This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/CKkhc8E_ns4Dckr55-sXJCzWGB0.roa File: CKkhc8E_ns4Dckr55-sXJCzWGB0.roa (raw, json) Hash identifier: dtTiqDZrVtVn2PVu7BlGNI9CP1Mb6StSs0eabpwin2M= Subject key identifier: 08:A9:21:73:C1:3F:9E:CE:03:72:4A:F9:E7:EB:17:24:2C:D6:18:1D Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98 Certificate serial: 019B7CED8F90D30D5879B68DDB4DB1B59B09 Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/CKkhc8E_ns4Dckr55-sXJCzWGB0.roa Signing time: Fri 02 Jan 2026 04:18:22 +0000 ROA not before: Fri 02 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198730 IP address blocks: 185.223.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8f:90:d3:0d:58:79:b6:8d:db:4d:b1:b5:9b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98 Validity Not Before: Jan 2 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08a92173c13f9ece03724af9e7eb17242cd6181d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9c:3a:dc:57:3c:16:cb:19:cb:86:fd:52:35: 35:9a:ab:c2:2e:a0:46:4a:03:d6:c9:f5:ba:7e:3c: 73:77:b3:01:c9:dd:c5:1b:f6:df:61:be:1b:8d:79: 2a:c9:ff:76:f5:2c:89:6e:22:74:6b:85:1a:63:cf: f1:22:cc:db:b2:b6:8e:ed:94:b3:b2:fb:70:a4:6d: 86:fe:a1:83:b5:2a:67:98:42:2d:34:50:39:ce:ad: 54:6d:6c:bf:28:f8:c4:2c:26:86:f6:9c:8f:a4:58: c5:82:b0:f1:00:63:98:a1:b7:36:91:2f:a0:3b:56: 15:42:03:73:fd:c8:54:3a:fb:b0:42:36:5f:d1:0d: 0d:6d:12:2d:b6:a6:b7:11:a6:45:ea:2d:21:24:3c: 75:bc:0a:1c:5e:fd:32:00:ba:18:af:a6:79:16:85: c7:63:8e:c5:13:88:b9:ba:05:63:d3:d8:42:53:ce: cb:3e:a7:2f:5b:da:6b:2c:ef:fe:f9:30:61:d7:ef: fe:57:3b:37:b9:aa:cb:63:a1:0f:0f:b9:65:3c:3a: d1:37:9b:49:9b:1c:17:23:5e:e1:66:fb:ca:cf:d8: c4:08:d4:70:30:45:43:ca:8b:bd:75:df:68:7b:94: a8:84:c1:68:2e:43:49:aa:a0:37:f9:9e:8b:8c:dd: ad:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A9:21:73:C1:3F:9E:CE:03:72:4A:F9:E7:EB:17:24:2C:D6:18:1D X509v3 Authority Key Identifier: keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/CKkhc8E_ns4Dckr55-sXJCzWGB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.84.0/24 Signature Algorithm: sha256WithRSAEncryption 27:59:be:ee:dc:49:f0:8e:a8:c7:63:bf:3b:12:92:05:5f:f0: 8a:d2:4d:52:08:1c:44:11:67:c4:94:6d:84:97:f3:35:ce:e6: ec:09:5e:79:d1:00:8b:55:f4:0f:19:72:68:58:35:2d:88:08: 84:6d:d5:b7:2d:96:be:08:8a:20:6f:ed:f6:c3:13:c9:43:4c: 90:d1:b8:ed:38:51:50:c6:d1:95:35:9a:96:00:2d:5b:d2:ba: 64:df:82:64:82:81:d5:ff:34:a0:20:aa:ab:cb:b0:61:37:8b: 67:7b:f5:99:21:a0:61:26:e6:e6:a6:28:e8:f0:ef:ac:8a:b6: 59:81:49:8d:20:73:2c:c6:9a:82:c9:c5:83:54:38:93:53:fc: 1a:a9:24:fd:ac:d8:96:ec:37:85:40:02:a6:54:19:e6:e1:21: d7:16:30:48:e9:8c:d6:38:bb:43:22:39:b8:38:0e:3f:0f:3f: 87:31:48:35:7d:a8:fb:32:b2:a5:29:e7:09:4a:12:d8:a0:c7: 28:63:3a:35:23:53:21:66:9d:2f:e1:ea:ca:f6:7d:16:2e:6a: a7:d7:d2:65:1b:9f:2c:d8:28:88:a6:12:76:f9:0a:76:4b:3d: a4:09:ed:7d:c7:a9:a2:8c:92:d1:ea:c8:10:94:26:3d:23:ad: 13:11:6f:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Y+Q0w1YebaN202xtZsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOTY5NDZjNTAxZGRmNDg2OTZkYTJjZjExMGZkY2ViMjg2 ZmFjOTgwHhcNMjYwMTAyMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGE5MjE3M2MxM2Y5ZWNlMDM3MjRhZjllN2ViMTcyNDJjZDYxODFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpw63Fc8FssZy4b9UjU1mqvCLqBG SgPWyfW6fjxzd7MByd3FG/bfYb4bjXkqyf929SyJbiJ0a4UaY8/xIszbsraO7ZSz svtwpG2G/qGDtSpnmEItNFA5zq1UbWy/KPjELCaG9pyPpFjFgrDxAGOYobc2kS+g O1YVQgNz/chUOvuwQjZf0Q0NbRIttqa3EaZF6i0hJDx1vAocXv0yALoYr6Z5FoXH Y47FE4i5ugVj09hCU87LPqcvW9prLO/++TBh1+/+Vzs3uarLY6EPD7llPDrRN5tJ mxwXI17hZvvKz9jECNRwMEVDyou9dd9oe5SohMFoLkNJqqA3+Z6LjN2tswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAipIXPBP57OA3JK+efrFyQs1hgdMB8GA1UdIwQY MBaAFCyWlGxQHd9IaW2izxEP3Osob6yYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQt N2Y5NzBhM2FmOWNkLzEvQ0traGM4RV9uczREY2tyNTUtc1hKQ3pXR0IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQtN2Y5NzBhM2FmOWNk LzEvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud9UMA0G CSqGSIb3DQEBCwUAA4IBAQAnWb7u3EnwjqjHY787EpIFX/CK0k1SCBxEEWfElG2E l/M1zubsCV550QCLVfQPGXJoWDUtiAiEbdW3LZa+CIogb+32wxPJQ0yQ0bjtOFFQ xtGVNZqWAC1b0rpk34JkgoHV/zSgIKqry7BhN4tne/WZIaBhJubmpijo8O+sirZZ gUmNIHMsxpqCycWDVDiTU/waqST9rNiW7DeFQAKmVBnm4SHXFjBI6YzWOLtDIjm4 OA4/Dz+HMUg1faj7MrKlKecJShLYoMcoYzo1I1MhZp0v4erK9n0WLmqn19JlG58s 2CiIphJ2+Qp2Sz2kCe19x6mijJLR6sgQlCY9I60TEW+S -----END CERTIFICATE-----Generated at Tue Jan 20 07:46:02 2026 by rpki-client