This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/kbAAkkwQaP932r1ppsah-TSE9Gg.roa File: kbAAkkwQaP932r1ppsah-TSE9Gg.roa (raw, json) Hash identifier: 3o2XAxyHXa8HTmIjYWrGbQaBUOXrwLxjEU50gmU9jZU= Subject key identifier: 91:B0:00:92:4C:10:68:FF:77:DA:BD:69:A6:C6:A1:F9:34:84:F4:68 Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305 Certificate serial: 019B7DCADB4B3F2026CB621D001A49BF81BE Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/kbAAkkwQaP932r1ppsah-TSE9Gg.roa Signing time: Fri 02 Jan 2026 08:20:05 +0000 ROA not before: Fri 02 Jan 2026 08:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 185.149.156.0/22 maxlen: 24 194.45.22.0/24 maxlen: 24 212.86.192.0/19 maxlen: 24 2a00:1970::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:db:4b:3f:20:26:cb:62:1d:00:1a:49:bf:81:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305 Validity Not Before: Jan 2 08:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91b000924c1068ff77dabd69a6c6a1f93484f468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f6:fd:b9:29:83:26:09:a2:47:c7:1a:15:91: 36:fb:e3:fe:6d:c4:6a:71:b4:00:34:d9:c2:d2:61: b6:5b:ca:6b:df:73:26:d6:6e:81:7e:3e:eb:72:69: 57:16:02:fc:8b:63:48:f0:ff:cd:ad:a0:04:cb:dd: b2:c7:82:7a:25:89:65:3e:db:0d:48:bd:c4:2e:cc: 18:09:f2:67:27:95:81:22:d2:3e:2b:31:63:7c:aa: 29:ba:75:60:27:08:01:e0:35:fb:82:07:e8:7b:67: f1:67:cb:33:81:82:e1:c8:ab:09:b7:5f:73:f4:68: 10:a4:a6:14:0f:2f:63:91:3b:ce:1e:de:0a:ea:61: 7c:28:a6:81:3f:b7:0b:92:a6:76:44:93:c5:f1:ed: 5e:e4:01:0c:2e:1b:c4:86:41:87:45:d6:d5:34:5b: a4:34:ec:d4:9d:d9:fd:ca:a2:97:a5:56:14:8f:00: 98:87:20:bc:2f:c7:b9:e6:72:d6:d7:8b:82:80:f3: 45:3d:5e:2b:1d:7f:cb:46:62:7e:8e:83:39:6f:15: b1:7c:bc:f3:2e:a4:17:bb:06:86:fd:50:c2:e2:3a: f2:a4:33:55:ce:70:46:2a:36:14:13:e7:e6:eb:a5: 6f:12:ef:68:37:ee:8c:1d:5b:62:fa:40:e7:f7:ec: 40:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B0:00:92:4C:10:68:FF:77:DA:BD:69:A6:C6:A1:F9:34:84:F4:68 X509v3 Authority Key Identifier: keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/kbAAkkwQaP932r1ppsah-TSE9Gg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.156.0/22 194.45.22.0/24 212.86.192.0/19 IPv6: 2a00:1970::/32 Signature Algorithm: sha256WithRSAEncryption 3d:79:24:6f:15:80:67:0d:c4:2d:f9:92:e4:25:97:68:a0:3c: a2:7f:db:27:27:d1:bf:91:b1:a7:cf:54:1c:20:ec:55:64:27: eb:c1:1a:17:75:fc:b4:97:9d:eb:8b:45:85:2a:7e:32:a2:a5: 4f:9f:68:ee:61:55:5b:46:50:de:b9:4e:16:92:4f:77:85:8e: 7a:14:72:5b:da:61:70:4b:86:a3:c2:4d:b2:13:17:db:51:38: d7:3b:22:1d:54:f5:7f:0f:ba:26:27:cf:13:f0:a3:b9:40:21: 24:b6:ae:25:0d:d6:55:1c:a6:48:90:1f:16:70:2e:52:96:a6: 12:6f:3c:c7:b4:8c:69:2b:23:44:34:73:05:34:80:c8:d5:35: d8:20:3f:ac:9f:db:8d:ff:d0:1f:dd:4b:67:0d:88:ca:40:81: 63:9c:4c:3e:a4:c6:dc:bc:fd:ea:b7:1c:c2:09:96:6f:70:46: 87:4a:de:22:78:b0:5b:b9:f9:f3:12:0c:ba:d0:5f:bc:8a:34: 38:80:39:9e:b2:02:4a:3a:58:72:3a:84:2d:74:55:3f:23:f9: 8d:06:c6:4d:a0:94:bd:0e:6f:80:b5:ea:e4:5d:1b:44:60:2d: da:f9:8c:fb:42:44:b5:ad:c6:57:c1:37:d8:25:cf:45:80:e3: c4:26:9d:ea -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9yttLPyAmy2IdABpJv4G+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YzI2OWY5ZTkzYjBmYjhiYzRiMWM5NDdhYmM1YjIxZjIx ZjIzMDUwHhcNMjYwMTAyMDgyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWIwMDA5MjRjMTA2OGZmNzdkYWJkNjlhNmM2YTFmOTM0ODRmNDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fb9uSmDJgmiR8caFZE2++P+bcRq cbQANNnC0mG2W8pr33Mm1m6Bfj7rcmlXFgL8i2NI8P/NraAEy92yx4J6JYllPtsN SL3ELswYCfJnJ5WBItI+KzFjfKopunVgJwgB4DX7ggfoe2fxZ8szgYLhyKsJt19z 9GgQpKYUDy9jkTvOHt4K6mF8KKaBP7cLkqZ2RJPF8e1e5AEMLhvEhkGHRdbVNFuk NOzUndn9yqKXpVYUjwCYhyC8L8e55nLW14uCgPNFPV4rHX/LRmJ+joM5bxWxfLzz LqQXuwaG/VDC4jrypDNVznBGKjYUE+fm66VvEu9oN+6MHVti+kDn9+xAvQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJGwAJJMEGj/d9q9aabGofk0hPRoMB8GA1UdIwQY MBaAFNbCafnpOw+4vEsclHq8WyHyHyMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEt Yjc5Y2ZjMjRkM2I3LzEva2JBQWtrd1FhUDkzMnIxcHBzYWgtVFNFOUdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEtYjc5Y2ZjMjRkM2I3 LzEvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuZWcAwQA wi0WAwQF1FbAMA0EAgACMAcDBQAqABlwMA0GCSqGSIb3DQEBCwUAA4IBAQA9eSRv FYBnDcQt+ZLkJZdooDyif9snJ9G/kbGnz1QcIOxVZCfrwRoXdfy0l53ri0WFKn4y oqVPn2juYVVbRlDeuU4Wkk93hY56FHJb2mFwS4ajwk2yExfbUTjXOyIdVPV/D7om J88T8KO5QCEktq4lDdZVHKZIkB8WcC5SlqYSbzzHtIxpKyNENHMFNIDI1TXYID+s n9uN/9Af3UtnDYjKQIFjnEw+pMbcvP3qtxzCCZZvcEaHSt4ieLBbufnzEgy60F+8 ijQ4gDmesgJKOlhyOoQtdFU/I/mNBsZNoJS9Dm+AterkXRtEYC3a+Yz7QkS1rcZX wTfYJc9FgOPEJp3q -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:28 2026 by rpki-client