This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/KApK1eZ3dReQSsXRIwoW7xEMCfc.roa File: KApK1eZ3dReQSsXRIwoW7xEMCfc.roa (raw, json) Hash identifier: I01yvmR81aVECy/LZF2a4cMND5HAKMaYQMS7oZOPJ6c= Subject key identifier: 28:0A:4A:D5:E6:77:75:17:90:4A:C5:D1:23:0A:16:EF:11:0C:09:F7 Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015 Certificate serial: 019B7A5A067593302D732533559869E167BD Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/KApK1eZ3dReQSsXRIwoW7xEMCfc.roa Signing time: Thu 01 Jan 2026 16:17:58 +0000 ROA not before: Thu 01 Jan 2026 16:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12557 IP address blocks: 185.117.180.0/22 maxlen: 22 185.117.182.0/24 maxlen: 24 2a03:52a0::/32 maxlen: 32 2a03:52a0:172::/48 maxlen: 48 2a03:52a0:180::/48 maxlen: 48 2a03:52a0:181::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:06:75:93:30:2d:73:25:33:55:98:69:e1:67:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015 Validity Not Before: Jan 1 16:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=280a4ad5e6777517904ac5d1230a16ef110c09f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:07:11:81:1b:51:44:25:8e:b6:88:87:49:86: 8a:3c:4e:19:6c:31:e8:03:c0:ed:27:b6:98:d5:b9: 18:1c:e0:fc:60:e6:95:c0:be:51:c2:9b:d7:da:1f: 57:6b:38:59:2a:0d:b6:d5:8b:0e:62:fe:16:d9:72: 6d:3c:fe:65:3d:b6:b0:79:9b:c6:98:97:1a:a5:ad: c6:60:82:3c:d4:7b:d1:76:d0:f5:e0:55:f6:a5:4d: 12:04:da:49:03:41:9d:3d:7c:68:8e:d9:c0:77:a0: fc:7f:14:d8:7b:38:0f:d5:50:76:c3:21:b9:72:c3: ed:18:fe:3d:12:88:31:df:25:a6:22:99:d8:13:1d: 7c:c3:ee:48:a8:cc:60:fa:ff:79:ce:f8:af:90:4f: 8f:73:d3:be:4c:d9:f6:c6:30:c1:43:f1:c9:f5:ef: b6:74:9c:35:d2:79:f7:f7:75:33:4a:f3:25:a0:45: 9d:f7:d3:57:72:a8:51:1d:f6:96:93:5c:09:9b:0f: 09:47:c1:e1:df:ee:9d:9d:25:4f:c2:6c:fa:14:7a: 84:a1:73:40:08:8c:e0:73:0a:73:89:95:9c:a3:19: 1a:5c:a1:dd:4c:e4:47:1f:38:40:79:73:7b:88:e0: b9:ab:99:1d:2d:e6:a3:e3:1e:7a:51:02:07:f6:07: 03:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0A:4A:D5:E6:77:75:17:90:4A:C5:D1:23:0A:16:EF:11:0C:09:F7 X509v3 Authority Key Identifier: keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/KApK1eZ3dReQSsXRIwoW7xEMCfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.180.0/22 IPv6: 2a03:52a0::/32 Signature Algorithm: sha256WithRSAEncryption 19:b7:5c:0f:12:f6:cc:79:25:c8:bb:90:c2:b1:49:ca:f9:be: f8:ef:35:23:db:12:8b:16:f3:02:c8:8e:fc:e2:33:40:97:51: cc:ed:dc:98:68:f3:86:2f:20:48:44:aa:23:0a:6e:b2:7f:1f: 2b:5c:8f:68:32:37:bd:5d:85:82:82:fc:af:10:33:78:90:7a: 1f:75:66:e5:ef:36:38:63:84:6a:d3:ac:f5:97:c9:a4:3e:e9: 20:f1:be:d3:2f:6f:ab:63:7b:89:0d:1a:66:d4:c8:ff:ab:e6: fa:f0:fc:c2:66:86:13:8e:2f:d0:6d:18:3d:a0:75:3c:dc:96: 73:b4:e5:8e:b2:6e:42:19:12:31:b1:ac:2c:3d:be:6f:57:2c: 15:4b:31:12:76:44:13:b0:2a:30:b5:c8:4e:fb:9c:0a:47:5e: 7a:79:48:e4:aa:44:32:c5:c4:2f:19:80:62:5f:ee:f1:ce:e8: 20:69:51:b7:16:da:b2:aa:03:05:d3:77:57:b9:b8:83:4f:d6: 88:d2:04:fd:e4:fe:3b:c0:1c:c5:e6:78:ae:42:15:f3:ec:89: 3f:d2:6d:7f:49:5d:a8:63:dc:5e:d3:fc:a9:0d:df:59:8a:09: 11:2b:83:b6:82:a3:6f:83:e0:3b:d8:47:cc:b0:fd:2a:33:18: dc:d8:2f:c1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WgZ1kzAtcyUzVZhp4We9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGM2ODVlZmE2YTJjMTA0NTYzN2YwMjdhMzI1YzBhZWM3 OWMwMTUwHhcNMjYwMTAxMTYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODBhNGFkNWU2Nzc3NTE3OTA0YWM1ZDEyMzBhMTZlZjExMGMwOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgcRgRtRRCWOtoiHSYaKPE4ZbDHo A8DtJ7aY1bkYHOD8YOaVwL5RwpvX2h9XazhZKg221YsOYv4W2XJtPP5lPbaweZvG mJcapa3GYII81HvRdtD14FX2pU0SBNpJA0GdPXxojtnAd6D8fxTYezgP1VB2wyG5 csPtGP49Eogx3yWmIpnYEx18w+5IqMxg+v95zvivkE+Pc9O+TNn2xjDBQ/HJ9e+2 dJw10nn393UzSvMloEWd99NXcqhRHfaWk1wJmw8JR8Hh3+6dnSVPwmz6FHqEoXNA CIzgcwpziZWcoxkaXKHdTORHHzhAeXN7iOC5q5kdLeaj4x56UQIH9gcDSQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCgKStXmd3UXkErF0SMKFu8RDAn3MB8GA1UdIwQY MBaAFLpMaF76aiwQRWN/AnoyXArsecAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQt Yzg2MDQ3MjA2NDJkLzEvS0FwSzFlWjNkUmVRU3NYUkl3b1c3eEVNQ2ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQtYzg2MDQ3MjA2NDJk LzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXW0MA0E AgACMAcDBQAqA1KgMA0GCSqGSIb3DQEBCwUAA4IBAQAZt1wPEvbMeSXIu5DCsUnK +b747zUj2xKLFvMCyI784jNAl1HM7dyYaPOGLyBIRKojCm6yfx8rXI9oMje9XYWC gvyvEDN4kHofdWbl7zY4Y4Rq06z1l8mkPukg8b7TL2+rY3uJDRpm1Mj/q+b68PzC ZoYTji/QbRg9oHU83JZztOWOsm5CGRIxsawsPb5vVywVSzESdkQTsCowtchO+5wK R156eUjkqkQyxcQvGYBiX+7xzuggaVG3FtqyqgMF03dXubiDT9aI0gT95P47wBzF 5niuQhXz7Ik/0m1/SV2oY9xe0/ypDd9ZigkRK4O2gqNvg+A72EfMsP0qMxjc2C/B -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:10 2026 by rpki-client