This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/KKjhztjQZY0Vw4GTD-mM1fdFOWg.roa File: KKjhztjQZY0Vw4GTD-mM1fdFOWg.roa (raw, json) Hash identifier: MlkRw4nJu+XJ2IPdJa9H1pH2WWR/ZNtmmLqOfgJniXM= Subject key identifier: 28:A8:E1:CE:D8:D0:65:8D:15:C3:81:93:0F:E9:8C:D5:F7:45:39:68 Certificate issuer: /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b Certificate serial: 019B77C751144D5BD8C32A58CA30FF7C12C0 Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/KKjhztjQZY0Vw4GTD-mM1fdFOWg.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34599 IP address blocks: 185.37.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:51:14:4d:5b:d8:c3:2a:58:ca:30:ff:7c:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28a8e1ced8d0658d15c381930fe98cd5f7453968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ff:d6:ca:0f:5e:c0:41:8d:59:29:99:8f:c8: 81:7e:41:26:49:b1:f3:92:d7:ee:72:69:ee:1d:6d: c9:63:d4:3d:32:8c:ca:15:55:31:d7:fb:3e:35:6d: 68:8e:2e:39:0d:ab:0e:0e:3c:1d:5d:1f:8d:ef:b9: f0:e8:c2:e4:07:4c:6e:d6:fe:36:e8:93:a5:c5:5f: ae:a9:3b:1e:d8:27:1b:02:22:e9:8f:84:b5:4d:8d: 99:dc:ba:da:03:f4:ef:8f:65:bc:17:35:d8:58:32: ba:8e:fc:ea:2c:41:1b:77:c1:17:1d:c1:42:aa:2f: 91:d7:be:89:ff:b4:3f:a6:4c:8f:08:11:92:99:13: 3f:83:ec:2a:69:2f:c0:ab:b4:21:a8:8c:21:6e:f8: ec:5b:01:e5:bb:cd:d3:ed:0d:71:0e:e7:ed:09:e8: b6:ac:ae:ea:51:38:ec:73:c0:cc:8c:4b:6a:9c:e9: 4f:a9:50:4c:15:b8:0c:13:55:eb:30:81:cf:7e:6c: 79:7b:27:4f:36:78:f9:99:87:ef:24:e3:8b:94:1e: 8b:e4:67:a5:1b:4b:fb:fa:a0:35:c3:92:57:17:d5: 00:04:ff:39:e5:85:e5:f6:1d:bb:90:b7:7d:fa:8d: c1:cd:1f:d0:74:d2:ea:93:74:e7:ce:0a:dd:70:14: 1b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A8:E1:CE:D8:D0:65:8D:15:C3:81:93:0F:E9:8C:D5:F7:45:39:68 X509v3 Authority Key Identifier: keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/KKjhztjQZY0Vw4GTD-mM1fdFOWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.116.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:f9:4e:3b:d3:ea:a0:f9:fd:ab:3d:3b:4a:08:7a:f4:83:b4: 24:05:f8:73:bc:5d:9c:50:bd:ec:ce:4c:a8:9d:42:0f:ba:72: 1f:3e:1f:73:50:fe:90:9c:95:fd:49:11:be:b3:cd:fa:95:93: 53:2f:c5:43:b3:91:06:6a:19:27:fd:d2:70:25:58:9f:62:bf: d8:2a:6e:6c:15:2c:2d:4f:0f:a3:39:c5:48:0c:0f:61:1c:57: 3b:5d:30:b0:6c:ea:25:0a:ca:06:e8:67:2a:c3:e6:fa:73:f8: 8f:a3:ed:9e:77:12:53:46:24:42:5d:60:3a:34:d9:0f:f7:a8: fd:5c:78:fc:f5:21:e1:82:b2:f8:bc:a0:72:15:17:1c:27:7a: 87:d7:d2:be:25:56:06:22:ad:7c:52:3a:12:89:e3:31:90:31: 51:4c:96:31:4f:48:52:d2:53:26:b5:a4:de:12:b2:34:49:46: a0:87:60:fd:cb:90:e4:41:ef:c9:95:82:b5:18:62:8b:7c:7c: 85:90:dd:b2:88:a9:a7:3e:16:4c:c0:7e:cf:26:70:28:09:bd: b0:dc:c9:a5:4f:24:0e:af:48:dd:3d:29:3c:20:92:df:b1:f3: 65:b8:64:43:3e:2a:47:90:c6:1a:bb:ac:dd:48:65:4e:4a:1e: d9:38:2a:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1EUTVvYwypYyjD/fBLAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZmFhMGQyZjVkZWMwMjAxZjU1ZTQwOTc5YzE5MDliNmRi NzdjM2IwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGE4ZTFjZWQ4ZDA2NThkMTVjMzgxOTMwZmU5OGNkNWY3NDUzOTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP/Wyg9ewEGNWSmZj8iBfkEmSbHz ktfucmnuHW3JY9Q9MozKFVUx1/s+NW1oji45DasODjwdXR+N77nw6MLkB0xu1v42 6JOlxV+uqTse2CcbAiLpj4S1TY2Z3LraA/Tvj2W8FzXYWDK6jvzqLEEbd8EXHcFC qi+R176J/7Q/pkyPCBGSmRM/g+wqaS/Aq7QhqIwhbvjsWwHlu83T7Q1xDuftCei2 rK7qUTjsc8DMjEtqnOlPqVBMFbgME1XrMIHPfmx5eydPNnj5mYfvJOOLlB6L5Gel G0v7+qA1w5JXF9UABP855YXl9h27kLd9+o3BzR/QdNLqk3TnzgrdcBQbuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCio4c7Y0GWNFcOBkw/pjNX3RTloMB8GA1UdIwQY MBaAFOb6oNL13sAgH1XkCXnBkJttt3w7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXZxZzB2WGV3Q0FmVmVRSmVjR1FtMjIzZkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wOTc3NDgtNWNjOC00NTBmLTlmYmIt OGM4ZDEwZThlYWJjLzEvS0tqaHp0alFaWTBWdzRHVEQtbU0xZmRGT1dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8wOTc3NDgtNWNjOC00NTBmLTlmYmItOGM4ZDEwZThlYWJj LzEvNXZxZzB2WGV3Q0FmVmVRSmVjR1FtMjIzZkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSV0MA0G CSqGSIb3DQEBCwUAA4IBAQBr+U470+qg+f2rPTtKCHr0g7QkBfhzvF2cUL3szkyo nUIPunIfPh9zUP6QnJX9SRG+s836lZNTL8VDs5EGahkn/dJwJVifYr/YKm5sFSwt Tw+jOcVIDA9hHFc7XTCwbOolCsoG6Gcqw+b6c/iPo+2edxJTRiRCXWA6NNkP96j9 XHj89SHhgrL4vKByFRccJ3qH19K+JVYGIq18UjoSieMxkDFRTJYxT0hS0lMmtaTe ErI0SUagh2D9y5DkQe/JlYK1GGKLfHyFkN2yiKmnPhZMwH7PJnAoCb2w3MmlTyQO r0jdPSk8IJLfsfNluGRDPipHkMYau6zdSGVOSh7ZOCq+ -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:05 2026 by rpki-client