This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/RKsWQywf7E1-7yxnFVRThg94oQI.roa File: RKsWQywf7E1-7yxnFVRThg94oQI.roa (raw, json) Hash identifier: rZsYO4uq9KEbyvr1gPhju0XO3T5ePDaOKISlE/78+R4= Subject key identifier: 44:AB:16:43:2C:1F:EC:4D:7E:EF:2C:67:15:54:53:86:0F:78:A1:02 Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343 Certificate serial: 019B7C808045C960B9CF4BE04518D6DB7D4C Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/RKsWQywf7E1-7yxnFVRThg94oQI.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201246 IP address blocks: 103.58.8.0/22 maxlen: 24 185.80.19.0/24 maxlen: 24 188.114.120.0/24 maxlen: 24 188.114.121.0/24 maxlen: 24 2a05:7980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:80:45:c9:60:b9:cf:4b:e0:45:18:d6:db:7d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343 Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44ab16432c1fec4d7eef2c67155453860f78a102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ef:a2:77:82:2e:3c:d1:dd:ca:ff:21:80:4a: 8b:07:49:6d:1c:11:85:96:a3:29:56:89:41:34:e4: 93:64:38:5b:97:2e:e4:f8:70:01:fa:ab:d2:12:41: 4f:2f:bc:8e:7b:d3:51:23:48:2a:83:a6:98:93:ed: 92:5d:2d:a0:78:21:6f:b7:78:6c:c3:a2:ab:2e:f8: 4a:69:67:27:e6:81:d4:e6:f9:da:99:04:70:44:54: e0:bf:ba:3a:dc:ba:21:52:02:22:4e:19:65:b0:7a: 67:c7:08:64:10:cc:f7:31:15:8b:ba:df:be:2e:ea: f2:3d:aa:01:16:90:cb:f0:41:a3:89:eb:50:a7:7c: 40:43:32:94:81:4b:0c:e7:ab:91:89:37:a2:83:b5: 8d:68:fb:dd:0e:96:2c:6d:67:90:dd:b4:34:b2:99: fa:98:ff:7e:8b:46:e0:f2:dc:30:8b:1e:a6:33:ba: 83:67:71:4a:f7:47:7d:48:04:3c:fe:d4:6c:03:5b: 96:13:d9:7d:3c:02:e1:81:48:99:62:2c:35:42:de: 3a:4e:0d:92:66:6d:5d:b0:69:79:23:cb:2d:d7:e2: 0f:67:d1:36:4b:e0:50:15:cd:b9:04:ab:87:da:d9: 12:10:df:c6:09:da:0a:c0:8a:bd:a8:63:09:bf:ad: 17:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AB:16:43:2C:1F:EC:4D:7E:EF:2C:67:15:54:53:86:0F:78:A1:02 X509v3 Authority Key Identifier: keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/RKsWQywf7E1-7yxnFVRThg94oQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.58.8.0/22 185.80.19.0/24 188.114.120.0/23 IPv6: 2a05:7980::/29 Signature Algorithm: sha256WithRSAEncryption 9c:be:91:1d:d3:6a:fb:33:97:9f:af:d7:ac:18:24:24:6d:17: 67:06:05:12:26:ca:fa:63:2f:a0:65:ca:e4:8d:cb:9f:f5:5e: 76:79:ef:24:9b:20:48:dd:c4:6c:85:3e:87:e2:89:ea:e7:d0: f6:03:43:90:8b:08:e0:10:24:6c:ac:73:06:1e:5f:61:49:68: a7:ef:7a:a9:df:36:7e:c5:42:5e:8c:b9:9c:5e:8e:5b:e2:f6: 42:e0:04:72:72:db:b6:40:61:60:72:13:ef:67:d2:de:c0:16: d9:35:d5:6d:fe:69:2c:f3:84:29:e5:e5:65:20:1d:96:f9:d5: 4d:8d:d9:61:d8:06:e5:19:00:b6:89:26:8f:d0:ef:08:a3:ae: df:d3:d2:e1:98:52:89:5a:8b:a7:37:74:ef:77:25:3e:44:01: b7:ac:e5:45:ea:ce:65:0a:c0:18:7b:b4:91:06:34:6f:2d:52: e9:bc:1f:54:a4:71:d1:24:43:05:f8:9f:0c:11:aa:51:f3:dc: 7f:39:99:ac:c5:37:61:f9:5c:9e:b0:81:cb:20:42:f4:fc:2c: a1:7e:62:80:ef:d5:76:36:c6:ed:2e:02:92:bd:4a:1a:86:3a: da:04:f9:14:13:4c:9f:a5:49:e3:91:7d:23:92:44:9e:5a:3a: 43:b7:a6:48 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8gIBFyWC5z0vgRRjW231MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOWM0MWExMjM3NjRjZjdkYzBmMmRiOTg0MWY3MzJhM2I5 NjEzNDMwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGFiMTY0MzJjMWZlYzRkN2VlZjJjNjcxNTU0NTM4NjBmNzhhMTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O+id4IuPNHdyv8hgEqLB0ltHBGF lqMpVolBNOSTZDhbly7k+HAB+qvSEkFPL7yOe9NRI0gqg6aYk+2SXS2geCFvt3hs w6KrLvhKaWcn5oHU5vnamQRwRFTgv7o63LohUgIiThllsHpnxwhkEMz3MRWLut++ LuryPaoBFpDL8EGjietQp3xAQzKUgUsM56uRiTeig7WNaPvdDpYsbWeQ3bQ0spn6 mP9+i0bg8twwix6mM7qDZ3FK90d9SAQ8/tRsA1uWE9l9PALhgUiZYiw1Qt46Tg2S Zm1dsGl5I8st1+IPZ9E2S+BQFc25BKuH2tkSEN/GCdoKwIq9qGMJv60XewIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFESrFkMsH+xNfu8sZxVUU4YPeKECMB8GA1UdIwQY MBaAFMycQaEjdkz33A8tuYQfcyo7lhNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekp4Qm9TTjJUUGZjRHkyNWhCOXpLanVXRTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wZmViODktN2Q4Yy00MzAwLTk5YjUt MDYyNDdhOTc4ZDY5LzEvUktzV1F5d2Y3RTEtN3l4bkZWUlRoZzk0b1FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8wZmViODktN2Q4Yy00MzAwLTk5YjUtMDYyNDdhOTc4ZDY5 LzEvekp4Qm9TTjJUUGZjRHkyNWhCOXpLanVXRTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCZzoIAwQA uVATAwQBvHJ4MA0EAgACMAcDBQMqBXmAMA0GCSqGSIb3DQEBCwUAA4IBAQCcvpEd 02r7M5efr9esGCQkbRdnBgUSJsr6Yy+gZcrkjcuf9V52ee8kmyBI3cRshT6H4onq 59D2A0OQiwjgECRsrHMGHl9hSWin73qp3zZ+xUJejLmcXo5b4vZC4ARyctu2QGFg chPvZ9LewBbZNdVt/mks84Qp5eVlIB2W+dVNjdlh2AblGQC2iSaP0O8Io67f09Lh mFKJWounN3TvdyU+RAG3rOVF6s5lCsAYe7SRBjRvLVLpvB9UpHHRJEMF+J8MEapR 89x/OZmsxTdh+VyesIHLIEL0/CyhfmKA79V2NsbtLgKSvUoahjraBPkUE0yfpUnj kX0jkkSeWjpDt6ZI -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:00 2026 by rpki-client