This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/Rh1jP8TT0D5DQyewHt3WNVRetYg.roa File: Rh1jP8TT0D5DQyewHt3WNVRetYg.roa (raw, json) Hash identifier: +Z1++BSabnl+/JfrPmXmRibZf7uuXCCwxkF76/QL4Zw= Subject key identifier: 46:1D:63:3F:C4:D3:D0:3E:43:43:27:B0:1E:DD:D6:35:54:5E:B5:88 Certificate issuer: /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd Certificate serial: 019B7D5C192D6BADCEEA4F6A85BA86D32BB1 Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/Rh1jP8TT0D5DQyewHt3WNVRetYg.roa Signing time: Fri 02 Jan 2026 06:19:06 +0000 ROA not before: Fri 02 Jan 2026 06:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205543 IP address blocks: 185.214.236.0/22 maxlen: 24 2a0b:af40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:19:2d:6b:ad:ce:ea:4f:6a:85:ba:86:d3:2b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd Validity Not Before: Jan 2 06:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=461d633fc4d3d03e434327b01eddd635545eb588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c9:53:0e:d3:f0:52:58:db:7f:35:ed:69:4d: 29:dd:49:93:eb:3f:a2:05:c7:42:2f:45:bd:f0:7b: f3:1a:84:32:1e:00:1e:95:43:35:1e:34:f7:2a:ee: c9:7c:43:d4:a1:60:1b:e5:10:30:dd:ee:9b:48:f9: 1e:19:12:cd:d8:be:e7:0f:15:57:4f:53:99:b8:7f: ea:93:fc:73:e4:2d:02:3f:6c:1f:92:80:fe:b2:55: dd:09:a4:b2:41:bb:fa:38:38:06:96:0e:8c:12:a2: 23:47:6b:f1:9a:e8:be:81:93:50:bd:0e:5a:47:f5: 42:7b:23:03:67:0c:f2:73:40:a6:09:bd:a3:6b:6a: 2e:c1:cb:c9:bb:c3:b0:cd:ee:82:3a:52:ba:07:5a: e7:e7:47:d5:e3:89:90:36:0f:e7:ec:d5:15:32:5a: cb:87:f2:61:95:0c:d7:92:0c:b7:31:bd:3b:b2:5f: 83:ab:d5:43:f6:48:b0:67:5d:a0:78:9b:c5:12:3f: 90:5c:56:a9:8f:df:ee:5d:c2:6b:7e:76:67:12:f8: d1:84:fb:e5:aa:9d:56:1d:45:08:b0:f1:82:04:9f: 87:2c:ff:28:8d:0b:86:1a:a3:d8:a7:0d:53:70:65: 26:ff:72:34:95:ba:d4:44:f0:99:71:42:25:f5:86: 65:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1D:63:3F:C4:D3:D0:3E:43:43:27:B0:1E:DD:D6:35:54:5E:B5:88 X509v3 Authority Key Identifier: keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/Rh1jP8TT0D5DQyewHt3WNVRetYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.236.0/22 IPv6: 2a0b:af40::/29 Signature Algorithm: sha256WithRSAEncryption 4d:e7:cd:57:23:53:dc:c6:49:38:c0:f5:a7:71:d3:57:18:df: 14:b3:62:cd:e7:f0:07:e1:df:f6:ea:32:58:9c:28:bb:3d:e0: 28:e5:8c:1f:1f:a1:98:ac:d1:5c:4e:d5:7c:79:37:dc:c7:fc: 61:e7:2a:89:57:6f:3b:18:57:9f:c1:4f:30:7e:29:72:8e:5c: b6:ab:4d:5c:d9:11:35:57:d2:3f:e4:79:10:bf:1a:b5:49:26: b2:16:0d:13:c0:f7:d8:ef:d2:b0:60:9f:9c:57:95:a3:fe:82: 01:23:8a:60:51:89:d6:e1:f1:c7:50:99:6b:ee:6d:a1:18:eb: a7:32:16:0d:ba:fe:a5:d8:06:00:cc:9e:7e:67:db:82:ea:b2: e4:30:b9:d6:ef:3b:dd:73:40:09:ee:a7:14:22:13:d0:40:9a: de:8f:55:1b:b0:62:dc:3c:bd:38:38:c4:78:50:a7:1f:f1:50: 87:e2:7c:67:06:60:e1:fc:1f:d3:64:87:80:05:a5:e4:94:fb: 33:5d:5c:20:c2:42:2d:7a:d6:f5:87:bf:ca:b7:41:26:fa:5e: 4c:6b:ee:a8:5b:c9:7c:68:70:a5:79:14:00:dc:59:72:53:09: 9a:18:d9:88:f7:c0:ea:59:22:ad:9e:e4:d7:18:e4:53:5c:e0: c2:4e:6c:9c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XBkta63O6k9qhbqG0yuxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOGM1NzNjMmQ4M2M3ZDhmZDJhM2NmOWE3ZjUzNmY5Mjky NWEzYmQwHhcNMjYwMTAyMDYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjFkNjMzZmM0ZDNkMDNlNDM0MzI3YjAxZWRkZDYzNTU0NWViNTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8lTDtPwUljbfzXtaU0p3UmT6z+i BcdCL0W98HvzGoQyHgAelUM1HjT3Ku7JfEPUoWAb5RAw3e6bSPkeGRLN2L7nDxVX T1OZuH/qk/xz5C0CP2wfkoD+slXdCaSyQbv6ODgGlg6MEqIjR2vxmui+gZNQvQ5a R/VCeyMDZwzyc0CmCb2ja2ouwcvJu8Owze6COlK6B1rn50fV44mQNg/n7NUVMlrL h/JhlQzXkgy3Mb07sl+Dq9VD9kiwZ12geJvFEj+QXFapj9/uXcJrfnZnEvjRhPvl qp1WHUUIsPGCBJ+HLP8ojQuGGqPYpw1TcGUm/3I0lbrURPCZcUIl9YZlMQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEYdYz/E09A+Q0MnsB7d1jVUXrWIMB8GA1UdIwQY MBaAFJCMVzwtg8fY/So8+af1NvkpJaO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0l4WFBDMkR4OWo5S2p6NXBfVTItU2tsbzcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84M2M0MTYtN2Q5ZC00NDdhLWFkZDEt NGU4NWJmZDdkMDU4LzEvUmgxalA4VFQwRDVEUXlld0h0M1dOVlJldFlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84M2M0MTYtN2Q5ZC00NDdhLWFkZDEtNGU4NWJmZDdkMDU4 LzEva0l4WFBDMkR4OWo5S2p6NXBfVTItU2tsbzcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudbsMA0E AgACMAcDBQMqC69AMA0GCSqGSIb3DQEBCwUAA4IBAQBN581XI1Pcxkk4wPWncdNX GN8Us2LN5/AH4d/26jJYnCi7PeAo5YwfH6GYrNFcTtV8eTfcx/xh5yqJV287GFef wU8wfilyjly2q01c2RE1V9I/5HkQvxq1SSayFg0TwPfY79KwYJ+cV5Wj/oIBI4pg UYnW4fHHUJlr7m2hGOunMhYNuv6l2AYAzJ5+Z9uC6rLkMLnW7zvdc0AJ7qcUIhPQ QJrej1UbsGLcPL04OMR4UKcf8VCH4nxnBmDh/B/TZIeABaXklPszXVwgwkItetb1 h7/Kt0Em+l5Ma+6oW8l8aHCleRQA3FlyUwmaGNmI98DqWSKtnuTXGORTXODCTmyc -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:31 2026 by rpki-client