This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/Kk4LDgdB-B800f9u3tWCJ7yc42M.roa File: Kk4LDgdB-B800f9u3tWCJ7yc42M.roa (raw, json) Hash identifier: NS3W/PHz2/PR1iY3gv8q+ys5JQiUE/3iGtRiW45w9jQ= Subject key identifier: 2A:4E:0B:0E:07:41:F8:1F:34:D1:FF:6E:DE:D5:82:27:BC:9C:E3:63 Certificate issuer: /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33 Certificate serial: 019B7AC84A51D6C0FA648E1217FCEBB0D41C Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/Kk4LDgdB-B800f9u3tWCJ7yc42M.roa Signing time: Thu 01 Jan 2026 18:18:25 +0000 ROA not before: Thu 01 Jan 2026 18:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197107 IP address blocks: 178.20.192.0/24 maxlen: 24 178.20.193.0/24 maxlen: 24 178.20.194.0/24 maxlen: 24 178.20.195.0/24 maxlen: 24 178.20.196.0/24 maxlen: 24 178.20.197.0/24 maxlen: 24 178.20.198.0/24 maxlen: 24 178.20.199.0/24 maxlen: 24 185.58.88.0/24 maxlen: 24 185.58.89.0/24 maxlen: 24 185.58.90.0/24 maxlen: 24 185.58.91.0/24 maxlen: 24 195.225.64.0/24 maxlen: 24 195.225.65.0/24 maxlen: 24 195.225.66.0/24 maxlen: 24 195.225.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4a:51:d6:c0:fa:64:8e:12:17:fc:eb:b0:d4:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33 Validity Not Before: Jan 1 18:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a4e0b0e0741f81f34d1ff6eded58227bc9ce363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:73:13:b6:83:6a:c4:ea:09:ee:cf:d5:5e:a6: 21:14:05:22:72:4a:f6:93:02:66:58:d6:d5:26:c1: b1:2b:b4:54:bb:ea:5c:4b:74:b7:3a:06:e9:cf:30: b8:8f:63:19:62:46:41:0d:3f:c3:b2:83:6c:0d:2a: e1:c2:b0:12:a7:42:37:d5:de:4b:d9:4d:2a:9e:90: cb:63:eb:42:c6:04:20:69:64:c1:8d:b3:5c:5f:d5: 2d:ff:dc:05:a5:c6:75:68:c0:b2:49:7f:ae:ed:e5: f5:32:c8:80:72:55:8e:03:07:17:1d:c3:6e:6a:ec: 97:cc:9b:fc:66:b9:74:e5:a0:77:02:a0:f7:90:bf: e8:0e:2f:f4:1d:99:f4:78:2b:a0:74:04:23:1b:ac: 5e:d3:de:06:ed:53:cd:ad:44:18:e8:92:22:38:43: 5b:32:ee:a7:1b:76:56:33:5b:e0:1c:dc:c9:2d:23: 3d:51:3e:8c:9b:d7:6f:aa:3c:5f:7d:d4:29:fe:8b: db:9d:dd:ab:3f:60:04:4c:f1:fc:a1:42:c5:49:d0: d6:dd:f0:15:5b:81:90:59:92:25:f8:a4:cb:8a:46: 75:c9:b2:6f:61:3f:44:98:0b:88:07:8a:95:6d:4d: 86:a7:2f:9b:16:9f:fd:5d:57:90:2c:29:25:dc:7d: 6c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4E:0B:0E:07:41:F8:1F:34:D1:FF:6E:DE:D5:82:27:BC:9C:E3:63 X509v3 Authority Key Identifier: keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/Kk4LDgdB-B800f9u3tWCJ7yc42M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.20.192.0/21 185.58.88.0/22 195.225.64.