This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/1-kKT9I5hXcGMY4BXtI91L6PWY5Q.roa File: 1-kKT9I5hXcGMY4BXtI91L6PWY5Q.roa (raw, json) Hash identifier: hWaDKKuFN6+6e36Ikm8e0jjTVm6uyDQ92iqKklLnoi4= Subject key identifier: FA:42:93:F4:8E:61:5D:C1:8C:63:80:57:B4:8F:75:2F:A3:D6:63:94 Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b Certificate serial: 019B7CEDE5EF21833F914A49CE505BFB9ED5 Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/1-kKT9I5hXcGMY4BXtI91L6PWY5Q.roa Signing time: Fri 02 Jan 2026 04:18:44 +0000 ROA not before: Fri 02 Jan 2026 04:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.99.236.0/24 maxlen: 24 185.99.237.0/24 maxlen: 24 185.99.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e5:ef:21:83:3f:91:4a:49:ce:50:5b:fb:9e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b Validity Not Before: Jan 2 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa4293f48e615dc18c638057b48f752fa3d66394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3f:e5:ed:55:63:51:97:21:1b:13:af:f2:5c: 02:17:5d:b2:00:86:d7:8a:3a:be:92:6c:a5:15:b6: 6b:60:e0:a9:0c:12:7f:53:98:75:f5:3f:03:2d:f4: 2d:0c:3f:b2:24:9b:de:a7:a4:ed:3f:b3:3c:d9:41: e0:ea:db:66:7a:b9:82:99:b6:9c:31:5a:cb:3e:f6: 01:59:e2:a4:1f:9f:14:8d:9c:38:e2:e0:99:ae:ec: 67:16:4b:b7:a6:e9:c9:d9:26:70:18:6c:9f:5f:07: b6:06:84:62:dc:e8:60:15:16:13:bc:9c:0e:af:a9: 9b:84:3a:d8:3e:28:7b:2b:73:49:4b:96:a7:cc:f4: 91:13:43:a8:a9:6f:8b:fe:fa:d3:31:49:87:d1:2c: b3:cd:d8:d9:0a:7f:21:34:d9:23:88:bf:a4:57:ef: a0:cb:41:53:91:ac:21:20:03:aa:fb:19:49:3a:b8: a4:eb:71:16:8d:bb:30:57:a9:87:86:af:b8:ed:39: e8:4f:9f:1f:f3:89:c7:2d:02:6b:c4:34:dd:be:5b: 24:1f:a9:6a:01:9f:0a:aa:8b:39:6e:03:f9:2d:24: 93:37:02:38:4a:f2:72:f2:7a:3e:54:69:6f:b4:68: 7e:4c:4b:c0:5b:c8:d7:10:2e:47:26:2f:8f:50:1c: c1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:42:93:F4:8E:61:5D:C1:8C:63:80:57:B4:8F:75:2F:A3:D6:63:94 X509v3 Authority Key Identifier: keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/1-kKT9I5hXcGMY4BXtI91L6PWY5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.236.0-185.99.238.255 Signature Algorithm: sha256WithRSAEncryption 52:ab:fc:26:9f:f9:28:8c:c7:fc:73:7f:5a:30:80:84:c7:0b: 8e:c1:e6:7b:f3:8e:3c:8f:ec:50:28:ed:43:11:90:28:29:81: fb:a5:9a:02:6c:23:23:2d:e6:f2:10:97:28:e4:24:57:63:36: 29:7e:66:c1:6d:ef:5d:b4:4e:c9:9e:2d:1e:03:62:b7:f7:fe: 28:2f:25:f2:78:2a:9e:92:53:16:b9:03:dd:23:b3:33:d6:26: 5f:74:67:51:e0:71:8e:f3:5e:2d:fe:29:fa:b3:44:a0:84:67: 08:b1:a3:b2:24:a8:16:62:f4:87:55:ff:7b:a9:89:8c:bd:f6: be:b0:d5:bc:9e:ed:7a:38:4f:12:c8:13:fb:db:ac:9b:77:df: 50:46:36:c7:e9:63:53:66:74:c0:1a:dd:01:3b:64:e3:49:b5: 78:22:fb:71:3b:9d:70:4f:4e:f5:b4:e8:03:fe:f1:e6:8c:50: f6:f0:c6:f1:18:33:33:2b:53:f1:52:92:ee:2e:f6:d2:a4:cb: 44:52:c4:1b:17:1f:0f:62:24:49:28:dc:c8:f7:84:0e:d9:ec: 75:7b:57:b4:3e:c2:b1:54:25:1d:c3:11:f9:f8:63:90:54:ef: 16:32:60:aa:fc:4e:e8:7b:49:d6:1a:bc:b4:22:ac:80:2a:bd: b4:73:36:08 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt87eXvIYM/kUpJzlBb+57VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmUxOTA1Y2Q3YWYzNmU2M2FkYTYzNjZjMTQ3YjYxZDg1 YzlmMmIwHhcNMjYwMTAyMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTQyOTNmNDhlNjE1ZGMxOGM2MzgwNTdiNDhmNzUyZmEzZDY2Mzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj/l7VVjUZchGxOv8lwCF12yAIbX ijq+kmylFbZrYOCpDBJ/U5h19T8DLfQtDD+yJJvep6TtP7M82UHg6ttmermCmbac MVrLPvYBWeKkH58UjZw44uCZruxnFku3punJ2SZwGGyfXwe2BoRi3OhgFRYTvJwO r6mbhDrYPih7K3NJS5anzPSRE0OoqW+L/vrTMUmH0SyzzdjZCn8hNNkjiL+kV++g y0FTkawhIAOq+xlJOrik63EWjbswV6mHhq+47TnoT58f84nHLQJrxDTdvlskH6lq AZ8Kqos5bgP5LSSTNwI4SvJy8no+VGlvtGh+TEvAW8jXEC5HJi+PUBzBeQIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFPpCk/SOYV3BjGOAV7SPdS+j1mOUMB8GA1UdIwQY MBaAFIj+GQXNevNuY62mNmwUe2HYXJ8rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUt ZDYzM2FhNzBkZDY2LzEvMS1rS1Q5STVoWGNHTVk0Qlh0STkxTDZQV1k1US5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjcvMzE5NTJhLTYwOGMtNDY4ZS1hMDBlLWQ2MzNhYTcwZGQ2 Ni8xL2lQNFpCYzE2ODI1anJhWTJiQlI3WWRoY255cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQCuWPs AwQAuWPuMA0GCSqGSIb3DQEBCwUAA4IBAQBSq/wmn/kojMf8c39aMICExwuOweZ7 8448j+xQKO1DEZAoKYH7pZoCbCMjLebyEJco5CRXYzYpfmbBbe9dtE7Jni0eA2K3 9/4oLyXyeCqeklMWuQPdI7Mz1iZfdGdR4HGO814t/in6s0SghGcIsaOyJKgWYvSH Vf97qYmMvfa+sNW8nu16OE8SyBP726ybd99QRjbH6WNTZnTAGt0BO2TjSbV4Ivtx O51wT071tOgD/vHmjFD28MbxGDMzK1PxUpLuLvbSpMtEUsQbFx8PYiRJKNzI94QO 2ex1e1e0PsKxVCUdwxH5+GOQVO8WMmCq/E7oe0nWGry0IqyAKr20czYI -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:59 2026 by rpki-client