This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/kGs2CN6_e0xkRivoWWWOkB6ji5k.roa File: kGs2CN6_e0xkRivoWWWOkB6ji5k.roa (raw, json) Hash identifier: vKSRNSEdzjM8f691yctADnRRRhHUZVtmMQKdxtUVPWE= Subject key identifier: 90:6B:36:08:DE:BF:7B:4C:64:46:2B:E8:59:65:8E:90:1E:A3:8B:99 Certificate issuer: /CN=36a9b82bd59aca6340f6df54fe8d33600b7e91e4 Certificate serial: 019B7910E7F6D041250AA8284D02A0268EDC Authority key identifier: 36:A9:B8:2B:D5:9A:CA:63:40:F6:DF:54:FE:8D:33:60:0B:7E:91:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqm4K9WaymNA9t9U_o0zYAt-keQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/kGs2CN6_e0xkRivoWWWOkB6ji5k.roa Signing time: Thu 01 Jan 2026 10:18:29 +0000 ROA not before: Thu 01 Jan 2026 10:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205476 IP address blocks: 185.136.209.0/24 maxlen: 24 185.136.210.0/24 maxlen: 24 185.136.211.0/24 maxlen: 24 2a06:fec0:3203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Nqm4K9WaymNA9t9U_o0zYAt-keQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e7:f6:d0:41:25:0a:a8:28:4d:02:a0:26:8e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36a9b82bd59aca6340f6df54fe8d33600b7e91e4 Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=906b3608debf7b4c64462be859658e901ea38b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:98:b3:fa:a6:da:65:70:d8:6e:f2:bb:50:dc: 49:1e:8b:1c:a3:54:68:93:62:68:55:5c:e2:4e:62: 6f:f0:2f:ec:ba:dd:29:d2:1d:d3:de:fb:07:27:b0: 88:a8:b6:97:37:08:2e:4e:b7:5d:bf:a9:d1:46:3c: d8:43:1f:b1:9f:cd:42:4b:2a:e6:f7:d8:78:77:02: 48:e8:ae:b9:c7:a6:c6:96:ef:0a:50:f0:4a:63:1a: 42:5f:35:1b:bd:7f:a0:1c:73:ef:15:39:08:c1:8d: 39:8f:28:6a:d8:e3:28:87:35:1e:27:2b:eb:0c:5c: 23:d4:69:a3:98:2d:e3:07:fb:95:4d:fa:65:9c:e8: 6d:08:53:d5:c6:5b:1a:da:c1:2a:ac:fd:9e:d9:36: 94:06:1b:a2:4f:9e:00:61:f2:64:15:c8:da:ea:80: ef:4f:68:aa:81:05:d7:53:79:24:d7:91:60:92:1c: f1:ab:94:5d:25:60:1d:ae:99:31:aa:47:c4:a7:eb: 5a:47:47:0f:4a:39:1d:0a:64:39:08:e6:71:cb:61: 39:d0:2a:a8:2a:02:de:0d:b8:45:b3:9b:5e:5d:6e: 64:29:d6:16:d9:8d:8b:4f:30:49:b2:69:19:8f:9c: a6:fd:39:68:73:b1:a8:96:c6:55:4a:1e:f9:8f:f7: ff:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6B:36:08:DE:BF:7B:4C:64:46:2B:E8:59:65:8E:90:1E:A3:8B:99 X509v3 Authority Key Identifier: keyid:36:A9:B8:2B:D5:9A:CA:63:40:F6:DF:54:FE:8D:33:60:0B:7E:91:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqm4K9WaymNA9t9U_o0zYAt-keQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/kGs2CN6_e0xkRivoWWWOkB6ji5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.209.0-185.136.211.255 IPv6: 