This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kcIJ-oCjoPtWn93UkQUt7aTXfVg.roa File: kcIJ-oCjoPtWn93UkQUt7aTXfVg.roa (raw, json) Hash identifier: qq8hk7IVcBTi/9lJHh3EWNa6SlTaN/naq59Qa9myjso= Subject key identifier: 91:C2:09:FA:80:A3:A0:FB:56:9F:DD:D4:91:05:2D:ED:A4:D7:7D:58 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B9D2A9F3EE42AF0FCB82E20B019EEA152 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kcIJ-oCjoPtWn93UkQUt7aTXfVg.roa Signing time: Thu 08 Jan 2026 10:32:54 +0000 ROA not before: Thu 08 Jan 2026 10:32:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149573 IP address blocks: 185.209.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:2a:9f:3e:e4:2a:f0:fc:b8:2e:20:b0:19:ee:a1:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 8 10:32:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91c209fa80a3a0fb569fddd491052deda4d77d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8c:01:cb:89:71:2f:43:c0:66:80:41:7b:1b: 82:b1:00:eb:91:59:9d:31:07:3d:da:9e:92:a2:62: 7b:3d:18:7d:3f:2b:eb:b7:a2:b5:fb:0c:f5:7c:b4: a8:ae:ae:2d:f4:38:54:8f:45:1d:0c:27:a7:74:b3: 19:db:d9:d4:cc:46:07:6a:82:da:00:d9:e1:ab:1f: 51:12:bc:96:8b:78:0d:d0:7a:33:95:55:43:ea:3b: 66:ad:f9:f3:e7:e9:14:f6:3d:8d:34:fb:fa:16:00: da:28:93:83:a1:2d:fc:62:c2:8b:9f:67:56:08:c2: 1d:78:49:4b:64:a9:f4:36:2c:85:e9:68:d4:4e:ae: a7:36:65:95:cf:67:d0:60:ee:6f:3e:ce:d0:75:bc: 62:d4:e9:e5:4d:9f:c0:96:de:62:e0:3c:91:f9:0e: fd:a7:9e:4d:ff:bc:cc:64:aa:e6:b2:8d:68:66:6e: 01:97:84:75:09:cf:9a:0d:ba:a7:9c:ec:fa:6e:f3: 23:aa:93:7d:cf:f8:63:c1:12:8f:60:05:a4:49:a2: 21:86:12:14:e2:cb:3a:d2:18:24:ce:be:a4:85:80: 64:2d:93:c6:86:14:ac:ec:b7:9f:51:8a:e1:a1:60: a8:8a:2d:71:fc:d2:9c:09:ad:63:2b:79:b4:8d:b1: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C2:09:FA:80:A3:A0:FB:56:9F:DD:D4:91:05:2D:ED:A4:D7:7D:58 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kcIJ-oCjoPtWn93UkQUt7aTXfVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.75.0/24 Signature Algorithm: sha256WithRSAEncryption c0:d7:8c:43:79:34:a6:7d:9d:e0:d9:90:d7:87:6a:ad:74:50: 43:b0:c9:aa:e2:91:15:1e:82:b7:3b:71:26:cf:3b:f0:30:8d: 74:06:25:6e:a3:a1:c7:2c:98:f1:d9:7b:16:3f:90:9f:75:e8: a0:80:25:84:dc:36:98:9d:55:df:b4:95:44:b9:04:2e:0c:81: c5:fe:13:66:9b:a7:53:49:4f:06:89:d7:9f:1c:ae:47:84:dc: 22:fb:86:78:80:eb:fc:70:d4:4a:00:cc:ae:40:a4:0c:fc:f6: 64:bb:04:bc:90:78:0e:b0:3d:6e:6a:ea:ee:3f:dd:0f:ce:0c: 1f:06:8c:fa:db:e1:bb:c7:60:0e:46:fb:4c:6f:a3:aa:e7:86: de:a9:fc:3b:f5:01:91:83:e3:65:cb:25:1d:16:64:94:76:fa: eb:39:a7:59:cf:87:17:b0:3d:70:a6:db:c8:23:9f:99:13:3f: 00:b8:71:9d:c9:63:ca:52:17:6c:d0:41:99:05:36:30:5c:ed: 6b:da:85:4f:eb:5b:44:2e:d3:cd:db:7f:4d:da:a0:53:9d:ad: 8b:71:f3:dd:15:e7:78:d4:27:6e:eb:ad:6c:a7:5b:8d:ca:54: 32:6a:01:e6:5a:84:bb:ae:85:5e:bc:69:c7:28:cb:66:5b:c4: 10:8c:ed:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZudKp8+5Crw/LguILAZ7qFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTA4MTAzMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWMyMDlmYTgwYTNhMGZiNTY5ZmRkZDQ5MTA1MmRlZGE0ZDc3ZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4wBy4lxL0PAZoBBexuCsQDrkVmd MQc92p6SomJ7PRh9Pyvrt6K1+wz1fLSorq4t9DhUj0UdDCendLMZ29nUzEYHaoLa ANnhqx9REryWi3gN0HozlVVD6jtmrfnz5+kU9j2NNPv6FgDaKJODoS38YsKLn2dW CMIdeElLZKn0NiyF6WjUTq6nNmWVz2fQYO5vPs7Qdbxi1OnlTZ/Alt5i4DyR+Q79 p55N/7zMZKrmso1oZm4Bl4R1Cc+aDbqnnOz6bvMjqpN9z/hjwRKPYAWkSaIhhhIU 4ss60hgkzr6khYBkLZPGhhSs7LefUYrhoWCoii1x/NKcCa1jK3m0jbEZ7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJHCCfqAo6D7Vp/d1JEFLe2k131YMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEva2NJSi1vQ2pvUHRXbjkzVWtRVXQ3YVRYZlZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudFLMA0G CSqGSIb3DQEBCwUAA4IBAQDA14xDeTSmfZ3g2ZDXh2qtdFBDsMmq4pEVHoK3O3Em zzvwMI10BiVuo6HHLJjx2XsWP5CfdeiggCWE3DaYnVXftJVEuQQuDIHF/hNmm6dT SU8GidefHK5HhNwi+4Z4gOv8cNRKAMyuQKQM/PZkuwS8kHgOsD1uauruP90Pzgwf Boz62+G7x2AORvtMb6Oq54beqfw79QGRg+NlyyUdFmSUdvrrOadZz4cXsD1wptvI I5+ZEz8AuHGdyWPKUhds0EGZBTYwXO1r2oVP61tELtPN239N2qBTna2LcfPdFed4 1Cdu661sp1uNylQyagHmWoS7roVevGnHKMtmW8QQjO3Q -----END CERTIFICATE-----Generated at Fri Jan 9 18:38:13 2026 by rpki-client