This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/nKJeqxa7LqDNLKYKZxWcvZPYL_k.roa File: nKJeqxa7LqDNLKYKZxWcvZPYL_k.roa (raw, json) Hash identifier: a8uBC8MN/37KXkbSoVJeTbSA38upd3cp/Ct1IMS+7KY= Subject key identifier: 9C:A2:5E:AB:16:BB:2E:A0:CD:2C:A6:0A:67:15:9C:BD:93:D8:2F:F9 Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce Certificate serial: 019B7CEDF7EF69B710096EB3639F46713815 Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/nKJeqxa7LqDNLKYKZxWcvZPYL_k.roa Signing time: Fri 02 Jan 2026 04:18:48 +0000 ROA not before: Fri 02 Jan 2026 04:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214366 IP address blocks: 185.244.29.0/24 maxlen: 24 185.244.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f7:ef:69:b7:10:09:6e:b3:63:9f:46:71:38:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce Validity Not Before: Jan 2 04:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ca25eab16bb2ea0cd2ca60a67159cbd93d82ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:0a:c0:ed:08:6f:52:87:3f:60:d4:bc:48: 8f:d5:d6:3f:c9:ea:a0:c5:bb:ef:b9:72:a3:73:28: e2:9a:5a:1a:02:c8:c9:ff:14:29:82:cf:9f:5e:45: b7:45:de:3e:2f:ba:0a:c3:ce:ef:cb:b2:b3:1e:ba: 2b:a5:a2:93:bd:da:a0:3d:2d:54:13:1a:4a:6e:5a: d0:91:4e:b0:c0:2c:ba:ef:20:c3:8c:2b:bf:2f:97: cd:87:ed:8c:18:07:f4:bf:03:e7:c5:ba:4a:4d:c1: 3b:b8:07:cb:2e:f7:9b:e5:be:af:7d:6f:89:c3:91: 6b:a3:ff:b7:4a:3b:e4:c1:8c:03:3a:73:19:f6:79: 8e:80:41:88:2b:db:1a:ea:ac:1a:24:fa:fc:59:41: 9a:0f:5d:27:7b:03:80:af:d5:8d:dc:3c:a0:b6:1a: 11:e6:69:64:cb:60:71:01:d6:c9:5a:9e:fc:ff:ed: b6:4f:c5:b1:ac:a2:40:33:ea:d8:52:d1:c8:aa:d2: 17:8d:d8:16:fc:bb:b1:e1:0d:77:8d:62:36:7c:55: cd:64:3a:c0:85:21:79:af:68:e1:b7:c2:7c:1b:e7: dd:b5:ac:3f:a4:20:3b:f5:8c:91:bc:84:9a:6b:d1: 21:20:ad:33:f5:2b:89:a0:c3:c5:2e:28:86:28:a3: 2e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A2:5E:AB:16:BB:2E:A0:CD:2C:A6:0A:67:15:9C:BD:93:D8:2F:F9 X509v3 Authority Key Identifier: keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/nKJeqxa7LqDNLKYKZxWcvZPYL_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.29.0/24 185.244.31.0/24 Signature Algorithm: sha256WithRSAEncryption ab:b3:bb:a6:97:e7:2b:d1:ff:e5:d3:0a:f5:06:b7:2b:76:8e: 2e:c2:d7:9c:bd:ac:55:52:0d:71:85:5f:41:e5:0b:d6:b8:b2: cb:19:46:39:53:c7:8b:49:08:14:01:bc:7e:a1:5c:fa:2f:33: 22:33:5f:9f:2d:87:7e:a9:2d:d4:f3:32:69:db:65:fe:97:93: 19:71:28:e9:47:72:f1:97:47:16:21:3a:7b:61:f9:9d:f4:4b: e8:cc:54:c2:be:eb:60:18:56:75:4a:ec:2a:5c:46:68:93:e9: 2d:23:b8:84:90:99:7c:4a:80:b5:8d:f0:8a:2a:18:c9:fe:18: 06:33:57:2e:86:67:23:2d:1c:2e:f4:e5:55:aa:14:58:de:c8: b5:e0:c8:0e:81:1d:5b:44:2c:d2:89:2b:7f:76:95:51:6d:30: fc:ef:9d:e6:97:42:f4:b1:9a:bc:54:71:00:e3:4d:4e:a2:52: 8f:84:7a:77:cc:fc:aa:2d:88:06:c1:4f:d6:da:02:55:75:15: ba:62:47:21:48:6f:32:eb:01:a9:62:1f:0d:b2:6a:52:a4:dd: 2e:ed:b7:5c:03:7f:ec:ba:22:e6:c1:83:4b:b8:95:72:a6:34: 1f:59:c8:77:61:25:42:e3:af:fd:75:02:6b:3a:d4:8b:08:9d: 5a:66:0d:0f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87ffvabcQCW6zY59GcTgVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi Yjg2Y2UwHhcNMjYwMTAyMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2EyNWVhYjE2YmIyZWEwY2QyY2E2MGE2NzE1OWNiZDkzZDgyZmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI0KwO0Ib1KHP2DUvEiP1dY/yeqg xbvvuXKjcyjimloaAsjJ/xQpgs+fXkW3Rd4+L7oKw87vy7KzHrorpaKTvdqgPS1U ExpKblrQkU6wwCy67yDDjCu/L5fNh+2MGAf0vwPnxbpKTcE7uAfLLveb5b6vfW+J w5Fro/+3SjvkwYwDOnMZ9nmOgEGIK9sa6qwaJPr8WUGaD10newOAr9WN3DygthoR 5mlky2BxAdbJWp78/+22T8WxrKJAM+rYUtHIqtIXjdgW/Lux4Q13jWI2fFXNZDrA hSF5r2jht8J8G+fdtaw/pCA79YyRvISaa9EhIK0z9SuJoMPFLiiGKKMubwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJyiXqsWuy6gzSymCmcVnL2T2C/5MB8GA1UdIwQY MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt ZjljYjBhN2IyMDZjLzEvbktKZXF4YTdMcUROTEtZS1p4V2N2WlBZTF9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAufQdAwQA ufQfMA0GCSqGSIb3DQEBCwUAA4IBAQCrs7uml+cr0f/l0wr1Brcrdo4uwtecvaxV Ug1xhV9B5QvWuLLLGUY5U8eLSQgUAbx+oVz6LzMiM1+fLYd+qS3U8zJp22X+l5MZ cSjpR3Lxl0cWITp7Yfmd9EvozFTCvutgGFZ1SuwqXEZok+ktI7iEkJl8SoC1jfCK KhjJ/hgGM1cuhmcjLRwu9OVVqhRY3si14MgOgR1bRCzSiSt/dpVRbTD8753ml0L0 sZq8VHEA401OolKPhHp3zPyqLYgGwU/W2gJVdRW6YkchSG8y6wGpYh8NsmpSpN0u 7bdcA3/suiLmwYNLuJVypjQfWch3YSVC46/9dQJrOtSLCJ1aZg0P -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:15 2026 by rpki-client