This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kh9qBw_cIotKfBCvbNmrBlyRPS0.roa File: kh9qBw_cIotKfBCvbNmrBlyRPS0.roa (raw, json) Hash identifier: lBiH6ABgcYPRzi4X3aSLMIbDsDfxazHxKCUmRugKvc0= Subject key identifier: 92:1F:6A:07:0F:DC:22:8B:4A:7C:10:AF:6C:D9:AB:06:5C:91:3D:2D Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D4154DAD9DA18654D34D17BBAD9D1 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kh9qBw_cIotKfBCvbNmrBlyRPS0.roa Signing time: Fri 02 Jan 2026 06:20:22 +0000 ROA not before: Fri 02 Jan 2026 06:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49321 IP address blocks: 185.192.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:41:54:da:d9:da:18:65:4d:34:d1:7b:ba:d9:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=921f6a070fdc228b4a7c10af6cd9ab065c913d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:88:c2:e7:e9:b5:1a:94:f0:be:a3:25:71:45: bf:e3:46:77:31:e9:9d:e1:e6:f7:ce:8b:ee:06:9d: 4d:97:db:c5:72:de:52:68:ec:9f:7b:d3:a1:56:66: b6:5f:6a:17:af:53:4b:70:30:6c:05:ff:18:e9:f2: ac:1b:86:60:96:f4:cb:6c:03:fa:a3:59:9b:5c:73: d2:8f:eb:59:e1:18:28:b4:4f:ae:c4:c4:56:64:f0: 97:10:84:97:48:11:73:69:2f:f1:27:1f:a0:e6:0d: 15:7c:a6:40:6f:57:01:34:7f:f7:d9:33:9c:9a:10: 2d:ae:3f:fd:58:08:ed:17:aa:2d:f8:ff:9f:00:6a: e6:66:d4:1c:c2:f8:53:1c:28:02:d9:25:a8:13:ec: b1:a6:e8:8b:16:f6:cf:13:2e:d7:f2:7d:9d:5b:43: c8:f6:72:33:7a:8b:61:c0:54:58:0d:94:f1:3e:d2: 94:6f:54:dc:2f:10:13:d3:c3:68:f4:17:c6:1d:15: bc:27:3b:ad:7c:9b:7b:44:d7:69:a3:a0:e4:2d:00: e4:3c:41:f9:d9:d8:5c:d1:4f:63:be:4c:92:af:dd: 56:4a:9c:47:69:55:fa:e4:1e:c9:d9:aa:46:5c:39: 24:c4:44:d8:3b:e6:e4:21:6c:88:bc:c4:09:00:35: ce:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1F:6A:07:0F:DC:22:8B:4A:7C:10:AF:6C:D9:AB:06:5C:91:3D:2D X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kh9qBw_cIotKfBCvbNmrBlyRPS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.17.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:71:af:61:ad:b0:5f:59:a6:df:00:3c:ac:dc:5f:33:f9:fe: 43:f0:2f:de:91:2a:b4:93:74:1d:d8:2d:55:8e:b4:e9:23:18: a8:ca:64:f6:b0:ea:2c:e5:7c:35:78:59:2f:d8:38:08:97:37: a1:94:85:99:9e:19:8e:8c:9e:45:94:ad:87:70:f4:f6:84:5f: a2:2f:0d:7f:52:6c:91:37:da:60:11:e2:89:f9:78:3d:6e:3d: 50:bf:da:cb:a3:bb:18:ea:29:42:14:e8:2d:e1:5e:21:06:af: 00:d8:a7:a4:a6:c6:0b:34:33:a2:38:61:81:f5:27:0e:36:71: d2:88:e3:2c:22:79:f9:b0:e5:40:96:23:1b:bc:9a:c4:34:2b: 74:ad:56:35:23:6d:02:05:e4:c2:0a:93:51:3c:51:6c:19:ba: 9a:89:a9:b6:c2:3f:a2:f5:4d:e1:07:a1:a5:ab:2a:87:8a:64: 8f:ec:e7:4c:89:9a:7d:ce:eb:bf:3c:42:2f:ec:60:b8:07:1a: 79:94:52:54:b9:91:8f:79:e7:ad:5c:95:44:e9:fb:2e:98:67: 1c:39:73:95:10:0f:08:88:fb:55:4f:97:4d:e2:64:8d:6c:2d: 8b:ce:71:62:a5:22:82:ba:8c:4a:c6:4b:d2:b0:38:20:d3:e4: 12:3b:04:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XUFU2tnaGGVNNNF7utnRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjFmNmEwNzBmZGMyMjhiNGE3YzEwYWY2Y2Q5YWIwNjVjOTEzZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYjC5+m1GpTwvqMlcUW/40Z3Memd 4eb3zovuBp1Nl9vFct5SaOyfe9OhVma2X2oXr1NLcDBsBf8Y6fKsG4ZglvTLbAP6 o1mbXHPSj+tZ4RgotE+uxMRWZPCXEISXSBFzaS/xJx+g5g0VfKZAb1cBNH/32TOc mhAtrj/9WAjtF6ot+P+fAGrmZtQcwvhTHCgC2SWoE+yxpuiLFvbPEy7X8n2dW0PI 9nIzeothwFRYDZTxPtKUb1TcLxAT08No9BfGHRW8JzutfJt7RNdpo6DkLQDkPEH5 2dhc0U9jvkySr91WSpxHaVX65B7J2apGXDkkxETYO+bkIWyIvMQJADXO0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJIfagcP3CKLSnwQr2zZqwZckT0tMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEva2g5cUJ3X2NJb3RLZkJDdmJObXJCbHlSUFMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucARMA0G CSqGSIb3DQEBCwUAA4IBAQAsca9hrbBfWabfADys3F8z+f5D8C/ekSq0k3Qd2C1V jrTpIxioymT2sOos5Xw1eFkv2DgIlzehlIWZnhmOjJ5FlK2HcPT2hF+iLw1/UmyR N9pgEeKJ+Xg9bj1Qv9rLo7sY6ilCFOgt4V4hBq8A2KekpsYLNDOiOGGB9ScONnHS iOMsInn5sOVAliMbvJrENCt0rVY1I20CBeTCCpNRPFFsGbqaiam2wj+i9U3hB6Gl qyqHimSP7OdMiZp9zuu/PEIv7GC4Bxp5lFJUuZGPeeetXJVE6fsumGccOXOVEA8I iPtVT5dN4mSNbC2LznFipSKCuoxKxkvSsDgg0+QSOwRn -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:30 2026 by rpki-client