This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/kUCjBswIGYWVGbpprI2jmZ708Qk.roa File: kUCjBswIGYWVGbpprI2jmZ708Qk.roa (raw, json) Hash identifier: 1c9cExXpL0YEg3NqkYEUwPG7ybPwLJ10//KgRqbBmLk= Subject key identifier: 91:40:A3:06:CC:08:19:85:95:19:BA:69:AC:8D:A3:99:9E:F4:F1:09 Certificate issuer: /CN=8846405bfcc78066c5192cb3ebe72c443c557288 Certificate serial: 019B7EA4DC5C6E6673DCAF97565FA5C214F7 Authority key identifier: 88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/kUCjBswIGYWVGbpprI2jmZ708Qk.roa Signing time: Fri 02 Jan 2026 12:18:12 +0000 ROA not before: Fri 02 Jan 2026 12:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205644 IP address blocks: 185.68.182.0/24 maxlen: 24 2a13:8b00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:dc:5c:6e:66:73:dc:af:97:56:5f:a5:c2:14:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8846405bfcc78066c5192cb3ebe72c443c557288 Validity Not Before: Jan 2 12:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9140a306cc0819859519ba69ac8da3999ef4f109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:ac:d0:11:12:fe:9e:dd:22:86:ba:58:7a: 51:69:76:ed:a9:ed:42:ef:14:97:00:40:35:91:07: d0:bd:68:90:b2:66:95:1a:d4:3a:45:22:9c:98:d8: 03:32:98:51:1c:4f:45:e0:73:69:31:71:3a:76:b1: bd:a6:fd:09:84:34:ea:a7:53:69:85:99:70:26:1d: b0:15:58:56:d6:22:d4:ce:ee:91:e3:db:49:67:1a: 76:37:f4:9f:f4:2d:cf:f5:24:3d:4a:90:0d:91:83: 0c:37:8b:d9:1a:e3:8f:da:00:68:62:24:11:70:d1: 2d:4b:7f:43:06:29:5d:0a:e9:36:44:39:37:e9:41: 03:82:fc:f3:7c:50:38:7e:49:b4:a1:10:17:84:7a: 31:65:6b:5c:2b:a5:7c:07:16:bb:9c:8c:f6:a4:bb: f5:95:93:6a:39:10:01:fd:4b:fb:f4:ed:ea:d7:14: 4b:e9:6c:7e:f9:fb:ba:cd:1e:e5:00:ce:a2:9e:73: 93:ef:88:c4:50:a2:ba:a0:f8:e8:61:d3:9d:9e:6a: 16:c7:aa:26:1a:12:47:2a:5d:f0:57:d5:26:28:e2: bf:6f:f8:64:eb:1a:52:b3:57:a3:00:82:96:45:c3: 42:fd:cc:6e:d2:8e:a4:9a:cf:e6:6d:b8:b4:62:ba: 6e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:40:A3:06:CC:08:19:85:95:19:BA:69:AC:8D:A3:99:9E:F4:F1:09 X509v3 Authority Key Identifier: keyid:88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/kUCjBswIGYWVGbpprI2jmZ708Qk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.182.0/24 IPv6: 2a13:8b00::/29 Signature Algorithm: sha256WithRSAEncryption 08:c4:f6:64:40:6b:64:9c:92:f4:90:4b:34:24:8c:69:29:b4: c8:a9:9a:ac:80:2e:ab:77:83:19:73:d4:85:aa:7f:d0:05:33: ee:4e:c1:d7:2f:8a:62:9a:4c:d1:a3:41:c2:6d:86:9f:0e:bf: 94:08:fd:da:9e:ac:f9:af:97:17:29:91:9c:09:7d:c8:eb:66: 64:70:cb:ea:bc:27:7d:29:c4:98:a9:31:d4:25:b7:bf:ac:a1: 80:c3:00:fb:a2:13:50:12:57:a5:a4:61:8e:de:ea:f3:a4:0d: 75:92:47:50:c4:b2:7a:7e:b1:ec:be:ee:a8:ea:b2:04:29:bd: 87:2b:c7:bf:8d:f5:98:16:b5:92:e6:a4:1e:0a:5c:03:bb:12: 1e:b2:15:33:f3:7c:b8:94:76:24:bb:35:69:e9:d4:da:3e:19: ea:ee:0a:f5:cb:e3:39:a0:a8:80:a0:23:77:d4:e8:4e:27:e4: d6:57:97:6a:4f:82:51:69:20:d9:83:c7:66:84:65:21:73:6d: 32:72:94:65:90:4f:83:f7:b0:49:d6:9c:8a:49:34:75:35:76: 40:4a:c4:e4:51:63:dc:61:c6:51:8a:44:5a:ca:52:e6:55:e7: c0:f1:f0:f2:00:29:13:62:e0:16:86:3c:7e:c2:b1:ed:42:09: 35:ad:bc:3e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pNxcbmZz3K+XVl+lwhT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NDY0MDViZmNjNzgwNjZjNTE5MmNiM2ViZTcyYzQ0M2M1 NTcyODgwHhcNMjYwMTAyMTIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTQwYTMwNmNjMDgxOTg1OTUxOWJhNjlhYzhkYTM5OTllZjRmMTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteqs0BES/p7dIoa6WHpRaXbtqe1C 7xSXAEA1kQfQvWiQsmaVGtQ6RSKcmNgDMphRHE9F4HNpMXE6drG9pv0JhDTqp1Np hZlwJh2wFVhW1iLUzu6R49tJZxp2N/Sf9C3P9SQ9SpANkYMMN4vZGuOP2gBoYiQR cNEtS39DBildCuk2RDk36UEDgvzzfFA4fkm0oRAXhHoxZWtcK6V8Bxa7nIz2pLv1 lZNqORAB/Uv79O3q1xRL6Wx++fu6zR7lAM6innOT74jEUKK6oPjoYdOdnmoWx6om GhJHKl3wV9UmKOK/b/hk6xpSs1ejAIKWRcNC/cxu0o6kms/mbbi0YrpufQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJFAowbMCBmFlRm6aayNo5me9PEJMB8GA1UdIwQY MBaAFIhGQFv8x4BmxRkss+vnLEQ8VXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUVaQVdfekhnR2JGR1N5ejYtY3NSRHhWY29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MDczYmEtODhlMi00YTQ1LTlkYWYt NWEwYTFkMGFjNThjLzEva1VDakJzd0lHWVdWR2JwcHJJMmptWjcwOFFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy85MDczYmEtODhlMi00YTQ1LTlkYWYtNWEwYTFkMGFjNThj LzEvaUVaQVdfekhnR2JGR1N5ejYtY3NSRHhWY29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuUS2MA0E AgACMAcDBQMqE4sAMA0GCSqGSIb3DQEBCwUAA4IBAQAIxPZkQGtknJL0kEs0JIxp KbTIqZqsgC6rd4MZc9SFqn/QBTPuTsHXL4pimkzRo0HCbYafDr+UCP3anqz5r5cX KZGcCX3I62ZkcMvqvCd9KcSYqTHUJbe/rKGAwwD7ohNQElelpGGO3urzpA11kkdQ xLJ6frHsvu6o6rIEKb2HK8e/jfWYFrWS5qQeClwDuxIeshUz83y4lHYkuzVp6dTa Phnq7gr1y+M5oKiAoCN31OhOJ+TWV5dqT4JRaSDZg8dmhGUhc20ycpRlkE+D97BJ 1pyKSTR1NXZASsTkUWPcYcZRikRaylLmVefA8fDyACkTYuAWhjx+wrHtQgk1rbw+ -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:19 2026 by rpki-client