This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/K2muBRhSzEeWwEOKyiaVJYw5K3c.roa File: K2muBRhSzEeWwEOKyiaVJYw5K3c.roa (raw, json) Hash identifier: 9FMIKD8yGkaykJTy68XJ8mxhdE87R0V7qtYcMc3oayY= Subject key identifier: 2B:69:AE:05:18:52:CC:47:96:C0:43:8A:CA:26:95:25:8C:39:2B:77 Certificate issuer: /CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e Certificate serial: 019B78A371EE2236CD7C32A85395AD29A013 Authority key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/K2muBRhSzEeWwEOKyiaVJYw5K3c.roa Signing time: Thu 01 Jan 2026 08:18:56 +0000 ROA not before: Thu 01 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203177 IP address blocks: 91.244.117.0/24 maxlen: 24 185.135.208.0/22 maxlen: 22 185.135.208.0/24 maxlen: 24 185.135.209.0/24 maxlen: 24 185.135.210.0/24 maxlen: 24 185.135.211.0/24 maxlen: 24 2a0a:6600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:71:ee:22:36:cd:7c:32:a8:53:95:ad:29:a0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b69ae051852cc4796c0438aca2695258c392b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:db:31:d6:c6:34:eb:23:11:5a:6f:58:c8:ab: 38:47:0e:8b:d4:af:f0:5e:1c:07:fb:cd:b6:5d:f2: 1d:1d:fa:41:9e:7e:4d:77:4d:09:ff:79:6c:94:de: 2d:43:06:87:da:e9:d7:1e:73:e9:74:eb:65:d2:12: 90:05:9d:d5:ca:9f:6f:cc:db:98:fa:04:57:d7:ba: a0:b3:da:27:d3:62:f4:c6:3b:2c:3f:66:b1:27:4f: 06:a0:f2:66:e7:91:de:97:72:ea:d1:31:35:fb:a8: c8:03:3a:b4:5a:c2:ff:6c:fa:2d:c5:7d:05:d3:46: 48:47:58:93:f3:f9:1f:ff:b0:ce:fd:50:05:c7:91: 2e:c2:67:4c:1e:21:24:f2:1f:ea:e6:21:91:fd:45: fd:3a:5f:95:18:ec:24:cc:6d:40:07:49:19:6b:a4: 13:63:58:8a:83:ef:a5:bb:49:df:2d:2f:34:31:fc: b2:b6:0f:65:83:91:e7:cd:50:be:2b:70:c3:74:45: 3e:55:e3:54:27:ca:73:c2:df:59:33:9d:a3:4b:23: 59:93:3e:e4:a3:0d:1f:f1:32:33:57:cc:a3:79:0b: ee:bf:a2:e5:12:42:a6:7c:14:8f:6d:c7:2d:d9:88: b6:5e:10:b1:8c:f6:58:1e:eb:2d:93:a4:0a:f4:0d: 6d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:69:AE:05:18:52:CC:47:96:C0:43:8A:CA:26:95:25:8C:39:2B:77 X509v3 Authority Key Identifier: keyid:CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/K2muBRhSzEeWwEOKyiaVJYw5K3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.244.117.0/24 185.135.208.0/22 IPv6: 2a0a:6600::/29 Signature Algorithm: sha256WithRSAEncryption 7c:4b:93:e9:76:95:67:aa:f1:ef:14:79:70:f0:21:25:38:0e: 8f:01:ac:1d:de:fc:d4:c2:3a:a6:41:3a:4e:ed:1f:68:26:05: