This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/kKbHC__LJH-j0ex4EgJJmX98slE.roa File: kKbHC__LJH-j0ex4EgJJmX98slE.roa (raw, json) Hash identifier: FA7KYfTvFd4DkO8o/xkyqOnnhY/RKFo8GgvBljJcnfI= Subject key identifier: 90:A6:C7:0B:FF:CB:24:7F:A3:D1:EC:78:12:02:49:99:7F:7C:B2:51 Certificate issuer: /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca Certificate serial: 019B783449E26003DDAA7FD43550AD38C52A Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/kKbHC__LJH-j0ex4EgJJmX98slE.roa Signing time: Thu 01 Jan 2026 06:17:31 +0000 ROA not before: Thu 01 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206898 IP address blocks: 185.83.215.0/24 maxlen: 24 2a05:9f06::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:49:e2:60:03:dd:aa:7f:d4:35:50:ad:38:c5:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90a6c70bffcb247fa3d1ec78120249997f7cb251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:1f:86:60:18:76:5c:5c:d3:f5:d4:f7:86: 2a:0d:f8:f9:17:7d:87:de:30:9f:be:28:ca:15:8a: 03:62:d9:61:14:58:d3:c0:85:18:2a:ec:cb:da:2e: 75:e1:66:39:25:44:0f:5f:63:9c:eb:84:6a:f9:ff: f6:95:18:ee:46:ea:10:8e:f5:5e:33:72:1c:34:62: 65:01:c1:3f:0b:d2:e5:db:e3:17:a5:f7:79:20:bb: a0:87:ef:5d:ee:32:ed:4d:ce:6e:d9:76:3d:cc:1a: 37:c6:14:5a:be:93:ca:3a:36:66:a9:31:c3:90:f9: f5:cf:8d:55:fe:6f:ff:55:48:ab:7d:24:94:6f:3e: 94:b9:4a:66:13:5c:9b:89:c3:3b:5a:8f:c9:f9:fa: e1:f9:bc:e3:3a:9f:b4:13:28:3d:33:12:b4:4f:77: 7a:0c:7c:64:95:67:0f:57:cc:db:62:3b:d5:5e:d1: 31:cc:fd:1c:ef:53:5e:75:34:40:3c:ff:69:82:21: c8:a7:e0:ec:e6:f3:20:b9:9f:b6:d9:d5:f1:84:78: 76:e7:e6:d6:a3:a9:e2:49:03:a5:b2:96:b7:a4:68: 93:49:b8:09:84:34:b8:ca:0b:89:04:27:2c:c4:92: 97:c5:ae:19:73:34:6f:dc:7f:84:a1:19:00:f7:40: 97:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A6:C7:0B:FF:CB:24:7F:A3:D1:EC:78:12:02:49:99:7F:7C:B2:51 X509v3 Authority Key Identifier: keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/kKbHC__LJH-j0ex4EgJJmX98slE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.215.0/24 IPv6: 2a05:9f06::/31 Signature Algorithm: sha256WithRSAEncryption 21:13:2e:16:15:84:5f:26:15:93:50:19:15:0c:4f:71:76:ff: 3c:bd:2e:73:5a:33:1f:18:cf:eb:4b:d6:ed:b3:67:ff:ce:88: 8b:94:1b:14:cd:52:35:39:af:1f:a7:d0:5b:e9:e4:d6:5d:02: 3a:e7:e9:80:33:e9:ab:e9:a4:fb:e9:77:fd:4a:da:8c:56:2b: 04:35:e8:c9:9c:bb:92:62:88:1b:d3:ae:3b:bc:64:ba:7d:99: 6d:06:50:61:2d:f4:5d:3c:05:3a:c1:8d:6e:37:0f:86:ee:69: dc:2d:78:a5:17:f7:69:6e:e4:20:c7:c9:42:35:cc:e9:fe:ac: 92:19:ca:73:ee:96:15:6f:bc:9f:e2:6d:4f:09:61:46:54:b7: 21:b7:8e:73:ff:20:cb:e3:74:85:e6:07:f1:3f:85:89:72:f4: 04:f7:29:f3:ad:50:43:f5:4a:72:a4:38:d1:32:58:30:c9:bf: c9:15:b6:a0:f9:f1:8a:01:16:2a:b0:41:bc:41:0b:66:94:64: be:4d:2a:9d:62:37:2c:d8:65:13:ba:97:6c:5a:48:16:47:b5: 2d:da:9f:40:ce:75:6d:53:f8:f9:56:5d:bf:49:47:ca:43:8c: 02:e9:cc:8c:60:3d:fd:1a:d6:41:df:84:52:84:aa:79:77:5e: 33:d6:9b:af -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NEniYAPdqn/UNVCtOMUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MDA3MTcyZGY5ZmMyZDRhMmRkYmJhOTM0Y2ViYzlmMDI4 NmQzY2EwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGE2YzcwYmZmY2IyNDdmYTNkMWVjNzgxMjAyNDk5OTdmN2NiMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE4fhmAYdlxc0/XU94YqDfj5F32H 3jCfvijKFYoDYtlhFFjTwIUYKuzL2i514WY5JUQPX2Oc64Rq+f/2lRjuRuoQjvVe M3IcNGJlAcE/C9Ll2+MXpfd5ILugh+9d7jLtTc5u2XY9zBo3xhRavpPKOjZmqTHD kPn1z41V/m//VUirfSSUbz6UuUpmE1ybicM7Wo/J+frh+bzjOp+0Eyg9MxK0T3d6 DHxklWcPV8zbYjvVXtExzP0c71NedTRAPP9pgiHIp+Ds5vMguZ+22dXxhHh25+bW o6niSQOlspa3pGiTSbgJhDS4yguJBCcsxJKXxa4ZczRv3H+EoRkA90CXOQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJCmxwv/yyR/o9HseBICSZl/fLJRMB8GA1UdIwQY MBaAFEQAcXLfn8LUot27qTTOvJ8ChtPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85NDVkYmQtMmZiNy00ZGQxLTk2YTYt MDU4NWRlNGQ0ZWU3LzEva0tiSENfX0xKSC1qMGV4NEVnSkptWDk4c2xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85NDVkYmQtMmZiNy00ZGQxLTk2YTYtMDU4NWRlNGQ0ZWU3 LzEvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuVPXMA0E AgACMAcDBQEqBZ8GMA0GCSqGSIb3DQEBCwUAA4IBAQAhEy4WFYRfJhWTUBkVDE9x dv88vS5zWjMfGM/rS9bts2f/zoiLlBsUzVI1Oa8fp9Bb6eTWXQI65+mAM+mr6aT7 6Xf9StqMVisENejJnLuSYogb0647vGS6fZltBlBhLfRdPAU6wY1uNw+G7mncLXil F/dpbuQgx8lCNczp/qySGcpz7pYVb7yf4m1PCWFGVLcht45z/yDL43SF5gfxP4WJ cvQE9ynzrVBD9UpypDjRMlgwyb/JFbag+fGKARYqsEG8QQtmlGS+TSqdYjcs2GUT updsWkgWR7Ut2p9AznVtU/j5Vl2/SUfKQ4wC6cyMYD39GtZB34RShKp5d14z1puv -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:32 2026 by rpki-client