This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/K0MX4NeezBz4lr2S-3VOAsUYhIQ.roa File: K0MX4NeezBz4lr2S-3VOAsUYhIQ.roa (raw, json) Hash identifier: TugPqaQtZD9qSBdI5JE+l1/X09jHGI4DmWPMzdxCeJw= Subject key identifier: 2B:43:17:E0:D7:9E:CC:1C:F8:96:BD:92:FB:75:4E:02:C5:18:84:84 Certificate issuer: /CN=be07895736ed92860f3135008a85813f98bbd7c1 Certificate serial: 019B7E376422ED391A4C45DA2D0AB67C71A4 Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/K0MX4NeezBz4lr2S-3VOAsUYhIQ.roa Signing time: Fri 02 Jan 2026 10:18:37 +0000 ROA not before: Fri 02 Jan 2026 10:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205250 IP address blocks: 185.224.72.0/23 maxlen: 23 185.224.74.0/23 maxlen: 23 2a0c:fc00::/32 maxlen: 32 2a0c:fc01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:64:22:ed:39:1a:4c:45:da:2d:0a:b6:7c:71:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1 Validity Not Before: Jan 2 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b4317e0d79ecc1cf896bd92fb754e02c5188484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:64:b8:51:b5:dc:42:d6:b5:f9:9b:76:b6: 28:57:e0:06:fe:6e:04:30:e2:ad:4a:c8:c9:da:93: 9d:34:97:5b:14:e5:af:5e:1d:8f:2d:07:a0:bc:11: d8:1a:c3:87:95:92:c4:42:84:d0:5f:5e:44:14:70: d5:98:b1:a4:9b:7d:99:c3:3a:2c:63:14:0d:24:05: db:b0:ff:4d:fd:83:03:48:2f:29:23:71:fe:85:46: 3b:a9:26:b6:67:ac:51:ff:83:48:b3:4a:94:c4:06: 61:43:27:fa:58:08:7c:07:54:11:31:c5:61:e8:ca: e3:07:80:76:44:31:fc:a9:86:34:26:66:d5:33:9b: 60:b5:b5:fe:d4:76:93:d8:3c:89:f5:cc:f1:e6:f4: a2:48:f4:99:b8:02:6f:5b:25:58:e4:6b:51:12:46: 6f:ff:5a:29:6f:17:9d:f1:18:a3:fe:58:02:cd:96: a4:1f:c9:9d:17:cc:dd:bf:44:50:63:13:3c:64:1e: db:28:92:f7:a5:23:13:f6:b6:c3:79:40:a7:cf:0a: 5a:89:bd:93:09:c6:5e:8b:3e:f7:e4:5e:93:c9:89: 97:55:ae:2a:b0:cc:3c:91:82:a6:03:5e:7e:20:ac: 5d:33:9f:94:ca:e9:51:b0:09:8e:c2:67:5d:24:ab: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:43:17:E0:D7:9E:CC:1C:F8:96:BD:92:FB:75:4E:02:C5:18:84:84 X509v3 Authority Key Identifier: keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/K0MX4NeezBz4lr2S-3VOAsUYhIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.224.72.0/22 IPv6: 2a0c:fc00::/31 Signature Algorithm: sha256WithRSAEncryption 85:54:bb:50:ff:c4:60:7c:e9:37:a0:fd:31:02:72:cc:05:3c: 23:fe:b9:64:1c:86:72:94:ba:68:c2:92:1a:76:f3:ad:5e:bf: 0d:16:f9:fd:ec:3c:90:66:fe:6c:d3:4e:9c:03:42:7d:f0:2c: 