This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/Ktt8ktJBB9tg2gRD-ixp-YhTibU.roa File: Ktt8ktJBB9tg2gRD-ixp-YhTibU.roa (raw, json) Hash identifier: HW7h2XnvN7F3euJL4sahv9OWYDM7sKHWz8LB9hcLvk4= Subject key identifier: 2A:DB:7C:92:D2:41:07:DB:60:DA:04:43:FA:2C:69:F9:88:53:89:B5 Certificate issuer: /CN=e1d15e36cdb388276f04a606b02266260e2a19f8 Certificate serial: 019B7EA4428419743D143FAE94427A5FF62A Authority key identifier: E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/Ktt8ktJBB9tg2gRD-ixp-YhTibU.roa Signing time: Fri 02 Jan 2026 12:17:32 +0000 ROA not before: Fri 02 Jan 2026 12:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62416 IP address blocks: 185.32.188.0/22 maxlen: 22 185.222.8.0/22 maxlen: 22 2a00:c560::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:42:84:19:74:3d:14:3f:ae:94:42:7a:5f:f6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d15e36cdb388276f04a606b02266260e2a19f8 Validity Not Before: Jan 2 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2adb7c92d24107db60da0443fa2c69f9885389b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c7:d3:e2:50:7f:0f:de:19:6e:d8:1a:6d:23: 25:b6:ee:02:ff:06:ac:f8:ce:cf:84:5a:31:06:54: 78:0b:8c:ee:71:ce:7d:5b:58:16:2f:30:8a:d2:45: 79:d2:bd:73:ac:96:25:87:50:57:3b:18:c0:0c:94: ee:f9:b4:98:82:5e:c6:88:1e:b3:d0:08:c7:2a:5f: 43:f6:4e:e5:04:d1:a6:f2:6e:21:07:64:7d:ab:6c: 88:d4:73:2a:43:51:8b:3c:da:2a:7e:f7:60:4a:c7: 0c:1a:76:48:76:a8:e5:0a:15:7d:0e:68:4f:91:9f: 8f:89:fb:ed:4e:75:d9:fc:e2:00:3f:25:12:b2:0a: b6:22:fd:ba:74:ac:bb:df:e1:6d:39:d1:0a:17:db: a1:f9:2b:16:5f:45:02:de:fa:68:31:67:e2:d3:b7: 2e:2e:30:66:17:84:6e:2b:df:88:59:64:1b:bb:ef: 1f:82:f8:d3:2e:60:8b:1a:56:2e:04:8f:fd:89:97: d2:7d:b1:7c:2f:a9:74:a3:b2:bb:ae:18:c5:19:bc: 76:9e:bd:03:71:f1:83:de:5a:2f:67:e3:c4:a7:e7: 6f:18:91:04:f7:f6:be:4c:1a:70:50:da:5d:cd:d4: f4:73:e6:b5:dd:ba:5d:fc:c2:14:3a:2f:97:dc:6f: f4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DB:7C:92:D2:41:07:DB:60:DA:04:43:FA:2C:69:F9:88:53:89:B5 X509v3 Authority Key Identifier: keyid:E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/Ktt8ktJBB9tg2gRD-ixp-YhTibU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.188.0/22 185.222.8.0/22 IPv6: 2a00:c560::/29 Signature Algorithm: sha256WithRSAEncryption 88:8d:cb:f6:bb:2b:89:8b:91:83:dc:7b:3a:fc:40:22:6e:f1: 