This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/kgLefYWiNGknOidoKgqI74KkRkM.roa File: kgLefYWiNGknOidoKgqI74KkRkM.roa (raw, json) Hash identifier: Ipm3zXSvjL80LuVqm/7/Xe+Nk5e7+57H/hmJQp4Q0Ps= Subject key identifier: 92:02:DE:7D:85:A2:34:69:27:3A:27:68:2A:0A:88:EF:82:A4:46:43 Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 019B7DC8882D3307BE853605521EF7AA61FE Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/kgLefYWiNGknOidoKgqI74KkRkM.roa Signing time: Fri 02 Jan 2026 08:17:32 +0000 ROA not before: Fri 02 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200096 IP address blocks: 185.182.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:88:2d:33:07:be:85:36:05:52:1e:f7:aa:61:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: Jan 2 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9202de7d85a23469273a27682a0a88ef82a44643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c8:49:d9:da:41:93:04:30:74:9e:4f:3e:5a: 23:76:aa:2c:18:40:be:eb:21:3a:9a:10:f2:dc:51: 83:50:e5:31:94:28:04:06:fd:c2:f6:bf:6a:10:78: 18:fe:99:01:e1:f6:46:53:78:35:29:83:2e:ee:1f: 72:55:6f:a0:ce:00:7d:3f:03:36:83:26:bc:98:e6: a5:c5:5b:ed:fc:4f:f4:de:70:43:db:9f:e1:c2:59: 5c:cd:2c:1f:90:40:c5:11:60:eb:2d:87:7f:38:91: f3:20:d7:f8:27:43:ae:ad:50:60:23:ea:6d:f7:db: 9d:ad:08:23:cc:1c:3e:b7:ed:89:c1:79:6d:81:22: b4:cd:04:da:df:3d:9e:d4:75:7b:7e:23:3f:62:ce: bb:2f:55:6f:59:3c:6a:43:5f:99:14:8f:e3:66:c1: cd:1b:7d:67:9e:9c:0e:7d:41:64:34:a4:6c:8f:f5: 83:c2:c7:48:b3:04:65:9e:e9:ea:57:f4:19:88:25: 24:fe:61:d6:c6:0d:6f:7a:8a:21:1c:55:e3:fc:a5: 6d:1c:e0:e0:67:31:aa:85:1c:d9:6f:3e:31:0e:c7: b9:49:e7:47:16:d5:0b:64:5e:e0:ce:eb:09:66:1b: ae:03:e1:f5:fb:b1:2a:68:0a:cf:e8:44:ea:8b:73: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:02:DE:7D:85:A2:34:69:27:3A:27:68:2A:0A:88:EF:82:A4:46:43 X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/kgLefYWiNGknOidoKgqI74KkRkM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.15.0/24 Signature Algorithm: sha256WithRSAEncryption 61:d5:a0:f8:4f:66:b0:2c:b5:2a:db:fa:12:a2:70:fc:dd:07: 74:d2:4c:54:57:43:3c:2d:e5:a1:75:9c:ba:8e:3b:46:8e:8b: a7:4e:da:41:05:ae:70:0c:57:3c:d8:dd:31:dc:c6:12:b3:02: fe:0a:69:06:c2:33:3e:a1:20:08:46:5f:12:36:b7:c6:a8:5a: 13:97:98:50:62:25:ff:24:d1:0b:ff:3b:d0:25:c2:fd:54:ee: d1:14:54:40:9c:2d:72:29:13:b4:b2:10:4e:05:6f:35:ae:c7: d3:67:9d:7c:5a:8e:f8:7d:a5:e9:f1:e9:11:15:97:62:77:93: 83:6e:a8:a6:be:0c:04:88:eb:f0:cd:61:93:71:7f:d3:06:1f: 48:79:26:e8:8b:f3:7f:63:ad:de:b8:8b:1f:e5:83:ac:06:3a: f0:fe:e5:51:ee:84:71:5a:c8:09:ed:14:0b:eb:1e:78:c0:ac: 70:d5:50:2e:35:fe:44:c5:cf:95:fa:0a:b9:5b:39:b3:5d:91: 47:21:d3:f7:a1:cb:27:54:67:d7:25:ac:c9:52:d7:f0:f3:4a: 45:f5:cf:81:a7:84:55:d4:6e:f8:af:fc:6e:b8:f7:5e:c6:dc: cc:9c:f0:21:cd:d0:b1:ef:1c:b4:a3:47:e2:c0:db:1e:b3:21: 1d:fe:13:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yIgtMwe+hTYFUh73qmH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjYwMTAyMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjAyZGU3ZDg1YTIzNDY5MjczYTI3NjgyYTBhODhlZjgyYTQ0NjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8hJ2dpBkwQwdJ5PPlojdqosGEC+ 6yE6mhDy3FGDUOUxlCgEBv3C9r9qEHgY/pkB4fZGU3g1KYMu7h9yVW+gzgB9PwM2 gya8mOalxVvt/E/03nBD25/hwllczSwfkEDFEWDrLYd/OJHzINf4J0OurVBgI+pt 99udrQgjzBw+t+2JwXltgSK0zQTa3z2e1HV7fiM/Ys67L1VvWTxqQ1+ZFI/jZsHN G31nnpwOfUFkNKRsj/WDwsdIswRlnunqV/QZiCUk/mHWxg1veoohHFXj/KVtHODg ZzGqhRzZbz4xDse5SedHFtULZF7gzusJZhuuA+H1+7EqaArP6ETqi3N4KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJIC3n2FojRpJzonaCoKiO+CpEZDMB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEva2dMZWZZV2lOR2tuT2lkb0tncUk3NEtrUmtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubYPMA0G CSqGSIb3DQEBCwUAA4IBAQBh1aD4T2awLLUq2/oSonD83Qd00kxUV0M8LeWhdZy6 jjtGjounTtpBBa5wDFc82N0x3MYSswL+CmkGwjM+oSAIRl8SNrfGqFoTl5hQYiX/ JNEL/zvQJcL9VO7RFFRAnC1yKRO0shBOBW81rsfTZ518Wo74faXp8ekRFZdid5OD bqimvgwEiOvwzWGTcX/TBh9IeSboi/N/Y63euIsf5YOsBjrw/uVR7oRxWsgJ7RQL 6x54wKxw1VAuNf5Exc+V+gq5WzmzXZFHIdP3ocsnVGfXJazJUtfw80pF9c+Bp4RV 1G74r/xuuPdextzMnPAhzdCx7xy0o0fiwNsesyEd/hMM -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:46 2026 by rpki-client