82:33:49:63:05:C9:07:6B:1E:70:E0:CE:A3:F4:39:A2:E9:17 Certificate issuer: /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd Certificate serial: 019B76EB00FC2B172D86509F6FF796354741 Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/ckaCM0ljBckHax5w4M6j9Dmi6Rc.roa Signing time: Thu 01 Jan 2026 00:17:51 +0000 ROA not before: Thu 01 Jan 2026 00:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212282 IP address blocks: 185.220.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:00:fc:2b:17:2d:86:50:9f:6f:f7:96:35:47:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd Validity Not Before: Jan 1 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72468233496305c9076b1e70e0cea3f439a2e917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ef:b3:28:fd:60:f9:5b:dc:d7:4c:6d:0e:63: 3d:fa:73:0b:b5:27:ce:d2:16:43:c5:bd:5b:01:6a: 4d:1d:0d:23:df:3f:68:2e:68:1c:c6:9e:91:11:63: 40:24:5d:e3:bc:ae:2f:6f:92:d1:c8:8f:8e:aa:81: ae:34:fc:71:5e:8d:a7:a8:bc:8e:6b:59:70:ef:c4: ba:cb:a8:d4:77:bb:fb:0a:d5:31:0f:ea:17:49:f7: 04:4c:a4:0b:19:0c:b0:33:7b:22:53:9c:89:a5:1c: 0a:7e:fb:01:cd:3a:9a:83:5a:39:43:d4:3d:d3:40: 39:00:c7:4e:4a:30:dd:a0:66:23:12:d8:fd:b9:b5: da:7a:34:fb:63:76:1b:6c:4c:fb:fe:c4:31:9e:45: 0a:d1:6e:bf:88:d3:c0:78:a9:bf:a7:d5:d8:d3:c2: 75:1f:45:f6:ed:43:d5:ee:35:35:b8:59:66:30:14: 51:7c:1f:ef:fc:35:be:79:82:47:9b:bb:9d:9c:3e: c9:ee:25:bc:6e:01:bc:7a:67:55:b5:97:8b:84:1b: 16:a1:c6:99:12:01:d3:c3:61:4c:85:dd:56:d1:71: 1b:ea:06:fb:5a:e5:94:87:a7:03:e2:92:44:66:30: 79:97:0d:73:4a:72:56:c2:85:65:cf:0a:e2:5b:36: 51:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:46:82:33:49:63:05:C9:07:6B:1E:70:E0:CE:A3:F4:39:A2:E9:17 X509v3 Authority Key Identifier: keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/ckaCM0ljBckHax5w4M6j9Dmi6Rc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.82.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:9f:a6:7d:dc:ae:01:66:b7:23:d2:12:1b:93:92:62:b4:d6: dd:c7:ff:2b:d9:b1:16:af:4e:4b:c2:c7:6c:a7:03:58:2a:36: 4e:89:50:af:72:95:89:37:35:ae:75:1f:4d:a0:e6:75:a8:81: 6e:8d:3c:c4:0f:f8:f4:a7:18:0d:80:41:84:38:26:ca:01:b2: ed:2f:87:ba:c4:5d:16:27:f8:87:68:0e:f7:88:ee:71:8a:dc: 4e:c1:16:d3:5b:6d:ab:77:82:12:17:44:88:2f:c3:22:ba:60: 11:e9:e7:37:fa:59:02:bf:93:58:9c:ba:ec:9e:99:78:6a:74: 63:1c:d2:2b:0a:29:1c:19:5f:fd:90:1b:f4:53:a1:c0:f0:8c: 63:e4:f3:47:e7:80:ed:45:4c:29:ed:ac:37:07:e3:fa:fb:c7: d6:dd:68:ff:90:57:df:68:f6:6d:f2:2e:e9:ba:8e:b2:3c:c9: 88:6c:e1:08:d9:37:84:66:b2:45:cb:44:e6:20:f8:7b:42:ef: 72:1d:b2:52:17:1f:e0:c8:02:ab:d3:62:e9:15:93:10:2d:ba: c2:0f:5c:d3:1d:e4:12:0d:f1:20:ca:62:38:bf:64:e7:37:4d: 8a:aa:03:f5:08:ca:bd:f2:d4:29:8b:8e:e5:30:5f:5a:e2:e7: 5b:57:e7:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26wD8KxcthlCfb/eWNUdBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZTEyOThhMjE1ZTVlNGI3ZDFlMDVhODVmYmM1OTFjMzg5 ZjlkZGQwHhcNMjYwMTAxMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjQ2ODIzMzQ5NjMwNWM5MDc2YjFlNzBlMGNlYTNmNDM5YTJlOTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e+zKP1g+Vvc10xtDmM9+nMLtSfO 0hZDxb1bAWpNHQ0j3z9oLmgcxp6REWNAJF3jvK4vb5LRyI+OqoGuNPxxXo2nqLyO a1lw78S6y6jUd7v7CtUxD+oXSfcETKQLGQywM3siU5yJpRwKfvsBzTqag1o5Q9Q9 00A5AMdOSjDdoGYjEtj9ubXaejT7Y3YbbEz7/sQxnkUK0W6/iNPAeKm/p9XY08J1 H0X27UPV7jU1uFlmMBRRfB/v/DW+eYJHm7udnD7J7iW8bgG8emdVtZeLhBsWocaZ EgHTw2FMhd1W0XEb6gb7WuWUh6cD4pJEZjB5lw1zSnJWwoVlzwriWzZR5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHJGgjNJYwXJB2secODOo/Q5oukXMB8GA1UdIwQY MBaAFEvhKYohXl5LfR4FqF+8WRw4n53dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zOTkyNzEtNWQ0YS00MzIwLTgyZWQt YWFkNjE2MzlkOWQ2LzEvY2thQ00wbGpCY2tIYXg1dzRNNmo5RG1pNlJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8zOTkyNzEtNWQ0YS00MzIwLTgyZWQtYWFkNjE2MzlkOWQ2 LzEvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudxSMA0G CSqGSIb3DQEBCwUAA4IBAQAcn6Z93K4BZrcj0hIbk5JitNbdx/8r2bEWr05Lwsds pwNYKjZOiVCvcpWJNzWudR9NoOZ1qIFujTzED/j0pxgNgEGEOCbKAbLtL4e6xF0W J/iHaA73iO5xitxOwRbTW22rd4ISF0SIL8MiumAR6ec3+lkCv5NYnLrsnpl4anRj HNIrCikcGV/9kBv0U6HA8Ixj5PNH54DtRUwp7aw3B+P6+8fW3Wj/kFffaPZt8i7p uo6yPMmIbOEI2TeEZrJFy0TmIPh7Qu9yHbJSFx/gyAKr02LpFZMQLbrCD1zTHeQS DfEgymI4v2TnN02KqgP1CMq98tQpi47lMF9a4udbV+c6 -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:47 2026 by rpki-client