This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/Ku_3wi-krLn5NVfaK-lQlkfIQqM.roa File: Ku_3wi-krLn5NVfaK-lQlkfIQqM.roa (raw, json) Hash identifier: tzGy6knJKrJ/+Tpse/PLPBsuQdf0mdcEtbCEG7Cfzkg= Subject key identifier: 2A:EF:F7:C2:2F:A4:AC:B9:F9:35:57:DA:2B:E9:50:96:47:C8:42:A3 Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361 Certificate serial: 019B7758CB7BA8716ED275A0A0971CA4AA1A Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/Ku_3wi-krLn5NVfaK-lQlkfIQqM.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 185.231.221.0/24 maxlen: 24 185.231.222.0/24 maxlen: 24 185.240.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cb:7b:a8:71:6e:d2:75:a0:a0:97:1c:a4:aa:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2aeff7c22fa4acb9f93557da2be9509647c842a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:34:ab:c9:6d:f5:a0:18:c9:5c:c4:50:2f:aa: 8b:11:b2:17:e7:bd:05:bb:7b:d1:66:00:24:43:99: 30:db:d2:57:11:fd:5b:c3:d4:89:6b:7d:ae:74:6a: 82:c5:bd:5a:e3:17:d9:78:6c:31:c1:7a:59:60:2e: 81:16:81:a4:ee:bf:a4:93:26:72:7e:91:05:74:4a: 04:9b:b9:59:80:7f:7c:ed:39:70:3d:aa:3e:54:fe: 48:d1:b1:ed:d9:65:26:84:df:4c:5f:39:05:4d:3b: e7:c1:b0:1d:9f:56:cc:f2:2c:80:73:76:94:d4:70: 48:cb:c2:b1:80:66:6f:5f:31:20:77:72:47:19:88: 9e:a4:a5:6b:ba:4b:74:6a:35:72:52:a3:74:3b:67: ed:9d:a1:52:c6:a8:be:b3:8b:1e:87:ce:4c:db:ce: 26:05:5b:1e:9c:46:3d:9b:0a:f9:b1:4e:a9:1c:dd: ce:ce:4b:cb:68:4d:0a:a2:72:6f:ab:2a:a7:93:fd: 54:ee:9c:4c:fe:f4:fd:98:fb:6b:bc:a0:b7:00:86: ac:2f:b6:de:2d:6e:35:9e:cc:06:44:92:5c:60:e6: f5:2b:51:9e:15:97:2f:30:f6:83:2e:fd:a6:4f:d3: e5:ba:c4:a3:14:8c:b9:66:ca:4c:6b:06:46:a7:e8: c1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EF:F7:C2:2F:A4:AC:B9:F9:35:57:DA:2B:E9:50:96:47:C8:42:A3 X509v3 Authority Key Identifier: keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/Ku_3wi-krLn5NVfaK-lQlkfIQqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.221.0-185.231.222.255 185.240.160.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:b8:0f:16:5e:9e:0c:f8:e8:08:3e:db:26:37:36:11:52:24: 8b:95:9c:3c:29:73:e3:e0:3f:a3:a4:02:63:54:8a:1a:56:8f: f2:7e:fc:75:84:2c:22:e4:ea:29:8a:93:78:63:c2:3f:d1:db: 1b:c8:b4:10:08:e5:10:02:d2:81:70:cd:93:62:22:29:ac:2e: 5e:68:61:ab:87:ac:ca:8b:4c:31:48:9f:74:b5:c9:34:6b:ff: 40:27:5c:e4:4e:46:62:75:90:ff:bf:2e:5d:35:aa:37:33:39: 0f:86:a4:e1:8e:e1:ab:73:54:49:ff:e4:28:6b:41:a4:94:86: 6b:27:39:d1:39:bb:9c:3a:18:f5:cc:8d:8b:1f:f2:fb:fb:1a: 38:3b:e5:01:19:fe:de:63:e9:18:20:8a:9d:dc:bc:1f:4e:db: 90:5e:92:6c:fb:76:d4:e0:b2:bf:a8:1b:80:3b:ef:c9:0c:2e: 71:6d:07:2e:52:47:6e:ab:0f:34:d9:8a:11:22:ed:39:10:56: 5c:d8:14:04:0e:cd:14:c5:08:2d:c0:b1:91:66:2d:3e:a4:7b: 39:7a:ce:82:88:2d:81:ef:b8:8b:d9:8b:fc:85:ca:78:dc:d7: 52:30:d1:11:dd:ba:38:99:e9:f5:12:7f:72:28:61:74:a9:d4: 88:65:d7:35 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt3WMt7qHFu0nWgoJccpKoaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMmU3MmFiZjdiMTcyOGZkYTZhYTBiMDQxM2Q4ODU0ODEy ZWEzNjEwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWVmZjdjMjJmYTRhY2I5ZjkzNTU3ZGEyYmU5NTA5NjQ3Yzg0MmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DSryW31oBjJXMRQL6qLEbIX570F u3vRZgAkQ5kw29JXEf1bw9SJa32udGqCxb1a4xfZeGwxwXpZYC6BFoGk7r+kkyZy fpEFdEoEm7lZgH987TlwPao+VP5I0bHt2WUmhN9MXzkFTTvnwbAdn1bM8iyAc3aU 1HBIy8KxgGZvXzEgd3JHGYiepKVrukt0ajVyUqN0O2ftnaFSxqi+s4seh85M284m BVsenEY9mwr5sU6pHN3OzkvLaE0KonJvqyqnk/1U7pxM/vT9mPtrvKC3AIasL7be LW41nswGRJJcYOb1K1GeFZcvMPaDLv2mT9PlusSjFIy5ZspMawZGp+jBHwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFCrv98IvpKy5+TVX2ivpUJZHyEKjMB8GA1UdIwQY MBaAFPoucqv3sXKP2mqgsEE9iFSBLqNhMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1pNXlxX2V4Y29fYWFxQ3dRVDJJVklFdW8yRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlm LWEzNjZkYTI1MWE4My8xL0t1XzN3aS1rckxuNU5WZmFLLWxRbGtmSVFxTS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlmLWEzNjZkYTI1MWE4 My8xLzEtaTV5cV9leGNvX2FhcUN3UVQySVZJRXVvMkUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgABMBQwDAMEALnn 3QMEALnn3gMEALnwoDANBgkqhkiG9w0BAQsFAAOCAQEAj7gPFl6eDPjoCD7bJjc2 EVIki5WcPClz4+A/o6QCY1SKGlaP8n78dYQsIuTqKYqTeGPCP9HbG8i0EAjlEALS gXDNk2IiKawuXmhhq4esyotMMUifdLXJNGv/QCdc5E5GYnWQ/78uXTWqNzM5D4ak 4Y7hq3NUSf/kKGtBpJSGayc50Tm7nDoY9cyNix/y+/saODvlARn+3mPpGCCKndy8 H07bkF6SbPt21OCyv6gbgDvvyQwucW0HLlJHbqsPNNmKESLtORBWXNgUBA7NFMUI LcCxkWYtPqR7OXrOgogtge+4i9mL/IXKeNzXUjDREd26OJnp9RJ/cihhdKnUiGXX NQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:27 2026 by rpki-client