2c:a6:dc:7e:82:ae:e8:ee:4c:c0:7e:73:87:53:b1:39:e4:c9: 66:dd:99:ef:c0:c4:05:67:89:4d:04:27:64:62:b8:f0:e0:9b: 5c:da:46:7c:7d:ee:a5:6d:48:f8:81:9b:02:e1:a2:fa:6b:3d: 69:f1:f7:64:27:bc:c8:a8:a2:8f:64:58:b5:b0:6b:7b:77:f9: 45:71:3c:9c:55:db:68:37:81:d7:62:1f:b5:56:65:ac:3c:02: 2c:f6:49:a7:ae:a1:3c:2a:6b:2c:fd:2c:c1:d0:2f:d5:d9:43: e8:8f:24:48:13:2f:28:14:ad:1b:70:53:90:e5:5e:c3:bf:4c: 0f:2c:35:9d:4f:f8:9e:e5:58:41:8d:d4:30:b8:85:95:aa:ba: fa:2d:b3:c7:90:57:cd:c7:22:76:eb:48:9a:28:0b:3d:95:46: 74:40:5c:17:f3:55:df:13:7f:ec:97:30:4d:32:1e:f5:0a:26: ad:ee:ba:e8:ab:f2:aa:fc:cd:2d:ed:80:ba:5d:90:4f:14:41: a6:e9:4d:30 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N2Qi7TkaTEXaLQq2fHGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMDc4OTU3MzZlZDkyODYwZjMxMzUwMDhhODU4MTNmOThi YmQ3YzEwHhcNMjYwMTAyMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjQzMTdlMGQ3OWVjYzFjZjg5NmJkOTJmYjc1NGUwMmM1MTg4NDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2NkuFG13ELWtfmbdrYoV+AG/m4E MOKtSsjJ2pOdNJdbFOWvXh2PLQegvBHYGsOHlZLEQoTQX15EFHDVmLGkm32Zwzos YxQNJAXbsP9N/YMDSC8pI3H+hUY7qSa2Z6xR/4NIs0qUxAZhQyf6WAh8B1QRMcVh 6MrjB4B2RDH8qYY0JmbVM5tgtbX+1HaT2DyJ9czx5vSiSPSZuAJvWyVY5GtREkZv /1opbxed8Rij/lgCzZakH8mdF8zdv0RQYxM8ZB7bKJL3pSMT9rbDeUCnzwpaib2T CcZeiz735F6TyYmXVa4qsMw8kYKmA15+IKxdM5+UyulRsAmOwmddJKubxwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCtDF+DXnswc+Ja9kvt1TgLFGISEMB8GA1UdIwQY MBaAFL4HiVc27ZKGDzE1AIqFgT+Yu9fBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmdlSlZ6YnRrb1lQTVRVQWlvV0JQNWk3MThFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi82NTlmMmMtYzI4OS00Njk5LTg3ZDct MjFkNjEwMDM4M2UwLzEvSzBNWDROZWV6Qno0bHIyUy0zVk9Bc1VZaElRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi82NTlmMmMtYzI4OS00Njk5LTg3ZDctMjFkNjEwMDM4M2Uw LzEvdmdlSlZ6YnRrb1lQTVRVQWlvV0JQNWk3MThFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueBIMA0E AgACMAcDBQEqDPwAMA0GCSqGSIb3DQEBCwUAA4IBAQCFVLtQ/8RgfOk3oP0xAnLM BTwj/rlkHIZylLpowpIadvOtXr8NFvn97DyQZv5s006cA0J98Cwsptx+gq7o7kzA fnOHU7E55Mlm3ZnvwMQFZ4lNBCdkYrjw4Jtc2kZ8fe6lbUj4gZsC4aL6az1p8fdk J7zIqKKPZFi1sGt7d/lFcTycVdtoN4HXYh+1VmWsPAIs9kmnrqE8Kmss/SzB0C/V 2UPojyRIEy8oFK0bcFOQ5V7Dv0wPLDWdT/ie5VhBjdQwuIWVqrr6LbPHkFfNxyJ2 60iaKAs9lUZ0QFwX81XfE3/slzBNMh71Ciat7rroq/Kq/M0t7YC6XZBPFEGm6U0w -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:24 2026 by rpki-client