f2:8d:46:59:8d:6e:7c:d9:28:d0:4b:47:83:60:cd:af:29:46: d5:c3:f6:e7:0a:11:d0:7e:b0:cc:05:76:63:e3:f8:27:bd:e6: a9:29:a4:c6:0e:10:7e:ac:46:18:7f:e5:6d:ac:0c:ba:c4:4a: cf:3a:f3:06:b9:4d:f9:cf:08:f3:05:f4:73:e6:3d:65:8e:97: 6b:78:96:ce:05:72:8e:fe:f0:d3:ff:f7:09:c2:3a:55:a5:a1: 9a:2e:4c:3e:3f:02:69:0b:f8:91:8b:38:43:c4:31:a5:76:81: 9d:38:db:53:c5:fd:c7:2f:8d:27:d0:38:70:6d:61:ee:e6:81: 41:06:1e:09:01:59:6f:ec:1f:1b:0e:28:38:87:db:78:52:c8: 54:bc:33:4e:3b:7b:c6:54:1a:5d:c8:9a:2f:c3:5b:46:c2:e8: c9:e7:2d:e5:41:9b:cb:bf:86:0f:23:31:42:9b:2b:7b:f3:fc: 06:90:f8:d3:db:fb:80:75:00:47:93:53:58:1c:51:5a:e9:d1: e1:08:38:63:74:44:19:2f:a3:6f:de:72:ec:2d:c4:25:9f:21: 5c:fa:ed:2f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4o3HuIjbNfDKoU5WtKaATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTAwZjFlMTFlMmQyNWQwYjIzMTZhZDZlMDEyNjg0ODM5 YWM4MWUwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjY5YWUwNTE4NTJjYzQ3OTZjMDQzOGFjYTI2OTUyNThjMzkyYjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNsx1sY06yMRWm9YyKs4Rw6L1K/w XhwH+822XfIdHfpBnn5Nd00J/3lslN4tQwaH2unXHnPpdOtl0hKQBZ3Vyp9vzNuY +gRX17qgs9on02L0xjssP2axJ08GoPJm55Hel3Lq0TE1+6jIAzq0WsL/bPotxX0F 00ZIR1iT8/kf/7DO/VAFx5EuwmdMHiEk8h/q5iGR/UX9Ol+VGOwkzG1AB0kZa6QT Y1iKg++lu0nfLS80Mfyytg9lg5HnzVC+K3DDdEU+VeNUJ8pzwt9ZM52jSyNZkz7k ow0f8TIzV8yjeQvuv6LlEkKmfBSPbcct2Yi2XhCxjPZYHustk6QK9A1t9QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCtprgUYUsxHlsBDisomlSWMOSt3MB8GA1UdIwQY MBaAFMqQDx4R4tJdCyMWrW4BJoSDmsgeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBBUEhoSGkwbDBMSXhhdGJnRW1oSU9heUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mNjk2OWMtM2E2ZS00YmVjLTk3NDIt ZWNlODdjNmEwMzE4LzEvSzJtdUJSaFN6RWVXd0VPS3lpYVZKWXc1SzNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9mNjk2OWMtM2E2ZS00YmVjLTk3NDItZWNlODdjNmEwMzE4 LzEveXBBUEhoSGkwbDBMSXhhdGJnRW1oSU9heUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW/R1AwQC uYfQMA0EAgACMAcDBQMqCmYAMA0GCSqGSIb3DQEBCwUAA4IBAQB8S5PpdpVnqvHv FHlw8CElOA6PAawd3vzUwjqmQTpO7R9oJgXyjUZZjW582SjQS0eDYM2vKUbVw/bn ChHQfrDMBXZj4/gnveapKaTGDhB+rEYYf+VtrAy6xErPOvMGuU35zwjzBfRz5j1l jpdreJbOBXKO/vDT//cJwjpVpaGaLkw+PwJpC/iRizhDxDGldoGdONtTxf3HL40n 0DhwbWHu5oFBBh4JAVlv7B8bDig4h9t4UshUvDNOO3vGVBpdyJovw1tGwujJ5y3l QZvLv4YPIzFCmyt78/wGkPjT2/uAdQBHk1NYHFFa6dHhCDhjdEQZL6Nv3nLsLcQl nyFc+u0v -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:24 2026 by rpki-client