This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa File: ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa (raw, json) Hash identifier: k43BMZFCEHCe5ac3+lgii08XLhekVbwoHtiG/FwXDec= Subject key identifier: 00:2A:11:08:A3:35:0A:31:8D:A0:B4:8C:C9:A1:A5:3E:90:5C:FA:49 Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7 Certificate serial: 019B79ED55ACB0C0ABA924038B7EFA3F473C Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35579 IP address blocks: 89.16.192.0/19 maxlen: 24 185.56.124.0/22 maxlen: 24 185.228.40.0/22 maxlen: 24 2a00:17e8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:55:ac:b0:c0:ab:a9:24:03:8b:7e:fa:3f:47:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7 Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=002a1108a3350a318da0b48cc9a1a53e905cfa49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:83:c9:29:48:33:c8:7d:b4:89:a0:e9:4c: 60:6d:4d:99:8f:c7:9f:88:3e:a7:8a:d7:49:d8:02: 0e:83:8f:c9:15:72:4e:a9:ea:2a:b7:d2:ef:45:3e: 2f:92:16:47:5a:3c:cf:1e:d4:b7:1d:dd:c9:7e:99: e7:ae:96:1b:00:36:e2:3c:7a:96:b3:73:c5:16:c2: 67:b6:46:24:69:d5:cb:43:6c:17:c1:cc:e1:6c:59: a1:62:9a:8d:7a:2f:a1:78:4c:b0:80:28:70:26:d0: ee:28:bc:ca:bd:f7:d5:64:1d:1d:c5:cc:e2:46:a5: ff:0e:7f:fc:c9:1b:7a:3f:5c:51:64:36:1b:c4:48: 37:36:b0:b1:b6:7b:56:f3:21:7f:7d:dc:a1:30:91: ee:aa:39:b6:c8:0e:69:04:b4:26:8a:bb:3e:f2:a3: b8:d2:93:8e:06:b5:8b:ce:b0:c0:29:c5:6c:ad:bf: 56:a8:6f:4e:53:f6:96:ec:da:0b:88:c8:c3:e1:e1: a4:39:71:db:23:b8:2b:f7:3d:64:cc:b2:55:3e:19: 84:2a:07:9c:e9:11:68:32:2c:81:64:e4:b6:eb:59: f5:e9:14:bc:c0:eb:13:69:a9:df:53:14:bb:28:06: 13:8b:fd:42:d5:ec:1f:06:c1:e0:b4:e6:ee:64:5b: a8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2A:11:08:A3:35:0A:31:8D:A0:B4:8C:C9:A1:A5:3E:90:5C:FA:49 X509v3 Authority Key Identifier: keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.16.192.0/19 185.56.124.0/22 185.228.40.0/22 IPv6: 2a00:17e8::/29 Signature Algorithm: sha256WithRSAEncryption 27:3f:ae:94:86:34:fe:4a:22:5b:c6:bd:30:95:35:81:ac:ce: 5c:0f:b8:fc:c2:02:ff:a9:b7:2d:99:13:f5:dd:33:3f:d9:db: ec:a0:fe:b4:b8:de:5d:17:e5:77:80:c0:a4:67:f1:bb:63:a5: 9d:4e:20:61:85:7d:33:6b:07:bb:5b:c0:e6:1e:a7:19:fd:1a: f9:44:c0:96:a6:56:7a:6c:98:28:ba:66:28:b3:c6:89:7c:35: 72:ca:f4:6c:5d:3d:1e:64:7d:63:d4:85:f4:5e:24:a1:3c:7e: eb:ec:6d:13:50:cb:2e:a9:32:5e:50:09:9e:42:a7:e9:a2:6e: e4:02:18:74:bd:16:4e:ab:1f:25:ec:ed:86:86:e8:40:ca:da: 6a:06:f2:45:0f:e3:a2:b2:01:8c:9f:f6:10:86:59:9d:e1:8a: 54:dd:3b:27:cd:da:d0:54:63:f7:0a:66:56:36:ea:e9:e2:fe: dd:4f:58:7c:34:46:0e:4c:1c:50:38:ad:29:50:22:26:76:50: ca:52:00:88:06:bf:2c:21:0b:d3:4f:7d:5c:0f:c5:fd:48:91: eb:01:38:ea:16:40:3a:31:15:57:b1:f4:44:b0:ae:2b:02:01: f9:f6:c0:c8:45:4f:8b:bc:f6:82:8f:cf:ad:f1:5d:4f:e0:8f: 38:7c:d9:54 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57VWssMCrqSQDi376P0c8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYmE0YjI4NjdkYWQzOGI3M2E0NjkxODI0MWVmYzcyYTIx MjYyZjcwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDJhMTEwOGEzMzUwYTMxOGRhMGI0OGNjOWExYTUzZTkwNWNmYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTCDySlIM8h9tImg6UxgbU2Zj8ef iD6nitdJ2AIOg4/JFXJOqeoqt9LvRT4vkhZHWjzPHtS3Hd3JfpnnrpYbADbiPHqW s3PFFsJntkYkadXLQ2wXwczhbFmhYpqNei+heEywgChwJtDuKLzKvffVZB0dxczi RqX/Dn/8yRt6P1xRZDYbxEg3NrCxtntW8yF/fdyhMJHuqjm2yA5pBLQmirs+8qO4 0pOOBrWLzrDAKcVsrb9WqG9OU/aW7NoLiMjD4eGkOXHbI7gr9z1kzLJVPhmEKgec 6RFoMiyBZOS261n16RS8wOsTaanfUxS7KAYTi/1C1ewfBsHgtObuZFuorwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAAqEQijNQoxjaC0jMmhpT6QXPpJMB8GA1UdIwQY MBaAFOG6Syhn2tOLc6RpGCQe/HKiEmL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2Et ZGM2NGFlNzI1NzhlLzEvQUNvUkNLTTFDakdOb0xTTXlhR2xQcEJjLWtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2EtZGM2NGFlNzI1Nzhl LzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFWRDAAwQC uTh8AwQCueQoMA0EAgACMAcDBQMqABfoMA0GCSqGSIb3DQEBCwUAA4IBAQAnP66U hjT+SiJbxr0wlTWBrM5cD7j8wgL/qbctmRP13TM/2dvsoP60uN5dF+V3gMCkZ/G7 Y6WdTiBhhX0zawe7W8DmHqcZ/Rr5RMCWplZ6bJgoumYos8aJfDVyyvRsXT0eZH1j 1IX0XiShPH7r7G0TUMsuqTJeUAmeQqfpom7kAhh0vRZOqx8l7O2GhuhAytpqBvJF D+OisgGMn/YQhlmd4YpU3TsnzdrQVGP3CmZWNurp4v7dT1h8NEYOTBxQOK0pUCIm dlDKUgCIBr8sIQvTT31cD8X9SJHrATjqFkA6MRVXsfREsK4rAgH59sDIRU+LvPaC j8+t8V1P4I84fNlU -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:40 2026 by rpki-client