This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/KjU7AhX4TXwLfXgV9g1-DLGZ-ow.roa File: KjU7AhX4TXwLfXgV9g1-DLGZ-ow.roa (raw, json) Hash identifier: 8fFeEgCYH2bhEXhV+TAiSzfZgOwytdn0mLWLmsulag8= Subject key identifier: 2A:35:3B:02:15:F8:4D:7C:0B:7D:78:15:F6:0D:7E:0C:B1:99:FA:8C Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB171CEF9DC980BBEEAE4D85B6CC34 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/KjU7AhX4TXwLfXgV9g1-DLGZ-ow.roa Signing time: Thu 01 Jan 2026 00:17:56 +0000 ROA not before: Thu 01 Jan 2026 00:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205537 IP address blocks: 185.214.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:17:1c:ef:9d:c9:80:bb:ee:ae:4d:85:b6:cc:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a353b0215f84d7c0b7d7815f60d7e0cb199fa8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:51:d6:b1:ce:6e:2c:e3:60:fb:4c:15:2e:22: 43:e7:0a:5f:24:36:2a:1b:5a:01:96:85:90:03:e7: 02:55:7f:70:de:1b:22:1b:8c:22:d5:4b:75:e4:c8: d1:46:e4:fb:70:c6:fc:f2:56:7a:31:51:fa:6c:11: d0:1f:21:bf:5f:cb:6e:3e:66:f2:89:a6:6d:91:24: aa:c9:29:0e:14:3e:c1:9a:51:b4:21:32:55:28:bd: 6e:b2:af:70:2e:39:4b:98:66:d8:88:61:70:ea:21: 5c:81:58:d2:29:4e:76:2b:3b:84:a7:75:8a:15:c1: a6:e3:6f:d8:5c:54:de:15:17:83:2a:bd:52:31:23: 1b:15:3b:dc:1f:eb:43:f3:c0:ea:ed:97:40:6e:22: 67:8f:24:c5:ea:7c:3a:b6:e9:4a:1e:97:a3:56:bb: 8c:5f:6c:05:e7:7b:b7:9e:d8:40:2d:21:72:79:b3: d0:83:f7:a8:09:93:c0:af:12:f1:78:03:a4:c0:05: b0:24:cc:b4:ff:6f:71:15:1c:de:fe:9d:57:1a:5a: f2:bf:c8:53:f1:e9:3c:04:f7:ee:f2:63:35:ab:c3: f7:b5:12:f2:9d:44:7e:63:05:06:a4:e2:c2:c2:8b: 61:59:25:7e:7f:cc:93:ee:85:35:66:64:3b:a0:aa: 42:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:35:3B:02:15:F8:4D:7C:0B:7D:78:15:F6:0D:7E:0C:B1:99:FA:8C X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/KjU7AhX4TXwLfXgV9g1-DLGZ-ow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.204.0/22 Signature Algorithm: sha256WithRSAEncryption a6:59:a4:98:f3:93:0e:9e:3f:e5:99:86:00:ea:a4:35:e3:60: b4:23:28:6f:46:87:69:3c:75:04:c3:b7:29:1d:e4:7e:79:e7: a8:e7:00:f8:bf:c6:10:a3:ee:36:2c:dd:32:9f:4c:f8:af:93: 71:fd:3c:ff:49:3b:9b:fb:6e:a8:8d:d8:6b:f6:7c:62:bf:b8: 66:99:bf:83:4c:a9:b8:3b:1c:c3:f0:4c:d8:33:b3:ff:79:4c: 77:a8:8e:f8:aa:af:9a:d2:af:b3:da:56:27:bd:3c:4e:91:44: e9:1d:10:e1:f3:f0:04:22:30:c8:82:8c:7f:c8:04:24:a4:ab: 2d:83:7f:30:a6:80:49:7d:ea:69:4f:0c:6c:8e:ba:a9:48:4e: 2f:d8:d5:a3:5c:b2:ba:5d:46:e0:17:0e:3e:01:c4:74:47:8e: f0:88:f2:97:d6:ec:07:a2:e6:44:73:c1:33:9f:72:35:c0:0e: 60:a4:7e:d5:f6:72:70:25:5f:87:a3:2f:8d:98:70:10:82:bd: 2c:0f:e8:ab:2c:ad:45:07:9a:4a:4a:eb:04:33:31:a5:16:43: 36:06:3a:f8:b0:e9:08:b9:16:77:bc:e4:c2:55:5c:ba:4f:49: 18:c1:c9:65:8b:1c:4f:a2:a3:e6:6c:95:aa:28:a6:3b:76:a7: dc:d4:64:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xcc753JgLvurk2Ftsw0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTM1M2IwMjE1Zjg0ZDdjMGI3ZDc4MTVmNjBkN2UwY2IxOTlmYThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lHWsc5uLONg+0wVLiJD5wpfJDYq G1oBloWQA+cCVX9w3hsiG4wi1Ut15MjRRuT7cMb88lZ6MVH6bBHQHyG/X8tuPmby iaZtkSSqySkOFD7BmlG0ITJVKL1usq9wLjlLmGbYiGFw6iFcgVjSKU52KzuEp3WK FcGm42/YXFTeFReDKr1SMSMbFTvcH+tD88Dq7ZdAbiJnjyTF6nw6tulKHpejVruM X2wF53u3nthALSFyebPQg/eoCZPArxLxeAOkwAWwJMy0/29xFRze/p1XGlryv8hT 8ek8BPfu8mM1q8P3tRLynUR+YwUGpOLCwothWSV+f8yT7oU1ZmQ7oKpCCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCo1OwIV+E18C314FfYNfgyxmfqMMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvS2pVN0FoWDRUWHdMZlhnVjlnMS1ETEdaLW93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudbMMA0G CSqGSIb3DQEBCwUAA4IBAQCmWaSY85MOnj/lmYYA6qQ142C0IyhvRodpPHUEw7cp HeR+eeeo5wD4v8YQo+42LN0yn0z4r5Nx/Tz/STub+26ojdhr9nxiv7hmmb+DTKm4 OxzD8EzYM7P/eUx3qI74qq+a0q+z2lYnvTxOkUTpHRDh8/AEIjDIgox/yAQkpKst g38wpoBJfeppTwxsjrqpSE4v2NWjXLK6XUbgFw4+AcR0R47wiPKX1uwHouZEc8Ez n3I1wA5gpH7V9nJwJV+Hoy+NmHAQgr0sD+irLK1FB5pKSusEMzGlFkM2Bjr4sOkI uRZ3vOTCVVy6T0kYwcllixxPoqPmbJWqKKY7dqfc1GSt -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:29 2026 by rpki-client