This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/kip9OEz8XKCqejVGiyHb4UeVJqw.roa File: kip9OEz8XKCqejVGiyHb4UeVJqw.roa (raw, json) Hash identifier: 2JQk1BgdQDCMPFy2Bnpli4/vgD3QHxPKM4wyX0aSciw= Subject key identifier: 92:2A:7D:38:4C:FC:5C:A0:AA:7A:35:46:8B:21:DB:E1:47:95:26:AC Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995 Certificate serial: 019B7AC91F367F97241873334A69571EF451 Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/kip9OEz8XKCqejVGiyHb4UeVJqw.roa Signing time: Thu 01 Jan 2026 18:19:19 +0000 ROA not before: Thu 01 Jan 2026 18:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49100 IP address blocks: 185.110.236.0/24 maxlen: 24 185.110.237.0/24 maxlen: 24 185.110.238.0/24 maxlen: 24 185.110.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1f:36:7f:97:24:18:73:33:4a:69:57:1e:f4:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995 Validity Not Before: Jan 1 18:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=922a7d384cfc5ca0aa7a35468b21dbe1479526ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ca:19:26:d0:18:8d:23:ad:02:b8:3e:d0:ed: bf:f6:ee:fe:a7:aa:b3:8c:c0:2e:af:34:96:1d:51: 1b:ba:44:d8:ef:24:4f:32:3a:7b:00:19:24:d4:85: 03:cb:6f:a7:78:c0:b1:03:9b:7b:69:56:0b:a2:f1: 42:c0:15:9e:93:df:5a:b0:0b:6d:ba:62:99:8a:a8: ee:f0:cd:93:02:be:ce:01:d5:5c:cb:c4:7f:26:de: 42:0f:44:28:a2:2c:eb:a9:37:95:60:fe:98:7f:ce: fd:a1:b5:99:a4:58:ff:08:b1:1e:c8:32:3b:a4:c6: c4:f3:f4:e8:2d:2c:1f:c2:de:4f:e5:c5:1f:47:7a: 3c:ab:e0:9a:78:13:c9:e5:3e:90:00:c8:5e:69:68: 23:a7:0c:27:5d:55:0d:65:4a:a8:d6:90:3a:c1:c5: 0c:5d:51:fe:71:a9:9f:7c:68:34:4f:c1:60:75:f7: df:bc:e8:aa:f6:28:e0:15:ab:66:93:c0:74:7b:23: 66:a7:59:c9:de:9f:05:dc:97:3b:1d:47:01:61:64: 6d:a6:46:64:b9:82:7a:2e:e1:38:fb:e6:3c:b9:ef: 5e:d9:a5:10:78:82:13:d4:72:54:a1:42:05:92:1e: 90:e1:01:2c:06:82:ec:ca:b2:a4:81:0a:17:e6:da: 89:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2A:7D:38:4C:FC:5C:A0:AA:7A:35:46:8B:21:DB:E1:47:95:26:AC X509v3 Authority Key Identifier: keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/kip9OEz8XKCqejVGiyHb4UeVJqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.236.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:93:69:00:28:b8:21:b8:74:13:61:84:6c:78:a7:a3:96:64: 0b:e2:fc:8d:94:a1:b5:47:6a:79:e6:89:a5:ff:85:32:a3:66: 66:42:cc:29:72:a0:a6:9b:61:00:18:97:50:9f:44:b0:1e:0e: ed:25:05:a8:84:25:90:a1:58:cf:94:83:5e:09:36:20:18:0c: c0:60:f0:dc:59:31:4c:f9:0b:b6:53:00:6c:16:c0:90:87:54: 29:f1:83:6b:75:6b:fe:b5:1c:1c:32:26:1d:ae:d1:a2:e8:33: d7:29:e1:0a:ce:e6:54:36:6a:68:80:17:a1:4b:33:d5:ed:cc: 9a:cc:f3:b8:e0:0d:e0:63:aa:b2:a9:97:19:c6:dd:b1:b4:5b: 0f:90:19:59:4d:96:81:6e:40:fe:f1:8d:29:6e:6b:33:0e:b1: e1:7f:50:fc:6c:60:65:42:ee:4c:94:ae:d6:81:4f:b8:ea:21: b2:0a:ff:db:05:e9:05:da:98:2b:ed:4a:3e:38:0a:15:45:f0: ed:5b:12:21:1e:d5:75:d9:41:22:20:af:52:f3:5b:b6:ff:03: a9:08:a9:bb:3f:bc:c4:90:7a:05:60:47:08:6b:b0:db:6a:92: 1f:29:0a:6a:0e:d2:ce:57:35:4e:74:7a:d3:f1:39:cd:9e:fb: da:b6:26:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yR82f5ckGHMzSmlXHvRRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZjVlNDg2NmJhMDk4MjAxMjRhNmU1MTExMDRmYzQxZmE1 NDE5OTUwHhcNMjYwMTAxMTgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjJhN2QzODRjZmM1Y2EwYWE3YTM1NDY4YjIxZGJlMTQ3OTUyNmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsoZJtAYjSOtArg+0O2/9u7+p6qz jMAurzSWHVEbukTY7yRPMjp7ABkk1IUDy2+neMCxA5t7aVYLovFCwBWek99asAtt umKZiqju8M2TAr7OAdVcy8R/Jt5CD0QooizrqTeVYP6Yf879obWZpFj/CLEeyDI7 pMbE8/ToLSwfwt5P5cUfR3o8q+CaeBPJ5T6QAMheaWgjpwwnXVUNZUqo1pA6wcUM XVH+camffGg0T8FgdfffvOiq9ijgFatmk8B0eyNmp1nJ3p8F3Jc7HUcBYWRtpkZk uYJ6LuE4++Y8ue9e2aUQeIIT1HJUoUIFkh6Q4QEsBoLsyrKkgQoX5tqJ3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJIqfThM/Fygqno1Rosh2+FHlSasMB8GA1UdIwQY MBaAFCr15IZroJggEkpuUREE/EH6VBmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2Qt YzMyMGU1MGEzYzc5LzEva2lwOU9FejhYS0NxZWpWR2l5SGI0VWVWSnF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2QtYzMyMGU1MGEzYzc5 LzEvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW7sMA0G CSqGSIb3DQEBCwUAA4IBAQBfk2kAKLghuHQTYYRseKejlmQL4vyNlKG1R2p55oml /4Uyo2ZmQswpcqCmm2EAGJdQn0SwHg7tJQWohCWQoVjPlINeCTYgGAzAYPDcWTFM +Qu2UwBsFsCQh1Qp8YNrdWv+tRwcMiYdrtGi6DPXKeEKzuZUNmpogBehSzPV7cya zPO44A3gY6qyqZcZxt2xtFsPkBlZTZaBbkD+8Y0pbmszDrHhf1D8bGBlQu5MlK7W gU+46iGyCv/bBekF2pgr7Uo+OAoVRfDtWxIhHtV12UEiIK9S81u2/wOpCKm7P7zE kHoFYEcIa7DbapIfKQpqDtLOVzVOdHrT8TnNnvvatiYj -----END CERTIFICATE-----Generated at Mon Jan 26 03:58:21 2026 by rpki-client