This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/KSjHgXPRASqnBW1tjOtvhmkWPHE.roa File: KSjHgXPRASqnBW1tjOtvhmkWPHE.roa (raw, json) Hash identifier: h5XvzMTTFxSuHg9vWwCmjacM7SXacJTLfB8wl2n3Cec= Subject key identifier: 29:28:C7:81:73:D1:01:2A:A7:05:6D:6D:8C:EB:6F:86:69:16:3C:71 Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8 Certificate serial: 019B7BA546CB8BB52A4DA71395D441C1E707 Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/KSjHgXPRASqnBW1tjOtvhmkWPHE.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8412 IP address blocks: 185.26.188.0/22 maxlen: 22 185.26.188.0/24 maxlen: 24 185.26.189.0/24 maxlen: 24 185.26.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:46:cb:8b:b5:2a:4d:a7:13:95:d4:41:c1:e7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8 Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2928c78173d1012aa7056d6d8ceb6f8669163c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:95:8a:61:a6:70:4f:c4:0e:47:f9:37:7b:97: 95:d4:29:7e:b6:e1:21:5e:ab:b6:b4:82:72:c8:da: 50:83:05:8b:69:1b:88:28:89:e0:fc:43:96:82:26: 95:8e:66:c4:9b:37:0c:72:d4:57:5f:62:81:56:be: 39:e8:bb:4b:b6:94:ac:de:c5:47:e0:4f:3f:52:57: 06:63:30:35:8e:12:b0:d2:1e:36:ae:55:f3:20:dd: e6:49:8d:dd:69:ea:38:be:7f:64:2a:e7:f1:5d:c2: 9c:ec:5c:db:c9:91:5b:48:e5:f7:89:85:85:c9:6b: 0e:71:13:c9:29:1e:e6:76:16:23:52:ea:d0:92:72: a8:c9:e0:a3:6e:c5:0b:2c:ba:34:9e:09:0d:67:b7: ac:b9:f3:65:2c:44:f0:2c:0a:8f:94:ea:85:7a:ee: a4:51:2a:22:b0:a7:0d:82:b0:3c:43:6b:3d:fc:41: 57:70:53:06:35:f7:2b:cf:59:4e:c9:ea:06:18:8c: e4:39:2e:12:ca:88:e3:71:e6:09:d5:fc:67:77:36: 0c:13:5c:b6:2b:d4:f6:ad:b0:f4:10:95:a8:f5:66: 45:74:64:fb:68:02:cd:d6:44:37:5d:d8:b6:9b:d9: aa:61:47:21:46:fa:73:00:62:ba:2a:0a:14:d8:6a: 01:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:28:C7:81:73:D1:01:2A:A7:05:6D:6D:8C:EB:6F:86:69:16:3C:71 X509v3 Authority Key Identifier: keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/KSjHgXPRASqnBW1tjOtvhmkWPHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.188.0/22 Signature Algorithm: sha256WithRSAEncryption 67:bf:71:3c:39:e8:9e:17:6e:91:cc:9b:9e:18:50:f0:05:3e: 2d:c6:aa:89:8c:0f:71:b6:b0:e1:e9:82:dd:d8:db:f1:07:9f: ae:de:d7:ae:91:a6:9b:fb:24:8d:83:02:79:dc:59:ba:ed:19: 1b:60:65:73:94:f5:b0:4d:c0:94:ee:85:49:d4:82:07:ef:78: d7:d7:57:af:26:a0:c6:37:24:a2:e4:b3:fa:d4:31:81:8b:03: db:05:4c:0d:12:e3:e4:6c:11:22:36:88:c2:6c:ad:25:79:31: ca:0f:28:1f:b0:04:cd:e4:c3:08:a8:2e:44:96:1c:74:a2:62: 19:68:f2:65:15:d6:cf:7b:54:c6:7a:f2:df:1b:9c:55:30:38: 75:5b:fb:07:6e:7e:8d:e0:7d:35:ee:af:1e:0f:e4:ad:9b:5a: fd:04:20:a2:37:de:9a:ea:02:23:ad:d3:dd:48:06:f2:19:4f: 91:f6:39:58:8d:2f:07:da:28:a5:1e:5e:ef:3c:7c:22:dd:db: 06:5c:52:34:e4:5e:52:8e:9b:5e:7e:66:6a:4a:3a:9a:6d:81: 68:f1:3e:31:33:db:ad:1e:d5:a2:e5:ab:c6:7d:12:fe:85:e8: a3:3b:e9:18:66:5a:fa:44:c8:65:ef:bd:51:86:20:48:cb:22: 66:0f:09:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUbLi7UqTacTldRBwecHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOWUyMGQxMDM0YjQ0ZWY3NWU5NWZkZjdlYjg4ODE1YjZm N2QyZjgwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTI4Yzc4MTczZDEwMTJhYTcwNTZkNmQ4Y2ViNmY4NjY5MTYzYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZWKYaZwT8QOR/k3e5eV1Cl+tuEh Xqu2tIJyyNpQgwWLaRuIKIng/EOWgiaVjmbEmzcMctRXX2KBVr456LtLtpSs3sVH 4E8/UlcGYzA1jhKw0h42rlXzIN3mSY3daeo4vn9kKufxXcKc7FzbyZFbSOX3iYWF yWsOcRPJKR7mdhYjUurQknKoyeCjbsULLLo0ngkNZ7esufNlLETwLAqPlOqFeu6k USoisKcNgrA8Q2s9/EFXcFMGNfcrz1lOyeoGGIzkOS4SyojjceYJ1fxndzYME1y2 K9T2rbD0EJWo9WZFdGT7aALN1kQ3Xdi2m9mqYUchRvpzAGK6KgoU2GoBTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCkox4Fz0QEqpwVtbYzrb4ZpFjxxMB8GA1UdIwQY MBaAFMqeINEDS0Tvdelf3364iBW299L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYt MTI3MDFhYjUxYWNmLzEvS1NqSGdYUFJBU3FuQlcxdGpPdHZobWtXUEhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYtMTI3MDFhYjUxYWNm LzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRq8MA0G CSqGSIb3DQEBCwUAA4IBAQBnv3E8OeieF26RzJueGFDwBT4txqqJjA9xtrDh6YLd 2NvxB5+u3teukaab+ySNgwJ53Fm67RkbYGVzlPWwTcCU7oVJ1IIH73jX11evJqDG NySi5LP61DGBiwPbBUwNEuPkbBEiNojCbK0leTHKDygfsATN5MMIqC5Elhx0omIZ aPJlFdbPe1TGevLfG5xVMDh1W/sHbn6N4H017q8eD+Stm1r9BCCiN96a6gIjrdPd SAbyGU+R9jlYjS8H2iilHl7vPHwi3dsGXFI05F5SjptefmZqSjqabYFo8T4xM9ut HtWi5avGfRL+heijO+kYZlr6RMhl771RhiBIyyJmDwlv -----END CERTIFICATE-----Generated at Mon Jan 26 06:57:13 2026 by rpki-client