This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/kUi761JvorzxQPc6oroU7qaYtPw.roa File: kUi761JvorzxQPc6oroU7qaYtPw.roa (raw, json) Hash identifier: XgXtN6YXvVkYUj2ZwJZH9OZFn2FFfJDscz2MToxQBsE= Subject key identifier: 91:48:BB:EB:52:6F:A2:BC:F1:40:F7:3A:A2:BA:14:EE:A6:98:B4:FC Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9 Certificate serial: 019B76EABD8064C5AEF30578B15637EA43FD Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/kUi761JvorzxQPc6oroU7qaYtPw.roa Signing time: Thu 01 Jan 2026 00:17:34 +0000 ROA not before: Thu 01 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48492 IP address blocks: 185.75.224.0/22 maxlen: 24 185.181.108.0/22 maxlen: 24 185.187.204.0/22 maxlen: 24 2a0d:4f00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bd:80:64:c5:ae:f3:05:78:b1:56:37:ea:43:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9 Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9148bbeb526fa2bcf140f73aa2ba14eea698b4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ad:92:7a:4e:07:db:b7:4a:3b:d0:31:cc:f5: c6:54:81:93:22:64:e1:03:26:af:af:5f:85:a5:8b: 23:78:6b:9e:21:0b:a2:28:4f:89:31:ee:42:0f:94: d1:03:a5:07:59:48:48:73:14:fa:e1:2c:a8:d7:b8: d7:76:90:ce:e7:42:8d:f0:e5:d8:d9:d0:c0:51:f9: 69:66:d5:44:fa:ca:21:e7:b9:d8:1f:18:3d:be:07: a9:b6:23:94:dd:15:61:d1:e8:9f:bb:09:fd:d3:14: 31:b6:69:d6:91:ce:45:ba:b6:fb:86:c6:7c:ed:dd: 10:58:0a:cd:17:8d:08:63:9c:d8:78:91:39:c8:4f: 1a:fe:54:a0:f3:56:5f:9c:dd:77:4e:27:c9:c1:2e: 99:6e:68:a3:ba:5b:8e:08:1a:0c:fb:ea:3f:13:00: 15:7b:5f:a1:79:0b:c1:bb:eb:6a:af:14:d6:f0:f2: 52:c1:d6:6c:cc:d5:84:c3:9f:1a:7a:96:d3:9b:5a: f5:17:c9:9d:a0:5e:23:eb:9c:e1:93:1b:21:60:4a: 2a:0f:1e:d7:d0:f8:a5:97:b6:45:e4:a9:9c:dd:81: a1:90:ad:90:ba:23:b6:75:e1:38:1d:c1:35:2d:fb: 78:c0:01:cb:e6:8f:44:cf:a5:49:a3:fb:c0:d3:70: fc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:48:BB:EB:52:6F:A2:BC:F1:40:F7:3A:A2:BA:14:EE:A6:98:B4:FC X509v3 Authority Key Identifier: keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/kUi761JvorzxQPc6oroU7qaYtPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.224.0/22 185.181.108.0/22 185.187.204.0/22 IPv6: 2a0d:4f00::/29 Signature Algorithm: sha256WithRSAEncryption 8a:1b:c0:42:44:36:e5:88:97:28:6f:07:57:98:14:db:bb:34: 6f:00:5c:7f:ef:5c:d4:fc:72:74:cb:d5:9a:99:e4:42:ac:09: 66:72:39:10:36:9e:1c:3c:91:69:19:32:30:7f:9c:0f:8b:25: 35:6f:31:7b:ad:3d:87:33:10:99:20:06:8d:e6:8a:aa:fd:fd: ce:ea:9f:64:3e:98:67:47:58:09:1d:25:b2:07:25:26:60:55: fd:ab:1c:64:c9:6e:24:08:46:17:a1:c8:f1:ac:30:fe:6c:fb: 82:ff:01:a1:8c:e1:1e:67:a3:14:fc:e8:49:c5:1d:25:b4:21: 5f:73:bf:e2:c8:97:3f:8c:99:10:ac:b3:cc:40:ae:39:99:af: 02:4c:fc:e9:35:34:80:1e:ab:7f:d2:43:ef:fe:f2:06:e5:c3: 7f:44:b9:89:41:b8:21:44:83:fc:f9:ae:a9:20:5c:e8:c3:41: 86:71:3a:9f:9f:a1:1e:83:58:36:ef:1e:0d:3e:53:fb:c1:0f: 11:eb:2a:07:62:35:6f:47:8f:c1:2e:50:f0:fc:fb:ad:9d:06: ea:56:ff:55:e5:8c:01:bf:56:67:2e:20:d6:fa:55:21:9b:e9: fa:22:15:a8:46:91:e5:7f:68:f1:17:b1:40:81:33:66:11:37: 79:96:c0:79 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt26r2AZMWu8wV4sVY36kP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM1YzYxMWMyOTIzNGJmNGI0MGIzNTk5MGRkZmEyOTNh NTM3ZjkwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTQ4YmJlYjUyNmZhMmJjZjE0MGY3M2FhMmJhMTRlZWE2OThiNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs62Sek4H27dKO9AxzPXGVIGTImTh Ayavr1+FpYsjeGueIQuiKE+JMe5CD5TRA6UHWUhIcxT64Syo17jXdpDO50KN8OXY 2dDAUflpZtVE+soh57nYHxg9vgeptiOU3RVh0eifuwn90xQxtmnWkc5Furb7hsZ8 7d0QWArNF40IY5zYeJE5yE8a/lSg81ZfnN13TifJwS6ZbmijuluOCBoM++o/EwAV e1+heQvBu+tqrxTW8PJSwdZszNWEw58aepbTm1r1F8mdoF4j65zhkxshYEoqDx7X 0Pill7ZF5Kmc3YGhkK2QuiO2deE4HcE1Lft4wAHL5o9Ez6VJo/vA03D8awIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJFIu+tSb6K88UD3OqK6FO6mmLT8MB8GA1UdIwQY MBaAFCLzXGEcKSNL9LQLNZkN36KTpTf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUt MTYzMjQ3ZWIwZTA3LzEva1VpNzYxSnZvcnp4UVBjNm9yb1U3cWFZdFB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUtMTYzMjQ3ZWIwZTA3 LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuUvgAwQC ubVsAwQCubvMMA0EAgACMAcDBQMqDU8AMA0GCSqGSIb3DQEBCwUAA4IBAQCKG8BC RDbliJcobwdXmBTbuzRvAFx/71zU/HJ0y9WameRCrAlmcjkQNp4cPJFpGTIwf5wP iyU1bzF7rT2HMxCZIAaN5oqq/f3O6p9kPphnR1gJHSWyByUmYFX9qxxkyW4kCEYX ocjxrDD+bPuC/wGhjOEeZ6MU/OhJxR0ltCFfc7/iyJc/jJkQrLPMQK45ma8CTPzp NTSAHqt/0kPv/vIG5cN/RLmJQbghRIP8+a6pIFzow0GGcTqfn6Eeg1g27x4NPlP7 wQ8R6yoHYjVvR4/BLlDw/PutnQbqVv9V5YwBv1ZnLiDW+lUhm+n6IhWoRpHlf2jx F7FAgTNmETd5lsB5 -----END CERTIFICATE-----Generated at Tue Jan 20 10:56:46 2026 by rpki-client