This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/kpJpjf8DEZUzbeocou67-xPbGzs.roa File: kpJpjf8DEZUzbeocou67-xPbGzs.roa (raw, json) Hash identifier: 6kfdp9N3WAjBikoQRDTNTZ1g1ptesnrFillaOS+4UCI= Subject key identifier: 92:92:69:8D:FF:03:11:95:33:6D:EA:1C:A2:EE:BB:FB:13:DB:1B:3B Certificate issuer: /CN=e168e36ba577ed47e6928729691991e4e7f235da Certificate serial: 019B7B35CB0CA917D8C0F394FA91FB3BBA6F Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/kpJpjf8DEZUzbeocou67-xPbGzs.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206150 IP address blocks: 185.211.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cb:0c:a9:17:d8:c0:f3:94:fa:91:fb:3b:ba:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9292698dff031195336dea1ca2eebbfb13db1b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:52:18:a4:0b:77:c8:4b:b5:d1:92:80:68:c7: a2:55:1f:ab:32:4d:1e:1d:3a:fd:c7:27:96:1e:5f: f6:e4:8c:01:76:63:2d:33:23:4d:51:88:93:01:9f: 80:57:1d:48:6b:da:f9:10:15:ee:69:06:1c:5f:bc: 2c:9a:97:c5:5a:4f:05:ec:64:04:b4:28:bb:33:58: cd:07:c5:99:78:2f:6c:52:a0:90:cf:a6:53:cf:d2: a2:a6:bb:24:26:99:85:07:ce:d9:39:0a:bb:06:70: 13:c4:f4:61:2b:f0:e3:35:de:27:2a:98:1a:52:70: 18:85:4b:f4:cc:0f:43:f3:ee:13:01:28:68:59:af: 4c:95:cf:be:ea:ac:18:83:2d:20:2f:8a:9a:bf:af: 5e:73:4c:13:14:8c:3d:d6:dd:b1:f0:32:d4:5b:b2: a4:34:14:a9:c2:e1:fe:05:5f:b4:c0:bf:c4:7a:06: 10:b0:d1:86:f0:16:7e:d6:5a:63:5c:44:76:90:fc: 07:3c:01:1b:32:80:88:09:0a:66:5d:cc:49:34:06: 14:b7:b9:9d:01:1f:12:88:fd:36:ba:af:50:44:9c: bb:4b:af:46:35:00:5a:6d:dc:26:d9:5b:c4:4a:c8: 43:45:3f:7a:aa:b8:4a:6b:0f:11:23:53:8e:c9:46: f1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:92:69:8D:FF:03:11:95:33:6D:EA:1C:A2:EE:BB:FB:13:DB:1B:3B X509v3 Authority Key Identifier: keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/kpJpjf8DEZUzbeocou67-xPbGzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.10.0/24 Signature Algorithm: sha256WithRSAEncryption 04:f1:03:5b:79:86:87:76:b3:da:e7:aa:2c:8e:3e:89:39:31: fb:78:32:ef:5a:77:6e:8c:ed:b6:66:b5:b0:af:fa:a4:06:5b: e9:df:70:f1:3d:30:0b:a5:44:96:e3:41:40:02:23:a1:11:fc: c1:9a:0e:13:ba:bc:ff:ac:4d:bd:d7:53:a2:17:71:35:2b:d5: 1b:72:4c:cc:31:c2:6c:0a:11:c9:74:b9:c4:1b:71:d1:fe:a5: 54:f5:0e:08:f1:02:e1:87:c2:9d:be:79:d5:a9:ca:bb:1e:d5: ab:c9:92:8f:45:b0:e8:50:11:32:43:56:d0:40:96:33:30:eb: ee:53:92:02:9b:cb:4c:07:e9:13:ed:ef:d7:cd:a7:96:6e:6e: 7c:49:73:88:0c:9c:39:a4:78:2d:7b:3b:c2:de:26:40:9d:87: 02:3b:b8:71:a7:57:f1:43:0a:50:fb:64:84:ff:26:95:50:40: 49:0e:04:e2:a6:62:c6:48:be:36:cb:7b:43:db:e6:47:4b:71: 8f:c3:20:90:f4:b1:df:b9:e7:0c:97:3e:b3:7f:89:db:b9:5f: ae:14:f4:97:b1:ee:3b:6c:71:60:d5:48:03:f6:74:b6:62:dd: b3:c8:dc:42:fe:97:fe:a7:e0:81:34:e4:b9:9d:a8:5a:33:29: 77:9a:e0:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NcsMqRfYwPOU+pH7O7pvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNjhlMzZiYTU3N2VkNDdlNjkyODcyOTY5MTk5MWU0ZTdm MjM1ZGEwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjkyNjk4ZGZmMDMxMTk1MzM2ZGVhMWNhMmVlYmJmYjEzZGIxYjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lIYpAt3yEu10ZKAaMeiVR+rMk0e HTr9xyeWHl/25IwBdmMtMyNNUYiTAZ+AVx1Ia9r5EBXuaQYcX7wsmpfFWk8F7GQE tCi7M1jNB8WZeC9sUqCQz6ZTz9KiprskJpmFB87ZOQq7BnATxPRhK/DjNd4nKpga UnAYhUv0zA9D8+4TAShoWa9Mlc++6qwYgy0gL4qav69ec0wTFIw91t2x8DLUW7Kk NBSpwuH+BV+0wL/EegYQsNGG8BZ+1lpjXER2kPwHPAEbMoCICQpmXcxJNAYUt7md AR8SiP02uq9QRJy7S69GNQBabdwm2VvESshDRT96qrhKaw8RI1OOyUbxUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJKSaY3/AxGVM23qHKLuu/sT2xs7MB8GA1UdIwQY MBaAFOFo42uld+1H5pKHKWkZkeTn8jXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFdqamE2VjM3VWZta29jcGFSbVI1T2Z5TmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny85YTI5N2QtY2VlNS00YzkzLWIyNTgt Y2I0YmFiZTlkYzhmLzEva3BKcGpmOERFWlV6YmVvY291NjcteFBiR3pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny85YTI5N2QtY2VlNS00YzkzLWIyNTgtY2I0YmFiZTlkYzhm LzEvNFdqamE2VjM3VWZta29jcGFSbVI1T2Z5TmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudMKMA0G CSqGSIb3DQEBCwUAA4IBAQAE8QNbeYaHdrPa56osjj6JOTH7eDLvWndujO22ZrWw r/qkBlvp33DxPTALpUSW40FAAiOhEfzBmg4Turz/rE2911OiF3E1K9UbckzMMcJs ChHJdLnEG3HR/qVU9Q4I8QLhh8KdvnnVqcq7HtWryZKPRbDoUBEyQ1bQQJYzMOvu U5ICm8tMB+kT7e/XzaeWbm58SXOIDJw5pHgtezvC3iZAnYcCO7hxp1fxQwpQ+2SE /yaVUEBJDgTipmLGSL42y3tD2+ZHS3GPwyCQ9LHfuecMlz6zf4nbuV+uFPSXse47 bHFg1UgD9nS2Yt2zyNxC/pf+p+CBNOS5nahaMyl3muCG -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:04 2026 by rpki-client