This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/Kk8zKDuBw5v8OusgE_Xxlk9DnAw.roa File: Kk8zKDuBw5v8OusgE_Xxlk9DnAw.roa (raw, json) Hash identifier: xscBDT6c6gkdHFrRsZjyluPSGQ6QR97y0pWD2imFtVE= Subject key identifier: 2A:4F:33:28:3B:81:C3:9B:FC:3A:EB:20:13:F5:F1:96:4F:43:9C:0C Certificate issuer: /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e Certificate serial: 019B7CEE08FB1FA7C536D065B0DA4749D542 Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/Kk8zKDuBw5v8OusgE_Xxlk9DnAw.roa Signing time: Fri 02 Jan 2026 04:18:53 +0000 ROA not before: Fri 02 Jan 2026 04:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12952 IP address blocks: 185.118.128.0/24 maxlen: 24 185.118.129.0/24 maxlen: 24 185.118.130.0/24 maxlen: 24 185.118.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:08:fb:1f:a7:c5:36:d0:65:b0:da:47:49:d5:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e Validity Not Before: Jan 2 04:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a4f33283b81c39bfc3aeb2013f5f1964f439c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0d:51:43:99:36:e8:01:6b:b4:af:de:58:3c: 3c:a9:20:ff:d0:11:f9:86:d1:28:85:32:e4:dd:0d: c5:2f:ed:65:d9:55:85:c0:63:fc:7c:b5:fe:0c:f2: 25:cb:21:22:16:6a:bd:1a:20:7c:20:b6:fe:60:eb: 13:e3:2f:2c:1f:b8:d1:dd:60:15:c7:e5:04:8b:a9: 23:3e:81:82:48:f4:6d:79:8a:4d:74:dc:76:f3:f4: 57:87:9c:95:13:16:f3:89:37:d1:06:4f:4d:0e:7a: de:02:fe:1c:8a:dd:86:70:cb:c0:8f:d5:fa:4b:2e: d9:59:d0:93:cf:c2:a5:b0:ab:e3:16:d9:d2:86:3b: 95:77:47:6c:27:aa:bb:c6:65:55:34:b5:7f:92:a8: 3a:24:d5:2e:8a:38:76:a7:7e:89:c1:c9:cb:cd:18: e4:c2:ea:46:12:bf:fc:5d:e1:eb:1d:b1:4f:54:2f: 5c:a6:91:8c:01:a8:47:46:d8:f3:8e:36:b7:52:0e: 88:6b:8f:b4:ee:39:b7:ad:ee:4b:7a:d6:d4:ea:5a: 31:27:e1:4d:51:e0:36:12:94:2a:3b:05:67:59:81: 28:ba:bb:95:f7:21:87:59:de:b2:cb:9e:b4:e8:77: 1a:08:02:8c:58:7e:90:02:e7:4a:8a:38:b0:d4:e4: 9a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4F:33:28:3B:81:C3:9B:FC:3A:EB:20:13:F5:F1:96:4F:43:9C:0C X509v3 Authority Key Identifier: keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/Kk8zKDuBw5v8OusgE_Xxlk9DnAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.128.0/22 Signature Algorithm: sha256WithRSAEncryption 14:47:4c:ed:36:2b:51:b6:f9:a2:2e:97:14:a6:a2:9d:29:62: 11:72:ae:63:38:81:40:7c:98:22:53:02:27:ad:7d:31:35:85: e0:5a:1c:53:e4:21:61:fa:6d:7a:94:95:a8:f7:8f:07:19:d4: 3e:f6:4d:11:b8:a0:da:24:1e:81:d2:f0:8a:9f:f0:0d:28:39: a4:92:7a:2a:44:cd:52:8f:7f:04:74:3d:6b:b3:c7:ec:d8:24: 41:f9:24:9c:c3:a2:4a:bb:41:1e:8b:53:63:b9:e5:7c:4c:9c: f4:29:0e:27:73:cd:f3:db:10:a1:2e:e6:2d:0b:13:17:a5:9b: 03:86:8c:ce:0b:03:92:2e:a1:bd:5d:c6:76:a3:cc:75:69:8f: 43:4c:e5:80:52:f3:62:53:92:07:bb:7e:99:17:e3:7b:f6:4c: 96:9f:1f:69:2f:e4:6e:d6:40:f2:ac:11:54:1f:77:48:44:8b: 76:1f:99:4c:c3:d2:cf:4c:55:1c:a3:61:58:c4:ee:80:ea:5a: d7:6d:0c:b9:a0:41:ed:a1:4d:ce:80:f1:1a:de:20:08:83:ef: 4c:d5:df:f5:d3:6f:30:99:fa:6c:c6:a9:37:f8:d6:48:76:3c: 2b:53:65:f4:2e:85:96:6b:18:0e:e6:0a:d3:af:41:60:51:0b: 86:7e:48:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gj7H6fFNtBlsNpHSdVCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YTFlYWJhZmUyZGU3MDM4MjI3YTg1OTNhN2FjNWNjMzky ZjM3NGUwHhcNMjYwMTAyMDQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTRmMzMyODNiODFjMzliZmMzYWViMjAxM2Y1ZjE5NjRmNDM5YzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q1RQ5k26AFrtK/eWDw8qSD/0BH5 htEohTLk3Q3FL+1l2VWFwGP8fLX+DPIlyyEiFmq9GiB8ILb+YOsT4y8sH7jR3WAV x+UEi6kjPoGCSPRteYpNdNx28/RXh5yVExbziTfRBk9NDnreAv4cit2GcMvAj9X6 Sy7ZWdCTz8KlsKvjFtnShjuVd0dsJ6q7xmVVNLV/kqg6JNUuijh2p36JwcnLzRjk wupGEr/8XeHrHbFPVC9cppGMAahHRtjzjja3Ug6Ia4+07jm3re5LetbU6loxJ+FN UeA2EpQqOwVnWYEouruV9yGHWd6yy5606HcaCAKMWH6QAudKijiw1OSahwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCpPMyg7gcOb/DrrIBP18ZZPQ5wMMB8GA1UdIwQY MBaAFKWh6rr+LecDgieoWTp6xcw5LzdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFIcXV2NHQ1d09DSjZoWk9uckZ6RGt2TjA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80ZjRiNGUtMjNjYy00YzNhLTkwYWYt NGVmMzk1MTRhYTQzLzEvS2s4ektEdUJ3NXY4T3VzZ0VfWHhsazlEbkF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC80ZjRiNGUtMjNjYy00YzNhLTkwYWYtNGVmMzk1MTRhYTQz LzEvcGFIcXV2NHQ1d09DSjZoWk9uckZ6RGt2TjA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXaAMA0G CSqGSIb3DQEBCwUAA4IBAQAUR0ztNitRtvmiLpcUpqKdKWIRcq5jOIFAfJgiUwIn rX0xNYXgWhxT5CFh+m16lJWo948HGdQ+9k0RuKDaJB6B0vCKn/ANKDmkknoqRM1S j38EdD1rs8fs2CRB+SScw6JKu0Eei1NjueV8TJz0KQ4nc83z2xChLuYtCxMXpZsD hozOCwOSLqG9XcZ2o8x1aY9DTOWAUvNiU5IHu36ZF+N79kyWnx9pL+Ru1kDyrBFU H3dIRIt2H5lMw9LPTFUco2FYxO6A6lrXbQy5oEHtoU3OgPEa3iAIg+9M1d/1028w mfpsxqk3+NZIdjwrU2X0LoWWaxgO5grTr0FgUQuGfkj9 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:17 2026 by rpki-client