This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa File: Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa (raw, json) Hash identifier: 4jf6X5p/dhPdcVjaKtN3T7ju4heIpjF/dGvY5hyoUAg= Subject key identifier: 2A:49:7F:E9:C2:76:35:6F:60:90:0E:76:FB:98:EF:F8:E6:DC:EE:7B Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a Certificate serial: 019B7BA5207EEE4C72DEDCA300F5598C13A7 Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35691 IP address blocks: 185.185.108.0/22 maxlen: 22 185.185.108.0/24 maxlen: 24 185.185.109.0/24 maxlen: 24 185.185.110.0/24 maxlen: 24 185.185.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:20:7e:ee:4c:72:de:dc:a3:00:f5:59:8c:13:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a497fe9c276356f60900e76fb98eff8e6dcee7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:14:f1:eb:26:84:ba:8b:db:24:9a:90:42:20: 29:5c:5b:18:0f:a6:43:2a:09:8f:4e:98:00:91:27: 22:92:51:a4:26:94:f3:fd:62:25:ec:d7:65:11:21: 81:10:48:ea:d6:3b:47:de:a0:e7:e3:9f:65:f4:60: 17:11:e2:07:d6:c6:c5:29:49:8b:d9:41:b7:5b:90: 20:ea:1d:c3:23:bd:05:27:a7:55:b0:2d:fd:20:b3: ac:66:d8:69:73:4e:a3:0b:8c:c0:79:2b:16:7f:4f: 27:5d:d2:75:ce:4b:4e:87:aa:cf:c5:e9:e6:c4:fd: 8e:9d:d7:e6:d4:a4:c5:e4:a6:0e:2c:b1:16:aa:0c: 14:9d:4d:50:c1:95:c9:9c:bc:2b:45:4d:87:be:ac: f0:f7:51:0a:37:43:f4:5b:b1:53:df:e5:b3:93:15: 26:12:6b:e1:f3:a8:b7:ac:a7:ad:e4:9f:ec:65:06: 4e:f7:1d:d7:14:07:26:3a:83:c5:85:d7:0f:09:1f: f9:d7:b3:cb:6d:94:37:dc:2b:e0:d6:d1:eb:ef:e8: a3:8d:bc:04:06:90:87:21:f5:74:e2:28:21:73:90: 02:df:d8:2d:d5:18:a8:d8:77:6c:ea:6d:f5:f3:8d: 6d:3e:c7:ce:57:fb:b7:5b:63:ee:74:f0:d1:b2:1b: b3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:49:7F:E9:C2:76:35:6F:60:90:0E:76:FB:98:EF:F8:E6:DC:EE:7B X509v3 Authority Key Identifier: keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.108.0/22 Signature Algorithm: sha256WithRSAEncryption 83:fd:7b:bc:ea:72:da:3f:61:90:d3:a6:bf:c4:8d:b2:c5:2b: 18:69:3a:1d:f6:6c:8f:01:a1:3a:f3:99:36:4b:71:bc:c4:f1: 16:2d:a3:4a:b4:a0:92:7f:5b:32:ab:17:d0:c3:e3:71:0f:68: a8:88:9d:b4:c1:48:dd:70:6c:a6:7b:d0:07:b7:d5:bd:9c:ff: e2:cc:2a:a7:f3:23:11:c2:6b:93:51:a5:b0:58:8d:5f:d0:78: 45:a4:18:36:dc:a6:b0:8e:f0:34:1a:17:30:66:23:e8:91:66: cb:41:93:25:fd:d0:b4:58:8c:0a:84:5e:33:1c:ed:99:57:21: 81:68:b1:28:16:89:8c:ac:95:21:45:5e:05:b2:7f:9e:52:6b: 33:13:b0:05:61:ed:ed:46:a7:cc:db:b9:11:59:90:bb:12:0e: 65:ac:38:47:1b:12:c4:21:87:2f:6f:ad:a7:17:b5:12:e8:a9: 4c:61:54:37:01:d2:b1:aa:5d:19:16:ca:1c:69:b2:2d:aa:0e: c6:cb:b5:cd:3e:40:56:e9:0a:de:de:18:7d:e4:22:25:84:80: 4e:d0:09:85:84:4b:69:a2:9a:11:ad:8d:f0:24:9a:ea:e6:cc: 70:7a:e7:bb:53:48:b0:e3:55:8e:eb:c7:7b:0d:02:40:4f:b3: 31:d3:ec:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pSB+7kxy3tyjAPVZjBOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NmUyMmI0NjIwYmQwNDJmNzNhMmE5NjIxZjBjOTI0N2Q1 MTI0OGEwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTQ5N2ZlOWMyNzYzNTZmNjA5MDBlNzZmYjk4ZWZmOGU2ZGNlZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRTx6yaEuovbJJqQQiApXFsYD6ZD KgmPTpgAkSciklGkJpTz/WIl7NdlESGBEEjq1jtH3qDn459l9GAXEeIH1sbFKUmL 2UG3W5Ag6h3DI70FJ6dVsC39ILOsZthpc06jC4zAeSsWf08nXdJ1zktOh6rPxenm xP2Ondfm1KTF5KYOLLEWqgwUnU1QwZXJnLwrRU2Hvqzw91EKN0P0W7FT3+WzkxUm Emvh86i3rKet5J/sZQZO9x3XFAcmOoPFhdcPCR/517PLbZQ33Cvg1tHr7+ijjbwE BpCHIfV04ighc5AC39gt1Rio2Hds6m31841tPsfOV/u3W2PudPDRshuzTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCpJf+nCdjVvYJAOdvuY7/jm3O57MB8GA1UdIwQY MBaAFKVuIrRiC9BC9zoqliHwySR9USSKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzgxOGQtMzI5OC00MDY5LTgyOTAt YzZlMWNmZDYwNjYxLzEvS2tsXzZjSjJOVzlna0E1Mi01anYtT2JjN25zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iNzgxOGQtMzI5OC00MDY5LTgyOTAtYzZlMWNmZDYwNjYx LzEvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCublsMA0G CSqGSIb3DQEBCwUAA4IBAQCD/Xu86nLaP2GQ06a/xI2yxSsYaTod9myPAaE685k2 S3G8xPEWLaNKtKCSf1syqxfQw+NxD2ioiJ20wUjdcGyme9AHt9W9nP/izCqn8yMR wmuTUaWwWI1f0HhFpBg23KawjvA0GhcwZiPokWbLQZMl/dC0WIwKhF4zHO2ZVyGB aLEoFomMrJUhRV4Fsn+eUmszE7AFYe3tRqfM27kRWZC7Eg5lrDhHGxLEIYcvb62n F7US6KlMYVQ3AdKxql0ZFsocabItqg7Gy7XNPkBW6Qre3hh95CIlhIBO0AmFhEtp opoRrY3wJJrq5sxweue7U0iw41WO68d7DQJAT7Mx0+wx -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:45 2026 by rpki-client