This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Kp3eYJ7kSiZsDu5GffXxRznucgA.roa File: Kp3eYJ7kSiZsDu5GffXxRznucgA.roa (raw, json) Hash identifier: +v7HVtK9kA/9s9DQL3HEcP41QigGiyaFVGj2AlPGBaQ= Subject key identifier: 2A:9D:DE:60:9E:E4:4A:26:6C:0E:EE:46:7D:F5:F1:47:39:EE:72:00 Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Certificate serial: 019B7C7F74464B1C0F3CACA9AB52F1E7A41F Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Kp3eYJ7kSiZsDu5GffXxRznucgA.roa Signing time: Fri 02 Jan 2026 02:18:06 +0000 ROA not before: Fri 02 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17782 IP address blocks: 185.192.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:74:46:4b:1c:0f:3c:ac:a9:ab:52:f1:e7:a4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Validity Not Before: Jan 2 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a9dde609ee44a266c0eee467df5f14739ee7200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5d:79:b5:57:81:15:81:8f:b9:fa:82:08:6d: 83:9f:b7:68:7f:c7:8b:20:43:7e:d4:88:6a:d4:b1: 3d:13:7e:06:a9:47:a8:8e:f6:2f:8d:59:8d:65:f9: a0:74:2f:58:b2:a7:3b:52:f7:ee:6d:eb:0c:07:0f: dc:10:14:c2:75:dd:23:e0:cd:e3:fa:6a:3d:1a:aa: 64:45:68:c6:d2:d8:fa:18:26:8e:45:49:14:4a:4d: 24:25:1d:a3:64:ff:42:bc:91:02:53:10:5c:93:39: 50:97:aa:5d:f5:89:c0:17:e6:c5:58:5a:14:e1:b7: 1b:af:4b:66:32:ca:c8:f8:d6:ff:1d:32:ad:7f:92: b4:86:6f:55:c8:41:11:8a:b7:3f:e2:a9:69:d0:d4: 74:cb:16:b3:b9:55:2e:eb:ca:c3:09:41:ee:73:49: b2:3d:ac:3a:d7:af:c5:a3:61:62:4f:dd:0f:c8:35: 0d:00:ea:93:4a:ae:25:a7:0a:c0:81:95:a8:4b:91: 74:d7:28:52:10:76:24:bc:31:7b:12:03:7b:bf:99: 6d:d8:70:0e:ef:83:0a:c6:dc:86:ec:80:6e:7e:0b: e3:10:c9:71:ad:77:d9:ca:03:00:64:6e:dc:e4:39: 6c:d8:5b:6c:56:98:78:d6:48:42:eb:f5:18:55:50: ae:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9D:DE:60:9E:E4:4A:26:6C:0E:EE:46:7D:F5:F1:47:39:EE:72:00 X509v3 Authority Key Identifier: keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Kp3eYJ7kSiZsDu5GffXxRznucgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.56.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:4d:37:08:17:fc:8c:49:9d:3e:14:a8:16:60:f3:dc:11:bb: 3f:2c:a8:73:04:82:98:c6:9f:cf:65:c1:ad:74:b4:c6:35:2f: 6c:72:bf:e8:a0:07:9b:e8:d1:b3:5a:36:31:06:2d:0f:3f:05: 11:f8:a6:9a:92:2c:c9:2c:59:70:eb:01:bb:4c:98:bc:89:12: 10:3c:9f:f8:53:37:52:91:ee:66:88:93:c8:cc:6c:56:c2:90: 65:81:b0:a1:7b:af:28:4d:08:9c:2c:ac:e5:af:90:f6:17:53: 0f:3e:07:c3:75:f5:6f:15:e6:15:3d:2c:51:47:34:3d:6e:cf: 25:f4:fb:7f:1c:f8:5a:d3:5e:cf:86:5d:c3:8f:2a:54:c5:38: 92:39:62:2f:fa:38:45:da:b4:cf:f5:eb:7e:56:75:f1:bb:4a: 5a:0b:d4:3f:4e:18:04:62:b8:4a:32:c1:20:de:1a:e3:64:c1: 90:4c:99:72:d5:59:29:77:fd:46:71:a7:01:ab:bc:86:d6:0f: 7c:4d:e4:76:0b:b3:68:c9:76:db:d3:d2:69:cd:7e:5c:b5:80: b3:ad:ce:9c:5e:f2:da:92:ea:fa:1e:04:5c:aa:ce:ea:a5:87: 75:c9:81:9b:5e:98:52:c7:ee:c9:bb:92:eb:0d:f4:11:5c:3f: 6e:94:9a:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f3RGSxwPPKypq1Lx56QfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRkMTE1NTQyNDdiZDJiZDMwMWNlYTQzZmY1MTgwMzcy YzM4ZTQwHhcNMjYwMTAyMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTlkZGU2MDllZTQ0YTI2NmMwZWVlNDY3ZGY1ZjE0NzM5ZWU3MjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF15tVeBFYGPufqCCG2Dn7dof8eL IEN+1Ihq1LE9E34GqUeojvYvjVmNZfmgdC9Ysqc7UvfubesMBw/cEBTCdd0j4M3j +mo9GqpkRWjG0tj6GCaORUkUSk0kJR2jZP9CvJECUxBckzlQl6pd9YnAF+bFWFoU 4bcbr0tmMsrI+Nb/HTKtf5K0hm9VyEERirc/4qlp0NR0yxazuVUu68rDCUHuc0my Paw616/Fo2FiT90PyDUNAOqTSq4lpwrAgZWoS5F01yhSEHYkvDF7EgN7v5lt2HAO 74MKxtyG7IBufgvjEMlxrXfZygMAZG7c5Dls2FtsVph41khC6/UYVVCu9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCqd3mCe5EombA7uRn318Uc57nIAMB8GA1UdIwQY MBaAFBpN0RVUJHvSvTAc6kP/UYA3LDjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUt M2JhNWYzMGNhYWJmLzEvS3AzZVlKN2tTaVpzRHU1R2ZmWHhSem51Y2dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUtM2JhNWYzMGNhYWJm LzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucA4MA0G CSqGSIb3DQEBCwUAA4IBAQA/TTcIF/yMSZ0+FKgWYPPcEbs/LKhzBIKYxp/PZcGt dLTGNS9scr/ooAeb6NGzWjYxBi0PPwUR+KaakizJLFlw6wG7TJi8iRIQPJ/4UzdS ke5miJPIzGxWwpBlgbChe68oTQicLKzlr5D2F1MPPgfDdfVvFeYVPSxRRzQ9bs8l 9Pt/HPha017Phl3DjypUxTiSOWIv+jhF2rTP9et+VnXxu0paC9Q/ThgEYrhKMsEg 3hrjZMGQTJly1Vkpd/1GcacBq7yG1g98TeR2C7NoyXbb09JpzX5ctYCzrc6cXvLa kur6HgRcqs7qpYd1yYGbXphSx+7Ju5LrDfQRXD9ulJoa -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:31 2026 by rpki-client