This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/0kE9whcbqDZPFxCT664hh63BKUs.roa File: 0kE9whcbqDZPFxCT664hh63BKUs.roa (raw, json) Hash identifier: 5C4ga/+QHi4o11rdDpXGfOfWtVfwE8VOC9vvm4vn/b4= Subject key identifier: D2:41:3D:C2:17:1B:A8:36:4F:17:10:93:EB:AE:21:87:AD:C1:29:4B Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1 Certificate serial: 019B79104AC2F2909108EB5C57676C4C931D Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/0kE9whcbqDZPFxCT664hh63BKUs.roa Signing time: Thu 01 Jan 2026 10:17:49 +0000 ROA not before: Thu 01 Jan 2026 10:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201031 IP address blocks: 185.88.24.0/22 maxlen: 22 185.88.24.0/23 maxlen: 23 185.88.24.0/24 maxlen: 24 185.88.25.0/24 maxlen: 24 185.88.26.0/23 maxlen: 23 185.88.26.0/24 maxlen: 24 185.88.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4a:c2:f2:90:91:08:eb:5c:57:67:6c:4c:93:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1 Validity Not Before: Jan 1 10:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2413dc2171ba8364f171093ebae2187adc1294b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:87:1b:af:6a:c6:00:34:2d:6f:58:ef:f2:6e: 56:dc:f3:08:18:63:56:3c:86:87:2d:cf:8c:d0:8a: 53:0c:29:ff:c1:92:30:4c:f1:0e:2a:02:22:ee:84: b5:40:e5:9a:20:56:78:c6:7d:78:87:77:3d:46:e2: b8:28:62:9f:c4:b9:e7:1d:86:b6:b1:f5:f0:a6:5b: 19:04:f8:49:21:85:42:b8:4d:0a:ca:ab:9d:1f:08: c3:a6:86:90:53:e7:29:20:d0:45:0b:3c:ec:3f:90: 70:ee:58:03:e7:c0:ac:48:36:03:01:3c:48:79:36: 29:08:34:6c:9e:f7:42:8b:de:cc:3e:73:68:b8:8b: e9:12:95:fd:f9:a5:e4:a4:32:4b:82:48:34:39:58: af:83:f1:bf:17:7f:4e:b3:06:ec:6a:b5:5f:8c:37: ad:b8:46:64:89:19:c2:9e:6b:42:eb:4e:70:ba:bd: 72:c1:4f:43:22:c3:18:17:62:ae:18:89:fb:fe:76: 10:6a:47:9d:c2:3e:e4:f7:95:a9:fc:26:51:70:f9: c3:61:89:a5:d9:8a:fb:22:6b:cd:af:e0:34:dc:68: ba:9c:d5:ef:79:e3:af:c4:de:e2:3a:a8:e1:dc:b6: f9:3c:d4:2f:7c:8e:84:04:a3:d8:52:03:ef:eb:ec: cf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:41:3D:C2:17:1B:A8:36:4F:17:10:93:EB:AE:21:87:AD:C1:29:4B X509v3 Authority Key Identifier: keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/0kE9whcbqDZPFxCT664hh63BKUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.24.0/22 Signature Algorithm: sha256WithRSAEncryption ae:9f:5a:ac:d9:47:6e:52:c5:7c:c3:ad:97:2a:60:54:87:91: c1:92:e9:e2:ca:72:b2:59:d4:fb:e6:2a:54:99:2a:77:0e:87: de:60:b3:5a:e7:97:01:46:6f:d9:ec:16:42:f3:5d:21:e2:8a: 5d:f0:61:85:b0:6a:e3:99:16:51:64:fc:0e:de:91:ed:5c:66: 10:60:75:f1:5f:e1:c5:0d:b0:b1:47:46:49:6d:8e:b0:37:23: 20:62:86:13:5e:fd:bb:3f:3c:05:2a:f2:0d:bc:27:20:92:3c: cc:e8:d9:c1:85:f6:88:d4:1d:ac:a3:d0:80:26:96:93:8e:16: 5f:60:4c:8f:a0:a3:ff:ba:72:71:b7:b9:5e:45:1d:7a:87:ce: 04:f1:94:02:91:ab:b7:6d:7e:d6:2f:ce:0b:16:45:bb:59:68: c1:9d:99:78:be:2e:a9:fa:f0:fe:84:bf:05:1b:94:72:05:7b: b9:a3:d9:88:af:02:84:c1:39:ca:f4:25:08:06:a5:e4:2d:f0: 44:ce:25:85:f2:91:f9:c3:80:85:88:00:8a:6b:17:ef:83:c3: a2:6b:d3:d1:77:23:75:0d:bd:87:f8:86:82:7d:e0:af:84:56: 94:a2:fd:43:d8:fa:3c:46:b8:8d:4d:76:19:07:fb:ab:30:2c: 5d:3f:5f:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EErC8pCRCOtcV2dsTJMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMWRhMGM3YTk5NDA1YzQ2YmFhZDg0Y2I5ZDkzZTgzNDU5 OWM4ZTEwHhcNMjYwMTAxMTAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjQxM2RjMjE3MWJhODM2NGYxNzEwOTNlYmFlMjE4N2FkYzEyOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34cbr2rGADQtb1jv8m5W3PMIGGNW PIaHLc+M0IpTDCn/wZIwTPEOKgIi7oS1QOWaIFZ4xn14h3c9RuK4KGKfxLnnHYa2 sfXwplsZBPhJIYVCuE0KyqudHwjDpoaQU+cpINBFCzzsP5Bw7lgD58CsSDYDATxI eTYpCDRsnvdCi97MPnNouIvpEpX9+aXkpDJLgkg0OVivg/G/F39OswbsarVfjDet uEZkiRnCnmtC605wur1ywU9DIsMYF2KuGIn7/nYQakedwj7k95Wp/CZRcPnDYYml 2Yr7ImvNr+A03Gi6nNXveeOvxN7iOqjh3Lb5PNQvfI6EBKPYUgPv6+zPzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNJBPcIXG6g2TxcQk+uuIYetwSlLMB8GA1UdIwQY MBaAFJEdoMeplAXEa6rYTLnZPoNFmcjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQt NDcyZjAyNDUwZWMzLzEvMGtFOXdoY2JxRFpQRnhDVDY2NGhoNjNCS1VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQtNDcyZjAyNDUwZWMz LzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVgYMA0G CSqGSIb3DQEBCwUAA4IBAQCun1qs2UduUsV8w62XKmBUh5HBkuniynKyWdT75ipU mSp3DofeYLNa55cBRm/Z7BZC810h4opd8GGFsGrjmRZRZPwO3pHtXGYQYHXxX+HF DbCxR0ZJbY6wNyMgYoYTXv27PzwFKvINvCcgkjzM6NnBhfaI1B2so9CAJpaTjhZf YEyPoKP/unJxt7leRR16h84E8ZQCkau3bX7WL84LFkW7WWjBnZl4vi6p+vD+hL8F G5RyBXu5o9mIrwKEwTnK9CUIBqXkLfBEziWF8pH5w4CFiACKaxfvg8Oia9PRdyN1 Db2H+IaCfeCvhFaUov1D2Po8RriNTXYZB/urMCxdP1+h -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:59 2026 by rpki-client