2a06:fec0:3203::/48 Signature Algorithm: sha256WithRSAEncryption 94:69:8a:24:d1:42:c3:45:87:92:29:c6:65:c2:08:e3:55:78: dc:9c:43:01:10:7e:7f:0b:b0:c1:45:5a:e4:a5:32:1e:74:1c: 57:7f:5b:78:5c:88:00:b7:9b:94:a7:d0:34:09:5b:40:28:ec: f8:a9:90:f6:5e:1e:b2:75:e5:0d:93:a7:5c:8a:40:54:8d:f4: 99:66:a7:a5:56:11:98:74:34:35:5d:1e:c7:8c:13:d1:4f:1b: 9c:24:fe:32:a7:db:38:32:a3:73:39:48:d4:29:62:13:bb:32: 19:90:17:31:fb:53:4b:60:ae:02:a7:3a:7a:94:8f:42:b3:ba: a1:ba:85:fa:4f:06:8d:dc:b7:b2:e9:59:a1:e9:d2:a8:fa:b9: 5e:18:9c:26:48:d9:f7:f0:82:69:b6:a3:61:d3:1b:a2:e6:81: da:b2:9a:47:b5:63:ec:31:98:3e:40:15:16:e4:1b:b8:3d:43: bc:98:6d:89:a8:38:05:2e:9c:04:0c:cd:45:02:f5:c2:d9:8c: 8a:53:43:bc:93:93:2d:69:2e:4b:bb:e7:d9:cf:ed:fe:d1:75: 36:10:6c:08:c3:0b:12:92:1e:1b:7e:71:46:2d:cc:11:42:21: f1:b1:53:b5:09:7e:d7:8a:21:97:c9:44:f8:91:75:76:e4:24: 5e:ee:dd:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5EOf20EElCqgoTQKgJo7cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YTliODJiZDU5YWNhNjM0MGY2ZGY1NGZlOGQzMzYwMGI3 ZTkxZTQwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDZiMzYwOGRlYmY3YjRjNjQ0NjJiZTg1OTY1OGU5MDFlYTM4Yjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7piz+qbaZXDYbvK7UNxJHosco1Ro k2JoVVziTmJv8C/sut0p0h3T3vsHJ7CIqLaXNwguTrddv6nRRjzYQx+xn81CSyrm 99h4dwJI6K65x6bGlu8KUPBKYxpCXzUbvX+gHHPvFTkIwY05jyhq2OMohzUeJyvr DFwj1GmjmC3jB/uVTfplnOhtCFPVxlsa2sEqrP2e2TaUBhuiT54AYfJkFcja6oDv T2iqgQXXU3kk15Fgkhzxq5RdJWAdrpkxqkfEp+taR0cPSjkdCmQ5COZxy2E50Cqo KgLeDbhFs5teXW5kKdYW2Y2LTzBJsmkZj5ym/Tloc7GolsZVSh75j/f/GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBrNgjev3tMZEYr6FlljpAeo4uZMB8GA1UdIwQY MBaAFDapuCvVmspjQPbfVP6NM2ALfpHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnFtNEs5V2F5bU5BOXQ5VV9vMHpZQXQta2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81NmI0YzEtODAxNS00MTg5LWEzZTUt NWFkMzAyNmQ4ZjI4LzEva0dzMkNONl9lMHhrUml2b1dXV09rQjZqaTVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81NmI0YzEtODAxNS00MTg5LWEzZTUtNWFkMzAyNmQ4ZjI4 LzEvTnFtNEs5V2F5bU5BOXQ5VV9vMHpZQXQta2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAC5iNED BAK5iNAwDwQCAAIwCQMHACoG/sAyAzANBgkqhkiG9w0BAQsFAAOCAQEAlGmKJNFC w0WHkinGZcII41V43JxDARB+fwuwwUVa5KUyHnQcV39beFyIALeblKfQNAlbQCjs +KmQ9l4esnXlDZOnXIpAVI30mWanpVYRmHQ0NV0ex4wT0U8bnCT+MqfbODKjczlI 1CliE7syGZAXMftTS2CuAqc6epSPQrO6obqF+k8Gjdy3sulZoenSqPq5XhicJkjZ 9/CCabajYdMbouaB2rKaR7Vj7DGYPkAVFuQbuD1DvJhtiag4BS6cBAzNRQL1wtmM ilNDvJOTLWkuS7vn2c/t/tF1NhBsCMMLEpIeG35xRi3MEUIh8bFTtQl+14ohl8lE +JF1duQkXu7dtw== -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:57 2026 by rpki-client