This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/KoNkyGEhQqx3GQv3NXvFVwMfef0.roa File: KoNkyGEhQqx3GQv3NXvFVwMfef0.roa (raw, json) Hash identifier: LtXPZaXsrwVyxDRh3HBOcDRrPS3lyLPIJctf5b2s8uw= Subject key identifier: 2A:83:64:C8:61:21:42:AC:77:19:0B:F7:35:7B:C5:57:03:1F:79:FD Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8 Certificate serial: 019B7E392A9249F73FCB781F5171FEC86B83 Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/KoNkyGEhQqx3GQv3NXvFVwMfef0.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39183 IP address blocks: 185.252.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2a:92:49:f7:3f:cb:78:1f:51:71:fe:c8:6b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a8364c8612142ac77190bf7357bc557031f79fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5d:88:a2:6f:e1:bd:9a:d0:18:18:40:f5:db: c1:42:b3:6c:d0:27:a5:88:73:ba:cf:91:bc:b0:db: d1:84:10:cc:09:bc:83:6f:09:fa:b9:11:49:e0:88: 43:d4:df:8d:d4:1c:0f:52:8b:17:73:20:03:2a:0c: bd:e5:47:50:aa:ce:a3:f6:40:bc:7f:59:18:55:58: bb:79:c9:68:49:03:9d:06:66:b7:76:79:d9:3c:6e: 1d:ee:48:ba:54:58:8e:c7:43:82:c4:01:72:8e:c9: c8:42:6c:46:59:4d:82:d4:52:0c:51:67:4e:e5:8e: 85:95:76:a7:db:94:14:48:a5:a6:55:1b:e5:db:3b: ce:6f:68:de:f5:a2:da:94:31:ac:f7:91:ab:50:6f: 8b:34:eb:b1:5c:93:0f:95:ec:f7:dc:ef:66:e0:59: 25:ad:b2:bd:b5:15:a8:06:77:87:30:48:26:37:f4: 57:5f:66:f1:a3:7b:a8:aa:97:3d:d9:ee:62:1a:18: f4:f4:9f:3c:41:20:5e:a7:d7:3c:9e:f4:3c:a9:cb: 6e:56:82:a8:ae:cc:6f:e9:6e:82:d0:f5:4e:63:57: 34:c5:51:4e:52:18:fc:98:4e:1d:83:a2:7a:28:e3: 2b:41:df:59:f5:89:ac:4a:2d:93:49:3e:20:1f:46: 0f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:83:64:C8:61:21:42:AC:77:19:0B:F7:35:7B:C5:57:03:1F:79:FD X509v3 Authority Key Identifier: keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/KoNkyGEhQqx3GQv3NXvFVwMfef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.20.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:29:79:dc:a7:45:3d:3b:2c:32:66:1d:3e:c6:c3:e8:02:a6: 3f:81:83:d3:0b:d3:7b:af:fc:b0:0f:de:7d:db:2a:8b:f8:e6: 02:e0:e2:bc:52:e6:bf:8a:2b:33:e4:65:9e:1f:06:54:41:32: db:1d:3d:ba:34:8f:ab:18:c0:f3:7b:f5:65:9d:13:5b:fa:20: b1:8c:e2:e6:fa:70:2f:6e:10:1d:53:19:ae:b9:d1:4a:9d:6d: bd:38:b2:43:f3:07:6e:87:fe:99:9f:e1:80:f3:8e:48:11:12: 89:76:da:60:24:09:f3:fe:4a:dd:66:85:56:fa:cc:c6:f8:95: c2:61:7b:3e:f5:9f:ae:e4:72:11:31:e6:26:46:e0:67:f9:0c: 66:14:18:4d:83:14:76:e9:3d:d4:cd:ef:dd:d1:d5:70:ef:5b: 21:e8:71:48:f1:f6:4e:46:8e:ca:82:88:f1:16:c3:6b:63:81: 6a:9f:5f:c0:57:b5:da:f4:6a:ed:43:4f:0d:03:ba:6e:5b:45: 7d:b5:18:e5:98:61:5b:11:6f:d8:d1:c3:29:80:8b:c8:c7:c7: 2a:9b:af:cd:d2:a0:5b:5b:61:92:28:ab:ce:91:45:35:d7:90: 16:b0:64:6c:c1:f7:22:b9:02:8f:79:9a:85:46:c3:79:c6:88: 49:ac:ef:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSqSSfc/y3gfUXH+yGuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjE4NmU5NzA5N2M4NDE3ZDk0MzdkNzBjZmRmYzUyNzMz MWI1YTgwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTgzNjRjODYxMjE0MmFjNzcxOTBiZjczNTdiYzU1NzAzMWY3OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr12Iom/hvZrQGBhA9dvBQrNs0Cel iHO6z5G8sNvRhBDMCbyDbwn6uRFJ4IhD1N+N1BwPUosXcyADKgy95UdQqs6j9kC8 f1kYVVi7ecloSQOdBma3dnnZPG4d7ki6VFiOx0OCxAFyjsnIQmxGWU2C1FIMUWdO 5Y6FlXan25QUSKWmVRvl2zvOb2je9aLalDGs95GrUG+LNOuxXJMPlez33O9m4Fkl rbK9tRWoBneHMEgmN/RXX2bxo3uoqpc92e5iGhj09J88QSBep9c8nvQ8qctuVoKo rsxv6W6C0PVOY1c0xVFOUhj8mE4dg6J6KOMrQd9Z9YmsSi2TST4gH0YPtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCqDZMhhIUKsdxkL9zV7xVcDH3n9MB8GA1UdIwQY MBaAFPHxhulwl8hBfZQ31wz9/FJzMbWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81YzNiOTktYjhlZi00ZWQxLTg1N2Mt YjY1Y2QxMzYyNjJlLzEvS29Oa3lHRWhRcXgzR1F2M05YdkZWd01mZWYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81YzNiOTktYjhlZi00ZWQxLTg1N2MtYjY1Y2QxMzYyNjJl LzEvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufwUMA0G CSqGSIb3DQEBCwUAA4IBAQBPKXncp0U9OywyZh0+xsPoAqY/gYPTC9N7r/ywD959 2yqL+OYC4OK8Uua/iisz5GWeHwZUQTLbHT26NI+rGMDze/VlnRNb+iCxjOLm+nAv bhAdUxmuudFKnW29OLJD8wduh/6Zn+GA845IERKJdtpgJAnz/krdZoVW+szG+JXC YXs+9Z+u5HIRMeYmRuBn+QxmFBhNgxR26T3Uze/d0dVw71sh6HFI8fZORo7Kgojx FsNrY4Fqn1/AV7Xa9GrtQ08NA7puW0V9tRjlmGFbEW/Y0cMpgIvIx8cqm6/N0qBb W2GSKKvOkUU115AWsGRswfciuQKPeZqFRsN5xohJrO/t -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:40 2026 by rpki-client