This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/kUsI4SRxxZP0gd_4YTt-HTTnRSc.roa File: kUsI4SRxxZP0gd_4YTt-HTTnRSc.roa (raw, json) Hash identifier: fG/gmFQxL44rDJ/8bE+/AVQ5a2QcbRZO0R8IThxbrH8= Subject key identifier: 91:4B:08:E1:24:71:C5:93:F4:81:DF:F8:61:3B:7E:1D:34:E7:45:27 Certificate issuer: /CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa Certificate serial: 019B7C12A0D98F113A9D936D36AA053B905E Authority key identifier: 9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/kUsI4SRxxZP0gd_4YTt-HTTnRSc.roa Signing time: Fri 02 Jan 2026 00:19:14 +0000 ROA not before: Fri 02 Jan 2026 00:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19551 IP address blocks: 185.154.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a0:d9:8f:11:3a:9d:93:6d:36:aa:05:3b:90:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa Validity Not Before: Jan 2 00:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=914b08e12471c593f481dff8613b7e1d34e74527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:ad:65:e6:64:b9:d0:d9:28:82:4c:b8:d4: cf:24:b3:38:03:28:f5:7a:15:61:26:f8:60:2c:c7: 31:c4:f1:33:c4:9a:1f:2c:b7:a3:8b:2a:4c:f8:28: 42:fd:44:21:5c:b0:5a:57:e2:99:7d:1f:8a:8e:29: c5:6c:77:50:af:36:24:b6:4b:a3:1c:04:40:4d:13: 7a:74:50:69:4d:bd:ee:b7:5b:c7:37:ce:eb:d2:0d: b0:40:f7:9f:37:e2:44:6e:04:dc:53:4b:f6:7a:72: 0a:16:74:a3:e8:2a:e7:58:64:20:89:18:3d:85:9c: 1c:2b:ff:6c:a3:c6:2b:07:e0:04:25:16:e8:57:25: 76:a7:a9:3a:c2:ac:41:d5:e4:90:6c:15:86:c2:fc: 09:a8:6b:ac:da:cc:89:5f:14:d4:b5:4c:bb:bb:e2: 97:f0:9e:09:71:a2:1b:4a:f6:75:3d:34:ea:6a:70: f4:1b:87:f7:01:e9:bd:33:e0:fe:83:68:2f:51:e8: ae:5e:a1:7c:cc:15:13:ee:bb:85:24:9e:0b:4f:6e: 51:37:de:0d:0a:08:86:cb:83:7c:c6:08:db:48:39: 65:82:da:11:fc:14:cd:66:31:f6:08:6f:2f:89:64: f7:ef:1e:ed:26:96:8b:43:8f:33:db:7c:ea:3f:e3: 46:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4B:08:E1:24:71:C5:93:F4:81:DF:F8:61:3B:7E:1D:34:E7:45:27 X509v3 Authority Key Identifier: keyid:9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/kUsI4SRxxZP0gd_4YTt-HTTnRSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.244.0/22 Signature Algorithm: sha256WithRSAEncryption db:87:76:e9:ac:2f:56:9e:5c:8c:22:64:7a:bb:72:b0:28:53: 90:d8:62:84:9d:b3:33:16:c2:2b:2b:34:b8:30:66:e0:0f:fb: ca:8e:92:86:0f:2c:9f:ec:fa:53:fc:4a:9f:d7:36:33:1a:72: ae:5d:ec:17:9e:0a:18:80:c2:86:7d:56:6c:a7:69:9d:1f:1d: d0:17:63:7e:31:05:b2:58:64:69:27:fa:68:aa:13:2c:f9:52: e9:90:6e:f4:93:0a:53:35:61:9a:e2:86:62:7a:f5:d7:23:7a: 7a:50:d7:c5:73:38:3c:b3:48:1e:57:bf:ff:7c:52:2a:54:0e: 22:a5:c4:53:75:36:e3:07:d0:76:75:1b:8a:2b:fa:a5:29:e4: e8:05:fe:ea:d8:a2:60:ac:ef:9d:24:f2:32:81:71:5b:ac:7b: 09:0c:20:cd:2e:3b:d6:f1:91:ed:11:bc:62:54:89:97:f8:be: fc:0e:14:20:b6:fc:b3:d1:1b:b4:2d:ad:d0:5b:c7:fe:8c:e3: 32:e0:b4:30:44:39:6e:ff:08:9f:bc:6d:b4:c8:6d:87:74:71: ea:d8:a7:fe:1d:cc:67:18:ca:0a:04:f0:4c:70:56:46:1d:ae: 35:df:e9:95:96:99:04:50:0a:25:99:e5:27:cf:10:0e:8e:f6: 3d:eb:bd:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EqDZjxE6nZNtNqoFO5BeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOTRjNGVhY2FmNDA0MGExYzMwZWQxZWRlYThlMzAwMDcz MWI2YWEwHhcNMjYwMTAyMDAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTRiMDhlMTI0NzFjNTkzZjQ4MWRmZjg2MTNiN2UxZDM0ZTc0NTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkGtZeZkudDZKIJMuNTPJLM4Ayj1 ehVhJvhgLMcxxPEzxJofLLejiypM+ChC/UQhXLBaV+KZfR+KjinFbHdQrzYktkuj HARATRN6dFBpTb3ut1vHN87r0g2wQPefN+JEbgTcU0v2enIKFnSj6CrnWGQgiRg9 hZwcK/9so8YrB+AEJRboVyV2p6k6wqxB1eSQbBWGwvwJqGus2syJXxTUtUy7u+KX 8J4JcaIbSvZ1PTTqanD0G4f3Aem9M+D+g2gvUeiuXqF8zBUT7ruFJJ4LT25RN94N CgiGy4N8xgjbSDllgtoR/BTNZjH2CG8viWT37x7tJpaLQ48z23zqP+NGBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJFLCOEkccWT9IHf+GE7fh0050UnMB8GA1UdIwQY MBaAFJqUxOrK9AQKHDDtHt6o4wAHMbaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXBURTZzcjBCQW9jTU8wZTNxampBQWN4dHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85Y2UxNWYtNTU5YS00M2I0LWEwNTkt Y2JkNGI0YmI2ZjFkLzEva1VzSTRTUnh4WlAwZ2RfNFlUdC1IVFRuUlNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy85Y2UxNWYtNTU5YS00M2I0LWEwNTktY2JkNGI0YmI2ZjFk LzEvbXBURTZzcjBCQW9jTU8wZTNxampBQWN4dHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZr0MA0G CSqGSIb3DQEBCwUAA4IBAQDbh3bprC9WnlyMImR6u3KwKFOQ2GKEnbMzFsIrKzS4 MGbgD/vKjpKGDyyf7PpT/Eqf1zYzGnKuXewXngoYgMKGfVZsp2mdHx3QF2N+MQWy WGRpJ/poqhMs+VLpkG70kwpTNWGa4oZievXXI3p6UNfFczg8s0geV7//fFIqVA4i pcRTdTbjB9B2dRuKK/qlKeToBf7q2KJgrO+dJPIygXFbrHsJDCDNLjvW8ZHtEbxi VImX+L78DhQgtvyz0Ru0La3QW8f+jOMy4LQwRDlu/wifvG20yG2HdHHq2Kf+Hcxn GMoKBPBMcFZGHa413+mVlpkEUAolmeUnzxAOjvY9670x -----END CERTIFICATE-----Generated at Tue Jan 20 07:46:28 2026 by rpki-client