This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/kV0lhF3sNCXctsdeBYv_Jwm1Yww.roa File: kV0lhF3sNCXctsdeBYv_Jwm1Yww.roa (raw, json) Hash identifier: oKX1XUar7ntV2+pEAw7ilC7z6D/uvm342LvGsth66is= Subject key identifier: 91:5D:25:84:5D:EC:34:25:DC:B6:C7:5E:05:8B:FF:27:09:B5:63:0C Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b Certificate serial: 019B7B36CBBCA27D63E6F82B002E8FD95CBC Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/kV0lhF3sNCXctsdeBYv_Jwm1Yww.roa Signing time: Thu 01 Jan 2026 20:19:07 +0000 ROA not before: Thu 01 Jan 2026 20:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39124 IP address blocks: 185.206.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:cb:bc:a2:7d:63:e6:f8:2b:00:2e:8f:d9:5c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b Validity Not Before: Jan 1 20:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=915d25845dec3425dcb6c75e058bff2709b5630c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3b:77:cc:69:f3:1d:d6:56:b7:30:d6:4d:42: 5d:f1:24:c0:1e:53:c2:f5:f0:b0:bd:9e:5c:68:4a: 0a:d8:7a:d1:7e:c6:1c:0b:bb:57:6a:39:1d:0a:b7: f0:38:66:8c:f6:c2:c4:90:51:85:d7:f1:fc:86:b1: 54:9c:bb:a2:a8:de:fd:94:c1:fb:72:9a:8a:2f:f6: 63:f1:92:c0:8f:68:a4:83:a0:73:d0:3e:2d:e1:af: 39:aa:85:3c:98:59:4d:f3:aa:a7:85:5a:b4:85:1a: 72:ad:8e:17:2c:fb:24:ee:39:de:47:bb:13:d2:91: 1a:74:de:94:ea:8a:ec:b9:9b:51:5a:af:c3:75:82: e0:05:72:63:13:1d:da:fa:77:f5:48:ff:31:c4:fb: 3a:1c:2a:33:6b:5b:d0:02:26:4a:c4:80:e1:ff:12: b4:44:fa:a7:c9:31:f1:c1:5c:7f:eb:b7:88:71:9c: aa:86:30:23:0d:34:cb:5f:28:7e:83:b2:80:a1:b9: 89:27:fc:c1:cf:23:39:63:81:f3:63:44:85:b4:48: 24:0d:2b:90:81:a9:9b:9f:17:be:e3:76:64:b9:85: 32:0b:7c:ec:02:eb:0e:e0:8a:ce:d6:13:80:b8:6a: 72:a4:5d:6c:44:6e:98:4f:6d:14:e1:0c:96:4d:84: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5D:25:84:5D:EC:34:25:DC:B6:C7:5E:05:8B:FF:27:09:B5:63:0C X509v3 Authority Key Identifier: keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/kV0lhF3sNCXctsdeBYv_Jwm1Yww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.54.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:4b:0a:95:55:57:16:0c:06:f0:b7:95:c9:35:06:f1:0f:c1: b4:c0:33:cd:9b:e1:54:21:96:e7:8c:ed:3b:77:de:eb:5a:6c: b3:80:76:d5:5b:3d:43:6e:b3:15:48:86:a1:1b:98:1b:3d:cb: b8:69:b3:04:e4:3c:2e:a3:21:41:14:cc:fb:c1:a9:5d:f9:24: 98:4b:0b:4f:43:87:8f:e0:2c:18:71:4b:a4:fb:7a:ed:8d:68: 2d:c6:ed:10:20:fc:c6:02:f6:16:ee:f8:f3:61:2e:03:98:85: ec:24:ac:23:46:65:c0:fe:2a:9a:dc:f3:b6:31:64:21:7e:eb: 57:a3:62:c8:ab:61:24:3e:fc:96:dd:08:97:5a:2e:32:46:91: 47:47:4f:8f:72:50:ee:69:20:bc:7b:9b:7f:10:7c:54:0d:b9: c6:6b:63:54:d3:e6:41:a9:c8:aa:51:2f:a8:ae:f9:3c:21:0d: 8d:7b:a2:75:e3:86:af:6c:6c:11:3f:8f:7b:43:ec:f7:f9:47: 6b:19:6a:91:f0:33:1e:24:c3:ad:87:14:bb:6b:f3:46:02:13: 51:5b:97:58:5f:6a:3a:ab:f8:42:e7:c9:9a:a1:f7:31:2e:ad: 39:a4:a8:4f:4f:62:59:3e:f3:6d:7b:69:46:6f:1a:ef:1f:ac: a0:3b:e5:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nsu8on1j5vgrAC6P2Vy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNGRiNzYyMzI0MWQ3ZTY2NzhmYzI1NzUxZmE0ZTBiNjY2 NTE4NmIwHhcNMjYwMTAxMjAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTVkMjU4NDVkZWMzNDI1ZGNiNmM3NWUwNThiZmYyNzA5YjU2MzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzt3zGnzHdZWtzDWTUJd8STAHlPC 9fCwvZ5caEoK2HrRfsYcC7tXajkdCrfwOGaM9sLEkFGF1/H8hrFUnLuiqN79lMH7 cpqKL/Zj8ZLAj2ikg6Bz0D4t4a85qoU8mFlN86qnhVq0hRpyrY4XLPsk7jneR7sT 0pEadN6U6orsuZtRWq/DdYLgBXJjEx3a+nf1SP8xxPs6HCoza1vQAiZKxIDh/xK0 RPqnyTHxwVx/67eIcZyqhjAjDTTLXyh+g7KAobmJJ/zBzyM5Y4HzY0SFtEgkDSuQ gambnxe+43ZkuYUyC3zsAusO4IrO1hOAuGpypF1sRG6YT20U4QyWTYTUwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJFdJYRd7DQl3LbHXgWL/ycJtWMMMB8GA1UdIwQY MBaAFMBNt2IyQdfmZ4/CV1H6TgtmZRhrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMt MDQyM2YyNjNmMmNiLzEva1YwbGhGM3NOQ1hjdHNkZUJZdl9Kd20xWXd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMtMDQyM2YyNjNmMmNi LzEvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc42MA0G CSqGSIb3DQEBCwUAA4IBAQAMSwqVVVcWDAbwt5XJNQbxD8G0wDPNm+FUIZbnjO07 d97rWmyzgHbVWz1DbrMVSIahG5gbPcu4abME5DwuoyFBFMz7wald+SSYSwtPQ4eP 4CwYcUuk+3rtjWgtxu0QIPzGAvYW7vjzYS4DmIXsJKwjRmXA/iqa3PO2MWQhfutX o2LIq2EkPvyW3QiXWi4yRpFHR0+PclDuaSC8e5t/EHxUDbnGa2NU0+ZBqciqUS+o rvk8IQ2Ne6J144avbGwRP497Q+z3+UdrGWqR8DMeJMOthxS7a/NGAhNRW5dYX2o6 q/hC58maofcxLq05pKhPT2JZPvNte2lGbxrvH6ygO+Uq -----END CERTIFICATE-----Generated at Mon Jan 26 11:29:29 2026 by rpki-client