This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/kKS6KloPbQfk_MqDgcm0FtJjzs0.roa File: kKS6KloPbQfk_MqDgcm0FtJjzs0.roa (raw, json) Hash identifier: 6OLn7a+dahEkyNoliy/foyipMpplcVkPCSuLTDS5rdE= Subject key identifier: 90:A4:BA:2A:5A:0F:6D:07:E4:FC:CA:83:81:C9:B4:16:D2:63:CE:CD Certificate issuer: /CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87 Certificate serial: 019B8D75F975DB4F03DB448232D06EBBA302 Authority key identifier: 25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/kKS6KloPbQfk_MqDgcm0FtJjzs0.roa Signing time: Mon 05 Jan 2026 09:21:17 +0000 ROA not before: Mon 05 Jan 2026 09:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209442 IP address blocks: 185.221.252.0/22 maxlen: 22 185.221.252.0/24 maxlen: 24 185.221.253.0/24 maxlen: 24 185.221.254.0/24 maxlen: 24 185.221.255.0/24 maxlen: 24 2a04:a707::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:75:f9:75:db:4f:03:db:44:82:32:d0:6e:bb:a3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87 Validity Not Before: Jan 5 09:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90a4ba2a5a0f6d07e4fcca8381c9b416d263cecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3d:ab:ed:72:93:13:e1:02:29:e0:31:95:8c: f4:1d:80:58:31:1e:c8:dc:ef:57:87:83:f9:24:d8: c5:41:1c:3d:18:4e:a5:a6:f9:24:13:3a:37:b7:d8: 06:ad:b3:b9:a4:6b:a3:7f:1a:b3:ec:86:cc:0c:33: 0c:ad:d9:e7:38:6b:4c:e6:ed:5e:b8:11:ee:c9:d8: e7:51:f0:a0:be:7a:b5:18:29:4a:ec:e2:05:29:b4: 85:7c:34:8b:5f:9a:93:da:ff:8f:48:da:85:63:d7: fa:18:de:cd:f7:28:e3:e7:16:c0:98:5b:2a:e9:8c: 0f:d2:55:39:d7:ce:32:cb:46:86:ac:9a:55:90:63: 3e:c0:2c:46:75:a1:dd:49:77:9c:ee:d3:97:bc:8a: 71:ab:fc:d6:4f:09:2a:16:c7:e6:09:b0:44:9b:6e: 07:2a:91:43:76:db:b4:0f:d3:4f:52:f3:34:7f:1f: 36:70:67:29:2f:ea:30:ab:d5:5e:26:be:9b:3a:dc: d1:e1:df:10:be:67:b8:99:b0:86:37:4d:80:6c:7e: 89:a8:2a:c6:e7:30:3b:35:d2:b0:5d:e9:11:a6:3e: 28:0c:3a:d0:4a:cb:dd:e1:9a:a4:c3:57:c1:4c:1c: 15:1e:2f:f6:ce:25:c2:ab:7f:c7:17:3d:b7:53:dd: 27:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A4:BA:2A:5A:0F:6D:07:E4:FC:CA:83:81:C9:B4:16:D2:63:CE:CD X509v3 Authority Key Identifier: keyid:25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/kKS6KloPbQfk_MqDgcm0FtJjzs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.252.0/22 IPv6: 2a04:a707::/32 Signature Algorithm: sha256WithRSAEncryption 0e:d6:77:a2:50:c6:60:db:57:e0:45:e0:dc:58:75:a5:92:81: 7a:55:3d:78:51:9b:3f:83:07:79:3f:6c:8d:4f:d2:ea:9d:56: