This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/kdtriYs5EMHzMm8GxGhb8NfrmqQ.roa File: kdtriYs5EMHzMm8GxGhb8NfrmqQ.roa (raw, json) Hash identifier: lBWS6NaSe2F942bAeRrCfj/gV/8TvjoRWKgChfD/esI= Subject key identifier: 91:DB:6B:89:8B:39:10:C1:F3:32:6F:06:C4:68:5B:F0:D7:EB:9A:A4 Certificate issuer: /CN=a1ebf54d028ee4764f62f78ad871dbf026228788 Certificate serial: 019B7DC9C5C15C36133224CD2B664EE05446 Authority key identifier: A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/kdtriYs5EMHzMm8GxGhb8NfrmqQ.roa Signing time: Fri 02 Jan 2026 08:18:53 +0000 ROA not before: Fri 02 Jan 2026 08:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8708 IP address blocks: 185.137.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:c5:c1:5c:36:13:32:24:cd:2b:66:4e:e0:54:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ebf54d028ee4764f62f78ad871dbf026228788 Validity Not Before: Jan 2 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91db6b898b3910c1f3326f06c4685bf0d7eb9aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:55:83:bb:54:0f:51:2b:6c:7d:c1:ca:62:0a: 50:9d:72:02:01:1b:6c:7f:51:19:0d:d9:02:bf:cd: b3:dd:61:96:f7:6f:62:4b:80:20:8d:c1:bc:bb:1c: ae:86:c8:a5:6d:c8:11:a7:20:d2:b0:18:f6:51:3a: 57:62:45:6f:b3:27:01:c3:ed:63:52:88:2f:1f:6c: f0:fd:af:95:04:cc:fe:ab:75:dc:2f:cd:54:00:57: a2:4a:4f:f0:5b:ed:7c:16:a8:6d:15:ff:13:6d:35: 3c:02:89:b0:6b:40:78:dc:2d:7d:2d:0d:cb:b9:e3: 4e:70:90:1f:5d:0f:3b:2d:dd:9b:23:ba:05:e5:52: 07:e3:f8:91:52:2a:39:72:1c:5f:67:69:9e:4d:1d: c6:05:ab:dc:c2:5e:f2:fa:a8:10:f0:aa:7b:d4:6e: ba:b8:56:70:de:de:2e:1f:70:57:b1:2c:5c:37:6c: 34:ea:7e:1d:18:86:19:f2:0a:6f:d0:15:1c:1e:54: 42:42:a7:e2:3b:a3:3d:2d:38:56:26:89:3b:92:6b: 14:5d:8b:b3:aa:ab:d5:3a:9a:69:aa:d6:4b:d5:89: 50:a7:fd:08:e5:74:2f:56:71:0a:c7:aa:88:c7:11: f6:b5:3e:fb:1b:d4:4c:c2:33:9b:1d:96:14:ad:54: 20:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DB:6B:89:8B:39:10:C1:F3:32:6F:06:C4:68:5B:F0:D7:EB:9A:A4 X509v3 Authority Key Identifier: keyid:A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/kdtriYs5EMHzMm8GxGhb8NfrmqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.132.0/22 Signature Algorithm: sha256WithRSAEncryption 99:5f:3a:0d:d7:28:f4:fd:3b:93:7d:1b:2c:30:52:e6:12:c3: ed:6f:7f:a1:b5:b7:ac:87:a2:fb:d6:04:df:7c:55:ed:48:d5: b6:99:77:ad:19:5c:0d:b2:49:ee:c3:06:b3:8a:c2:35:e1:b2: 25:26:68:92:d1:02:4d:21:af:79:57:e0:f3:2f:cb:1f:21:5e: f7:35:a4:1a:14:dc:ad:70:07:75:28:6d:08:88:cd:98:75:90: ea:da:85:cb:3a:c2:3f:79:1d:3c:58:c8:09:e5:1b:64:59:86: 1a:dc:39:04:95:2d:6b:9b:6f:81:7a:93:44:18:20:71:b0:f3: 36:3e:cb:21:2b:be:58:aa:5b:db:de:fd:ca:cf:b9:d5:3f:f4: 46:2c:30:2b:68:4d:a1:8a:2a:68:0a:50:18:a9:7f:de:de:18: 79:c1:81:8d:cc:37:82:a5:a2:9e:6c:28:c5:aa:41:98:a4:38: bc:c2:1b:fe:6c:33:5a:72:94:84:e6:72:18:70:4e:4b:1e:f4: ba:5e:98:02:a3:8b:24:35:a0:e3:53:1b:e5:fc:68:01:08:ec: 54:5c:5f:cd:16:ed:5a:a6:04:14:f3:34:2e:1d:a2:e9:4e:b2: e4:07:cb:48:bb:88:26:6a:0b:51:04:74:d6:fb:ae:4a:0b:e0: 2d:18:31:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ycXBXDYTMiTNK2ZO4FRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZWJmNTRkMDI4ZWU0NzY0ZjYyZjc4YWQ4NzFkYmYwMjYy Mjg3ODgwHhcNMjYwMTAyMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWRiNmI4OThiMzkxMGMxZjMzMjZmMDZjNDY4NWJmMGQ3ZWI5YWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFWDu1QPUStsfcHKYgpQnXICARts f1EZDdkCv82z3WGW929iS4AgjcG8uxyuhsilbcgRpyDSsBj2UTpXYkVvsycBw+1j UogvH2zw/a+VBMz+q3XcL81UAFeiSk/wW+18FqhtFf8TbTU8Aomwa0B43C19LQ3L ueNOcJAfXQ87Ld2bI7oF5VIH4/iRUio5chxfZ2meTR3GBavcwl7y+qgQ8Kp71G66 uFZw3t4uH3BXsSxcN2w06n4dGIYZ8gpv0BUcHlRCQqfiO6M9LThWJok7kmsUXYuz qqvVOpppqtZL1YlQp/0I5XQvVnEKx6qIxxH2tT77G9RMwjObHZYUrVQgjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJHba4mLORDB8zJvBsRoW/DX65qkMB8GA1UdIwQY MBaAFKHr9U0CjuR2T2L3ithx2/AmIoeIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2V2MVRRS081SFpQWXZlSzJISGI4Q1lpaDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xYjE3MmEtNjFkMS00MjBjLWEzZGQt NDdhNWJmNWIzMTNkLzEva2R0cmlZczVFTUh6TW04R3hHaGI4TmZybXFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8xYjE3MmEtNjFkMS00MjBjLWEzZGQtNDdhNWJmNWIzMTNk LzEvb2V2MVRRS081SFpQWXZlSzJISGI4Q1lpaDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYmEMA0G CSqGSIb3DQEBCwUAA4IBAQCZXzoN1yj0/TuTfRssMFLmEsPtb3+htbesh6L71gTf fFXtSNW2mXetGVwNsknuwwazisI14bIlJmiS0QJNIa95V+DzL8sfIV73NaQaFNyt cAd1KG0IiM2YdZDq2oXLOsI/eR08WMgJ5RtkWYYa3DkElS1rm2+BepNEGCBxsPM2 PsshK75Yqlvb3v3Kz7nVP/RGLDAraE2hiipoClAYqX/e3hh5wYGNzDeCpaKebCjF qkGYpDi8whv+bDNacpSE5nIYcE5LHvS6XpgCo4skNaDjUxvl/GgBCOxUXF/NFu1a pgQU8zQuHaLpTrLkB8tIu4gmagtRBHTW+65KC+AtGDGE -----END CERTIFICATE-----Generated at Mon Jan 26 14:12:45 2026 by rpki-client