This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/k1jUiB18FcQkB0JlR9kMswQdw1M.roa File: k1jUiB18FcQkB0JlR9kMswQdw1M.roa (raw, json) Hash identifier: CfSBzFps5ykYGRlVBhnlga1YMIkO7XIfB2LTKOI9Iko= Subject key identifier: 93:58:D4:88:1D:7C:15:C4:24:07:42:65:47:D9:0C:B3:04:1D:C3:53 Certificate issuer: /CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb Certificate serial: 019B7B369023B651BD498AC6EF967605EB09 Authority key identifier: A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/k1jUiB18FcQkB0JlR9kMswQdw1M.roa Signing time: Thu 01 Jan 2026 20:18:51 +0000 ROA not before: Thu 01 Jan 2026 20:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30884 IP address blocks: 185.92.156.0/22 maxlen: 22 185.93.132.0/22 maxlen: 22 2a05:f280::/29 maxlen: 29 2a05:fa00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:90:23:b6:51:bd:49:8a:c6:ef:96:76:05:eb:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb Validity Not Before: Jan 1 20:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9358d4881d7c15c42407426547d90cb3041dc353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:4b:a0:16:cd:6d:31:62:01:2d:da:f4:b3: c1:cc:a4:02:b1:55:f7:8e:ed:f9:57:2c:a1:05:5f: 69:f4:04:5c:31:1b:92:8c:96:d7:06:9a:d0:7b:f2: 51:4c:91:34:0b:ec:ef:01:0d:0c:dc:2c:2c:a5:65: 9a:b3:91:37:60:51:3d:de:dc:7b:fa:ce:3d:fb:f0: fc:c3:55:fc:66:3b:e7:dd:26:d6:c6:fb:01:fc:79: a3:23:c7:84:59:e1:65:08:9f:34:38:29:de:a0:35: b1:1b:7d:6a:00:d3:4f:0b:10:b4:77:86:b5:e9:0c: d4:1a:47:32:ca:cb:5d:51:43:f7:23:87:ee:10:40: 1a:91:1b:a7:dc:73:fd:90:9e:a7:cd:06:aa:7f:e5: c8:59:0c:2c:cf:18:cb:a5:62:b3:5c:bf:f7:c1:36: 9e:ec:76:53:60:23:b5:b7:5c:a5:13:3d:e4:2f:c9: e3:58:ae:76:bc:02:d1:6c:88:f9:84:0c:97:90:f7: 3e:c7:cd:47:b2:c6:8e:43:ab:90:10:33:ba:ff:bd: f2:d4:da:b5:a2:ec:a8:60:cb:44:17:d9:a4:cd:29: d2:99:53:e3:54:bc:66:af:99:a1:6b:e5:46:04:24: 10:d7:8e:4e:b3:34:cb:da:f0:e5:28:90:68:7d:bf: be:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:58:D4:88:1D:7C:15:C4:24:07:42:65:47:D9:0C:B3:04:1D:C3:53 X509v3 Authority Key Identifier: keyid:A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/k1jUiB18FcQkB0JlR9kMswQdw1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.156.0/22 185.93.132.0/22 IPv6: 2a05:f280::/29 2a05:fa00::/29 Signature Algorithm: sha256WithRSAEncryption 9e:81:f2:8a:cb:25:90:06:01:33:a8:30:77:bc:01:08:b3:0b: 6a:3d:6b:c7:29:ae:76:fc:9c:33:e6:81:cc:c7:08:32:4b:85: 