This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/kiAttdnigrAzCEAY7KtA_Ptxn70.roa File: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (raw, json) Hash identifier: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8= Subject key identifier: 92:20:2D:B5:D9:E2:82:B0:33:08:40:18:EC:AB:40:FC:FB:71:9F:BD Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019B7EA65F97EF070C5DB283BC8DF9737A7A Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/kiAttdnigrAzCEAY7KtA_Ptxn70.roa Signing time: Fri 02 Jan 2026 12:19:51 +0000 ROA not before: Fri 02 Jan 2026 12:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201341 IP address blocks: 185.122.141.0/24 maxlen: 24 185.122.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:5f:97:ef:07:0c:5d:b2:83:bc:8d:f9:73:7a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Jan 2 12:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92202db5d9e282b033084018ecab40fcfb719fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:61:37:3a:ae:14:2e:f2:a8:3f:4b:71:93: ff:93:87:f4:84:7e:47:23:2e:de:16:fa:0f:27:06: 06:13:56:34:39:4c:8e:71:87:6e:bf:a0:22:3b:6e: ea:0d:05:73:2d:98:3b:7e:3f:2e:ab:8d:23:cc:f2: ed:a4:f2:6a:47:1a:6d:96:44:08:b8:6d:7a:2a:e0: 8d:26:18:5e:27:40:11:c0:c1:97:33:d6:2f:73:cd: 6e:ea:df:99:58:ca:e6:63:d7:76:97:e6:bd:5b:fb: 4a:90:13:c1:3d:45:6d:f4:05:1c:87:ab:64:bb:d0: 7c:14:2a:0c:56:27:75:0e:49:c8:0c:69:8e:a2:bd: ee:49:4c:68:aa:30:9a:2c:46:08:eb:d1:c7:a8:63: b9:9b:76:1c:b4:98:1c:dc:be:ea:19:97:ca:ab:2d: 41:5c:e6:79:4a:ff:5d:e8:ec:de:b1:ef:14:ba:1d: 9b:c8:8a:40:cb:33:c4:84:62:10:46:9e:15:87:4e: 7f:c7:ea:99:c3:82:1c:00:e9:63:1b:e2:fd:d9:2b: bb:38:af:32:b5:5d:85:2b:c2:d8:14:f5:14:be:0e: 67:46:bc:fd:5f:78:9f:31:af:73:16:7f:73:91:98: 70:83:4c:5c:cd:b0:6c:82:99:05:31:ee:c6:fe:de: 5e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:20:2D:B5:D9:E2:82:B0:33:08:40:18:EC:AB:40:FC:FB:71:9F:BD X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/kiAttdnigrAzCEAY7KtA_Ptxn70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.141.0/24 185.122.143.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:e9:df:61:ed:8b:bb:95:ed:a2:aa:0c:6a:1f:92:ad:95:77: c4:91:1d:f1:5a:fe:1e:d1:58:fc:02:f8:1f:3c:cf:98:be:69: 58:64:86:9c:9d:69:0f:52:b4:24:30:f0:67:1e:62:8e:49:86: 8c:18:cb:6f:f0:06:7a:65:c6:0c:30:e5:71:e7:8a:65:19:d5: d7:5e:f6:6d:cd:e2:67:48:52:a9:a4:0f:0a:58:b9:5f:4c:24: 12:fa:df:fa:2c:0e:56:9f:70:d0:db:b1:d2:01:3e:00:e5:63: cf:40:0c:71:e2:b4:7f:fc:cb:ba:4e:2e:51:ed:68:fb:19:58: 98:83:8e:4d:40:b6:cb:21:40:6c:23:28:76:d9:12:d8:40:6a: dd:d1:b3:ab:5f:e7:34:a9:3b:dc:9d:2b:c2:d3:43:ca:02:25: 6f:35:70:c8:69:c3:ae:5d:5a:cf:ae:9f:47:28:07:e7:cf:e6: 00:9c:fe:c1:48:45:66:35:13:27:e7:c0:37:91:93:90:f6:02: ca:a9:99:a6:2c:70:33:59:67:ee:0e:da:ca:2e:e1:1e:9c:bf: 8d:12:f6:99:0d:b8:c6:23:7a:bc:be:0d:80:f0:1a:ff:1e:38: 56:bb:d4:cb:1e:77:c0:13:d4:59:77:79:3b:55:f1:3a:57:13: 34:fb:4c:e5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pl+X7wcMXbKDvI35c3p6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwMTAyMTIxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjIwMmRiNWQ5ZTI4MmIwMzMwODQwMThlY2FiNDBmY2ZiNzE5ZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHFhNzquFC7yqD9LcZP/k4f0hH5H Iy7eFvoPJwYGE1Y0OUyOcYduv6AiO27qDQVzLZg7fj8uq40jzPLtpPJqRxptlkQI uG16KuCNJhheJ0ARwMGXM9Yvc81u6t+ZWMrmY9d2l+a9W/tKkBPBPUVt9AUch6tk u9B8FCoMVid1DknIDGmOor3uSUxoqjCaLEYI69HHqGO5m3YctJgc3L7qGZfKqy1B XOZ5Sv9d6Ozese8Uuh2byIpAyzPEhGIQRp4Vh05/x+qZw4IcAOljG+L92Su7OK8y tV2FK8LYFPUUvg5nRrz9X3ifMa9zFn9zkZhwg0xczbBsgpkFMe7G/t5ebwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJIgLbXZ4oKwMwhAGOyrQPz7cZ+9MB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEva2lBdHRkbmlnckF6Q0VBWTdLdEFfUHR4bjcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXqNAwQA uXqPMA0GCSqGSIb3DQEBCwUAA4IBAQBb6d9h7Yu7le2iqgxqH5KtlXfEkR3xWv4e 0Vj8AvgfPM+YvmlYZIacnWkPUrQkMPBnHmKOSYaMGMtv8AZ6ZcYMMOVx54plGdXX XvZtzeJnSFKppA8KWLlfTCQS+t/6LA5Wn3DQ27HSAT4A5WPPQAxx4rR//Mu6Ti5R 7Wj7GViYg45NQLbLIUBsIyh22RLYQGrd0bOrX+c0qTvcnSvC00PKAiVvNXDIacOu XVrPrp9HKAfnz+YAnP7BSEVmNRMn58A3kZOQ9gLKqZmmLHAzWWfuDtrKLuEenL+N EvaZDbjGI3q8vg2A8Br/HjhWu9TLHnfAE9RZd3k7VfE6VxM0+0zl -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:10 2026 by rpki-client