This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/cmKT8tNT04DB4snpmXdQUr0nl3Q.roa File: cmKT8tNT04DB4snpmXdQUr0nl3Q.roa (raw, json) Hash identifier: PNE5CH9WwmP98sniR82D6V4y4hCcTeAU6RiNs++jAdg= Subject key identifier: 72:62:93:F2:D3:53:D3:80:C1:E2:C9:E9:99:77:50:52:BD:27:97:74 Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae Certificate serial: 019B79EC27BEAEC4CDA20BA4DEB7AC7CB042 Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/cmKT8tNT04DB4snpmXdQUr0nl3Q.roa Signing time: Thu 01 Jan 2026 14:17:58 +0000 ROA not before: Thu 01 Jan 2026 14:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207141 IP address blocks: 185.164.252.0/22 maxlen: 24 185.164.252.0/24 maxlen: 24 185.164.253.0/24 maxlen: 24 185.206.236.0/22 maxlen: 24 185.206.236.0/24 maxlen: 24 185.206.237.0/24 maxlen: 24 185.206.238.0/24 maxlen: 24 185.206.239.0/24 maxlen: 24 2a0b:1b40::/29 maxlen: 29 2a0b:b400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:27:be:ae:c4:cd:a2:0b:a4:de:b7:ac:7c:b0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae Validity Not Before: Jan 1 14:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=726293f2d353d380c1e2c9e999775052bd279774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d5:ba:d5:5b:05:26:da:41:a3:e1:a2:7f:69: 54:5c:de:46:c8:96:50:92:d4:8a:41:e2:c6:6e:c3: 72:b8:5f:67:c6:a3:97:56:8c:bf:c9:4d:05:3f:88: 68:95:df:18:ab:ce:65:16:4d:c1:30:07:31:bf:fb: 9c:a3:05:4c:77:9d:98:d5:ad:64:8e:a8:90:67:9d: 25:c1:51:d9:b8:ce:85:87:39:d5:f7:5a:df:bc:e0: 8d:bf:51:3a:0b:4e:50:1b:52:3e:1c:16:1a:e7:9c: 92:4c:b1:8d:b3:4d:33:4b:d9:4d:64:98:29:5e:36: a3:95:7f:93:03:39:fa:ce:80:5e:35:a3:0e:15:06: cd:3c:17:9f:f7:d9:d9:71:d7:f9:73:ab:35:22:14: b1:37:3a:23:62:f6:88:58:70:0d:b2:8e:9e:44:79: 08:bf:cf:32:7f:fb:26:b8:02:8e:e7:ce:3a:9d:cb: 79:8d:42:60:f7:05:ae:38:b5:d1:c0:99:37:db:d8: 5b:32:a2:7d:49:4e:8b:1e:21:4b:56:e8:40:d9:bc: 46:d2:30:d2:ad:ce:64:78:49:5d:3e:96:32:32:05: 77:03:bd:b8:66:06:a9:db:96:5f:a5:1d:e4:d5:49: 44:54:de:cf:96:da:c4:62:33:46:bc:86:70:b6:35: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:62:93:F2:D3:53:D3:80:C1:E2:C9:E9:99:77:50:52:BD:27:97:74 X509v3 Authority Key Identifier: keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/cmKT8tNT04DB4snpmXdQUr0nl3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.252.0/22 185.206.236.0/22 IPv6: 2a0b:1b40::/29 2a0b:b400::/29 Signature Algorithm: