This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/02Kwxm94BZ7RAXrgQDrQO6z-3TQ.roa File: 02Kwxm94BZ7RAXrgQDrQO6z-3TQ.roa (raw, json) Hash identifier: mn+URibZ+VkSuh5/xjJWoAZ326sPISM/MDnjDXusDEM= Subject key identifier: D3:62:B0:C6:6F:78:05:9E:D1:01:7A:E0:40:3A:D0:3B:AC:FE:DD:34 Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075 Certificate serial: 019B7B361B652656C6D11FAAC2290922A3CD Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/02Kwxm94BZ7RAXrgQDrQO6z-3TQ.roa Signing time: Thu 01 Jan 2026 20:18:21 +0000 ROA not before: Thu 01 Jan 2026 20:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206449 IP address blocks: 185.186.108.0/24 maxlen: 24 185.186.109.0/24 maxlen: 24 185.186.110.0/24 maxlen: 24 185.186.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1b:65:26:56:c6:d1:1f:aa:c2:29:09:22:a3:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075 Validity Not Before: Jan 1 20:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d362b0c66f78059ed1017ae0403ad03bacfedd34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:22:7e:45:f2:f8:6a:06:26:e3:8d:d2:c5: 1d:1a:0c:0c:65:2f:3d:56:fa:42:88:2a:79:67:06: e4:bc:79:bb:98:4d:e4:20:b2:a7:5a:6d:ea:61:0b: 8c:d7:a8:59:9a:01:ad:b3:49:8e:14:f4:fd:63:25: aa:b1:f2:01:fd:75:3c:7a:d6:28:20:5c:f9:8f:34: b5:6f:f9:b4:cd:44:ad:6c:a5:d5:8b:cd:f6:00:24: e6:bf:f9:03:de:ce:6e:68:20:50:9d:7c:6d:bc:e8: 44:a0:d2:89:74:9a:c3:15:5e:e6:c9:ae:35:a8:44: 2f:bd:31:15:bc:70:a8:ba:82:94:77:65:96:85:76: 3e:96:21:a3:9e:9a:29:c7:91:5f:f9:2e:f7:79:ae: 21:64:b5:ae:40:25:50:1e:8e:dc:9a:f4:d1:5d:88: 7f:18:92:9e:b5:f4:64:b1:77:e4:65:7d:04:cc:2f: 25:7d:a5:b6:cb:fb:ec:75:ee:01:8b:06:e1:01:cf: b1:02:e1:f2:8c:07:ef:91:29:b3:26:89:39:68:e8: 29:4a:97:38:73:80:a1:90:c6:9e:45:0b:e2:2d:4a: bb:f2:45:71:b2:cd:07:41:cb:26:7b:47:2b:11:4d: 76:42:66:6f:ff:fd:5a:fa:dd:17:43:67:3f:55:3e: b9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:62:B0:C6:6F:78:05:9E:D1:01:7A:E0:40:3A:D0:3B:AC:FE:DD:34 X509v3 Authority Key Identifier: keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/02Kwxm94BZ7RAXrgQDrQO6z-3TQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.108.0/22 Signature Algorithm: sha256WithRSAEncryption 24:8e:f3:81:f1:38:39:13:53:46:1a:92:8c:43:a6:97:81:ef: 4d:a8:61:b7:84:32:e4:c5:f5:fe:df:32:4b:36:5f:6f:14:27: c9:5a:ac:c8:ae:2c:bc:5d:b4:58:3a:07:11:58:0d:b2:f1:b7: 44:dd:d9:05:cd:a2:f0:15:b2:c3:8f:9f:21:35:71:54:3d:83: 9e:0e:18:d7:f4:0e:f9:7b:3e:f1:be:44:1e:ee:ef:13:3d:03: a6:c3:83:e1:f8:17:17:fd:7d:58:ec:6b:0f:f9:3b:4c:95:be: e3:f0:91:cd:74:98:13:8a:b3:ba:90:be:12:15:09:c0:b4:5f: 5b:83:35:30:c6:87:38:29:60:0e:e5:d3:61:e6:2b:d3:59:31: 8b:5c:52:f7:60:2c:2a:36:5c:10:d3:70:51:6b:af:ae:8f:0e: e6:13:26:c8:1d:08:f0:51:8d:be:1e:19:a5:23:69:5e:91:68: e8:c7:f1:c8:b4:77:73:ac:c4:59:15:6e:91:f8:3e:47:13:2a: 33:e5:a1:db:6d:5d:da:7e:77:1d:12:b7:f3:55:7d:e7:b3:56: bd:cb:49:ae:b3:db:af:4e:73:a5:68:d9:48:57:7e:7a:7b:fd: 3d:de:93:e6:71:f1:2e:2e:71:4b:dd:f0:8f:25:4a:85:cb:85: 2f:3d:ee:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhtlJlbG0R+qwikJIqPNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzN2Y1MzJmYTI2MmY1YzZiZDk2MTViY2Q3OWQ2ZWRkNDNm MmUwNzUwHhcNMjYwMTAxMjAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzYyYjBjNjZmNzgwNTllZDEwMTdhZTA0MDNhZDAzYmFjZmVkZDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJAifkXy+GoGJuON0sUdGgwMZS89 VvpCiCp5ZwbkvHm7mE3kILKnWm3qYQuM16hZmgGts0mOFPT9YyWqsfIB/XU8etYo IFz5jzS1b/m0zUStbKXVi832ACTmv/kD3s5uaCBQnXxtvOhEoNKJdJrDFV7mya41 qEQvvTEVvHCouoKUd2WWhXY+liGjnpopx5Ff+S73ea4hZLWuQCVQHo7cmvTRXYh/ GJKetfRksXfkZX0EzC8lfaW2y/vsde4BiwbhAc+xAuHyjAfvkSmzJok5aOgpSpc4 c4ChkMaeRQviLUq78kVxss0HQcsme0crEU12QmZv//1a+t0XQ2c/VT65kQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNNisMZveAWe0QF64EA60Dus/t00MB8GA1UdIwQY MBaAFAN/Uy+iYvXGvZYVvNedbt1D8uB1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTM5VEw2Smk5Y2E5bGhXODE1MXUzVVB5NEhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8wOGU1N2MtZDcxNi00NzA1LTk1NjEt MDNhZGZiYzY4YzkxLzEvMDJLd3htOTRCWjdSQVhyZ1FEclFPNnotM1RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8wOGU1N2MtZDcxNi00NzA1LTk1NjEtMDNhZGZiYzY4Yzkx LzEvQTM5VEw2Smk5Y2E5bGhXODE1MXUzVVB5NEhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubpsMA0G CSqGSIb3DQEBCwUAA4IBAQAkjvOB8Tg5E1NGGpKMQ6aXge9NqGG3hDLkxfX+3zJL Nl9vFCfJWqzIriy8XbRYOgcRWA2y8bdE3dkFzaLwFbLDj58hNXFUPYOeDhjX9A75 ez7xvkQe7u8TPQOmw4Ph+BcX/X1Y7GsP+TtMlb7j8JHNdJgTirO6kL4SFQnAtF9b gzUwxoc4KWAO5dNh5ivTWTGLXFL3YCwqNlwQ03BRa6+ujw7mEybIHQjwUY2+Hhml I2lekWjox/HItHdzrMRZFW6R+D5HEyoz5aHbbV3afncdErfzVX3ns1a9y0mus9uv TnOlaNlIV356e/093pPmcfEuLnFL3fCPJUqFy4UvPe4s -----END CERTIFICATE-----Generated at Wed Jan 21 17:18:53 2026 by rpki-client