This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/KtMqQnXaTgjktxdZ9isOcMNd_ow.roa File: KtMqQnXaTgjktxdZ9isOcMNd_ow.roa (raw, json) Hash identifier: EvEd1Dr3LRZFLdIp6Wy0JVab3CsirxaKCwus40x7MwU= Subject key identifier: 2A:D3:2A:42:75:DA:4E:08:E4:B7:17:59:F6:2B:0E:70:C3:5D:FE:8C Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50 Certificate serial: 019B7CEDFC91192B3AC4196C9AEB9BB3AD37 Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/KtMqQnXaTgjktxdZ9isOcMNd_ow.roa Signing time: Fri 02 Jan 2026 04:18:50 +0000 ROA not before: Fri 02 Jan 2026 04:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207104 IP address blocks: 185.163.156.0/24 maxlen: 24 185.163.157.0/24 maxlen: 24 185.163.158.0/24 maxlen: 24 185.163.159.0/24 maxlen: 24 185.191.32.0/24 maxlen: 24 185.191.33.0/24 maxlen: 24 185.191.34.0/24 maxlen: 24 2a0a:400:255::/48 maxlen: 48 2a0a:400:2000::/36 maxlen: 36 2a0a:400:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:fc:91:19:2b:3a:c4:19:6c:9a:eb:9b:b3:ad:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50 Validity Not Before: Jan 2 04:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ad32a4275da4e08e4b71759f62b0e70c35dfe8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:57:19:65:8d:1c:d5:81:ac:d4:fb:1c:a1:e5: 69:da:16:ae:12:54:47:8a:0a:e2:0f:ea:80:95:90: b9:a5:e7:52:72:d3:5e:1c:62:0b:56:84:63:75:d1: 71:75:2e:7d:91:85:ac:3c:1a:c7:78:c0:5f:1a:81: e3:a6:e6:76:b6:97:be:c3:83:27:f9:fc:bf:3b:ee: 28:1a:31:be:27:90:4d:36:66:47:2a:d7:11:6e:92: a3:f4:1f:8c:76:ca:68:35:ba:f0:b0:e0:d5:16:b1: d9:1d:9a:ae:05:0c:a6:e6:67:a5:fb:51:19:95:ae: 8f:26:ca:99:0f:dd:27:31:10:3d:ee:cc:0b:38:6a: 35:25:79:1c:10:3d:41:be:d7:74:9b:e9:30:6d:b5: ab:7f:2f:9d:68:c6:e1:e2:c1:f5:86:24:dc:06:66: ed:5c:2c:a3:1d:ed:15:bf:98:37:6a:8f:25:7c:cc: b6:b1:c6:9f:f3:49:14:6b:2c:d2:e1:98:aa:bc:f6: 7e:f4:12:91:37:12:ad:57:a0:98:96:7b:0d:c2:ed: 10:c6:2f:1e:bc:7a:2e:54:f1:67:3c:f9:a3:78:d7: 9b:70:99:1d:bc:a7:46:2c:bc:03:b6:ec:e8:64:cd: 3d:62:b7:59:6a:d3:75:f3:04:63:ba:e3:2c:bb:f9: 85:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D3:2A:42:75:DA:4E:08:E4:B7:17:59:F6:2B:0E:70:C3:5D:FE:8C X509v3 Authority Key Identifier: keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/KtMqQnXaTgjktxdZ9isOcMNd_ow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.163.156.0/22 185.191.32.0-185.191.34.255 IPv6: 2a0a:400:255::/48 2a0a:400:2000::/35 Signature Algorithm: