This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/kpscRgt1dWh-e--UZ-snvDVaW_w.roa File: kpscRgt1dWh-e--UZ-snvDVaW_w.roa (raw, json) Hash identifier: IsbQ4B6Zgegpb0g9cDD/2L4au9/OQroMRlOlBHTs7Hc= Subject key identifier: 92:9B:1C:46:0B:75:75:68:7E:7B:EF:94:67:EB:27:BC:35:5A:5B:FC Certificate issuer: /CN=6052e1592b12ad2cd39f5be57c058535edb12b9c Certificate serial: 019B76EB11F47593C9FF7F2E3E9CD3375107 Authority key identifier: 60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/kpscRgt1dWh-e--UZ-snvDVaW_w.roa Signing time: Thu 01 Jan 2026 00:17:55 +0000 ROA not before: Thu 01 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203982 IP address blocks: 185.118.8.0/22 maxlen: 22 185.118.8.0/24 maxlen: 24 185.118.9.0/24 maxlen: 24 185.118.10.0/24 maxlen: 24 185.118.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:11:f4:75:93:c9:ff:7f:2e:3e:9c:d3:37:51:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6052e1592b12ad2cd39f5be57c058535edb12b9c Validity Not Before: Jan 1 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=929b1c460b7575687e7bef9467eb27bc355a5bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:20:35:a8:ec:76:16:b9:cd:b4:f8:4f:46:70: 6c:55:dd:ca:fa:65:be:1a:20:26:ce:a7:1a:00:ec: 06:eb:b0:78:3a:30:28:2e:f1:4c:c5:15:c0:75:23: 3e:be:63:8a:2e:ca:76:75:bb:06:7f:b4:4b:b9:37: 8e:85:6d:47:99:99:d3:6e:eb:eb:aa:e5:03:7b:c1: 91:34:1d:d3:5e:5a:ce:81:ff:11:02:f7:38:af:38: 2e:a5:16:78:1d:7e:78:fc:13:63:02:d7:ca:c3:7c: b8:37:e7:69:52:b7:8e:e2:34:10:31:ac:be:fb:ab: 3b:14:64:d9:11:88:02:e5:2d:52:18:8b:e6:a8:ce: 61:55:de:56:70:6c:67:e8:5b:ac:3a:dc:6a:18:ab: e3:6e:f6:35:1b:a0:26:1f:1f:c0:3e:d7:99:06:df: aa:9b:4e:95:54:ef:5a:1c:d4:9c:c5:81:28:76:b8: 32:86:a5:71:ea:28:4b:7b:98:cd:2c:88:82:b4:07: b5:80:f6:d1:b7:1d:19:30:c8:50:7d:ff:92:c4:41: 2a:a9:09:a6:81:28:66:7c:63:2f:77:57:4f:d1:5c: 5a:a3:79:be:26:e2:5b:f2:a1:48:b2:3b:41:38:c6: 49:30:28:26:9c:aa:12:26:45:36:9a:c8:e2:a8:5a: 62:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9B:1C:46:0B:75:75:68:7E:7B:EF:94:67:EB:27:BC:35:5A:5B:FC X509v3 Authority Key Identifier: keyid:60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/kpscRgt1dWh-e--UZ-snvDVaW_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.8.0/22 Signature Algorithm: sha256WithRSAEncryption 02:38:62:46:9b:5d:a5:3f:50:4b:f8:7d:05:9e:ce:06:35:24: 3b:ed:4c:5e:fa:b6:d3:01:38:af:0d:8d:bd:d3:0a:1d:16:eb: 