94:46:e5:99:33:82:d1:b1:85:8c:25:bd:fc:b0:f3:f4:cb:66: 8d:ab:c5:23:46:70:2f:38:80:b2:18:4d:b2:45:39:6a:f3:4a: 9f:cc:24:da:a3:7e:b3:35:89:4c:a1:48:f8:01:74:a3:02:e6: c0:4d:6e:05:34:7a:85:d1:a4:f7:54:60:92:ae:72:83:80:83: 10:11:5e:b2:77:cb:4e:de:56:c2:ac:1e:a9:92:57:4d:59:92: 6a:69:13:bb:f2:b7:bd:34:65:09:86:a1:60:a9:14:c1:11:b4: 8e:2f:6f:b0:3b:da:2a:93:cf:60:b4:44:6c:12:0e:16:11:da: c4:b4:cf:64:11:07:57:7a:44:72:a1:17:7d:c2:d5:cf:92:f0: da:82:bb:2e:ef:bf:b1:4a:f6:ec:28:f5:8c:e7:03:ea:72:fd: 43:b3:0e:0c:5e:05:d9:f3:e1:48:ce:f2:0f:ba:07:6d:93:0f: 77:0b:9f:ce:ef:f0:26:95:16:39:e7:ad:20:b4:ae:2f:37:cd: 34:f7:8c:f6:66:d4:62:e3:6c:8a:d9:0d:fa:55:b6:53:c7:38: 84:d2:14:f9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt7NpAjtlG9SYrG75Z2BesJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZTNhNzY3M2E3OTk5ZGQ0OTZhMDgwZGJiYWZhMTA3N2Fk OTgwZmIwHhcNMjYwMTAxMjAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzU4ZDQ4ODFkN2MxNWM0MjQwNzQyNjU0N2Q5MGNiMzA0MWRjMzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtotLoBbNbTFiAS3a9LPBzKQCsVX3 ju35VyyhBV9p9ARcMRuSjJbXBprQe/JRTJE0C+zvAQ0M3CwspWWas5E3YFE93tx7 +s49+/D8w1X8Zjvn3SbWxvsB/HmjI8eEWeFlCJ80OCneoDWxG31qANNPCxC0d4a1 6QzUGkcyystdUUP3I4fuEEAakRun3HP9kJ6nzQaqf+XIWQwszxjLpWKzXL/3wTae 7HZTYCO1t1ylEz3kL8njWK52vALRbIj5hAyXkPc+x81HssaOQ6uQEDO6/73y1Nq1 ouyoYMtEF9mkzSnSmVPjVLxmr5mha+VGBCQQ145OszTL2vDlKJBofb++cwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJNY1IgdfBXEJAdCZUfZDLMEHcNTMB8GA1UdIwQY MBaAFKLjp2c6eZndSWoIDbuvoQd62YD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3VPblp6cDVtZDFKYWdnTnU2LWhCM3JaZ1BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9jZWU2ZDAtMmE1YS00N2E1LTlhNmEt ODUzZDJmMTgzZWI4LzEvazFqVWlCMThGY1FrQjBKbFI5a01zd1FkdzFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9jZWU2ZDAtMmE1YS00N2E1LTlhNmEtODUzZDJmMTgzZWI4 LzEvb3VPblp6cDVtZDFKYWdnTnU2LWhCM3JaZ1BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuVycAwQC uV2EMBQEAgACMA4DBQMqBfKAAwUDKgX6ADANBgkqhkiG9w0BAQsFAAOCAQEAnoHy isslkAYBM6gwd7wBCLMLaj1rxymudvycM+aBzMcIMkuFlEblmTOC0bGFjCW9/LDz 9MtmjavFI0ZwLziAshhNskU5avNKn8wk2qN+szWJTKFI+AF0owLmwE1uBTR6hdGk 91Rgkq5yg4CDEBFesnfLTt5WwqweqZJXTVmSamkTu/K3vTRlCYahYKkUwRG0ji9v sDvaKpPPYLREbBIOFhHaxLTPZBEHV3pEcqEXfcLVz5Lw2oK7Lu+/sUr27Cj1jOcD 6nL9Q7MODF4F2fPhSM7yD7oHbZMPdwufzu/wJpUWOeetILSuLzfNNPeM9mbUYuNs itkN+lW2U8c4hNIU+Q== -----END CERTIFICATE-----Generated at Tue Feb 10 03:07:16 2026 by rpki-client