This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/kSFjelNK2nrw1yJcIllugBR2YRw.roa File: kSFjelNK2nrw1yJcIllugBR2YRw.roa (raw, json) Hash identifier: qC1YqVbi0emgXtAjk78XAWNuJjURPxEoZ1zs9JXTtbE= Subject key identifier: 91:21:63:7A:53:4A:DA:7A:F0:D7:22:5C:22:59:6E:80:14:76:61:1C Certificate issuer: /CN=79e376c8e490d28620c24f97e2b933d62fd0238b Certificate serial: 019B78A37272B2EF7C953BA3DA082C0B38FD Authority key identifier: 79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/kSFjelNK2nrw1yJcIllugBR2YRw.roa Signing time: Thu 01 Jan 2026 08:18:56 +0000 ROA not before: Thu 01 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58277 IP address blocks: 185.247.220.0/22 maxlen: 22 185.247.220.0/24 maxlen: 24 185.247.221.0/24 maxlen: 24 185.247.222.0/24 maxlen: 24 185.247.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:72:72:b2:ef:7c:95:3b:a3:da:08:2c:0b:38:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79e376c8e490d28620c24f97e2b933d62fd0238b Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9121637a534ada7af0d7225c22596e801476611c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:d9:97:e1:8f:f6:86:bb:c9:35:d5:66:7d: 4d:9e:ff:cf:95:7f:f7:5f:bb:13:05:54:cf:8e:97: 73:9d:12:1c:ed:ad:8e:b4:94:f5:25:ac:93:77:56: 20:d6:12:8f:fc:94:34:89:4e:b6:70:03:9b:bb:ec: 5b:e2:11:d5:40:b3:fb:fe:8d:26:75:75:a0:70:8b: 96:f8:e4:67:73:2f:2b:b5:fe:6c:3d:b3:ea:a0:bf: cb:49:06:fb:7d:25:19:4b:90:56:da:c1:b2:79:7d: 13:4d:d8:02:65:76:8f:6a:02:9f:6f:9e:63:ad:ed: 17:de:73:a0:c9:3c:28:04:b5:d1:fb:fe:06:6a:02: 12:cf:00:ca:b3:b3:af:c9:9f:0c:e1:74:3c:bb:7f: 5b:9c:86:f3:f4:e7:3a:ea:47:2a:33:c2:59:78:d7: c2:83:3f:13:d8:4a:62:ee:7c:5a:b3:5a:26:bb:9e: 8f:90:b4:64:8b:99:b6:72:42:27:f9:cb:49:50:53: 4c:0e:2e:15:8b:03:58:13:50:6e:ba:92:71:05:3a: e0:0c:d1:9c:e0:06:4f:63:c1:f5:d7:4b:9c:c4:6c: 82:5b:48:f9:04:fe:db:f6:40:ba:3f:71:cd:65:c4: 35:15:1d:07:b6:38:a7:ac:79:b2:3e:63:22:78:9c: c8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:21:63:7A:53:4A:DA:7A:F0:D7:22:5C:22:59:6E:80:14:76:61:1C X509v3 Authority Key Identifier: keyid:79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/kSFjelNK2nrw1yJcIllugBR2YRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.247.220.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:48:c7:3d:aa:9b:f8:bb:56:e5:37:02:58:d2:a0:6c:af:bc: 3e:1a:48:3f:c0:9e:8f:24:86:77:6f:26:7a:9b:4d:16:df:ce: c8:e8:63:8f:6e:e4:72:ab:4b:08:10:f3:8a:73:78:6e:fc:ee: 9a:69:df:9a:30:0e:04:96:ce:4c:f8:d8:b4:29:bf:90:a1:80: 5d:07:46:8b:f5:f0:97:28:27:b0:5c:7d:63:ff:06:13:9e:75: 6b:d5:c7:75:a7:93:f8:bf:b0:64:73:1b:16:1d:a3:f5:45:82: 7c:d3:7e:61:7f:a3:3b:88:79:24:5b:0c:15:96:0d:a3:7c:bb: 44:9c:76:42:df:92:5a:6e:c2:46:da:04:57:de:9f:a2:b7:a0: ce:68:db:ce:5b:cc:2e:05:2f:5a:04:1c:4a:e6:b7:37:ed:9e: e4:72:ce:1a:51:5f:4d:73:d3:05:cf:f7:77:48:2e:3b:d7:5c: 96:e8:d3:c6:cb:46:2e:66:bc:8b:70:75:82:2a:56:7e:9a:d2: 17:ce:53:c6:c9:cf:63:36:1b:33:e5:f5:8a:f3:e5:1e:33:2b: df:9e:8c:4d:99:84:4f:1e:f9:58:53:24:2f:66:63:5c:7f:f9: 9f:77:9d:62:94:66:5f:af:c3:bd:f9:21:4d:6d:53:d8:31:54: 5c:72:48:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3Jysu98lTuj2ggsCzj9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZTM3NmM4ZTQ5MGQyODYyMGMyNGY5N2UyYjkzM2Q2MmZk MDIzOGIwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTIxNjM3YTUzNGFkYTdhZjBkNzIyNWMyMjU5NmU4MDE0NzY2MTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOvZl+GP9oa7yTXVZn1Nnv/PlX/3 X7sTBVTPjpdznRIc7a2OtJT1JayTd1Yg1hKP/JQ0iU62cAObu+xb4hHVQLP7/o0m dXWgcIuW+ORncy8rtf5sPbPqoL/LSQb7fSUZS5BW2sGyeX0TTdgCZXaPagKfb55j re0X3nOgyTwoBLXR+/4GagISzwDKs7OvyZ8M4XQ8u39bnIbz9Oc66kcqM8JZeNfC gz8T2Epi7nxas1omu56PkLRki5m2ckIn+ctJUFNMDi4ViwNYE1BuupJxBTrgDNGc 4AZPY8H110ucxGyCW0j5BP7b9kC6P3HNZcQ1FR0HtjinrHmyPmMieJzI2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJEhY3pTStp68NciXCJZboAUdmEcMB8GA1UdIwQY MBaAFHnjdsjkkNKGIMJPl+K5M9Yv0COLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWVOMnlPU1Ewb1lnd2stWDRya3oxaV9RSTRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lOGI4NWEtZjM3NS00NzcxLWFmM2Qt MTI1ZTFlMWYxNTliLzEva1NGamVsTksybnJ3MXlKY0lsbHVnQlIyWVJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lOGI4NWEtZjM3NS00NzcxLWFmM2QtMTI1ZTFlMWYxNTli LzEvZWVOMnlPU1Ewb1lnd2stWDRya3oxaV9RSTRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuffcMA0G CSqGSIb3DQEBCwUAA4IBAQB6SMc9qpv4u1blNwJY0qBsr7w+Gkg/wJ6PJIZ3byZ6 m00W387I6GOPbuRyq0sIEPOKc3hu/O6aad+aMA4Els5M+Ni0Kb+QoYBdB0aL9fCX KCewXH1j/wYTnnVr1cd1p5P4v7BkcxsWHaP1RYJ8035hf6M7iHkkWwwVlg2jfLtE nHZC35JabsJG2gRX3p+it6DOaNvOW8wuBS9aBBxK5rc37Z7kcs4aUV9Nc9MFz/d3 SC4711yW6NPGy0YuZryLcHWCKlZ+mtIXzlPGyc9jNhsz5fWK8+UeMyvfnoxNmYRP HvlYUyQvZmNcf/mfd51ilGZfr8O9+SFNbVPYMVRcckju -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:57 2026 by rpki-client