This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/kPmc5sCThKk5h79wmMSU7r2wdGk.roa File: kPmc5sCThKk5h79wmMSU7r2wdGk.roa (raw, json) Hash identifier: cJYgegRXaUwVLkfRCxfZWWQRmJwn/LEk5WOIrzbJK84= Subject key identifier: 90:F9:9C:E6:C0:93:84:A9:39:87:BF:70:98:C4:94:EE:BD:B0:74:69 Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5 Certificate serial: 019B797EF912D4BC9233A12B173E8FE31A5E Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/kPmc5sCThKk5h79wmMSU7r2wdGk.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12703 IP address blocks: 185.43.76.0/22 maxlen: 24 2a01:6ca0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f9:12:d4:bc:92:33:a1:2b:17:3e:8f:e3:1a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5 Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90f99ce6c09384a93987bf7098c494eebdb07469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:74:64:78:ff:cb:5e:b9:88:c1:ad:eb:8b: 0c:7c:f2:39:cc:b8:32:6a:15:7f:dd:85:61:0d:2f: 21:b6:66:04:ac:aa:5f:24:da:64:ef:49:73:82:d8: 38:bc:f2:7b:bb:e1:9b:67:d9:5f:88:8e:f1:35:e2: c0:4e:cf:d0:52:85:8b:86:f5:2b:b4:fe:3a:83:1c: b9:48:f6:fd:aa:35:c2:f1:f7:d9:16:d1:98:2a:a2: 9e:fd:9d:e5:29:e8:5f:c5:ed:1e:f2:73:d8:40:31: 52:86:12:e2:1b:87:16:01:5d:20:95:49:22:fb:06: ee:33:28:cb:af:f9:6e:f8:f1:f8:22:6d:14:37:9e: 45:88:07:44:a0:fb:4c:ed:71:89:81:8f:ff:5a:c2: e4:08:04:56:17:23:3b:9d:58:00:8f:e2:ca:ff:a0: c6:3e:36:bf:82:b5:f5:e6:4c:5a:d3:34:af:2f:b1: 3b:7c:3c:99:75:13:6f:19:5d:32:18:1c:4d:de:d6: 7f:8f:a6:d1:cc:8b:f1:4b:44:30:02:ab:a8:25:29: b0:48:24:1b:4e:c3:49:bd:19:1b:07:ed:6c:18:0c: 85:06:f3:d1:6b:b9:07:a8:46:b9:ca:d3:8b:f4:82: 3f:1e:cf:06:d3:44:fd:80:d4:96:9a:71:a8:d6:1e: 35:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F9:9C:E6:C0:93:84:A9:39:87:BF:70:98:C4:94:EE:BD:B0:74:69 X509v3 Authority Key Identifier: keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/kPmc5sCThKk5h79wmMSU7r2wdGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.43.76.0/22 IPv6: 2a01:6ca0::/32 Signature Algorithm: sha256WithRSAEncryption 99:29:4c:bc:d6:93:bc:46:25:f3:11:75:f3:21:3f:21:88:da: 4c:53:17:f4:68:3c:05:a0:82:ab:b0:fb:82:3b:35:3a:ad:19: 03:e0:43:5b:ba:3f:7d:92:ed:b2:34:4e:90:8f:cc:e7:68:96: a2:ec:0f:d2:54:a1:e8:6d:83:88:a6:c1:2a:4b:20:df:62:bf: 77:8c:82:50:05:81:ce:d5:ee:6c:86:3b:17:7d:05:81:eb:3a: 10:8a:a0:87:5e:57:f8:15:d4:ab:2a:9f:d8:97:e6:b8:92:27: 85:8d:42:5a:04:12:6a:fd:bc:31:41:5e:a6:20:08:1d:da:46: 00:50:dd:0f:20:49:e9:3d:5d:db:fe:86:61:fe:1a:e4:d4:49: d3:e2:99:6b:d0:18:11:5d:35:94:49:3a:f4:21:70:17:41:48: a3:4c:0d:9a:22:2d:fa:6d:0b:39:2e:8d:db:63:c8:c4:b1:58: 46:4d:1e:0b:7e:dd:ed:64:56:c4:e3:d7:cc:fe:be:5e:47:54: 1b:51:32:d8:7c:70:9b:d8:60:2f:53:ac:06:72:47:4a:4d:4f: e5:a4:a2:d6:c3:8c:66:5a:fb:8f:d1:bf:b1:9d:e4:5f:41:f1: 1c:20:45:13:6d:c6:c5:0f:9c:a6:df:a6:81:33:b2:09:af:71: dc:a9:dc:96 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fvkS1LySM6ErFz6P4xpeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTQ5MWZmMjg5NjEyN2NlODhlY2JhNDRjZWM3NGM2M2Zi ZTFhYjUwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGY5OWNlNmMwOTM4NGE5Mzk4N2JmNzA5OGM0OTRlZWJkYjA3NDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc90ZHj/y165iMGt64sMfPI5zLgy ahV/3YVhDS8htmYErKpfJNpk70lzgtg4vPJ7u+GbZ9lfiI7xNeLATs/QUoWLhvUr tP46gxy5SPb9qjXC8ffZFtGYKqKe/Z3lKehfxe0e8nPYQDFShhLiG4cWAV0glUki +wbuMyjLr/lu+PH4Im0UN55FiAdEoPtM7XGJgY//WsLkCARWFyM7nVgAj+LK/6DG Pja/grX15kxa0zSvL7E7fDyZdRNvGV0yGBxN3tZ/j6bRzIvxS0QwAquoJSmwSCQb TsNJvRkbB+1sGAyFBvPRa7kHqEa5ytOL9II/Hs8G00T9gNSWmnGo1h41CwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJD5nObAk4SpOYe/cJjElO69sHRpMB8GA1UdIwQY MBaAFPrkkf8olhJ86I7LpEzsdMY/vhq1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11U1JfeWlXRW56b2pzdWtUT3gweGotLUdyVS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4 LWNlYzE2MzMzZDdmMi8xL2tQbWM1c0NUaEtrNWg3OXdtTVNVN3Iyd2RHay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4LWNlYzE2MzMzZDdm Mi8xLzEtdVNSX3lpV0Vuem9qc3VrVE94MHhqLS1HclUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK5K0ww DQQCAAIwBwMFACoBbKAwDQYJKoZIhvcNAQELBQADggEBAJkpTLzWk7xGJfMRdfMh PyGI2kxTF/RoPAWggquw+4I7NTqtGQPgQ1u6P32S7bI0TpCPzOdolqLsD9JUoeht g4imwSpLIN9iv3eMglAFgc7V7myGOxd9BYHrOhCKoIdeV/gV1Ksqn9iX5riSJ4WN QloEEmr9vDFBXqYgCB3aRgBQ3Q8gSek9Xdv+hmH+GuTUSdPimWvQGBFdNZRJOvQh cBdBSKNMDZoiLfptCzkujdtjyMSxWEZNHgt+3e1kVsTj18z+vl5HVBtRMth8cJvY YC9TrAZyR0pNT+WkotbDjGZa+4/Rv7Gd5F9B8RwgRRNtxsUPnKbfpoEzsgmvcdyp 3JY= -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:50 2026 by rpki-client