This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/kkg4t3nZeUP55IPH0ja56ajh2uc.roa File: kkg4t3nZeUP55IPH0ja56ajh2uc.roa (raw, json) Hash identifier: wQ4+D4YX0IA9lRd0FG5GHGoJjFI5hoVgBy4LMPM1TUc= Subject key identifier: 92:48:38:B7:79:D9:79:43:F9:E4:83:C7:D2:36:B9:E9:A8:E1:DA:E7 Certificate issuer: /CN=66927b2b26b5214b9665d8dc85f414709714996c Certificate serial: 019B797DEF697F43F03337C828D4AB81D286 Authority key identifier: 66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/kkg4t3nZeUP55IPH0ja56ajh2uc.roa Signing time: Thu 01 Jan 2026 12:17:34 +0000 ROA not before: Thu 01 Jan 2026 12:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212098 IP address blocks: 185.223.163.0/24 maxlen: 24 2a10:8c80::/32 maxlen: 32 2a10:8c81::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:ef:69:7f:43:f0:33:37:c8:28:d4:ab:81:d2:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66927b2b26b5214b9665d8dc85f414709714996c Validity Not Before: Jan 1 12:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=924838b779d97943f9e483c7d236b9e9a8e1dae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:b2:53:72:e8:08:67:38:ee:57:c8:3b:2f: c8:d2:4d:a3:23:c7:1d:67:fc:17:39:00:31:42:e5: b2:c9:4d:d6:1f:64:0d:63:5a:a0:ba:09:86:ed:a1: 73:e3:33:fd:6d:1d:b8:5c:26:d4:eb:30:3f:6d:51: 1f:7c:7f:3d:48:f9:f8:9e:15:71:1f:9e:be:42:6d: d4:77:27:66:40:60:72:6a:63:1a:b0:72:75:15:5b: 7b:98:e6:24:c1:5e:d9:e7:f5:23:04:73:6f:6a:00: 85:bc:ed:7e:50:52:d1:c1:2a:82:bd:ea:8f:c5:06: a9:44:9b:6b:14:07:c7:1d:19:a8:96:67:6b:8d:1c: 40:71:cb:fb:7e:d0:db:fa:db:fd:2b:94:04:77:c4: 58:e9:f1:e1:c0:eb:4e:be:ff:ad:37:91:0c:62:c2: 86:a3:db:e3:f0:fa:f4:95:71:31:37:da:1e:ed:f8: fb:e4:ab:a0:ab:6e:52:65:c1:40:87:73:26:f7:0e: 1f:70:cd:93:fb:c1:f5:b1:45:31:19:c2:22:7e:ac: 24:cb:70:95:a4:27:db:e5:c1:40:2d:66:65:39:20: a8:cf:0a:2f:4e:bc:64:fd:d6:c3:3d:27:30:a7:d8: 20:83:65:e4:a5:79:5e:3a:a1:d5:94:3d:3f:ad:d1: d3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:48:38:B7:79:D9:79:43:F9:E4:83:C7:D2:36:B9:E9:A8:E1:DA:E7 X509v3 Authority Key Identifier: keyid:66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/kkg4t3nZeUP55IPH0ja56ajh2uc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.163.0/24 IPv6: 2a10:8c80::/31 Signature Algorithm: sha256WithRSAEncryption 39:b9:65:bd:29:40:c7:dc:3c:05:b3:21:8d:e4:70:16:3b:fc: e5:ff:0c:11:d0:74:31:e1:7c:56:e4:34:cc:83:cb:7b:fa:95: f1:72:d6:1d:db:3c:47:5e:03:00:c8:17:25:cd:d9:d2:3f:9d: ff:7b:18:62:f3:02:fe:96:2e:03:3a:6c:e5:ab:5e:6d:4c:f1: 95:7d:0a:67:5a:9a:c4:4b:7c:1a:64:ce:59:d4:3c:7a:95:24: 4b:ce:93:d2:f1:ea:d8:38:1b:f8:2e:db:d2:82:5f:e5:a2:36: 21:88:9b:b4:e9:02:46:38:e3:b8:d8:5f:c7:4b:e9:6e:0b:22: 01:96:09:a2:2c:18:12:cc:9b:7f:58:69:8b:60:55:a4:88:35: 0e:b9:c1:c0:de:aa:71:02:db:ef:d9:91:95:2d:42:f1:2f:95: 0a:01:5c:1b:b7:ef:c0:a7:b0:93:63:e9:42:10:11:dd:30:12: 88:df:89:04:2d:14:b3:5f:e8:cc:05:a0:13:60:7b:09:7a:72: ac:9e:ce:5a:31:7b:30:87:fa:3d:01:f4:18:c9:03:69:95:e4: 9b:96:10:f2:9b:9e:c0:62:3d:0b:ef:9c:12:9a:ca:92:c7:c6: cc:1e:0b:65:a8:d3:63:46:95:00:bf:1a:b3:db:ea:7d:83:a2: 50:b2:a4:22 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fe9pf0PwMzfIKNSrgdKGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTI3YjJiMjZiNTIxNGI5NjY1ZDhkYzg1ZjQxNDcwOTcx NDk5NmMwHhcNMjYwMTAxMTIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjQ4MzhiNzc5ZDk3OTQzZjllNDgzYzdkMjM2YjllOWE4ZTFkYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRSyU3LoCGc47lfIOy/I0k2jI8cd Z/wXOQAxQuWyyU3WH2QNY1qgugmG7aFz4zP9bR24XCbU6zA/bVEffH89SPn4nhVx H56+Qm3UdydmQGByamMasHJ1FVt7mOYkwV7Z5/UjBHNvagCFvO1+UFLRwSqCveqP xQapRJtrFAfHHRmolmdrjRxAccv7ftDb+tv9K5QEd8RY6fHhwOtOvv+tN5EMYsKG o9vj8Pr0lXExN9oe7fj75Kugq25SZcFAh3Mm9w4fcM2T+8H1sUUxGcIifqwky3CV pCfb5cFALWZlOSCozwovTrxk/dbDPScwp9ggg2XkpXleOqHVlD0/rdHTxQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJJIOLd52XlD+eSDx9I2uemo4drnMB8GA1UdIwQY MBaAFGaSeysmtSFLlmXY3IX0FHCXFJlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lNGNlN2MtYWQ3Yi00MDA2LThlNmEt ODAzNTJkMTQxM2Q5LzEva2tnNHQzblplVVA1NUlQSDBqYTU2YWpoMnVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9lNGNlN2MtYWQ3Yi00MDA2LThlNmEtODAzNTJkMTQxM2Q5 LzEvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAud+jMA0E AgACMAcDBQEqEIyAMA0GCSqGSIb3DQEBCwUAA4IBAQA5uWW9KUDH3DwFsyGN5HAW O/zl/wwR0HQx4XxW5DTMg8t7+pXxctYd2zxHXgMAyBclzdnSP53/exhi8wL+li4D Omzlq15tTPGVfQpnWprES3waZM5Z1Dx6lSRLzpPS8erYOBv4LtvSgl/lojYhiJu0 6QJGOOO42F/HS+luCyIBlgmiLBgSzJt/WGmLYFWkiDUOucHA3qpxAtvv2ZGVLULx L5UKAVwbt+/Ap7CTY+lCEBHdMBKI34kELRSzX+jMBaATYHsJenKsns5aMXswh/o9 AfQYyQNpleSblhDym57AYj0L75wSmsqSx8bMHgtlqNNjRpUAvxqz2+p9g6JQsqQi -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:34 2026 by rpki-client