This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/2KduMUYel0BWDX-gLCZai2W_4G4.roa File: 2KduMUYel0BWDX-gLCZai2W_4G4.roa (raw, json) Hash identifier: kUlLZqX6QEgDk0fVRbwqPlwQxkUUYksF2ARjRgj1uG4= Subject key identifier: D8:A7:6E:31:46:1E:97:40:56:0D:7F:A0:2C:26:5A:8B:65:BF:E0:6E Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa Certificate serial: 019B77C6925CF39009614AC9851442EA61D5 Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/2KduMUYel0BWDX-gLCZai2W_4G4.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 185.233.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:92:5c:f3:90:09:61:4a:c9:85:14:42:ea:61:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8a76e31461e9740560d7fa02c265a8b65bfe06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f7:9e:68:69:e0:22:5d:99:09:e9:c5:d7:ee: ea:1f:56:9b:c5:74:d8:84:13:67:76:a1:04:27:05: 5e:3d:9d:dc:52:5c:09:81:f0:ac:5a:a5:a6:97:e3: e2:e8:27:4c:ac:3c:9a:83:a0:41:01:ad:d4:0b:e3: cc:bc:de:9a:67:5d:ee:0c:8f:55:f5:39:ae:5c:37: 02:2d:02:25:ca:71:98:bf:98:fc:2c:1d:ed:8d:1a: a4:6a:95:f5:4d:3f:fb:35:f9:d0:f5:72:c3:50:0b: fc:7d:d7:9f:1a:19:82:34:53:92:fb:92:59:f3:d7: 38:84:d1:34:c4:88:38:06:4f:45:87:e4:55:22:70: 7a:32:97:c9:96:86:51:5f:f0:12:79:b6:93:04:e0: 8e:ab:ce:df:c6:46:10:19:97:2f:22:60:14:f6:07: 26:b3:93:be:a8:88:10:20:57:3d:ff:c9:a0:c9:c7: 2d:28:c2:f2:39:bb:59:c8:a5:76:70:9c:1b:b5:55: a3:1e:57:52:83:ed:b6:8c:e3:00:c8:f9:e1:06:3d: c7:ca:d2:05:e1:54:c7:65:c5:f4:d3:be:3c:15:30: 7c:69:20:60:b9:11:b5:10:85:f1:2b:8a:6a:9c:3d: e4:e0:0a:22:03:c9:a8:d5:f5:57:49:9b:3a:82:ec: d2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A7:6E:31:46:1E:97:40:56:0D:7F:A0:2C:26:5A:8B:65:BF:E0:6E X509v3 Authority Key Identifier: keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/2KduMUYel0BWDX-gLCZai2W_4G4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.165.0/24 Signature Algorithm: sha256WithRSAEncryption 91:3c:97:e1:c6:9b:63:6b:ba:ef:e4:67:5a:c7:2a:c0:18:c9: 17:00:71:bb:25:88:ce:e5:6f:59:d6:db:06:f4:e0:e8:43:fd: 60:46:95:7e:a9:38:f5:2a:fa:a6:71:41:b8:58:ce:30:3c:ce: 4f:dc:5d:a8:e6:9e:1e:f8:7e:55:1d:ac:4f:d8:7f:e9:f1:19: dd:e9:4e:12:04:52:af:9e:7f:37:1b:8b:bf:7f:24:78:fb:0d: 52:b3:50:22:d6:9b:97:14:45:15:ea:79:2a:ec:95:41:b7:1c: 5e:16:db:76:83:43:f8:01:16:3e:e5:67:b4:c1:71:30:ce:42: b8:eb:5e:fb:36:e4:e8:eb:96:ea:79:49:44:ba:a7:13:ca:7d: 3c:5b:22:1a:54:e2:e0:f1:2a:bb:6d:e8:af:d1:93:6b:e1:f0: ae:1b:b8:9a:d0:a8:2f:1c:00:77:02:97:89:67:81:9d:8a:6d: 2b:35:83:bc:fd:6d:d8:2d:d3:bf:11:77:5f:47:bc:48:39:51: 84:09:64:0f:b6:0a:d3:35:d2:dc:40:5c:30:23:7d:9a:4d:a3: 2e:73:1a:aa:ca:b5:62:47:2d:96:e1:80:28:4d:5c:4e:a5:d9: f9:9f:0d:f7:03:3c:b6:9f:76:6a:1d:09:1a:58:a7:8e:da:5b: 4c:43:ef:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpJc85AJYUrJhRRC6mHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl NWFlYWEwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGE3NmUzMTQ2MWU5NzQwNTYwZDdmYTAyYzI2NWE4YjY1YmZlMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPeeaGngIl2ZCenF1+7qH1abxXTY hBNndqEEJwVePZ3cUlwJgfCsWqWml+Pi6CdMrDyag6BBAa3UC+PMvN6aZ13uDI9V 9TmuXDcCLQIlynGYv5j8LB3tjRqkapX1TT/7NfnQ9XLDUAv8fdefGhmCNFOS+5JZ 89c4hNE0xIg4Bk9Fh+RVInB6MpfJloZRX/ASebaTBOCOq87fxkYQGZcvImAU9gcm s5O+qIgQIFc9/8mgycctKMLyObtZyKV2cJwbtVWjHldSg+22jOMAyPnhBj3HytIF 4VTHZcX00748FTB8aSBguRG1EIXxK4pqnD3k4AoiA8mo1fVXSZs6guzSLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNinbjFGHpdAVg1/oCwmWotlv+BuMB8GA1UdIwQY MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt MzRlNGUwNjc5MzMzLzEvMktkdU1VWWVsMEJXRFgtZ0xDWmFpMldfNEc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuemlMA0G CSqGSIb3DQEBCwUAA4IBAQCRPJfhxptja7rv5GdaxyrAGMkXAHG7JYjO5W9Z1tsG 9ODoQ/1gRpV+qTj1KvqmcUG4WM4wPM5P3F2o5p4e+H5VHaxP2H/p8Rnd6U4SBFKv nn83G4u/fyR4+w1Ss1Ai1puXFEUV6nkq7JVBtxxeFtt2g0P4ARY+5We0wXEwzkK4 6177NuTo65bqeUlEuqcTyn08WyIaVOLg8Sq7beiv0ZNr4fCuG7ia0KgvHAB3ApeJ Z4Gdim0rNYO8/W3YLdO/EXdfR7xIOVGECWQPtgrTNdLcQFwwI32aTaMucxqqyrVi Ry2W4YAoTVxOpdn5nw33Azy2n3ZqHQkaWKeO2ltMQ++e -----END CERTIFICATE-----Generated at Mon Jan 19 10:37:04 2026 by rpki-client