This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/k8cdudOxt-UXEB9vti7Ssvsk5vU.roa File: k8cdudOxt-UXEB9vti7Ssvsk5vU.roa (raw, json) Hash identifier: Is0dEg8TeiJuTJaXHNZDTXw2F+T/OPQFA/UKJWJv0ys= Subject key identifier: 93:C7:1D:B9:D3:B1:B7:E5:17:10:1F:6F:B6:2E:D2:B2:FB:24:E6:F5 Certificate issuer: /CN=bb0a13a1c9e1dd84ede43283490be78387754a94 Certificate serial: 019B78A232670D2AE36C8F89D757B7ED8FCC Authority key identifier: BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/k8cdudOxt-UXEB9vti7Ssvsk5vU.roa Signing time: Thu 01 Jan 2026 08:17:34 +0000 ROA not before: Thu 01 Jan 2026 08:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208642 IP address blocks: 185.202.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:32:67:0d:2a:e3:6c:8f:89:d7:57:b7:ed:8f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb0a13a1c9e1dd84ede43283490be78387754a94 Validity Not Before: Jan 1 08:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93c71db9d3b1b7e517101f6fb62ed2b2fb24e6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:26:e5:6c:78:d9:91:7e:73:e4:db:7a:d9:1c: 60:34:ad:13:9c:75:f2:6e:ba:71:1a:d4:61:4c:ac: 69:e9:91:a5:9b:b8:0f:06:27:3e:f4:c5:c6:07:2a: b3:a2:29:d4:48:4c:6c:02:ac:ec:e0:d9:a1:93:f3: 2a:17:9a:08:3a:f7:0d:e5:63:8f:20:c5:42:be:96: df:a9:46:6f:85:3b:2e:a5:81:be:5f:a2:1b:0e:6b: 4b:f2:02:c7:fa:3e:0a:4a:f9:1f:65:e1:2c:e1:24: 4a:a4:43:d7:de:f4:6c:ee:e3:3b:b7:52:10:c1:35: da:5b:e3:df:7c:d3:35:af:41:81:5b:6f:fa:04:bd: 3e:2b:c1:f7:0c:0a:c6:77:96:9a:c7:40:94:99:f7: ca:e8:ce:69:f1:46:03:77:46:e1:e4:35:0d:b5:dd: 8d:da:cc:16:70:ba:dc:74:e4:12:a6:3d:8f:25:ea: cb:8e:72:8c:9d:61:65:30:54:b4:b9:76:21:12:bc: f1:39:66:f0:8a:ad:49:e0:29:cc:4f:8a:1d:90:2f: 2e:f3:fd:07:90:ac:d5:d1:79:39:42:49:97:07:f5: 17:82:78:1a:db:5a:4c:4e:f0:5b:eb:0d:da:62:9b: 5c:d6:61:38:b2:e4:aa:36:69:4c:8f:5c:2f:21:a5: f7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C7:1D:B9:D3:B1:B7:E5:17:10:1F:6F:B6:2E:D2:B2:FB:24:E6:F5 X509v3 Authority Key Identifier: keyid:BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/k8cdudOxt-UXEB9vti7Ssvsk5vU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.244.0/22 Signature Algorithm: sha256WithRSAEncryption 35:22:88:3e:11:eb:ba:41:94:8d:4b:3c:b2:8f:38:02:62:c6: a0:26:76:84:e2:23:3f:ef:e7:9a:5c:d1:db:f0:de:ec:f3:e5: ac:83:24:34:a1:5e:32:2c:47:f1:f4:58:77:23:cc:35:fb:dc: 53:a0:8a:fd:c6:ea:a3:fa:4e:9e:e7:6d:0e:d6:47:e2:7f:f0: af:51:fa:88:4f:1c:31:74:f4:ec:95:ad:8e:6c:32:90:16:44: 28:7e:73:77:49:d6:11:11:b8:6d:0a:12:9c:c8:b0:8b:21:9f: 4e:9c:8b:d4:22:00:fb:bc:fb:25:ff:ae:fe:53:e0:18:c7:84: cd:4a:0e:b3:94:77:07:16:96:ff:3f:82:3f:06:28:63:5f:a6: 12:8e:f9:65:77:77:ea:4e:c4:2a:9b:7a:da:80:59:b3:2a:a8: b6:65:90:1b:ff:09:30:7b:50:e1:c7:27:95:7a:d7:a7:a6:60: 68:ad:b2:f2:75:f7:30:3c:96:3b:28:ae:a0:75:ea:4b:8e:14: 45:71:1a:41:25:6c:2b:8e:30:22:4e:e7:11:92:72:a8:b2:87: 3d:8e:35:69:f7:be:d3:d4:b0:74:84:86:40:21:de:cf:4f:27: 0a:4d:96:fe:c1:85:72:f2:aa:78:b9:9a:32:fa:b0:51:86:4c: 41:ad:f0:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ojJnDSrjbI+J11e37Y/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMGExM2ExYzllMWRkODRlZGU0MzI4MzQ5MGJlNzgzODc3 NTRhOTQwHhcNMjYwMTAxMDgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2M3MWRiOWQzYjFiN2U1MTcxMDFmNmZiNjJlZDJiMmZiMjRlNmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyblbHjZkX5z5Nt62RxgNK0TnHXy brpxGtRhTKxp6ZGlm7gPBic+9MXGByqzoinUSExsAqzs4Nmhk/MqF5oIOvcN5WOP IMVCvpbfqUZvhTsupYG+X6IbDmtL8gLH+j4KSvkfZeEs4SRKpEPX3vRs7uM7t1IQ wTXaW+PffNM1r0GBW2/6BL0+K8H3DArGd5aax0CUmffK6M5p8UYDd0bh5DUNtd2N 2swWcLrcdOQSpj2PJerLjnKMnWFlMFS0uXYhErzxOWbwiq1J4CnMT4odkC8u8/0H kKzV0Xk5QkmXB/UXgnga21pMTvBb6w3aYptc1mE4suSqNmlMj1wvIaX3uwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJPHHbnTsbflFxAfb7Yu0rL7JOb1MB8GA1UdIwQY MBaAFLsKE6HJ4d2E7eQyg0kL54OHdUqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXdvVG9jbmgzWVR0NURLRFNRdm5nNGQxU3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zZjhjY2EtNmIxZC00YWU2LWJjMmEt ZjQyZTdjNDU5MzVhLzEvazhjZHVkT3h0LVVYRUI5dnRpN1NzdnNrNXZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zZjhjY2EtNmIxZC00YWU2LWJjMmEtZjQyZTdjNDU5MzVh LzEvdXdvVG9jbmgzWVR0NURLRFNRdm5nNGQxU3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucr0MA0G CSqGSIb3DQEBCwUAA4IBAQA1Iog+Eeu6QZSNSzyyjzgCYsagJnaE4iM/7+eaXNHb 8N7s8+WsgyQ0oV4yLEfx9Fh3I8w1+9xToIr9xuqj+k6e520O1kfif/CvUfqITxwx dPTsla2ObDKQFkQofnN3SdYREbhtChKcyLCLIZ9OnIvUIgD7vPsl/67+U+AYx4TN Sg6zlHcHFpb/P4I/BihjX6YSjvlld3fqTsQqm3ragFmzKqi2ZZAb/wkwe1DhxyeV etenpmBorbLydfcwPJY7KK6gdepLjhRFcRpBJWwrjjAiTucRknKosoc9jjVp977T 1LB0hIZAId7PTycKTZb+wYVy8qp4uZoy+rBRhkxBrfCu -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:17 2026 by rpki-client