ca:11:c7:0a:e1:11:df:2d:d5:d2:97:8f:d1:1a:42:5b:43:5c: 50:ce:24:7a:03:a3:46:f5:75:6a:c9:73:dd:04:e2:51:33:77: 2b:ba:4c:f3:77:5c:65:da:65:08:1b:4b:b6:aa:cd:d4:20:dd: c8:b7:42:25:d4:90:48:d6:fe:56:fe:0a:b4:65:5d:71:d5:ca: a1:16:4d:de:33:25:5c:81:e3:25:9a:aa:2c:b4:0b:ae:10:97: 08:1c:fa:bf:1e:85:e8:ee:d0:64:6a:95:26:a7:a2:0e:47:94: 04:f8:02:3e:56:5c:6e:58:61:9f:26:07:2d:9f:46:32:ca:70: 89:32:d0:10:6b:85:12:30:70:04:82:57:0e:03:89:49:1c:bf: e7:a7:e3:47:8b:0c:58:ac:82:e5:d0:cf:cf:64:24:f2:da:29: 27:4a:9e:5f:d4:ca:db:7d:6b:f5:d4:82:7a:a3:15:f9:7d:04: a8:9b:99:1d:16:74:35:f3:b0:4e:fe:3f:83:7b:65:09:e2:c0: 0b:c0:f6:62:1f:eb:66:74:29:8e:7a:2f:2f:a5:ab:34:91:58: 47:26:be:bd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZuNdfl1208D20SCMtBuu6MCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YzE1ZDhlYzQ3YTJiMGUyMDQzYTc4MjJkYjY3YWMyMzEx N2NjODcwHhcNMjYwMTA1MDkyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGE0YmEyYTVhMGY2ZDA3ZTRmY2NhODM4MWM5YjQxNmQyNjNjZWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z2r7XKTE+ECKeAxlYz0HYBYMR7I 3O9Xh4P5JNjFQRw9GE6lpvkkEzo3t9gGrbO5pGujfxqz7IbMDDMMrdnnOGtM5u1e uBHuydjnUfCgvnq1GClK7OIFKbSFfDSLX5qT2v+PSNqFY9f6GN7N9yjj5xbAmFsq 6YwP0lU5184yy0aGrJpVkGM+wCxGdaHdSXec7tOXvIpxq/zWTwkqFsfmCbBEm24H KpFDdtu0D9NPUvM0fx82cGcpL+owq9VeJr6bOtzR4d8Qvme4mbCGN02AbH6JqCrG 5zA7NdKwXekRpj4oDDrQSsvd4Zqkw1fBTBwVHi/2ziXCq3/HFz23U90nQQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJCkuipaD20H5PzKg4HJtBbSY87NMB8GA1UdIwQY MBaAFCXBXY7EeisOIEOngi22esIxF8yHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmNGZGpzUjZLdzRnUTZlQ0xiWjZ3akVYekljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kN2MyZTgtNGYyNS00MDMwLWExYzYt NDNlMmIxNTk2NTdkLzEva0tTNktsb1BiUWZrX01xRGdjbTBGdEpqenMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kN2MyZTgtNGYyNS00MDMwLWExYzYtNDNlMmIxNTk2NTdk LzEvSmNGZGpzUjZLdzRnUTZlQ0xiWjZ3akVYekljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCud38MA0E AgACMAcDBQAqBKcHMA0GCSqGSIb3DQEBCwUAA4IBAQAO1neiUMZg21fgReDcWHWl koF6VT14UZs/gwd5P2yNT9LqnVbKEccK4RHfLdXSl4/RGkJbQ1xQziR6A6NG9XVq yXPdBOJRM3crukzzd1xl2mUIG0u2qs3UIN3It0Il1JBI1v5W/gq0ZV1x1cqhFk3e MyVcgeMlmqostAuuEJcIHPq/HoXo7tBkapUmp6IOR5QE+AI+VlxuWGGfJgctn0Yy ynCJMtAQa4USMHAEglcOA4lJHL/np+NHiwxYrILl0M/PZCTy2iknSp5f1MrbfWv1 1IJ6oxX5fQSom5kdFnQ187BO/j+De2UJ4sALwPZiH+tmdCmOei8vpas0kVhHJr69 -----END CERTIFICATE-----Generated at Mon Feb 2 08:01:08 2026 by rpki-client