This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/KkyFxTRdXEokTgrrlmxAqjiu7ZQ.roa File: KkyFxTRdXEokTgrrlmxAqjiu7ZQ.roa (raw, json) Hash identifier: xjVxn6VE0DsxVNBeCrJPg5ZSsJvDyeaJISylTts3lDo= Subject key identifier: 2A:4C:85:C5:34:5D:5C:4A:24:4E:0A:EB:96:6C:40:AA:38:AE:ED:94 Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45 Certificate serial: 019B7D5B03A8FD832A290B7427FFC65BDBC0 Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/KkyFxTRdXEokTgrrlmxAqjiu7ZQ.roa Signing time: Fri 02 Jan 2026 06:17:55 +0000 ROA not before: Fri 02 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34373 IP address blocks: 185.82.152.0/23 maxlen: 24 185.171.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:03:a8:fd:83:2a:29:0b:74:27:ff:c6:5b:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45 Validity Not Before: Jan 2 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a4c85c5345d5c4a244e0aeb966c40aa38aeed94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d6:51:ba:02:71:c5:21:5c:91:ed:95:2f:84: 5b:12:47:5c:5d:2c:fa:ab:e7:b4:f8:f2:a0:e3:83: f4:5d:9b:7d:ba:d0:5a:bd:33:7e:7f:a2:d8:ce:03: 69:0c:75:49:e8:12:fa:20:86:e8:d1:ca:19:6c:1a: 5f:a2:93:74:db:7c:04:36:f8:b7:8a:d2:62:b1:a8: 60:8c:74:b8:e3:cb:25:f9:b1:8d:40:29:5c:c3:d3: 8b:82:dc:9b:3d:5d:8d:1c:f0:05:2b:4f:0b:1d:94: 3e:9e:e7:7c:2d:92:1b:56:ff:f6:cf:02:e7:d9:86: 0e:3f:44:21:66:d0:cd:8c:ed:44:c1:f8:a2:39:7d: 0f:9f:a9:f0:58:e0:18:46:cf:5c:98:fd:83:19:35: c0:45:2b:53:1c:db:e9:e1:7e:04:aa:41:e2:d9:75: 74:eb:f5:49:28:0b:66:62:91:51:9e:86:52:cb:fe: 8d:b8:2f:41:ac:42:b8:e6:6d:44:b5:52:21:bf:6c: 7d:88:fc:9d:a9:3e:b2:cd:70:56:00:f2:f4:d7:ba: c5:83:b9:8a:ee:c4:51:52:41:c7:3b:95:11:b1:da: 2e:ac:ce:0a:d8:1d:cd:45:c8:3c:84:7f:db:39:f7: 9a:4f:1a:f6:3a:70:ad:09:09:cf:f8:e5:fc:04:67: 53:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4C:85:C5:34:5D:5C:4A:24:4E:0A:EB:96:6C:40:AA:38:AE:ED:94 X509v3 Authority Key Identifier: keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/KkyFxTRdXEokTgrrlmxAqjiu7ZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.82.152.0/23 185.171.163.0/24 Signature Algorithm: sha256WithRSAEncryption 45:ed:67:06:8e:1d:71:6b:5c:bd:72:dc:22:90:60:9a:9e:3e: 85:fb:0f:6b:0a:3f:c6:6d:91:59:12:a0:40:92:63:0b:b1:1e: 43:e4:1f:22:4d:7b:7b:71:70:46:8d:24:c5:25:41:d9:ff:d7: 48:a8:f4:a6:e5:c8:82:30:df:08:5a:ce:a6:42:55:59:a5:70: ca:bf:16:94:ba:c9:4e:3c:a5:c7:22:65:c8:89:fa:16:12:7c: 23:09:98:dc:e6:b5:1c:5c:b3:73:66:8f:da:23:16:ab:a6:fa: 0f:05:db:19:eb:83:8c:67:b5:a1:c4:a1:6c:70:23:27:60:8c: 90:68:8b:81:5d:b5:4d:70:53:12:c9:a5:9e:7f:2f:6e:86:d5: 91:45:20:1d:3c:92:89:7f:70:34:57:0e:86:6b:a0:5c:fb:e7: b2:24:91:43:d3:7f:2b:f3:43:9b:d5:ce:8e:93:e0:46:6d:a5: 0a:29:98:5e:43:84:64:42:ab:78:2f:ba:c5:11:b8:da:6b:0e: 9b:07:70:18:ad:86:53:97:dd:24:ae:f8:a3:40:d3:c2:e7:c7: 45:65:90:76:79:7b:62:11:33:f1:19:78:62:01:f2:d4:77:be: e0:13:43:4e:b5:69:48:2e:45:55:fa:66:d7:a9:12:56:67:6c: e6:05:65:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WwOo/YMqKQt0J//GW9vAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NmUyMzQxZDc4M2U1OTM0Zjg3ZDA1YzQ3M2ZjNmQyYjMw ZDlkNDUwHhcNMjYwMTAyMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTRjODVjNTM0NWQ1YzRhMjQ0ZTBhZWI5NjZjNDBhYTM4YWVlZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNZRugJxxSFcke2VL4RbEkdcXSz6 q+e0+PKg44P0XZt9utBavTN+f6LYzgNpDHVJ6BL6IIbo0coZbBpfopN023wENvi3 itJisahgjHS448sl+bGNQClcw9OLgtybPV2NHPAFK08LHZQ+nud8LZIbVv/2zwLn 2YYOP0QhZtDNjO1EwfiiOX0Pn6nwWOAYRs9cmP2DGTXARStTHNvp4X4EqkHi2XV0 6/VJKAtmYpFRnoZSy/6NuC9BrEK45m1EtVIhv2x9iPydqT6yzXBWAPL017rFg7mK 7sRRUkHHO5URsdourM4K2B3NRcg8hH/bOfeaTxr2OnCtCQnP+OX8BGdTdwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCpMhcU0XVxKJE4K65ZsQKo4ru2UMB8GA1UdIwQY MBaAFKluI0HXg+WTT4fQXEc/xtKzDZ1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYt NmQ0MjI1N2M4ZjZiLzEvS2t5RnhUUmRYRW9rVGdycmxteEFxaml1N1pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYtNmQ0MjI1N2M4ZjZi LzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuVKYAwQA uaujMA0GCSqGSIb3DQEBCwUAA4IBAQBF7WcGjh1xa1y9ctwikGCanj6F+w9rCj/G bZFZEqBAkmMLsR5D5B8iTXt7cXBGjSTFJUHZ/9dIqPSm5ciCMN8IWs6mQlVZpXDK vxaUuslOPKXHImXIifoWEnwjCZjc5rUcXLNzZo/aIxarpvoPBdsZ64OMZ7WhxKFs cCMnYIyQaIuBXbVNcFMSyaWefy9uhtWRRSAdPJKJf3A0Vw6Ga6Bc++eyJJFD038r 80Ob1c6Ok+BGbaUKKZheQ4RkQqt4L7rFEbjaaw6bB3AYrYZTl90krvijQNPC58dF ZZB2eXtiETPxGXhiAfLUd77gE0NOtWlILkVV+mbXqRJWZ2zmBWVc -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:22 2026 by rpki-client