This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/ko2j8hnKnRa6XfeSySN88cJHiqc.roa File: ko2j8hnKnRa6XfeSySN88cJHiqc.roa (raw, json) Hash identifier: MyMKVgwxSjCpWrh/r1qz4ah1FabN79izJ21lx/qGswk= Subject key identifier: 92:8D:A3:F2:19:CA:9D:16:BA:5D:F7:92:C9:23:7C:F1:C2:47:8A:A7 Certificate issuer: /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a Certificate serial: 019B7CEE0DB400D035F64A674E1472182D14 Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/ko2j8hnKnRa6XfeSySN88cJHiqc.roa Signing time: Fri 02 Jan 2026 04:18:54 +0000 ROA not before: Fri 02 Jan 2026 04:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59992 IP address blocks: 185.62.132.0/24 maxlen: 24 185.62.133.0/24 maxlen: 24 2a03:3e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0d:b4:00:d0:35:f6:4a:67:4e:14:72:18:2d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a Validity Not Before: Jan 2 04:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=928da3f219ca9d16ba5df792c9237cf1c2478aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:96:c4:74:bf:d9:0a:d9:b6:db:59:c4:51:13: fc:56:19:30:c2:7a:6d:89:b4:b0:c8:59:71:aa:ce: 27:5a:16:37:a2:e6:de:f5:12:d8:4b:21:07:ec:3e: fd:cb:35:f5:cf:72:30:fa:47:bf:ee:ee:0c:e1:18: 35:d1:d5:53:1f:60:01:f7:3f:d4:a0:91:b9:50:4e: 6e:7a:44:c5:87:bb:0e:35:8b:76:7c:07:92:5d:1b: 62:0f:ba:15:90:27:97:a0:63:16:b1:38:32:7c:c1: 26:d3:16:a1:7f:ac:cd:b8:57:d1:98:52:55:4a:e3: dd:fc:ba:e7:88:87:39:52:67:62:fd:29:7c:93:6c: 9d:f0:db:02:43:b3:6f:57:ef:2d:24:15:e5:88:ca: f3:77:78:1b:82:b3:1e:c9:de:57:5d:8f:b2:36:26: 8b:2e:4e:03:c3:08:56:bc:a1:e4:01:fc:fd:54:b4: b3:33:80:3f:18:ad:51:e3:74:56:fd:16:a3:94:44: a2:aa:a5:91:94:46:f2:7a:22:40:51:92:62:dc:41: 30:40:f9:6d:e8:e6:a0:2f:ab:0e:f3:08:a3:e0:cb: e0:74:b6:83:c0:6b:6a:9b:61:37:8f:d5:e9:ee:74: a7:66:ef:18:9a:f6:96:75:66:0d:94:08:73:63:7e: b8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8D:A3:F2:19:CA:9D:16:BA:5D:F7:92:C9:23:7C:F1:C2:47:8A:A7 X509v3 Authority Key Identifier: keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/ko2j8hnKnRa6XfeSySN88cJHiqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.132.0/23 IPv6: 2a03:3e0::/32 Signature Algorithm: sha256WithRSAEncryption 41:db:f2:66:8f:3d:d8:4e:d5:33:54:1b:65:e0:7c:94:bb:de: 98:7b:9d:cb:9f:6f:c9:36:67:ff:c5:9d:50:a1:cf:6e:2c:54: 3b:fd:fe:ea:52:4e:96:c0:84:6a:1c:13:7b:7c:8a:22:ef:f0: 85:ec:5c:1a:fd:35:c4:60:1e:fb:f7:95:62:d2:c9:a1:a9:b3: 3a:3e:97:e0:7e:54:77:79:db:cc:1e:d6:58:62:89:2f:93:9f: 30:d3:db:6d:30:ee:47:92:ee:dc:fc:6c:09:d8:f4:2b:1a:48: 95:c7:47:84:94:ac:44:44:c8:a4:34:ed:d7:e3:1e:51:1c:05: f2:70:12:2c:4a:cc:dc:40:0e:73:f7:b1:e6:35:c5:ee:9b:ad: a0:75:6c:8c:4e:e6:86:5b:16:cf:da:4a:31:6b:40:35:f0:92: 7c:80:4c:f0:a3:22:1a:04:67:a4:4e:dd:18:d9:8d:67:c9:91: 95:25:73:a2:ba:3b:7e:52:8d:4d:9c:64:09:d4:6e:0d:91:5f: 9b:e9:80:62:88:d6:8b:55:ff:89:ab:f2:b9:14:36:1b:81:f1: 59:40:dd:9f:6e:19:4d:22:08:33:86:a6:41:48:ac:15:49:b2: 8f:7c:04:4f:a1:09:af:0e:35:f9:66:91:98:78:05:d6:d8:65: d7:8e:c8:93 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87g20ANA19kpnThRyGC0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NWU0YzhjM2E4ODUwMjZkZjhjZDYzMzc5NzhlN2ZhYTkx YTQ0NmEwHhcNMjYwMTAyMDQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjhkYTNmMjE5Y2E5ZDE2YmE1ZGY3OTJjOTIzN2NmMWMyNDc4YWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZbEdL/ZCtm221nEURP8Vhkwwnpt ibSwyFlxqs4nWhY3oube9RLYSyEH7D79yzX1z3Iw+ke/7u4M4Rg10dVTH2AB9z/U oJG5UE5uekTFh7sONYt2fAeSXRtiD7oVkCeXoGMWsTgyfMEm0xahf6zNuFfRmFJV SuPd/LrniIc5Umdi/Sl8k2yd8NsCQ7NvV+8tJBXliMrzd3gbgrMeyd5XXY+yNiaL Lk4DwwhWvKHkAfz9VLSzM4A/GK1R43RW/RajlESiqqWRlEbyeiJAUZJi3EEwQPlt 6OagL6sO8wij4MvgdLaDwGtqm2E3j9Xp7nSnZu8YmvaWdWYNlAhzY364cwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJKNo/IZyp0Wul33kskjfPHCR4qnMB8GA1UdIwQY MBaAFOReTIw6iFAm34zWM3l45/qpGkRqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUY1TWpEcUlVQ2Jmak5ZemVYam4tcWthUkdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iNzhjYzQtNGQ3ZS00ZDI1LTlhNDMt OWIzNjdhYjJjY2QzLzEva28yajhobktuUmE2WGZlU3lTTjg4Y0pIaXFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9iNzhjYzQtNGQ3ZS00ZDI1LTlhNDMtOWIzNjdhYjJjY2Qz LzEvNUY1TWpEcUlVQ2Jmak5ZemVYam4tcWthUkdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuT6EMA0E AgACMAcDBQAqAwPgMA0GCSqGSIb3DQEBCwUAA4IBAQBB2/Jmjz3YTtUzVBtl4HyU u96Ye53Ln2/JNmf/xZ1Qoc9uLFQ7/f7qUk6WwIRqHBN7fIoi7/CF7Fwa/TXEYB77 95Vi0smhqbM6PpfgflR3edvMHtZYYokvk58w09ttMO5Hku7c/GwJ2PQrGkiVx0eE lKxERMikNO3X4x5RHAXycBIsSszcQA5z97HmNcXum62gdWyMTuaGWxbP2koxa0A1 8JJ8gEzwoyIaBGekTt0Y2Y1nyZGVJXOiujt+Uo1NnGQJ1G4NkV+b6YBiiNaLVf+J q/K5FDYbgfFZQN2fbhlNIggzhqZBSKwVSbKPfARPoQmvDjX5ZpGYeAXW2GXXjsiT -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:36 2026 by rpki-client