This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/KSQvhRpWm210zaiJFJOFKsXWoaM.roa File: KSQvhRpWm210zaiJFJOFKsXWoaM.roa (raw, json) Hash identifier: LSleA0VuES4q3u0nWIFwZayUEirvzQtEPVPAFoUczQk= Subject key identifier: 29:24:2F:85:1A:56:9B:6D:74:CD:A8:89:14:93:85:2A:C5:D6:A1:A3 Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c Certificate serial: 019B7F139148730E62B9388DFA577F63B42A Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/KSQvhRpWm210zaiJFJOFKsXWoaM.roa Signing time: Fri 02 Jan 2026 14:19:07 +0000 ROA not before: Fri 02 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59441 IP address blocks: 185.113.9.0/24 maxlen: 24 2a12:9340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:91:48:73:0e:62:b9:38:8d:fa:57:7f:63:b4:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c Validity Not Before: Jan 2 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29242f851a569b6d74cda8891493852ac5d6a1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d8:40:c3:31:34:ac:0b:b6:fd:fb:30:b8:8e: 07:dc:09:78:3a:24:4a:f6:8b:7b:e1:d7:b0:38:50: 81:9e:2d:39:f0:29:41:ed:8c:1e:69:06:e1:3a:1d: 25:91:e8:f5:2c:48:ce:9e:49:b6:e0:ec:9f:54:e3: 15:91:fb:f3:0a:d1:d8:45:62:b6:07:5f:59:67:bd: 87:9a:55:27:f2:bd:27:9c:1a:70:25:b5:52:f6:32: 73:90:5f:56:01:40:ab:06:47:10:23:69:53:16:c7: ab:8c:62:92:ce:1c:48:f8:45:ed:72:e9:ad:e0:c6: 12:8b:a4:77:3d:53:1e:02:4a:0a:7e:d3:cd:f9:e0: c2:21:2d:b9:b5:3e:00:4f:ef:c5:95:41:50:6c:0c: 9c:64:36:a7:5d:98:0a:05:34:3d:e6:e9:b5:6f:07: b7:3a:8c:6d:92:93:5a:0c:94:cb:41:5f:5e:5a:bd: e9:b4:90:a6:2d:20:79:c7:70:c7:ce:0b:fc:c7:d0: 01:a4:6e:81:ff:80:b8:36:64:9b:16:79:85:0b:e9: f0:93:d2:45:df:cc:02:f3:1e:f4:95:75:75:e1:21: e0:f0:0f:25:9e:19:d6:61:6f:49:06:e9:b3:b5:12: 0d:48:80:33:f7:f6:b0:f2:b4:14:b4:64:93:43:9d: 54:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:24:2F:85:1A:56:9B:6D:74:CD:A8:89:14:93:85:2A:C5:D6:A1:A3 X509v3 Authority Key Identifier: keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/KSQvhRpWm210zaiJFJOFKsXWoaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.9.0/24 IPv6: 2a12:9340::/29 Signature Algorithm: sha256WithRSAEncryption 85:e5:b9:f5:21:e4:ec:0b:c0:e0:0e:68:56:6e:6e:45:e2:cc: ea:59:3d:80:58:84:35:4c:0d:81:de:0a:54:60:70:c8:d5:98: 8f:59:0f:ae:ca:c8:e4:36:ac:4f:d1:f2:3d:92:a4:6d:e8:04: 53:e8:54:55:2e:46:3a:d3:c2:8e:8a:91:ff:d1:6b:ea:47:16: 1f:06:e0:32:0a:43:44:2f:2b:25:c2:ae:ce:70:d1:a1:8d:0d: bc:62:b2:e5:83:dd:6d:7a:19:cf:96:1a:b6:79:29:8c:d0:00: c8:d2:e8:00:05:0b:b0:ad:eb:cf:28:5c:1b:f4:d1:9c:bc:1e: 7d:d2:49:8d:f0:5b:0a:9c:9c:f0:24:60:02:59:c6:a9:cf:f6: 99:a0:a7:fb:b3:18:d5:0b:38:f2:0b:fd:32:e5:87:d2:f1:f6: 4b:18:ad:ad:08:76:69:68:3d:85:ae:d2:8c:2f:28:93:65:ba: e7:98:f3:35:35:b9:5c:9a:42:7d:f5:a3:39:1f:f6:75:09:bf: 4b:53:de:9e:f1:72:76:6f:e8:f7:e0:d3:58:c2:9a:e4:e7:a8: 6d:b6:f3:6c:dc:ca:b8:e3:db:e4:e1:e4:33:8e:66:52:39:6a: 9f:d2:f1:15:56:c9:42:11:fc:19:20:bb:92:d3:2d:e9:ff:3e: 55:0e:0d:7c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/E5FIcw5iuTiN+ld/Y7QqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNTNkOWI1MWY0N2FhNTVmOWU1MjcwNDc1NDg2OWY1NTM2 YmFlNGMwHhcNMjYwMTAyMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTI0MmY4NTFhNTY5YjZkNzRjZGE4ODkxNDkzODUyYWM1ZDZhMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9hAwzE0rAu2/fswuI4H3Al4OiRK 9ot74dewOFCBni058ClB7YweaQbhOh0lkej1LEjOnkm24OyfVOMVkfvzCtHYRWK2 B19ZZ72HmlUn8r0nnBpwJbVS9jJzkF9WAUCrBkcQI2lTFserjGKSzhxI+EXtcumt 4MYSi6R3PVMeAkoKftPN+eDCIS25tT4AT+/FlUFQbAycZDanXZgKBTQ95um1bwe3 OoxtkpNaDJTLQV9eWr3ptJCmLSB5x3DHzgv8x9ABpG6B/4C4NmSbFnmFC+nwk9JF 38wC8x70lXV14SHg8A8lnhnWYW9JBumztRINSIAz9/aw8rQUtGSTQ51UYQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCkkL4UaVpttdM2oiRSThSrF1qGjMB8GA1UdIwQY MBaAFIBT2bUfR6pV+eUnBHVIafVTa65MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWIt YTE1YWY1ZThmMTNjLzEvS1NRdmhScFdtMjEwemFpSkZKT0ZLc1hXb2FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWItYTE1YWY1ZThmMTNj LzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuXEJMA0E AgACMAcDBQMqEpNAMA0GCSqGSIb3DQEBCwUAA4IBAQCF5bn1IeTsC8DgDmhWbm5F 4szqWT2AWIQ1TA2B3gpUYHDI1ZiPWQ+uysjkNqxP0fI9kqRt6ART6FRVLkY608KO ipH/0WvqRxYfBuAyCkNELyslwq7OcNGhjQ28YrLlg91tehnPlhq2eSmM0ADI0ugA BQuwrevPKFwb9NGcvB590kmN8FsKnJzwJGACWcapz/aZoKf7sxjVCzjyC/0y5YfS 8fZLGK2tCHZpaD2FrtKMLyiTZbrnmPM1NblcmkJ99aM5H/Z1Cb9LU96e8XJ2b+j3 4NNYwprk56httvNs3Mq449vk4eQzjmZSOWqf0vEVVslCEfwZILuS0y3p/z5VDg18 -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:14 2026 by rpki-client