sha256WithRSAEncryption 0e:f9:39:41:83:14:c7:25:11:be:78:06:67:bb:70:01:c1:9e: 8b:43:e6:88:b9:e1:50:15:b9:26:63:de:9e:29:a2:bf:91:e2: 8c:e0:86:09:32:15:5d:62:d3:7f:39:55:7b:15:18:18:f8:22: 07:7c:63:7a:26:4c:03:ba:92:4b:b1:bc:9f:13:ca:a7:e7:86: 27:1c:67:c6:12:b4:e6:73:25:fe:c9:db:66:03:92:bb:12:46: 08:9f:e0:13:8b:66:ad:67:97:b5:da:d4:8c:d6:5c:7e:67:7d: 7d:39:b2:29:ef:72:5e:a3:cd:a0:a1:09:44:2a:c2:5c:0e:84: 08:53:ea:1f:fa:3b:3e:ed:9a:fe:86:ff:1f:4d:c6:ef:57:f6: d4:cc:7a:d1:0a:a7:7d:32:f3:2c:6f:e1:96:36:bb:48:80:19: 9f:4f:01:54:0c:48:f7:e3:74:4c:bf:64:bd:48:98:95:46:7f: 8e:33:10:81:ad:b1:33:b8:2b:41:44:13:b7:1e:b6:cc:ac:73: ba:51:4b:b3:f2:db:c2:a7:52:f3:28:3b:8d:27:b5:d9:68:28: 8f:51:93:d2:10:de:aa:b7:b4:d2:d3:83:8d:52:98:f7:b7:53: 1e:03:0a:cc:1d:73:33:3e:cd:61:3b:09:04:fe:b4:60:23:89: d2:91:1b:c1 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt87fyRGSs6xBlsmuubs603MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OGUwMzIxMjcxMzMyYWZjNzdlNGM4NTc5ZjBlNTU1OWNj MDljNTAwHhcNMjYwMTAyMDQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWQzMmE0Mjc1ZGE0ZTA4ZTRiNzE3NTlmNjJiMGU3MGMzNWRmZThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1cZZY0c1YGs1PscoeVp2hauElRH igriD+qAlZC5pedSctNeHGILVoRjddFxdS59kYWsPBrHeMBfGoHjpuZ2tpe+w4Mn +fy/O+4oGjG+J5BNNmZHKtcRbpKj9B+MdspoNbrwsODVFrHZHZquBQym5mel+1EZ la6PJsqZD90nMRA97swLOGo1JXkcED1Bvtd0m+kwbbWrfy+daMbh4sH1hiTcBmbt XCyjHe0Vv5g3ao8lfMy2scaf80kUayzS4ZiqvPZ+9BKRNxKtV6CYlnsNwu0Qxi8e vHouVPFnPPmjeNebcJkdvKdGLLwDtuzoZM09YrdZatN18wRjuuMsu/mF4wIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFCrTKkJ12k4I5LcXWfYrDnDDXf6MMB8GA1UdIwQY MBaAFAiOAyEnEzKvx35MhXnw5VWcwJxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2Mt ZjZkOTY2Y2E0ZjA3LzEvS3RNcVFuWGFUZ2prdHhkWjlpc09jTU5kX293LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2MtZjZkOTY2Y2E0ZjA3 LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAaBAIAATAUAwQCuaOcMAwD BAW5vyADBAC5vyIwFwQCAAIwEQMHACoKBAACVQMGBSoKBAAgMA0GCSqGSIb3DQEB CwUAA4IBAQAO+TlBgxTHJRG+eAZnu3ABwZ6LQ+aIueFQFbkmY96eKaK/keKM4IYJ MhVdYtN/OVV7FRgY+CIHfGN6JkwDupJLsbyfE8qn54YnHGfGErTmcyX+ydtmA5K7 EkYIn+ATi2atZ5e12tSM1lx+Z319ObIp73Jeo82goQlEKsJcDoQIU+of+js+7Zr+ hv8fTcbvV/bUzHrRCqd9MvMsb+GWNrtIgBmfTwFUDEj343RMv2S9SJiVRn+OMxCB rbEzuCtBRBO3HrbMrHO6UUuz8tvCp1LzKDuNJ7XZaCiPUZPSEN6qt7TS04ONUpj3 t1MeAwrMHXMzPs1hOwkE/rRgI4nSkRvB -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:11 2026 by rpki-client