This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/kcNm9MftwygIL_w6w52JPJKUaI0.roa File: kcNm9MftwygIL_w6w52JPJKUaI0.roa (raw, json) Hash identifier: D4k4eoAWUtr1xeFULxBVV9pmUCuC2g1g0ZI86lEhCkw= Subject key identifier: 91:C3:66:F4:C7:ED:C3:28:08:2F:FC:3A:C3:9D:89:3C:92:94:68:8D Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019B7A5B0CB0F9AD25369A7AB61C65ED007E Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/kcNm9MftwygIL_w6w52JPJKUaI0.roa Signing time: Thu 01 Jan 2026 16:19:05 +0000 ROA not before: Thu 01 Jan 2026 16:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201639 IP address blocks: 185.86.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0c:b0:f9:ad:25:36:9a:7a:b6:1c:65:ed:00:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91c366f4c7edc328082ffc3ac39d893c9294688d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:69:27:ea:65:40:30:cb:4b:0d:52:82:a2:ef: bf:83:70:10:18:91:7a:93:84:da:8c:68:b9:30:bc: 7e:98:94:8b:ba:d4:47:1c:81:12:15:d6:44:b8:e4: 9a:8e:a4:13:f4:73:c8:51:e4:0e:4f:3f:ed:39:71: f5:7f:32:37:1e:6d:90:55:87:59:30:fe:39:50:8e: c5:a0:33:9a:98:0f:71:62:65:2c:6a:e7:8d:15:c3: af:15:db:e6:81:ee:65:5a:14:93:a5:51:60:7c:59: d8:fb:38:5c:f4:c7:30:c3:78:cf:57:e7:6c:bd:98: d6:41:ec:a3:dc:a2:10:b7:52:5f:72:1e:c1:58:f6: 34:db:8a:a9:b1:52:fc:90:f7:60:d0:a0:fd:5a:96: 6e:4b:84:53:b6:8f:6c:9d:0e:76:2f:53:23:d4:7f: 9d:cf:c6:68:40:e5:fb:25:26:93:f8:06:0e:e2:99: ca:12:5f:92:d7:3a:b4:7b:e8:f2:7d:5c:d7:fa:0f: 6c:0a:8a:27:6b:d6:f1:9e:03:a0:5d:2b:2f:87:c0: d0:04:27:3b:5d:77:16:bd:25:46:5a:9f:9d:69:a2: 30:cc:de:94:e9:47:2f:07:ff:1f:5b:83:75:7f:e5: e0:c5:49:76:e1:5e:5a:92:1d:d1:cc:21:9b:30:ed: 3f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C3:66:F4:C7:ED:C3:28:08:2F:FC:3A:C3:9D:89:3C:92:94:68:8D X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/kcNm9MftwygIL_w6w52JPJKUaI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.192.0/24 Signature Algorithm: sha256WithRSAEncryption 45:fa:e7:2d:b6:de:59:a5:cf:59:08:ff:d0:ab:a5:51:93:6a: d2:76:c0:d9:bc:58:05:a8:62:90:29:2b:2a:8e:69:a9:53:93: bc:fc:26:4d:57:f4:a8:ad:04:aa:72:2a:26:6d:8d:6e:0f:b0: d6:70:d8:f9:80:26:b5:97:1c:30:3d:a3:1a:42:f2:bc:d6:ee: a7:40:68:e9:00:60:74:b9:10:4c:fd:15:dc:ec:cc:3e:8d:3a: f8:57:2b:0d:0a:be:ae:63:be:98:25:bb:98:fd:10:8a:cd:b6: d1:fb:81:60:42:d4:4b:f1:57:b1:be:3e:3e:7a:48:e5:46:e5: a1:5d:03:6d:58:6f:3d:9d:8b:05:da:03:f2:0e:7d:75:30:dd: 0e:17:f7:6d:53:a0:e6:16:de:7e:29:84:c5:31:e9:01:6d:66: bd:67:25:6a:c8:d3:b3:b9:56:80:10:6c:af:7f:64:81:5b:82: 66:bd:9b:cb:7e:25:1f:97:b6:6b:a0:6e:67:96:6b:3c:66:12: 1a:c3:aa:93:f1:a4:b6:16:5c:54:3a:3c:0c:0a:0a:06:76:99: 4f:76:36:a5:4b:76:f8:1b:81:2f:97:69:4b:49:2b:8b:78:93: ef:3b:02:e2:3e:73:aa:49:9f:9e:e3:8a:a4:0c:4c:15:59:3f: 9c:f4:1c:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wwyw+a0lNpp6thxl7QB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWMzNjZmNGM3ZWRjMzI4MDgyZmZjM2FjMzlkODkzYzkyOTQ2ODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2kn6mVAMMtLDVKCou+/g3AQGJF6 k4TajGi5MLx+mJSLutRHHIESFdZEuOSajqQT9HPIUeQOTz/tOXH1fzI3Hm2QVYdZ MP45UI7FoDOamA9xYmUsaueNFcOvFdvmge5lWhSTpVFgfFnY+zhc9Mcww3jPV+ds vZjWQeyj3KIQt1Jfch7BWPY024qpsVL8kPdg0KD9WpZuS4RTto9snQ52L1Mj1H+d z8ZoQOX7JSaT+AYO4pnKEl+S1zq0e+jyfVzX+g9sCoona9bxngOgXSsvh8DQBCc7 XXcWvSVGWp+daaIwzN6U6UcvB/8fW4N1f+XgxUl24V5akh3RzCGbMO0/EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJHDZvTH7cMoCC/8OsOdiTySlGiNMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEva2NObTlNZnR3eWdJTF93Nnc1MkpQSktVYUkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVbAMA0G CSqGSIb3DQEBCwUAA4IBAQBF+ucttt5Zpc9ZCP/Qq6VRk2rSdsDZvFgFqGKQKSsq jmmpU5O8/CZNV/SorQSqciombY1uD7DWcNj5gCa1lxwwPaMaQvK81u6nQGjpAGB0 uRBM/RXc7Mw+jTr4VysNCr6uY76YJbuY/RCKzbbR+4FgQtRL8Vexvj4+ekjlRuWh XQNtWG89nYsF2gPyDn11MN0OF/dtU6DmFt5+KYTFMekBbWa9ZyVqyNOzuVaAEGyv f2SBW4JmvZvLfiUfl7ZroG5nlms8ZhIaw6qT8aS2FlxUOjwMCgoGdplPdjalS3b4 G4Evl2lLSSuLeJPvOwLiPnOqSZ+e44qkDEwVWT+c9Bwt -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:39 2026 by rpki-client