This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/koSDzK9BMWcT_m7iAHgbg8pIEbg.roa File: koSDzK9BMWcT_m7iAHgbg8pIEbg.roa (raw, json) Hash identifier: fZE3ZjzxdjyzETbDkVFHIeJeFB9j0UbTw+7dbZlHJG0= Subject key identifier: 92:84:83:CC:AF:41:31:67:13:FE:6E:E2:00:78:1B:83:CA:48:11:B8 Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66 Certificate serial: 019B77595F5B8B6CA225F6CBC1736C1EAECF Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/koSDzK9BMWcT_m7iAHgbg8pIEbg.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18811 IP address blocks: 185.129.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5f:5b:8b:6c:a2:25:f6:cb:c1:73:6c:1e:ae:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66 Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=928483ccaf41316713fe6ee200781b83ca4811b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:a0:3c:9e:3c:23:f5:b5:9f:3f:d4:48:e5: 12:0c:2e:01:db:c2:9e:27:e8:69:57:0f:84:df:be: 14:ab:65:62:ee:e3:7b:31:98:d9:f8:ce:2b:f1:f7: 12:0d:65:0e:fb:5e:2b:86:4a:09:fa:c0:d6:7a:9d: d6:1c:41:6f:29:3b:a7:0f:49:01:64:83:71:26:5b: 47:56:27:fb:3e:68:e5:dc:d8:5b:3c:24:14:50:80: f5:5d:78:4d:b3:f8:d0:e9:9e:42:ae:d9:ae:56:6a: dd:9a:8b:30:46:3d:db:e7:73:96:21:98:77:9b:65: 8e:fe:1f:51:fa:f1:04:af:fd:11:27:86:f4:e7:ff: 60:63:bf:e3:39:58:b3:a0:f6:bb:43:e6:40:e5:5b: d6:3d:8d:36:b8:54:a0:d3:96:f6:b1:d4:c8:6a:4f: 2d:c8:e6:69:00:39:16:ed:8e:00:c6:67:6c:e8:df: 4a:34:89:1c:fd:aa:67:40:77:f8:03:19:3e:41:27: ca:01:fb:5b:d1:99:b2:40:bf:82:f5:d9:81:e0:3e: 33:70:fd:5b:c2:1d:45:67:4e:10:23:af:c1:0e:0a: 47:a3:3f:1a:d4:52:db:07:cd:51:9f:71:19:fa:ea: fd:ad:d8:19:3a:6b:15:e2:8c:e7:0f:04:6b:79:2e: 2c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:84:83:CC:AF:41:31:67:13:FE:6E:E2:00:78:1B:83:CA:48:11:B8 X509v3 Authority Key Identifier: keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/koSDzK9BMWcT_m7iAHgbg8pIEbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.208.0/22 Signature Algorithm: sha256WithRSAEncryption 99:b1:74:78:69:bf:3f:07:03:5d:bb:4a:4c:dc:a1:c9:76:d6: 58:33:b9:a5:bb:91:bc:3e:77:bc:24:3c:0e:b8:50:f9:f7:53: 4f:6c:12:de:e9:51:d2:92:65:02:1a:bd:ed:dc:d7:84:a7:5c: b1:b0:ae:42:80:cc:d2:5d:d7:e7:32:ca:05:b2:a0:ca:84:3d: e3:30:64:2e:2e:c8:79:2b:0e:9c:39:df:45:61:9c:88:19:fb: 52:c6:0a:96:57:53:c3:76:a9:f2:68:c7:2a:42:2f:01:fb:f1: 30:ea:ad:8a:af:aa:d7:b3:b8:0b:b6:b8:4e:f9:8c:af:e5:1e: f6:1e:eb:60:92:35:b7:07:13:f8:82:d8:6c:6b:53:6e:d1:63: 86:45:00:7e:69:d4:fc:81:f1:ae:df:96:90:fb:5f:18:7d:a9: 61:e1:2e:60:4c:c5:ca:34:04:4e:fd:68:10:e8:5f:7b:5b:0b: 1d:6f:72:e5:38:ba:40:0b:e7:fc:93:a6:a8:20:24:44:a3:3e: f7:01:49:f1:dc:62:4a:bd:b4:79:b0:56:92:c1:f5:d8:d5:35: 27:2c:14:9d:a7:f5:fd:1c:90:6b:d2:f2:78:e4:81:f8:cf:aa: 39:01:b5:8a:ef:46:ac:52:70:a9:98:b7:d7:eb:9b:d5:56:93: a1:94:df:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WV9bi2yiJfbLwXNsHq7PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MWJkN2RkMWY4YWM4YjQxOTJiYTc4YTU5MjM0OGI1ZGQw YTFhNjYwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mjg0ODNjY2FmNDEzMTY3MTNmZTZlZTIwMDc4MWI4M2NhNDgxMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswagPJ48I/W1nz/USOUSDC4B28Ke J+hpVw+E374Uq2Vi7uN7MZjZ+M4r8fcSDWUO+14rhkoJ+sDWep3WHEFvKTunD0kB ZINxJltHVif7Pmjl3NhbPCQUUID1XXhNs/jQ6Z5CrtmuVmrdmoswRj3b53OWIZh3 m2WO/h9R+vEEr/0RJ4b05/9gY7/jOVizoPa7Q+ZA5VvWPY02uFSg05b2sdTIak8t yOZpADkW7Y4Axmds6N9KNIkc/apnQHf4Axk+QSfKAftb0ZmyQL+C9dmB4D4zcP1b wh1FZ04QI6/BDgpHoz8a1FLbB81Rn3EZ+ur9rdgZOmsV4oznDwRreS4sbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJKEg8yvQTFnE/5u4gB4G4PKSBG4MB8GA1UdIwQY MBaAFOYb190fisi0GSunilkjSLXdChpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2Njct ZGU5YjJmOGY3ZTI5LzEva29TRHpLOUJNV2NUX203aUFIZ2JnOHBJRWJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2NjctZGU5YjJmOGY3ZTI5 LzEvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYHQMA0G CSqGSIb3DQEBCwUAA4IBAQCZsXR4ab8/BwNdu0pM3KHJdtZYM7mlu5G8Pne8JDwO uFD591NPbBLe6VHSkmUCGr3t3NeEp1yxsK5CgMzSXdfnMsoFsqDKhD3jMGQuLsh5 Kw6cOd9FYZyIGftSxgqWV1PDdqnyaMcqQi8B+/Ew6q2Kr6rXs7gLtrhO+Yyv5R72 HutgkjW3BxP4gthsa1Nu0WOGRQB+adT8gfGu35aQ+18Yfalh4S5gTMXKNARO/WgQ 6F97Wwsdb3LlOLpAC+f8k6aoICREoz73AUnx3GJKvbR5sFaSwfXY1TUnLBSdp/X9 HJBr0vJ45IH4z6o5AbWK70asUnCpmLfX65vVVpOhlN9Q -----END CERTIFICATE-----Generated at Wed Jan 21 11:24:43 2026 by rpki-client