This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/tII-kyxxSugYobEeIbAgNDo451s.roa File: tII-kyxxSugYobEeIbAgNDo451s.roa (raw, json) Hash identifier: Lv7S4x6BZW4ZHs5wH+NnqBYKST4za7yZuPdbD8t6zpk= Subject key identifier: B4:82:3E:93:2C:71:4A:E8:18:A1:B1:1E:21:B0:20:34:3A:38:E7:5B Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7 Certificate serial: 019B77592465511C36BAC5F114C42A813624 Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/tII-kyxxSugYobEeIbAgNDo451s.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48273 IP address blocks: 185.168.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:24:65:51:1c:36:ba:c5:f1:14:c4:2a:81:36:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7 Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4823e932c714ae818a1b11e21b020343a38e75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:58:43:6d:05:8e:8d:83:6c:e2:d2:f8:aa:59: 72:5a:c6:11:48:c1:1e:78:a4:d4:97:66:9e:81:fb: 16:6b:7f:5b:15:9d:d2:f4:6c:e0:d8:e8:a1:d2:cc: 5e:f1:80:54:bb:ba:49:56:bc:72:a5:94:01:aa:f7: 0d:2c:5a:bf:b6:a3:b4:28:08:c5:b0:b0:48:59:98: 73:57:95:04:ac:f0:cb:a9:59:3a:e6:c9:97:94:c0: ed:1f:f3:fe:f6:88:f0:76:e0:50:12:50:80:bc:86: 92:24:81:41:28:f3:18:e1:82:4d:5f:03:41:1d:d1: 3c:8a:ed:0d:f3:13:ca:9b:87:fd:93:61:38:32:6b: cd:d1:38:8d:41:ff:d0:d1:08:f9:f3:d7:72:10:de: 18:6b:4e:d6:5d:3c:2c:12:db:a0:4b:5f:f4:01:eb: ff:89:8f:4b:03:79:dd:d9:b9:5f:4f:a3:60:56:4e: 9f:9b:8d:cf:bf:a6:e7:f5:9d:34:fe:2f:56:66:46: f4:de:79:07:b5:75:22:94:7a:45:13:db:33:54:9c: 55:fa:13:60:5b:69:83:8f:b4:87:32:e2:22:82:f6: db:97:ac:15:9a:c3:3e:2f:8a:a1:26:13:5a:04:f5: 67:9c:b3:74:52:d4:38:ec:1b:be:e2:2e:36:8f:db: dd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:82:3E:93:2C:71:4A:E8:18:A1:B1:1E:21:B0:20:34:3A:38:E7:5B X509v3 Authority Key Identifier: keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/tII-kyxxSugYobEeIbAgNDo451s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.10.0/24 Signature Algorithm: sha256WithRSAEncryption 97:b6:2f:ca:92:65:7f:de:a4:c8:43:3c:76:fc:25:de:45:b1: 53:16:9a:09:dc:7f:cc:04:31:63:cf:da:03:3d:ab:2f:e6:15: ce:40:2f:bf:27:ce:74:10:af:4f:65:49:55:90:a3:fd:9c:cc: 78:01:79:1e:47:5d:d1:61:20:c1:0a:a8:7e:2a:40:d0:8f:02: 35:73:70:73:33:b9:1e:24:04:7a:04:e9:87:3c:2c:3c:86:c9: 3e:0a:c1:5a:d3:ea:37:d4:41:6c:5f:1a:6a:7e:0a:9e:2a:49: 0f:98:e2:22:18:19:40:22:14:ea:95:a3:f1:3b:f3:b8:ca:62: 6b:d4:be:92:01:49:cc:75:ff:e0:4e:f3:26:c0:14:bd:b2:37: 4a:e2:6d:51:b7:e9:be:34:56:16:67:de:6f:32:29:b9:51:6a: 4a:34:a0:c2:9d:13:38:13:65:c0:41:5e:ba:aa:64:8c:fa:00: c8:0b:5c:fb:c6:18:4f:6d:99:73:df:dd:1c:2d:e4:8e:3f:51: b2:b8:62:52:2d:ab:f3:3f:12:8c:10:8a:44:cc:77:7c:15:11: d9:38:f4:3f:0f:ea:61:49:84:8c:9a:bd:8e:95:0e:30:fc:24: f8:af:50:2b:7f:ed:d4:51:fb:cc:01:6c:a2:6d:c9:76:07:86: 96:fb:50:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSRlURw2usXxFMQqgTYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYTM5NmYxYzM0NGIwNzljNWQyZjI3YmZiMzEzMzc3ZmVi YjJlYzcwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDgyM2U5MzJjNzE0YWU4MThhMWIxMWUyMWIwMjAzNDNhMzhlNzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFhDbQWOjYNs4tL4qllyWsYRSMEe eKTUl2aegfsWa39bFZ3S9Gzg2Oih0sxe8YBUu7pJVrxypZQBqvcNLFq/tqO0KAjF sLBIWZhzV5UErPDLqVk65smXlMDtH/P+9ojwduBQElCAvIaSJIFBKPMY4YJNXwNB HdE8iu0N8xPKm4f9k2E4MmvN0TiNQf/Q0Qj589dyEN4Ya07WXTwsEtugS1/0Aev/ iY9LA3nd2blfT6NgVk6fm43Pv6bn9Z00/i9WZkb03nkHtXUilHpFE9szVJxV+hNg W2mDj7SHMuIigvbbl6wVmsM+L4qhJhNaBPVnnLN0UtQ47Bu+4i42j9vdTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLSCPpMscUroGKGxHiGwIDQ6OOdbMB8GA1UdIwQY MBaAFPyjlvHDRLB5xdLye/sxM3f+uy7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWIt ZmZiMTZlYmQxMTFmLzEvdElJLWt5eHhTdWdZb2JFZUliQWdORG80NTFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWItZmZiMTZlYmQxMTFm LzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuagKMA0G CSqGSIb3DQEBCwUAA4IBAQCXti/KkmV/3qTIQzx2/CXeRbFTFpoJ3H/MBDFjz9oD Pasv5hXOQC+/J850EK9PZUlVkKP9nMx4AXkeR13RYSDBCqh+KkDQjwI1c3BzM7ke JAR6BOmHPCw8hsk+CsFa0+o31EFsXxpqfgqeKkkPmOIiGBlAIhTqlaPxO/O4ymJr 1L6SAUnMdf/gTvMmwBS9sjdK4m1Rt+m+NFYWZ95vMim5UWpKNKDCnRM4E2XAQV66 qmSM+gDIC1z7xhhPbZlz390cLeSOP1GyuGJSLavzPxKMEIpEzHd8FRHZOPQ/D+ph SYSMmr2OlQ4w/CT4r1Arf+3UUfvMAWyibcl2B4aW+1Aa -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:23 2026 by rpki-client