This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/Kxp8sRrLmuxZpgHOo9XGbn4leYo.roa File: Kxp8sRrLmuxZpgHOo9XGbn4leYo.roa (raw, json) Hash identifier: OqyOjTridS0E6ePLP3GD9AlCuTY0Y4K+aUKgmZHZocI= Subject key identifier: 2B:1A:7C:B1:1A:CB:9A:EC:59:A6:01:CE:A3:D5:C6:6E:7E:25:79:8A Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624 Certificate serial: 019B7D5CE8C4DF21819A0B13EE0B7B20B18F Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/Kxp8sRrLmuxZpgHOo9XGbn4leYo.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204865 IP address blocks: 185.237.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e8:c4:df:21:81:9a:0b:13:ee:0b:7b:20:b1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624 Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b1a7cb11acb9aec59a601cea3d5c66e7e25798a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:03:dd:89:39:36:fd:9e:39:e3:21:5a:38: 29:d3:1a:33:a4:ff:02:49:b6:2e:01:28:33:d9:af: 3f:6d:18:29:34:60:46:4c:cc:82:ef:49:83:37:89: 08:e6:b9:36:4b:84:2e:eb:29:1d:ff:78:be:32:3f: 8c:e5:bc:18:11:cc:6f:a9:80:42:68:3e:96:68:d2: 90:12:1a:d5:88:b1:dd:77:8c:ca:b9:42:25:ba:17: 55:28:9b:af:d1:f9:e6:23:6a:f8:00:2f:25:4a:c1: e7:01:d5:f3:51:54:d5:84:21:71:45:a5:5d:49:18: 82:52:77:44:76:c4:98:3b:cc:cd:b1:81:17:53:2d: d9:70:fd:1d:68:d7:85:4d:8f:c5:54:e0:64:97:68: d5:2c:58:f2:8c:0a:5e:f2:0b:d8:2d:fa:a7:3e:21: 66:5f:d8:01:5d:5a:cf:7d:52:85:44:bc:5b:71:81: 71:8b:c9:fd:23:a9:fb:11:12:be:0b:62:95:a5:a5: f5:87:95:43:aa:d7:65:aa:58:c9:e0:82:34:87:90: ee:48:d4:44:d4:57:4e:12:76:e3:86:d4:0e:f3:9a: 9a:a0:ee:c8:e4:e4:b8:ed:9d:1e:da:e7:75:92:c3: 0e:ad:8c:cd:a1:4e:be:bf:eb:cc:33:35:71:3b:af: 32:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1A:7C:B1:1A:CB:9A:EC:59:A6:01:CE:A3:D5:C6:6E:7E:25:79:8A X509v3 Authority Key Identifier: keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/Kxp8sRrLmuxZpgHOo9XGbn4leYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.85.0/24 Signature Algorithm: sha256WithRSAEncryption 25:55:52:95:db:df:0b:a3:c2:37:da:d1:50:ca:3b:b4:d7:62: d6:45:70:ce:8c:24:14:ea:ee:c4:86:24:36:ba:08:87:36:11: fa:c5:87:64:3a:aa:2d:98:70:28:15:35:96:25:7e:e7:83:82: 86:4d:cc:8f:fd:16:15:5b:df:7b:59:0b:ae:16:0a:70:42:db: 65:9a:bc:85:0d:f4:7b:bb:77:de:c2:b9:00:49:0e:82:52:13: f1:2d:28:45:5d:43:10:f0:c6:43:dc:c2:08:c4:36:fc:2b:1f: 77:8d:e5:23:c8:6a:68:58:d7:7f:75:1d:ad:5e:e6:cd:77:51: 2c:c4:18:77:a7:21:93:81:bf:89:96:35:68:30:9d:46:f0:5b: 82:18:ea:82:aa:b5:80:ea:d4:8c:3c:53:a0:2c:91:1e:98:62: 27:3d:2a:64:2d:6a:51:f7:04:df:00:6e:54:47:3f:08:07:19: c1:ac:ce:23:fa:78:03:1c:c0:40:28:57:77:f4:0d:1c:b5:ed: 16:8c:47:79:90:8b:8c:8a:ae:d4:1d:78:02:e6:44:d1:b1:31: 72:b1:5a:93:71:e0:f1:fe:58:74:c4:52:9b:4f:25:4e:c3:df: 28:e7:84:b4:ec:16:a6:93:89:da:4b:93:e6:ea:e4:b1:bc:a7: 81:9f:d5:64 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XOjE3yGBmgsT7gt7ILGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MDM3OWYzYWZkOTRjMGYyNmI2N2ZmZmEzNGQ2ZTk0NmMy OWQ2MjQwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjFhN2NiMTFhY2I5YWVjNTlhNjAxY2VhM2Q1YzY2ZTdlMjU3OThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx8D3Yk5Nv2eOeMhWjgp0xozpP8C SbYuASgz2a8/bRgpNGBGTMyC70mDN4kI5rk2S4Qu6ykd/3i+Mj+M5bwYEcxvqYBC aD6WaNKQEhrViLHdd4zKuUIluhdVKJuv0fnmI2r4AC8lSsHnAdXzUVTVhCFxRaVd SRiCUndEdsSYO8zNsYEXUy3ZcP0daNeFTY/FVOBkl2jVLFjyjApe8gvYLfqnPiFm X9gBXVrPfVKFRLxbcYFxi8n9I6n7ERK+C2KVpaX1h5VDqtdlqljJ4II0h5DuSNRE 1FdOEnbjhtQO85qaoO7I5OS47Z0e2ud1ksMOrYzNoU6+v+vMMzVxO68ycwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCsafLEay5rsWaYBzqPVxm5+JXmKMB8GA1UdIwQY MBaAFPkDefOv2UwPJrZ//6NNbpRsKdYkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1RTjU4Nl9aVEE4bXRuX19vMDF1bEd3cDFpUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvZGU3ZWY2LWJkYWUtNDcxNy1iMDYx LTZmMjA3OTUxYzRiMi8xL0t4cDhzUnJMbXV4WnBnSE9vOVhHYm40bGVZby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDYvZGU3ZWY2LWJkYWUtNDcxNy1iMDYxLTZmMjA3OTUxYzRi Mi8xLzEtUU41ODZfWlRBOG10bl9fbzAxdWxHd3AxaVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC57VUw DQYJKoZIhvcNAQELBQADggEBACVVUpXb3wujwjfa0VDKO7TXYtZFcM6MJBTq7sSG JDa6CIc2EfrFh2Q6qi2YcCgVNZYlfueDgoZNzI/9FhVb33tZC64WCnBC22WavIUN 9Hu7d97CuQBJDoJSE/EtKEVdQxDwxkPcwgjENvwrH3eN5SPIamhY1391Ha1e5s13 USzEGHenIZOBv4mWNWgwnUbwW4IY6oKqtYDq1Iw8U6AskR6YYic9KmQtalH3BN8A blRHPwgHGcGsziP6eAMcwEAoV3f0DRy17RaMR3mQi4yKrtQdeALmRNGxMXKxWpNx 4PH+WHTEUptPJU7D3yjnhLTsFqaTidpLk+bq5LG8p4Gf1WQ= -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:37 2026 by rpki-client