This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/kERmId2DFd_EibfHqh4MCSjy0OI.roa File: kERmId2DFd_EibfHqh4MCSjy0OI.roa (raw, json) Hash identifier: mbtYNWIZ4W0nIasRUXPcBW6WvJKBeXzkM/oxx5kKexM= Subject key identifier: 90:44:66:21:DD:83:15:DF:C4:89:B7:C7:AA:1E:0C:09:28:F2:D0:E2 Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da Certificate serial: 019B7BA3BDBD25A4797BC255CF600768C58C Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/kERmId2DFd_EibfHqh4MCSjy0OI.roa Signing time: Thu 01 Jan 2026 22:18:06 +0000 ROA not before: Thu 01 Jan 2026 22:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12637 IP address blocks: 149.3.144.0/21 maxlen: 24 185.77.84.0/22 maxlen: 24 185.205.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:bd:bd:25:a4:79:7b:c2:55:cf:60:07:68:c5:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da Validity Not Before: Jan 1 22:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90446621dd8315dfc489b7c7aa1e0c0928f2d0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:e7:fd:cd:84:54:8b:f3:16:2f:5a:6b:73: 1d:91:c7:0e:84:00:01:dd:9f:a1:56:37:0b:1b:60: 7b:88:3e:4d:ab:34:a6:0c:38:08:17:71:d0:51:fe: e9:ef:2a:ab:04:42:3f:49:11:eb:0f:8c:5d:16:bf: 78:79:ac:b9:73:2a:b7:fd:75:4b:22:f4:eb:e4:69: 65:51:fc:c0:4e:ac:87:ec:0e:ef:7b:90:f9:64:78: 5a:25:9f:41:a4:53:07:53:c9:6d:23:d0:dc:42:d4: b2:bf:66:d1:22:bc:a7:31:c4:9e:79:ba:c5:75:9a: c2:c2:f4:a0:b7:96:06:06:07:c6:0c:17:e8:fe:33: 7a:fa:50:17:59:4c:4e:ce:e7:48:b0:1c:70:ec:60: fb:2e:2c:c6:b5:65:30:fa:77:99:d6:95:77:31:e9: 71:1d:c7:d1:d9:43:f4:a8:f7:dc:1e:a8:dd:6b:6a: e7:81:55:de:74:23:42:45:35:30:8e:90:8c:13:a1: 82:8e:38:1a:c0:af:89:cf:87:07:9d:c3:d1:3d:3f: 60:c6:fe:c1:01:07:ff:95:69:05:16:0b:48:73:93: 6f:4f:a6:b7:76:61:a7:61:57:9c:f3:63:ef:40:49: 83:55:ab:c7:04:31:b6:ce:69:ee:f1:b0:da:64:ae: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:44:66:21:DD:83:15:DF:C4:89:B7:C7:AA:1E:0C:09:28:F2:D0:E2 X509v3 Authority Key Identifier: keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/kERmId2DFd_EibfHqh4MCSjy0OI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.3.144.0/21 185.77.84.0/22 185.205.40.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:a3:a7:ed:04:33:0f:03:ec:af:e0:b4:40:71:ed:52:4f:1a: ac:61:e0:e5:8f:0b:d1:a9:12:86:44:53:d4:31:45:0e:e0:67: 26:d6:57:93:a5:d2:75:35:11:1e:b1:7b:b0:37:9a:a5:fd:86: 81:4b:8c:ca:eb:05:c0:b8:aa:fc:8a:b2:90:de:24:29:c2:0b: d5:a9:89:2c:7b:07:bd:38:13:50:99:f1:7b:5d:de:f0:37:38: c3:ce:41:4d:71:bb:3e:9d:24:9e:c8:d7:77:b7:ef:f2:c5:c8: 34:70:23:23:3a:49:4f:fd:b7:80:9c:f9:22:af:2e:68:45:cf: b8:59:2e:2b:08:a2:c5:53:b0:dc:83:bf:d7:3d:4c:f0:f9:0c: ad:dd:9c:a5:97:c3:d9:db:d3:40:2a:4a:57:87:5f:b2:06:02: 9f:f0:cc:f5:ef:32:89:e5:96:cf:11:44:c1:92:92:af:09:97: 75:3d:21:99:a9:0b:df:07:3c:52:87:ef:b6:d1:79:04:b3:d6: 6d:0b:e2:91:e3:83:c9:16:8c:82:26:d5:69:fe:cb:bb:59:19: 6d:77:d1:d1:2c:39:45:0b:4c:89:5d:2f:18:87:db:d6:fd:3b: d4:bb:a1:0d:23:74:4e:bd:dc:48:b2:f5:74:9d:2b:ea:66:ef: ac:f2:4b:e9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7o729JaR5e8JVz2AHaMWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzM2VlYWQ0MTNhMTcwNWZiZmNiMmFkYmU5MGM2OWYwNTVl Mjc1ZGEwHhcNMjYwMTAxMjIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDQ0NjYyMWRkODMxNWRmYzQ4OWI3YzdhYTFlMGMwOTI4ZjJkMGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfnn/c2EVIvzFi9aa3MdkccOhAAB 3Z+hVjcLG2B7iD5NqzSmDDgIF3HQUf7p7yqrBEI/SRHrD4xdFr94eay5cyq3/XVL IvTr5GllUfzATqyH7A7ve5D5ZHhaJZ9BpFMHU8ltI9DcQtSyv2bRIrynMcSeebrF dZrCwvSgt5YGBgfGDBfo/jN6+lAXWUxOzudIsBxw7GD7LizGtWUw+neZ1pV3Melx HcfR2UP0qPfcHqjda2rngVXedCNCRTUwjpCME6GCjjgawK+Jz4cHncPRPT9gxv7B AQf/lWkFFgtIc5NvT6a3dmGnYVec82PvQEmDVavHBDG2zmnu8bDaZK6nSwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJBEZiHdgxXfxIm3x6oeDAko8tDiMB8GA1UdIwQY MBaAFFM+6tQToXBfv8sq2+kMafBV4nXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXo3cTFCT2hjRi1feXlyYjZReHA4RlhpZGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80OGYxYzYtMTEzNC00OTY5LWFmNjAt ZDAxN2MxNzU5NjM5LzEva0VSbUlkMkRGZF9FaWJmSHFoNE1DU2p5ME9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi80OGYxYzYtMTEzNC00OTY5LWFmNjAtZDAxN2MxNzU5NjM5 LzEvVXo3cTFCT2hjRi1feXlyYjZReHA4RlhpZGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDlQOQAwQC uU1UAwQCuc0oMA0GCSqGSIb3DQEBCwUAA4IBAQA6o6ftBDMPA+yv4LRAce1STxqs YeDljwvRqRKGRFPUMUUO4Gcm1leTpdJ1NREesXuwN5ql/YaBS4zK6wXAuKr8irKQ 3iQpwgvVqYksewe9OBNQmfF7Xd7wNzjDzkFNcbs+nSSeyNd3t+/yxcg0cCMjOklP /beAnPkiry5oRc+4WS4rCKLFU7Dcg7/XPUzw+Qyt3Zyll8PZ29NAKkpXh1+yBgKf 8Mz17zKJ5ZbPEUTBkpKvCZd1PSGZqQvfBzxSh++20XkEs9ZtC+KR44PJFoyCJtVp /su7WRltd9HRLDlFC0yJXS8Yh9vW/TvUu6ENI3ROvdxIsvV0nSvqZu+s8kvp -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:42 2026 by rpki-client