sha256WithRSAEncryption 6c:49:6a:db:8b:41:b8:ca:12:24:a1:c1:65:24:40:1f:e3:00: 0a:7f:8a:58:67:5f:d1:a3:8e:69:81:b2:2b:2c:4d:04:07:ff: ae:7c:a6:17:54:a6:47:91:47:1b:2b:86:ca:0b:6c:0f:58:5b: f0:7c:82:a6:10:f8:3f:b7:d1:5f:8d:c8:5e:f9:96:9a:c2:c0: fd:5b:0e:16:da:b3:39:28:ed:bf:c1:57:3e:1b:3d:8a:0e:70: ac:1e:2a:f2:f5:e3:9f:fd:10:af:30:d0:c0:f0:f3:66:d6:a2: 6b:02:f3:28:33:2d:28:d9:f0:e3:3d:63:4f:7c:0c:86:68:11: 93:fb:83:a1:57:0c:87:08:e1:2f:91:7f:bd:1c:4a:7c:41:66: c7:05:d0:63:29:e2:b4:30:79:26:4b:fd:4e:bf:46:84:57:9a: 11:1a:4e:81:16:fc:23:2c:6f:c4:aa:ef:ca:9e:56:d6:bd:e4: b1:fe:a8:d6:54:92:f4:db:2e:cb:d5:2f:e6:94:32:d6:8a:d6: 75:49:d4:48:b4:26:12:56:e8:02:92:6f:a8:83:79:ef:50:28: 7a:1e:4d:99:29:b0:67:7f:b1:32:f4:84:39:a3:0c:f6:fc:fa: e7:1c:80:d2:8a:67:6d:a2:db:99:bb:88:3d:ed:39:06:a5:e6: 46:82:0f:01 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt57Ce+rsTNoguk3resfLBCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNGVmNGE4ZWQzNzExYjZhY2Q2OGMwZjQ4ZjYyMTgzMWZk NWFhYWUwHhcNMjYwMTAxMTQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjYyOTNmMmQzNTNkMzgwYzFlMmM5ZTk5OTc3NTA1MmJkMjc5Nzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNW61VsFJtpBo+Gif2lUXN5GyJZQ ktSKQeLGbsNyuF9nxqOXVoy/yU0FP4hold8Yq85lFk3BMAcxv/ucowVMd52Y1a1k jqiQZ50lwVHZuM6FhznV91rfvOCNv1E6C05QG1I+HBYa55ySTLGNs00zS9lNZJgp XjajlX+TAzn6zoBeNaMOFQbNPBef99nZcdf5c6s1IhSxNzojYvaIWHANso6eRHkI v88yf/smuAKO5846nct5jUJg9wWuOLXRwJk329hbMqJ9SU6LHiFLVuhA2bxG0jDS rc5keEldPpYyMgV3A724Zgap25ZfpR3k1UlEVN7PltrEYjNGvIZwtjWYaQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHJik/LTU9OAweLJ6Zl3UFK9J5d0MB8GA1UdIwQY MBaAFK9O9KjtNxG2rNaMD0j2IYMf1aquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDkt Y2I5YzU4ZjUxMGNiLzEvY21LVDh0TlQwNERCNHNucG1YZFFVcjBubDNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDktY2I5YzU4ZjUxMGNi LzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuaT8AwQC uc7sMBQEAgACMA4DBQMqCxtAAwUDKgu0ADANBgkqhkiG9w0BAQsFAAOCAQEAbElq 24tBuMoSJKHBZSRAH+MACn+KWGdf0aOOaYGyKyxNBAf/rnymF1SmR5FHGyuGygts D1hb8HyCphD4P7fRX43IXvmWmsLA/VsOFtqzOSjtv8FXPhs9ig5wrB4q8vXjn/0Q rzDQwPDzZtaiawLzKDMtKNnw4z1jT3wMhmgRk/uDoVcMhwjhL5F/vRxKfEFmxwXQ YynitDB5Jkv9Tr9GhFeaERpOgRb8IyxvxKrvyp5W1r3ksf6o1lSS9Nsuy9Uv5pQy 1orWdUnUSLQmElboApJvqIN571Aoeh5NmSmwZ3+xMvSEOaMM9vz65xyA0opnbaLb mbuIPe05BqXmRoIPAQ== -----END CERTIFICATE-----Generated at Tue Jan 27 04:11:26 2026 by rpki-client