00:90:3e:c7:7d:d1:66:04:04:3c:76:32:55:64:45:bb:00:1a: 27:5e:3f:a9:43:1f:f6:b9:e4:40:38:21:f9:7e:07:b8:bc:c3: 7c:c8:28:c4:9c:97:f5:c0:33:7d:fe:95:4a:ea:78:5d:d3:4e: 14:86:b1:bc:60:2a:7a:0e:3e:0a:79:b8:4d:f8:fb:db:55:88: d3:dc:38:7f:43:48:9d:c4:60:61:17:86:f7:40:9a:ad:29:25: 0d:52:44:8a:76:33:5f:13:64:f0:65:4f:e4:99:b7:0d:51:6b: 35:f8:c1:e7:6c:71:65:67:9d:c8:12:98:b3:9d:dc:3f:f6:64: 01:75:be:ce:3f:f9:c2:e7:12:8f:c2:97:50:a4:de:25:11:0b: ee:cb:9a:11:e6:f6:04:9b:ef:bc:06:26:11:6d:6c:2f:0b:9b: 99:68:46:dd:c0:75:03:ca:64:bd:a1:cb:0d:4f:8d:69:c2:22: d4:0f:d6:c1:8b:22:af:21:2e:cf:0b:67:bd:83:cb:8c:d3:2c: e4:20:64:e6:99:c1:99:d3:1e:80:8a:83:71:14:82:f4:33:d4: b1:0d:5b:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xH0dZPJ/38uPpzTN1EHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTJlMTU5MmIxMmFkMmNkMzlmNWJlNTdjMDU4NTM1ZWRi MTJiOWMwHhcNMjYwMTAxMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjliMWM0NjBiNzU3NTY4N2U3YmVmOTQ2N2ViMjdiYzM1NWE1YmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SA1qOx2FrnNtPhPRnBsVd3K+mW+ GiAmzqcaAOwG67B4OjAoLvFMxRXAdSM+vmOKLsp2dbsGf7RLuTeOhW1HmZnTbuvr quUDe8GRNB3TXlrOgf8RAvc4rzgupRZ4HX54/BNjAtfKw3y4N+dpUreO4jQQMay+ +6s7FGTZEYgC5S1SGIvmqM5hVd5WcGxn6FusOtxqGKvjbvY1G6AmHx/APteZBt+q m06VVO9aHNScxYEodrgyhqVx6ihLe5jNLIiCtAe1gPbRtx0ZMMhQff+SxEEqqQmm gShmfGMvd1dP0Vxao3m+JuJb8qFIsjtBOMZJMCgmnKoSJkU2msjiqFpicwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJKbHEYLdXVofnvvlGfrJ7w1Wlv8MB8GA1UdIwQY MBaAFGBS4VkrEq0s059b5XwFhTXtsSucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZMaFdTc1NyU3pUbjF2bGZBV0ZOZTJ4SzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81ODNhMmMtOTQ2ZC00NTE3LTgwODMt MjY5ODVjZTQ1OTc4LzEva3BzY1JndDFkV2gtZS0tVVotc252RFZhV193LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi81ODNhMmMtOTQ2ZC00NTE3LTgwODMtMjY5ODVjZTQ1OTc4 LzEvWUZMaFdTc1NyU3pUbjF2bGZBV0ZOZTJ4SzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXYIMA0G CSqGSIb3DQEBCwUAA4IBAQACOGJGm12lP1BL+H0Fns4GNSQ77Uxe+rbTATivDY29 0wodFusAkD7HfdFmBAQ8djJVZEW7ABonXj+pQx/2ueRAOCH5fge4vMN8yCjEnJf1 wDN9/pVK6nhd004UhrG8YCp6Dj4KebhN+PvbVYjT3Dh/Q0idxGBhF4b3QJqtKSUN UkSKdjNfE2TwZU/kmbcNUWs1+MHnbHFlZ53IEpizndw/9mQBdb7OP/nC5xKPwpdQ pN4lEQvuy5oR5vYEm++8BiYRbWwvC5uZaEbdwHUDymS9ocsNT41pwiLUD9bBiyKv IS7PC2e9g8uM0yzkIGTmmcGZ0x6AioNxFIL0M9SxDVua -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:33 2026 by rpki-client