57:ca:e2:32:04:3d:11:eb:98:14:f3:1a:d7:4d:b7:eb:74:78: d1:6c:98:df:26:35:bf:46:1d:da:43:15:c9:55:16:cf:7f:df: fd:f9:b2:26:73:86:ad:cb:7a:8c:01:5a:af:80:c7:39:f6:c1: 0b:58:86:c6:c4:cc:23:b5:12:64:79:af:6f:7f:b8:91:10:a4: e1:3b:60:cf:1d:d1:83:1a:f8:fa:ba:66:18:cf:1d:cd:9d:e1: 9e:fd:c2:09:af:54:65:c5:b3:95:2a:c7:89:6a:37:ef:72:82: 37:de:e2:03:b9:1a:7b:2e:c1:c3:1e:5d:27:a5:63:ac:d1:18: 9f:d1:ba:73:5b:3d:16:a2:35:2e:40:14:6e:74:17:ce:b8:5e: e9:fa:69:b0:18:b7:83:89:4b:da:01:48:22:5e:3e:4c:e6:86: 11:97:d3:b4:6d:4f:3a:5f:aa:52:72:15:1a:47:f1:7e:be:b3: 02:40:ad:db:05:b0:99:c5:38:39:98:af:7b:79:3b:48:68:f2: 65:9f:46:d0:44:65:fc:d0:df:a5:d4:28:26:41:a5:7f:0a:10: cb:57:67:61:ac:f6:42:fe:36:0c:3f:9a:72:04:43:8c:33:86: 67:32:fb:e3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+pEKEGXQ9FD+ulEJ6X/YqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDE1ZTM2Y2RiMzg4Mjc2ZjA0YTYwNmIwMjI2NjI2MGUy YTE5ZjgwHhcNMjYwMTAyMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWRiN2M5MmQyNDEwN2RiNjBkYTA0NDNmYTJjNjlmOTg4NTM4OWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsfT4lB/D94ZbtgabSMltu4C/was +M7PhFoxBlR4C4zucc59W1gWLzCK0kV50r1zrJYlh1BXOxjADJTu+bSYgl7GiB6z 0AjHKl9D9k7lBNGm8m4hB2R9q2yI1HMqQ1GLPNoqfvdgSscMGnZIdqjlChV9DmhP kZ+PifvtTnXZ/OIAPyUSsgq2Iv26dKy73+FtOdEKF9uh+SsWX0UC3vpoMWfi07cu LjBmF4RuK9+IWWQbu+8fgvjTLmCLGlYuBI/9iZfSfbF8L6l0o7K7rhjFGbx2nr0D cfGD3lovZ+PEp+dvGJEE9/a+TBpwUNpdzdT0c+a13bpd/MIUOi+X3G/0MQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCrbfJLSQQfbYNoEQ/osafmIU4m1MB8GA1UdIwQY MBaAFOHRXjbNs4gnbwSmBrAiZiYOKhn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MjU2MzUtNDFmZS00MGQ1LTgxYWMt MjM0NDJhMTRhNWY3LzEvS3R0OGt0SkJCOXRnMmdSRC1peHAtWWhUaWJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83MjU2MzUtNDFmZS00MGQ1LTgxYWMtMjM0NDJhMTRhNWY3 LzEvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuSC8AwQC ud4IMA0EAgACMAcDBQMqAMVgMA0GCSqGSIb3DQEBCwUAA4IBAQCIjcv2uyuJi5GD 3Hs6/EAibvFXyuIyBD0R65gU8xrXTbfrdHjRbJjfJjW/Rh3aQxXJVRbPf9/9+bIm c4aty3qMAVqvgMc59sELWIbGxMwjtRJkea9vf7iREKThO2DPHdGDGvj6umYYzx3N neGe/cIJr1RlxbOVKseJajfvcoI33uIDuRp7LsHDHl0npWOs0Rif0bpzWz0WojUu QBRudBfOuF7p+mmwGLeDiUvaAUgiXj5M5oYRl9O0bU86X6pSchUaR/F+vrMCQK3b BbCZxTg5mK97eTtIaPJln0bQRGX80N+l1CgmQaV/ChDLV2dhrPZC/jYMP5pyBEOM M4ZnMvvj -----END CERTIFICATE-----Generated at Mon Jan 26 04:22:08 2026 by rpki-client