This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/ksdw21uo8tL2LhVO0SZTaj0xN_A.roa File: ksdw21uo8tL2LhVO0SZTaj0xN_A.roa (raw, json) Hash identifier: SG7h3EKzF4YmgDHN6t8CLka5u3+CMxZHGn0rZ97GjLw= Subject key identifier: 92:C7:70:DB:5B:A8:F2:D2:F6:2E:15:4E:D1:26:53:6A:3D:31:37:F0 Certificate issuer: /CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4 Certificate serial: 019B7A5AD7F6184E6BAB9856519697CC59BC Authority key identifier: 56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/ksdw21uo8tL2LhVO0SZTaj0xN_A.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199403 IP address blocks: 185.17.208.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d7:f6:18:4e:6b:ab:98:56:51:96:97:cc:59:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4 Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92c770db5ba8f2d2f62e154ed126536a3d3137f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a7:1a:3b:95:1b:fe:16:ab:d1:c0:05:01:57: 6e:90:dc:75:1a:a7:e1:47:ca:7b:b7:dc:38:d8:07: 54:2a:c9:65:b6:10:d6:ed:89:54:20:74:30:20:33: 47:d1:cc:13:d6:94:d5:0e:65:10:5d:65:2c:af:f1: b7:af:7f:8b:11:52:a0:c2:06:62:f4:6b:a3:c7:fa: 87:ce:1e:b2:23:28:1f:f1:05:ea:47:35:a4:9a:0a: 91:60:96:db:c9:f2:a7:8d:fa:17:79:f4:4a:56:ce: 46:75:94:b7:ee:e9:2e:35:c5:5e:7d:1f:57:10:0f: c1:a1:48:1f:29:dd:14:1c:98:b8:d2:ce:1b:c3:52: 50:29:22:2b:31:91:fd:e9:21:a7:07:64:35:43:c7: 23:3a:fd:5f:bc:a4:4c:d1:79:64:19:18:09:1c:7b: 2d:92:23:16:6b:01:8b:55:bc:ee:7c:24:9d:ba:0f: 77:91:bf:ae:11:a8:42:39:d2:49:79:94:12:b8:07: 25:11:44:b7:60:d7:dd:58:59:73:6e:e7:b4:a3:98: b0:de:5a:5f:ed:12:ae:01:c1:33:d3:d6:3d:67:c6: 4a:80:a5:85:f7:d7:87:68:c5:b9:2e:70:e8:8e:be: 1c:d6:ff:45:2b:f5:8f:9f:5d:d9:bd:e8:7b:87:4a: 6b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C7:70:DB:5B:A8:F2:D2:F6:2E:15:4E:D1:26:53:6A:3D:31:37:F0 X509v3 Authority Key Identifier: keyid:56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/ksdw21uo8tL2LhVO0SZTaj0xN_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.17.208.0/22 Signature Algorithm: sha256WithRSAEncryption 71:94:5a:51:58:bd:9e:4f:78:f7:1d:9e:1d:23:a0:79:6e:c1: 6d:3e:da:bc:46:6c:c3:cc:6c:52:c4:21:25:85:a4:10:d7:d8: ac:2a:d2:f8:fe:b1:b4:15:04:b7:aa:38:6a:a0:e6:18:11:11: db:4e:67:90:f5:e0:f9:67:db:04:ee:bd:a1:b0:a9:ec:13:b6: 87:c2:19:d5:53:75:57:a5:7c:00:15:e0:d5:47:56:ec:46:d7: 6e:96:35:45:14:47:25:e9:b6:41:a9:8c:0f:d9:04:9e:bc:f5: 60:fb:44:f2:d9:bc:65:80:0d:c3:ce:39:2b:23:15:a6:3c:3e: fa:fa:4a:4a:7f:77:4c:87:83:db:2e:7f:47:09:7e:b2:cd:21: f5:fc:b4:04:8e:1e:1f:43:00:1b:cc:85:72:79:38:24:69:b0: 29:03:28:15:71:5e:01:ba:17:bd:d1:68:79:b2:de:8e:5e:4a: b4:ba:85:c7:de:3d:85:1a:69:bd:8c:8d:54:5d:be:22:e0:24: 47:59:10:4f:e7:94:aa:de:66:f5:c6:12:f9:28:da:5a:aa:e2: ed:38:51:e8:c8:8c:25:6d:92:95:a9:ec:5e:e0:00:17:37:fb: 30:6d:85:f6:c4:3d:10:6a:19:2d:32:ca:07:8d:fe:7f:94:f2: d0:c6:04:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wtf2GE5rq5hWUZaXzFm8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Y2M3ZjRhYzcwMGJiNWFkN2Y0YjIxYzExMTExNDkzZmY2 OTc3YTQwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmM3NzBkYjViYThmMmQyZjYyZTE1NGVkMTI2NTM2YTNkMzEzN2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6caO5Ub/har0cAFAVdukNx1Gqfh R8p7t9w42AdUKsllthDW7YlUIHQwIDNH0cwT1pTVDmUQXWUsr/G3r3+LEVKgwgZi 9Gujx/qHzh6yIygf8QXqRzWkmgqRYJbbyfKnjfoXefRKVs5GdZS37ukuNcVefR9X EA/BoUgfKd0UHJi40s4bw1JQKSIrMZH96SGnB2Q1Q8cjOv1fvKRM0XlkGRgJHHst kiMWawGLVbzufCSdug93kb+uEahCOdJJeZQSuAclEUS3YNfdWFlzbue0o5iw3lpf 7RKuAcEz09Y9Z8ZKgKWF99eHaMW5LnDojr4c1v9FK/WPn13Zveh7h0prnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJLHcNtbqPLS9i4VTtEmU2o9MTfwMB8GA1UdIwQY MBaAFFbMf0rHALta1/SyHBERFJP/aXekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wOWJmOTgtNTkwZC00YWQ1LTllYjMt OWI4NmJmZmM4MzNjLzEva3NkdzIxdW84dEwyTGhWTzBTWlRhajB4Tl9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8wOWJmOTgtNTkwZC00YWQ1LTllYjMtOWI4NmJmZmM4MzNj LzEvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRHQMA0G CSqGSIb3DQEBCwUAA4IBAQBxlFpRWL2eT3j3HZ4dI6B5bsFtPtq8RmzDzGxSxCEl haQQ19isKtL4/rG0FQS3qjhqoOYYERHbTmeQ9eD5Z9sE7r2hsKnsE7aHwhnVU3VX pXwAFeDVR1bsRtduljVFFEcl6bZBqYwP2QSevPVg+0Ty2bxlgA3DzjkrIxWmPD76 +kpKf3dMh4PbLn9HCX6yzSH1/LQEjh4fQwAbzIVyeTgkabApAygVcV4Buhe90Wh5 st6OXkq0uoXH3j2FGmm9jI1UXb4i4CRHWRBP55Sq3mb1xhL5KNpaquLtOFHoyIwl bZKVqexe4AAXN/swbYX2xD0QahktMsoHjf5/lPLQxgQ4 -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:07 2026 by rpki-client