This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/SEttK_pcv2aq3Iiguo8_bemc6-U.roa File: SEttK_pcv2aq3Iiguo8_bemc6-U.roa (raw, json) Hash identifier: +3wPIQDk6DYoI3/eEecxeYyyRYGqp5dlounM53Kj3wo= Subject key identifier: 48:4B:6D:2B:FA:5C:BF:66:AA:DC:88:A0:BA:8F:3F:6D:E9:9C:EB:E5 Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a Certificate serial: 019B79ED0C9BAD280475DF4634953D7FE27B Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/SEttK_pcv2aq3Iiguo8_bemc6-U.roa Signing time: Thu 01 Jan 2026 14:18:57 +0000 ROA not before: Thu 01 Jan 2026 14:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209138 IP address blocks: 185.167.104.0/22 maxlen: 22 185.167.104.0/24 maxlen: 24 185.167.105.0/24 maxlen: 24 185.167.106.0/24 maxlen: 24 185.167.107.0/24 maxlen: 24 2a0f:62c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0c:9b:ad:28:04:75:df:46:34:95:3d:7f:e2:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a Validity Not Before: Jan 1 14:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=484b6d2bfa5cbf66aadc88a0ba8f3f6de99cebe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:d3:d2:91:53:9b:42:af:7a:ee:20:63:2a: ab:28:52:d0:d3:87:81:d5:8a:71:6d:5c:0e:2a:ba: d3:2c:7e:99:52:68:fe:0f:05:09:5e:fc:d7:79:f5: a5:14:c2:fe:05:a4:6b:d0:57:79:a5:87:48:04:db: b8:a2:3a:7c:e6:f1:1a:9c:19:32:76:4d:fa:06:c7: 2e:49:55:bd:3d:32:4c:04:ee:0a:7c:84:3d:6f:ab: cd:38:c9:a1:45:d9:be:58:06:da:de:28:d6:f9:17: b5:8c:3c:e5:33:1b:d6:3b:10:1c:f0:ac:90:48:d3: f9:42:91:e1:8c:bb:96:7f:84:f1:85:c0:fa:c1:67: bc:4f:ae:b1:c5:a8:b2:ed:01:d9:93:2a:2e:2c:a6: 21:63:ab:ea:31:89:5a:87:20:86:6e:de:cf:b7:7e: 60:9d:89:dd:38:75:d6:e3:8e:64:24:be:8b:e5:ad: 32:ca:22:ec:02:5d:9b:dc:4d:d2:83:c6:a4:f3:5d: 57:64:72:8e:00:d0:e1:e0:49:44:77:45:be:65:0e: b9:34:2b:9a:59:79:fc:26:b9:64:47:cd:ff:2c:e7: f9:bc:49:5a:90:84:e4:0a:70:5b:ce:3a:fb:4f:b9: f4:93:47:24:9c:02:aa:ac:45:b6:26:4c:51:bb:79: 62:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4B:6D:2B:FA:5C:BF:66:AA:DC:88:A0:BA:8F:3F:6D:E9:9C:EB:E5 X509v3 Authority Key Identifier: keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/SEttK_pcv2aq3Iiguo8_bemc6-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.104.0/22 IPv6: 2a0f:62c0::/29 Signature Algorithm: sha256WithRSAEncryption 5b:aa:23:bb:55:ca:f6:99:c9:f1:53:59:26:85:57:e1:76:97: c6:d2:71:3e:81:cf:0d:c3:1a:93:8b:40:1a:2e:ff:6e:99:fd: 52:56:b4:ca:e7:38:7e:73:8c:d8:ad:1b:aa:06:a1:2a:f2:e1: 4f:fc:f7:2c:7b:73:08:96:47:99:11:b0:3c:1b:89:d3:e2:9d: 2d:91:fc:65:42:53:dc:bc:a0:56:b0:d6:f2:9e:b1:c1:aa:bf: 89:05:99:c2:3f:2d:5a:c2:28:65:fd:33:d4:3e:a3:69:9f:b6: 44:da:ce:82:cd:75:54:a1:c8:20:f3:36:d4:19:00:6c:18:ae: d3:32:82:43:18:80:ab:12:65:50:de:c8:43:b4:6b:b5:75:33: cd:33:ac:59:ef:b1:b1:20:68:5d:20:63:5a:c0:29:f3:9b:4c: 6d:50:19:e4:f1:32:e1:a1:ae:06:97:5a:58:54:67:47:c3:a9: d5:85:4c:94:62:30:98:62:cd:78:15:c8:f9:f2:bb:5d:1e:be: 03:d1:df:8b:17:e4:d3:7d:2e:2d:5a:8c:c5:46:50:30:21:2a: 3e:99:a4:1e:bd:d4:2a:98:d4:f3:e6:08:55:6e:45:e4:33:68: 35:0d:e6:bb:3f:da:47:ca:0b:ef:80:32:ca:4b:1f:70:80:81: 4a:1d:2e:9d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57QybrSgEdd9GNJU9f+J7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNDQ5NDQ3ZWJkYWYyZDQ0YTQ5OGIzZGFlNTI1YTJmNTIy N2YxOGEwHhcNMjYwMTAxMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODRiNmQyYmZhNWNiZjY2YWFkYzg4YTBiYThmM2Y2ZGU5OWNlYmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfjT0pFTm0Kveu4gYyqrKFLQ04eB 1YpxbVwOKrrTLH6ZUmj+DwUJXvzXefWlFML+BaRr0Fd5pYdIBNu4ojp85vEanBky dk36BscuSVW9PTJMBO4KfIQ9b6vNOMmhRdm+WAba3ijW+Re1jDzlMxvWOxAc8KyQ SNP5QpHhjLuWf4TxhcD6wWe8T66xxaiy7QHZkyouLKYhY6vqMYlahyCGbt7Pt35g nYndOHXW445kJL6L5a0yyiLsAl2b3E3Sg8ak811XZHKOANDh4ElEd0W+ZQ65NCua WXn8JrlkR83/LOf5vElakITkCnBbzjr7T7n0k0cknAKqrEW2JkxRu3liMwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEhLbSv6XL9mqtyIoLqPP23pnOvlMB8GA1UdIwQY MBaAFBJElEfr2vLUSkmLPa5SWi9SJ/GKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZmIxNzEtMTFmNC00YzVmLTgzZTct MmVkMWZkZTY4NTE2LzEvU0V0dEtfcGN2MmFxM0lpZ3VvOF9iZW1jNi1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85ZmIxNzEtMTFmNC00YzVmLTgzZTctMmVkMWZkZTY4NTE2 LzEvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuadoMA0E AgACMAcDBQMqD2LAMA0GCSqGSIb3DQEBCwUAA4IBAQBbqiO7Vcr2mcnxU1kmhVfh dpfG0nE+gc8NwxqTi0AaLv9umf1SVrTK5zh+c4zYrRuqBqEq8uFP/Pcse3MIlkeZ EbA8G4nT4p0tkfxlQlPcvKBWsNbynrHBqr+JBZnCPy1awihl/TPUPqNpn7ZE2s6C zXVUocgg8zbUGQBsGK7TMoJDGICrEmVQ3shDtGu1dTPNM6xZ77GxIGhdIGNawCnz m0xtUBnk8TLhoa4Gl1pYVGdHw6nVhUyUYjCYYs14Fcj58rtdHr4D0d+LF+TTfS4t WozFRlAwISo+maQevdQqmNTz5ghVbkXkM2g1Dea7P9pHygvvgDLKSx9wgIFKHS6d -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:09 2026 by rpki-client