This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/k1oWIl9uaPhK_7wC7TzwxBmJV5U.roa File: k1oWIl9uaPhK_7wC7TzwxBmJV5U.roa (raw, json) Hash identifier: Teuvy3ArR3TwwUcbjV0tYtPi6ySgg76mgoEbmzqvJDg= Subject key identifier: 93:5A:16:22:5F:6E:68:F8:4A:FF:BC:02:ED:3C:F0:C4:19:89:57:95 Certificate issuer: /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02 Certificate serial: 019B7F15B19001FAB1C5A6C69582D774265B Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/k1oWIl9uaPhK_7wC7TzwxBmJV5U.roa Signing time: Fri 02 Jan 2026 14:21:26 +0000 ROA not before: Fri 02 Jan 2026 14:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50178 IP address blocks: 185.161.192.0/22 maxlen: 22 185.161.192.0/24 maxlen: 24 185.161.193.0/24 maxlen: 24 185.161.194.0/24 maxlen: 24 185.161.195.0/24 maxlen: 24 2a07:c700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b1:90:01:fa:b1:c5:a6:c6:95:82:d7:74:26:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02 Validity Not Before: Jan 2 14:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=935a16225f6e68f84affbc02ed3cf0c419895795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:40:9d:83:1b:33:69:f7:07:a0:22:8a:dc:b2: b0:ab:36:5f:c6:5c:83:08:15:e1:6c:84:b9:9a:68: 2f:57:a4:27:8f:de:46:b5:fb:5f:0d:b5:55:6b:11: 8c:60:a0:30:0a:d6:df:81:b2:2a:f1:7f:8e:32:89: ea:65:8e:ac:ab:ff:85:6f:77:5a:05:6a:70:1d:3a: 5e:3a:16:32:76:29:85:b1:07:d8:06:f8:47:6b:e3: 85:91:10:95:02:32:9b:9f:c8:cf:be:e4:a9:c5:f9: 31:60:d0:3e:b0:58:f7:86:3a:b2:9d:f6:f0:73:5b: 3a:79:23:e8:29:2d:76:03:b3:48:08:09:a8:72:01: 44:90:79:ec:fc:1f:1c:2c:51:1e:44:b5:dd:10:17: fc:d0:aa:28:ae:ef:36:5a:b0:83:c1:73:7f:2a:fa: 34:11:23:c9:9a:a5:30:10:7b:a5:e0:c4:91:60:a6: d7:b4:06:35:4c:9e:31:c3:23:19:32:d3:7c:e1:a5: 67:5e:25:c2:00:7d:45:41:06:f1:ad:67:8f:f1:0f: 3e:95:35:fd:74:55:a5:5f:19:52:85:cb:dc:59:4c: 8c:1f:0f:f2:d7:7d:a1:74:ca:5a:85:2d:58:97:52: e8:9d:34:5d:9f:5c:fb:ac:d4:83:77:5e:ee:41:1f: 6d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5A:16:22:5F:6E:68:F8:4A:FF:BC:02:ED:3C:F0:C4:19:89:57:95 X509v3 Authority Key Identifier: keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/k1oWIl9uaPhK_7wC7TzwxBmJV5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.192.0/22 IPv6: 2a07:c700::/29 Signature Algorithm: sha256WithRSAEncryption 55:07:f7:d1:d0:c1:71:69:09:89:19:f7:d1:8c:b6:f0:c8:0a: 12:71:e5:f5:84:d9:d8:70:39:99:eb:a9:27:10:e8:42:f1:8f: 8a:e4:6c:76:3a:e0:21:91:d1:09:91:89:fd:be:09:45:70:41: 6d:87:cc:5e:6e:19:39:43:dc:8b:5b:d8:e6:0d:f5:f4:60:dd: 9b:81:ce:1e:c0:64:85:60:06:f5:b5:5d:14:41:98:64:cc:15: 2e:61:a0:6e:9d:4f:d5:15:32:2e:db:f1:54:01:89:d6:bf:e2: 1b:e2:43:91:d2:63:6b:fc:e5:bb:26:71:17:0c:54:17:6e:e6: 26:35:8f:eb:b7:9f:a8:01:74:dc:25:84:0d:7f:48:a9:ee:a0: 0c:4d:2e:76:00:bb:28:0c:ab:e4:22:37:1e:8e:6f:83:fa:ac: 35:2b:e7:c4:c3:2c:48:ad:8b:67:b2:d7:27:70:cc:91:ec:e3: 0f:9b:60:e0:86:39:0f:3e:6b:84:56:f7:a8:49:c2:65:17:79: 24:66:b7:a1:cd:4f:62:97:19:8a:06:31:91:2d:95:14:ac:4b: f3:4a:85:14:4c:e5:3b:1c:8b:eb:09:fa:d9:b0:2c:0c:e1:fd: 21:45:43:aa:31:86:a7:02:54:6c:c1:d1:cb:27:69:af:0c:54: 10:b2:d1:91 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FbGQAfqxxabGlYLXdCZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOWVkNzA5ODExMWM2Nzg4OThhYzBmMGFlYzk3ZmRkM2Iz YjZkMDIwHhcNMjYwMTAyMTQyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzVhMTYyMjVmNmU2OGY4NGFmZmJjMDJlZDNjZjBjNDE5ODk1Nzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUCdgxszafcHoCKK3LKwqzZfxlyD CBXhbIS5mmgvV6Qnj95GtftfDbVVaxGMYKAwCtbfgbIq8X+OMonqZY6sq/+Fb3da BWpwHTpeOhYydimFsQfYBvhHa+OFkRCVAjKbn8jPvuSpxfkxYNA+sFj3hjqynfbw c1s6eSPoKS12A7NICAmocgFEkHns/B8cLFEeRLXdEBf80Kooru82WrCDwXN/Kvo0 ESPJmqUwEHul4MSRYKbXtAY1TJ4xwyMZMtN84aVnXiXCAH1FQQbxrWeP8Q8+lTX9 dFWlXxlShcvcWUyMHw/y132hdMpahS1Yl1LonTRdn1z7rNSDd17uQR9thQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJNaFiJfbmj4Sv+8Au088MQZiVeVMB8GA1UdIwQY MBaAFICe1wmBEcZ4iYrA8K7Jf907O20CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNGE0NzctMDhhMi00ZThjLThjNGQt MDEwY2Q5MDc5YWJmLzEvazFvV0lsOXVhUGhLXzd3QzdUend4Qm1KVjVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9iNGE0NzctMDhhMi00ZThjLThjNGQtMDEwY2Q5MDc5YWJm LzEvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaHAMA0E AgACMAcDBQMqB8cAMA0GCSqGSIb3DQEBCwUAA4IBAQBVB/fR0MFxaQmJGffRjLbw yAoSceX1hNnYcDmZ66knEOhC8Y+K5Gx2OuAhkdEJkYn9vglFcEFth8xebhk5Q9yL W9jmDfX0YN2bgc4ewGSFYAb1tV0UQZhkzBUuYaBunU/VFTIu2/FUAYnWv+Ib4kOR 0mNr/OW7JnEXDFQXbuYmNY/rt5+oAXTcJYQNf0ip7qAMTS52ALsoDKvkIjcejm+D +qw1K+fEwyxIrYtnstcncMyR7OMPm2DghjkPPmuEVveoScJlF3kkZrehzU9ilxmK BjGRLZUUrEvzSoUUTOU7HIvrCfrZsCwM4f0hRUOqMYanAlRswdHLJ2mvDFQQstGR -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:17 2026 by rpki-client