This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/kJytGYOElfqrC3DHKmoh96BhevM.roa File: kJytGYOElfqrC3DHKmoh96BhevM.roa (raw, json) Hash identifier: /mTOzryyb1u7CjMFfOIX5gO5vlkkJlQ566zrAJlL2zU= Subject key identifier: 90:9C:AD:19:83:84:95:FA:AB:0B:70:C7:2A:6A:21:F7:A0:61:7A:F3 Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e Certificate serial: 019B7F853DC8732F95AB281EA49B2D15C3D9 Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/kJytGYOElfqrC3DHKmoh96BhevM.roa Signing time: Fri 02 Jan 2026 16:23:17 +0000 ROA not before: Fri 02 Jan 2026 16:23:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204615 IP address blocks: 185.225.113.0/24 maxlen: 24 185.225.114.0/23 maxlen: 23 2a13:2a00::/48 maxlen: 48 2a13:2a00:1::/48 maxlen: 48 2a13:2a00:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:3d:c8:73:2f:95:ab:28:1e:a4:9b:2d:15:c3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e Validity Not Before: Jan 2 16:23:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=909cad19838495faab0b70c72a6a21f7a0617af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:c6:5b:39:02:e4:f2:ae:41:59:53:62:26: eb:11:2e:72:d8:24:56:56:f4:e7:a1:aa:7b:b3:5b: 6e:d8:88:45:1b:1d:16:fc:37:2a:d0:fb:a4:4e:ff: a3:6d:d5:fb:61:7d:83:7a:b7:9b:3c:dd:4b:5c:03: cd:42:dc:b8:40:af:05:a9:74:b5:a9:43:4a:43:50: d8:96:0c:9d:5e:93:5b:d5:95:d7:ea:e6:7e:77:13: ae:9d:7e:0c:53:29:2c:9f:5a:de:e4:51:b7:0e:9f: c5:a6:cf:34:0a:ab:49:e3:18:20:96:bf:b3:63:4a: 4a:b1:22:ea:69:fc:33:d7:0d:12:64:36:90:e3:78: 15:0c:27:d6:48:e5:74:08:f2:3c:4b:22:b1:48:f2: 34:3b:cd:0c:89:c4:0e:74:18:2c:13:45:7c:e5:6c: 4a:04:81:56:9f:b0:51:34:64:a5:60:53:2c:a7:0d: 30:62:d6:17:bf:92:75:c7:e8:6f:48:22:e0:ed:ce: 9a:32:3c:a3:dd:7a:8a:3a:63:ae:88:c2:e8:95:61: c1:75:6e:4f:84:b8:e2:9c:d8:52:29:31:b4:33:a4: 78:f8:09:8b:12:45:da:7d:95:5d:fc:5a:18:f6:59: 4b:41:fd:54:51:85:65:fa:ee:25:65:7f:9d:e2:92: 27:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9C:AD:19:83:84:95:FA:AB:0B:70:C7:2A:6A:21:F7:A0:61:7A:F3 X509v3 Authority Key Identifier: keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/kJytGYOElfqrC3DHKmoh96BhevM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.113.0-185.225.115.255 IPv6: 2a13:2a00::-2a13:2a00:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 58:ee:49:39:77:7d:9a:95:23:a2:d8:8d:f0:07:f1:50:b9:6e: 14:d4:4c:a2:6d:bc:6a:ef:6a:cc:62:76:c9:29:89:4c:cd:1f: 51:fb:3a:48:63:07:08:57:ba:15:d8:2e:c0:18:45:4e:65:50: 32:67:f6:cc:7a:28:da:78:20:72:97:25:b7:77:7d:8a:37:9e: 60:8a:1d:79:02:d4:c0:3d:e5:15:16:bc:a0:57:d8:71:37:e4: dd:22:20:37:b7:34:c3:be:e9:f8:eb:32:ec:d4:0b:86:b7:83: 40:e4:84:71:18:5b:c6:6c:64:ff:3e:1a:82:31:92:e5:4b:83: ad:ed:88:fd:30:54:6b:b6:93:1f:d4:57:4d:73:e9:b7:ca:98: 57:f7:76:23:26:a7:6c:43:e6:81:b4:b2:0d:3f:9c:1f:c7:52: ea:b2:a0:86:66:9a:8b:78:f2:2b:52:3c:9d:4f:d5:cb:ed:49: 4c:36:ef:39:18:7b:65:fb:7a:ea:22:ec:a3:91:c7:9c:4c:e5: fb:a2:5e:6c:64:bb:01:63:6d:4d:14:d6:a0:16:cb:1a:ab:9f: 64:c3:da:99:eb:1d:08:57:85:88:ee:d3:fc:08:6e:42:61:40: 07:d6:a8:53:52:f6:dd:04:18:15:f3:1d:ac:95:3c:c6:3b:c7: d0:a9:71:db -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/hT3Icy+VqygepJstFcPZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMzQ0YmE2MzQwOTYxZGE1ZWViNGFlMjM5ZTlhMDYyNjc3 OTNlMmUwHhcNMjYwMTAyMTYyMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDljYWQxOTgzODQ5NWZhYWIwYjcwYzcyYTZhMjFmN2EwNjE3YWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7jGWzkC5PKuQVlTYibrES5y2CRW VvTnoap7s1tu2IhFGx0W/Dcq0PukTv+jbdX7YX2DerebPN1LXAPNQty4QK8FqXS1 qUNKQ1DYlgydXpNb1ZXX6uZ+dxOunX4MUyksn1re5FG3Dp/Fps80CqtJ4xgglr+z Y0pKsSLqafwz1w0SZDaQ43gVDCfWSOV0CPI8SyKxSPI0O80MicQOdBgsE0V85WxK BIFWn7BRNGSlYFMspw0wYtYXv5J1x+hvSCLg7c6aMjyj3XqKOmOuiMLolWHBdW5P hLjinNhSKTG0M6R4+AmLEkXafZVd/FoY9llLQf1UUYVl+u4lZX+d4pInBwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFJCcrRmDhJX6qwtwxypqIfegYXrzMB8GA1UdIwQY MBaAFOI0S6Y0CWHaXutK4jnpoGJneT4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2Qt MDJlYjlhNDEyNjM3LzEva0p5dEdZT0VsZnFyQzNESEttb2g5NkJoZXZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2QtMDJlYjlhNDEyNjM3 LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAUBAIAATAOMAwDBAC54XED BAK54XAwFwQCAAIwETAPAwQBKhMqAwcAKhMqAAACMA0GCSqGSIb3DQEBCwUAA4IB AQBY7kk5d32alSOi2I3wB/FQuW4U1Eyibbxq72rMYnbJKYlMzR9R+zpIYwcIV7oV 2C7AGEVOZVAyZ/bMeijaeCBylyW3d32KN55gih15AtTAPeUVFrygV9hxN+TdIiA3 tzTDvun46zLs1AuGt4NA5IRxGFvGbGT/PhqCMZLlS4Ot7Yj9MFRrtpMf1FdNc+m3 yphX93YjJqdsQ+aBtLINP5wfx1LqsqCGZpqLePIrUjydT9XL7UlMNu85GHtl+3rq IuyjkcecTOX7ol5sZLsBY21NFNagFssaq59kw9qZ6x0IV4WI7tP8CG5CYUAH1qhT UvbdBBgV8x2slTzGO8fQqXHb -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:05 2026 by rpki-client