This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/kJEiuD-GMOjhqR0rKkDRKANvZg0.roa File: kJEiuD-GMOjhqR0rKkDRKANvZg0.roa (raw, json) Hash identifier: VBIq2jI9wWHxfuXZX8azYqnz8N0JMYIJ6HfvAGOQ2uk= Subject key identifier: 90:91:22:B8:3F:86:30:E8:E1:A9:1D:2B:2A:40:D1:28:03:6F:66:0D Certificate issuer: /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4 Certificate serial: 019B7DCA73F69D4D923AFB5CB8F214838958 Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/kJEiuD-GMOjhqR0rKkDRKANvZg0.roa Signing time: Fri 02 Jan 2026 08:19:38 +0000 ROA not before: Fri 02 Jan 2026 08:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50018 IP address blocks: 185.136.64.0/22 maxlen: 22 185.136.64.0/24 maxlen: 24 185.136.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:73:f6:9d:4d:92:3a:fb:5c:b8:f2:14:83:89:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4 Validity Not Before: Jan 2 08:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=909122b83f8630e8e1a91d2b2a40d128036f660d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ef:4e:53:03:ca:ba:76:e4:9b:c3:98:09:a6: 83:01:67:97:72:65:c6:07:fb:09:d5:bf:7c:7d:85: 5a:b8:4a:f3:ed:7c:0b:cf:55:3a:57:12:cd:52:3e: 1a:f0:fe:01:96:2d:56:6c:45:77:58:81:e9:56:14: 22:53:d8:e0:db:7e:fb:5e:aa:f2:60:f0:c4:b0:81: 2d:92:1d:b6:dc:32:6e:14:a3:61:8e:3c:b4:7b:86: 44:4d:d4:ad:4d:4f:a1:2b:d8:97:9a:88:b0:4e:ef: e4:e7:d7:b8:ee:ec:66:53:f2:09:31:78:37:db:15: 9d:6c:13:38:6b:ba:0a:84:a7:32:5a:07:a6:7d:24: 31:5d:cd:1b:9d:02:10:1d:0c:c3:36:ec:e3:49:13: 25:0f:57:5c:16:29:cd:5e:62:40:ad:4e:d4:81:9b: c8:16:15:ef:83:4c:f6:96:74:68:05:d4:17:48:08: 5a:1a:6d:68:68:73:ad:e0:93:0b:ba:0e:e8:b4:46: 06:a6:a1:3e:ff:d3:0d:8a:42:20:5d:25:95:4a:9d: 14:80:36:8b:ca:c1:c7:fe:67:86:c5:bd:cf:76:56: f8:ee:d5:f5:cb:55:b9:22:7d:74:b9:a3:38:39:78: c9:44:e9:aa:cd:52:c9:eb:40:fc:e7:fd:dc:23:2d: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:91:22:B8:3F:86:30:E8:E1:A9:1D:2B:2A:40:D1:28:03:6F:66:0D X509v3 Authority Key Identifier: keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/kJEiuD-GMOjhqR0rKkDRKANvZg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.64.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:2e:9a:aa:d4:43:33:d5:5c:12:df:43:65:34:ab:a5:34:af: d8:4a:92:21:9d:ee:7a:ed:c1:0a:b8:1d:99:cc:24:fc:03:d3: 4e:e1:89:01:b8:b0:dc:bc:81:be:df:c6:2d:07:f7:4e:d3:8e: 3b:c0:3b:81:f7:34:83:c4:43:c4:f2:f4:a8:34:af:fa:f6:ad: 6f:75:d1:e4:4c:ee:29:38:24:3a:5f:34:ea:5b:b7:b4:b1:c0: 37:9e:3e:a2:bf:c0:ad:58:2b:68:74:1a:63:85:e6:64:29:4c: aa:1b:c0:9d:91:bb:5e:a7:22:7c:4e:d1:d1:a2:ce:e6:60:8f: d0:bd:0d:c4:78:75:c2:d0:f4:21:5d:b8:c8:f3:59:23:3e:72: 51:05:f6:f4:cf:be:49:6b:41:ca:e3:40:22:4d:81:6b:dc:27: 26:18:14:08:58:2a:54:7e:fb:75:ae:c8:84:e8:0d:f3:46:8f: 04:83:3e:8d:6c:e6:39:0d:89:a5:9f:96:31:f2:30:55:8a:68: ac:23:31:40:fc:e7:34:b2:21:82:48:c4:8e:5a:a2:72:3d:06: 27:4d:ed:87:dc:f6:0b:ee:82:e4:c8:a4:5b:c9:96:1d:a5:91: 4b:c7:34:3d:bc:b7:b4:5c:5a:3e:65:f0:0d:08:39:b5:06:3d: 5a:c2:10:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ynP2nU2SOvtcuPIUg4lYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMzY5Y2E5YmE4NGFkODQ3ZDQ5ZDMxZTI3NDY1ZmFmNTdi ZjI4ZTQwHhcNMjYwMTAyMDgxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDkxMjJiODNmODYzMGU4ZTFhOTFkMmIyYTQwZDEyODAzNmY2NjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu9OUwPKunbkm8OYCaaDAWeXcmXG B/sJ1b98fYVauErz7XwLz1U6VxLNUj4a8P4Bli1WbEV3WIHpVhQiU9jg2377Xqry YPDEsIEtkh223DJuFKNhjjy0e4ZETdStTU+hK9iXmoiwTu/k59e47uxmU/IJMXg3 2xWdbBM4a7oKhKcyWgemfSQxXc0bnQIQHQzDNuzjSRMlD1dcFinNXmJArU7UgZvI FhXvg0z2lnRoBdQXSAhaGm1oaHOt4JMLug7otEYGpqE+/9MNikIgXSWVSp0UgDaL ysHH/meGxb3Pdlb47tX1y1W5In10uaM4OXjJROmqzVLJ60D85/3cIy0htQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJCRIrg/hjDo4akdKypA0SgDb2YNMB8GA1UdIwQY MBaAFCo2nKm6hK2EfUnTHidGX69XvyjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2phY3FicUVyWVI5U2RNZUowWmZyMWVfS09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hMGIyNjYtM2M5ZS00ZTBjLThhNmQt NTg5NWI2OWQxODllLzEva0pFaXVELUdNT2pocVIwcktrRFJLQU52WmcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hMGIyNjYtM2M5ZS00ZTBjLThhNmQtNTg5NWI2OWQxODll LzEvS2phY3FicUVyWVI5U2RNZUowWmZyMWVfS09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYhAMA0G CSqGSIb3DQEBCwUAA4IBAQBuLpqq1EMz1VwS30NlNKulNK/YSpIhne567cEKuB2Z zCT8A9NO4YkBuLDcvIG+38YtB/dO0447wDuB9zSDxEPE8vSoNK/69q1vddHkTO4p OCQ6XzTqW7e0scA3nj6iv8CtWCtodBpjheZkKUyqG8CdkbtepyJ8TtHRos7mYI/Q vQ3EeHXC0PQhXbjI81kjPnJRBfb0z75Ja0HK40AiTYFr3CcmGBQIWCpUfvt1rsiE 6A3zRo8Egz6NbOY5DYmln5Yx8jBVimisIzFA/Oc0siGCSMSOWqJyPQYnTe2H3PYL 7oLkyKRbyZYdpZFLxzQ9vLe0XFo+ZfANCDm1Bj1awhBr -----END CERTIFICATE-----Generated at Mon Feb 9 22:26:49 2026 by rpki-client