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:1c:30:fb:45:14:cf:d7:b8:a8:f0:07:60:6e:bf:bd:f1:4b: a8:2e:75:c9:e0:af:35:d8:01:af:38:07:18:25:91:b4:91:35: 6e:2b:49:f3:6c:3e:db:46:0f:11:b3:1f:13:21:c8:f7:9c:f7: f6:79:40:da:83:f4:f7:ce:1a:aa:00:ff:59:62:36:79:29:7c: 46:17:74:08:e2:fd:ae:ae:83:ef:95:ea:74:48:18:26:6d:6c: 04:c4:63:13:c2:a0:e4:7c:bb:2a:3c:60:9e:f3:49:a6:13:4a: 40:47:c3:26:97:42:03:ef:ad:25:76:a7:1b:d4:e1:eb:20:0b: dc:0b:73:14:14:32:28:d0:b8:f1:e2:c4:16:24:3f:1f:cb:5e: bf:1c:67:91:58:71:88:e4:fb:db:66:41:92:5d:80:f3:13:9e: ce:7e:10:91:1d:fc:68:15:29:fd:71:77:8b:59:a9:08:a9:16: 38:04:1c:b4:70:ae:bd:3d:e6:1c:fc:5b:c1:fb:05:c4:03:cd: 94:7f:ad:4d:79:9c:67:fc:a9:06:29:f3:a8:2f:91:f5:92:f1: 57:55:3e:7b:4c:cd:33:6c:df:d0:9d:c9:e0:cc:b8:cd:0e:f6: 34:23:62:55:b2:2a:95:34:73:15:c2:12:c3:f2:f4:2b:ec:2e: 29:1c:35:dd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yEpR1sD6ZI4SF/zrsNQcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0OGRhMzM1YjA3MjUzNmQ1OGU2YjdjZGY0Y2RiMTY0NDVi Y2JjMzMwHhcNMjYwMTAxMTgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTRlMGIwZTA3NDFmODFmMzRkMWZmNmVkZWQ1ODIyN2JjOWNlMzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXMTtoNqxOoJ7s/VXqYhFAUickr2 kwJmWNbVJsGxK7RUu+pcS3S3OgbpzzC4j2MZYkZBDT/DsoNsDSrhwrASp0I31d5L 2U0qnpDLY+tCxgQgaWTBjbNcX9Ut/9wFpcZ1aMCySX+u7eX1MsiAclWOAwcXHcNu auyXzJv8Zrl05aB3AqD3kL/oDi/0HZn0eCugdAQjG6xe094G7VPNrUQY6JIiOENb Mu6nG3ZWM1vgHNzJLSM9UT6Mm9dvqjxffdQp/ovbnd2rP2AETPH8oULFSdDW3fAV W4GQWZIl+KTLikZ1ybJvYT9EmAuIB4qVbU2Gpy+bFp/9XVeQLCkl3H1sVQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCpOCw4HQfgfNNH/bt7Vgie8nONjMB8GA1UdIwQY MBaAFOSNozWwclNtWOa3zfTNsWRFvLwzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUkyak5iQnlVMjFZNXJmTjlNMnhaRVc4dkRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83OTUwOTgtYTJmMC00NzMzLTk3MDkt ZTZlYjkxOWQ3YTAyLzEvS2s0TERnZEItQjgwMGY5dTN0V0NKN3ljNDJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC83OTUwOTgtYTJmMC00NzMzLTk3MDktZTZlYjkxOWQ3YTAy LzEvNUkyak5iQnlVMjFZNXJmTjlNMnhaRVc4dkRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDshTAAwQC uTpYAwQCw+FAMA0GCSqGSIb3DQEBCwUAA4IBAQBuHDD7RRTP17io8Adgbr+98Uuo LnXJ4K812AGvOAcYJZG0kTVuK0nzbD7bRg8Rsx8TIcj3nPf2eUDag/T3zhqqAP9Z YjZ5KXxGF3QI4v2uroPvlep0SBgmbWwExGMTwqDkfLsqPGCe80mmE0pAR8Mml0ID 760ldqcb1OHrIAvcC3MUFDIo0Ljx4sQWJD8fy16/HGeRWHGI5PvbZkGSXYDzE57O fhCRHfxoFSn9cXeLWakIqRY4BBy0cK69PeYc/FvB+wXEA82Uf61NeZxn/KkGKfOo L5H1kvFXVT57TM0zbN/QncngzLjNDvY0I2JVsiqVNHMVwhLD8vQr7C4pHDXd -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:16 2026 by rpki-client