This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/kZ63SuCSKudhTtGH6_pJGkWdSXM.roa File: kZ63SuCSKudhTtGH6_pJGkWdSXM.roa (raw, json) Hash identifier: OQrqf7NPIuBzSyIJdM7aU9Y2d/U+DEvBIbGAvAZyp2o= Subject key identifier: 91:9E:B7:4A:E0:92:2A:E7:61:4E:D1:87:EB:FA:49:1A:45:9D:49:73 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 019B78A2A1BCEFB46E6301BE8C62C3483B69 Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/kZ63SuCSKudhTtGH6_pJGkWdSXM.roa Signing time: Thu 01 Jan 2026 08:18:02 +0000 ROA not before: Thu 01 Jan 2026 08:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202872 IP address blocks: 185.149.128.0/23 maxlen: 23 185.149.130.0/23 maxlen: 23 2a07:6880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a1:bc:ef:b4:6e:63:01:be:8c:62:c3:48:3b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Jan 1 08:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=919eb74ae0922ae7614ed187ebfa491a459d4973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:77:65:ba:b7:68:77:51:8e:3b:96:a8:11: 0e:49:0f:cc:5a:e7:d6:4e:11:b3:64:06:9f:45:22: 05:6a:ac:1f:61:8a:85:3d:86:3a:f2:87:d1:22:2f: 5f:7c:c4:75:1e:08:07:23:5b:de:07:80:b8:14:5f: fc:d6:7f:f4:47:e6:9f:9a:3b:75:bc:f8:e3:06:2d: 2a:4f:9e:f2:cf:d9:9b:3f:02:8f:c9:09:a1:34:68: 47:15:bc:b4:5e:14:ac:d2:e8:96:c4:5d:b4:3c:f9: e1:60:6d:fa:57:ae:78:65:fd:40:f1:99:1a:93:ef: e5:0e:aa:f6:8f:c6:f2:57:3f:1c:6a:00:fe:cf:3d: c2:e6:ef:ed:ab:cc:2b:24:c1:83:76:04:97:9e:4f: 1f:43:6c:80:b0:a2:a2:66:1c:a0:ea:d9:3a:c2:b4: c9:0d:91:a3:ee:61:86:ad:97:50:31:d4:bf:11:f5: 8f:08:71:8e:28:12:36:78:84:5e:6e:38:80:39:7e: 0f:ba:db:6d:0f:8f:ff:93:c0:78:da:b1:4b:69:20: ae:84:e0:e0:a6:9e:8a:70:60:15:ee:a0:66:0e:b0: b6:4b:45:d8:38:a2:a3:f6:df:a7:8e:25:ff:a2:5f: 43:c8:0e:92:c8:27:b6:e4:c4:6a:ff:0f:94:c7:1c: b2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9E:B7:4A:E0:92:2A:E7:61:4E:D1:87:EB:FA:49:1A:45:9D:49:73 X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/kZ63SuCSKudhTtGH6_pJGkWdSXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.128.0/22 IPv6: 2a07:6880::/32 Signature Algorithm: sha256WithRSAEncryption bb:e4:6e:d4:44:27:c3:de:7a:44:46:f4:19:9d:82:33:ff:98: 34:23:7c:e8:33:57:39:10:92:e5:03:72:0a:68:b8:38:47:19: f1:91:f4:80:0a:9d:f5:90:d4:2e:6b:39:27:46:2a:16:8e:7d: 28:3e:0b:82:80:46:69:ca:ca:8d:87:fb:05:94:1f:84:05:dd: 65:b5:7e:c6:c6:0a:a4:0a:1d:1a:ac:9b:e3:c4:16:a4:8f:9c: 47:c9:65:c2:14:af:a2:b0:05:bf:2f:de:87:e9:c3:61:07:3e: 3e:27:c9:ae:07:4d:7d:1a:2e:64:f1:e9:b3:d7:0c:b7:09:b1: bb:bc:c3:74:1b:2a:5a:41:f4:3a:ea:a5:46:3b:f4:77:82:b2: f2:a1:2c:6b:39:2c:14:22:78:1f:90:55:fc:45:d8:e8:86:ab: eb:a2:01:2e:4b:4b:6d:8a:da:18:69:81:9d:34:75:2b:cd:91: 7e:19:4c:19:a8:e3:ee:13:a6:8f:9f:af:a4:55:d5:1e:40:9f: 79:c4:72:06:67:0c:d0:33:c9:3d:94:be:ce:34:c2:1f:0d:71: b3:77:3c:6f:6a:40:25:a9:54:ef:a2:46:85:7a:be:84:f2:ce: 77:d7:97:b8:94:35:5d:dd:da:ed:6a:8f:20:d2:da:6f:a6:40: aa:be:d0:eb -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4oqG877RuYwG+jGLDSDtpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjYwMTAxMDgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTllYjc0YWUwOTIyYWU3NjE0ZWQxODdlYmZhNDkxYTQ1OWQ0OTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob13Zbq3aHdRjjuWqBEOSQ/MWufW ThGzZAafRSIFaqwfYYqFPYY68ofRIi9ffMR1HggHI1veB4C4FF/81n/0R+afmjt1 vPjjBi0qT57yz9mbPwKPyQmhNGhHFby0XhSs0uiWxF20PPnhYG36V654Zf1A8Zka k+/lDqr2j8byVz8cagD+zz3C5u/tq8wrJMGDdgSXnk8fQ2yAsKKiZhyg6tk6wrTJ DZGj7mGGrZdQMdS/EfWPCHGOKBI2eIRebjiAOX4PutttD4//k8B42rFLaSCuhODg pp6KcGAV7qBmDrC2S0XYOKKj9t+njiX/ol9DyA6SyCe25MRq/w+UxxyyVQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJGet0rgkirnYU7Rh+v6SRpFnUlzMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEva1o2M1N1Q1NLdWRoVHRHSDZfcEpHa1dkU1hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZWAMA0E AgACMAcDBQAqB2iAMA0GCSqGSIb3DQEBCwUAA4IBAQC75G7URCfD3npERvQZnYIz /5g0I3zoM1c5EJLlA3IKaLg4RxnxkfSACp31kNQuazknRioWjn0oPguCgEZpysqN h/sFlB+EBd1ltX7GxgqkCh0arJvjxBakj5xHyWXCFK+isAW/L96H6cNhBz4+J8mu B019Gi5k8emz1wy3CbG7vMN0GypaQfQ66qVGO/R3grLyoSxrOSwUIngfkFX8Rdjo hqvrogEuS0ttitoYaYGdNHUrzZF+GUwZqOPuE6aPn6+kVdUeQJ95xHIGZwzQM8k9 lL7ONMIfDXGzdzxvakAlqVTvokaFer6E8s5315e4lDVd3drtao8g0tpvpkCqvtDr -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:20 2026 by rpki-client