This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/ku1P8o5rq2UWzSBP5BqJGle8jJY.roa File: ku1P8o5rq2UWzSBP5BqJGle8jJY.roa (raw, json) Hash identifier: og9Xi90Vpv7B2cA94MtmnptXF8svnEEvwmcGsCW9qAg= Subject key identifier: 92:ED:4F:F2:8E:6B:AB:65:16:CD:20:4F:E4:1A:89:1A:57:BC:8C:96 Certificate issuer: /CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19 Certificate serial: 019B7C801C392C170011882B362861D0DC5B Authority key identifier: 85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/ku1P8o5rq2UWzSBP5BqJGle8jJY.roa Signing time: Fri 02 Jan 2026 02:18:49 +0000 ROA not before: Fri 02 Jan 2026 02:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212638 IP address blocks: 185.214.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1c:39:2c:17:00:11:88:2b:36:28:61:d0:dc:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19 Validity Not Before: Jan 2 02:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92ed4ff28e6bab6516cd204fe41a891a57bc8c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:21:08:59:8d:92:11:f5:22:f0:8f:10:06:5e: 33:7a:48:ef:fc:df:bc:49:a6:62:e0:42:bd:14:db: 79:c0:28:2d:27:fd:51:e7:95:e7:ad:fa:02:47:26: 74:1a:b5:81:4c:37:0a:35:dc:7d:a1:ee:62:ea:c9: 28:54:6d:5f:db:a1:89:99:e0:ea:20:af:59:39:5c: 3c:5e:8f:3b:f8:82:01:d3:c9:66:61:e1:a4:96:36: 5a:16:b4:e8:22:fb:db:4b:04:e1:94:1f:d5:18:5c: ed:76:56:a9:a3:b6:9f:e8:a7:03:ca:7f:fc:cb:5d: 25:19:90:ff:d0:46:22:5b:17:61:a8:c7:11:ba:ed: fc:9d:4e:23:94:9c:25:8a:32:3d:55:e1:59:7e:b7: 76:8c:64:f9:5c:c9:e2:1d:a6:a2:bf:a4:a0:cc:91: 9a:0b:04:eb:55:9a:dd:48:25:e2:a4:6e:c1:4c:50: 8c:a7:ad:8a:09:d3:29:c5:62:74:d9:74:43:70:cb: 2b:7f:11:46:ca:b0:ae:05:34:ce:1e:11:62:74:79: ba:5c:cb:e1:ae:a7:fe:16:72:72:06:c6:c1:4d:f6: ec:c6:17:9e:57:59:26:ba:a8:da:bf:72:0b:0e:9c: f7:1f:7e:d3:c7:b2:5e:22:2e:9e:2b:71:a5:83:5a: de:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:ED:4F:F2:8E:6B:AB:65:16:CD:20:4F:E4:1A:89:1A:57:BC:8C:96 X509v3 Authority Key Identifier: keyid:85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/ku1P8o5rq2UWzSBP5BqJGle8jJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.43.0/24 Signature Algorithm: sha256WithRSAEncryption 90:d9:07:b7:c6:3b:47:b4:09:43:a9:8c:c2:67:09:1a:31:34: 55:24:87:05:e0:0d:0e:ed:50:7e:8c:9d:b8:8b:2d:ba:8c:28: 3c:80:36:7d:24:69:59:60:1d:41:9e:3e:c1:51:84:e3:2a:7c: 24:d7:fd:ad:44:af:3e:c9:39:7a:36:d4:f4:7c:db:e0:6c:aa: 71:71:17:85:69:65:a4:b6:d8:48:66:bc:34:28:44:7a:fe:35: 19:15:60:5f:f2:35:88:ee:be:29:f0:b6:48:30:60:b8:f0:f2: 9d:f4:f0:04:c8:a3:6b:2b:b6:df:34:bb:0e:45:98:9a:ed:70: 32:70:c9:79:4b:44:bd:fd:f3:e9:60:bc:bf:24:0d:b1:c9:09: 33:16:25:ec:e0:a2:95:6d:be:4f:59:0b:e1:12:a6:89:fb:c8: 3b:ba:4c:12:84:c9:a9:4a:b4:94:4f:3c:ed:e0:50:d3:48:1d: d9:fd:aa:bd:a2:8c:28:0f:02:17:b3:eb:84:5d:51:95:bf:db: 56:8e:b3:36:55:65:69:b6:39:b6:d4:a3:e5:7a:89:d2:ae:62: 22:52:fc:c2:33:24:84:f0:7e:95:3e:0e:cb:a8:ab:04:34:9b: 2b:d2:ed:1b:de:e0:57:bc:ae:4c:29:91:94:c6:33:27:f8:df: e4:c5:27:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gBw5LBcAEYgrNihh0NxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1N2EyYzc0YWY1YTQ0ZDlhYWU0N2EwYjg5NDI1ZmE0Zjdm YzdjMTkwHhcNMjYwMTAyMDIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmVkNGZmMjhlNmJhYjY1MTZjZDIwNGZlNDFhODkxYTU3YmM4Yzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCEIWY2SEfUi8I8QBl4zekjv/N+8 SaZi4EK9FNt5wCgtJ/1R55XnrfoCRyZ0GrWBTDcKNdx9oe5i6skoVG1f26GJmeDq IK9ZOVw8Xo87+IIB08lmYeGkljZaFrToIvvbSwThlB/VGFztdlapo7af6KcDyn/8 y10lGZD/0EYiWxdhqMcRuu38nU4jlJwlijI9VeFZfrd2jGT5XMniHaaiv6SgzJGa CwTrVZrdSCXipG7BTFCMp62KCdMpxWJ02XRDcMsrfxFGyrCuBTTOHhFidHm6XMvh rqf+FnJyBsbBTfbsxheeV1kmuqjav3ILDpz3H37Tx7JeIi6eK3Glg1rebQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJLtT/KOa6tlFs0gT+QaiRpXvIyWMB8GA1UdIwQY MBaAFIV6LHSvWkTZquR6C4lCX6T3/HwZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFhvc2RLOWFSTm1xNUhvTGlVSmZwUGY4ZkJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wYTlhMzMtOTlkYy00YjkyLThjZWQt ODM2YWM5N2MwMWJiLzEva3UxUDhvNXJxMlVXelNCUDVCcUpHbGU4akpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8wYTlhMzMtOTlkYy00YjkyLThjZWQtODM2YWM5N2MwMWJi LzEvaFhvc2RLOWFSTm1xNUhvTGlVSmZwUGY4ZkJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudYrMA0G CSqGSIb3DQEBCwUAA4IBAQCQ2Qe3xjtHtAlDqYzCZwkaMTRVJIcF4A0O7VB+jJ24 iy26jCg8gDZ9JGlZYB1Bnj7BUYTjKnwk1/2tRK8+yTl6NtT0fNvgbKpxcReFaWWk tthIZrw0KER6/jUZFWBf8jWI7r4p8LZIMGC48PKd9PAEyKNrK7bfNLsORZia7XAy cMl5S0S9/fPpYLy/JA2xyQkzFiXs4KKVbb5PWQvhEqaJ+8g7ukwShMmpSrSUTzzt 4FDTSB3Z/aq9oowoDwIXs+uEXVGVv9tWjrM2VWVptjm21KPleonSrmIiUvzCMySE 8H6VPg7LqKsENJsr0u0b3uBXvK5MKZGUxjMn+N/kxSc6 -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:14 2026 by rpki-client