This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/K1Er1aBJx6bVqmO9OdMkkQAcoks.roa File: K1Er1aBJx6bVqmO9OdMkkQAcoks.roa (raw, json) Hash identifier: jgg7YMoJBVhZFbz63ciqQ92UHrRAMfSOORFFb9rl/W4= Subject key identifier: 2B:51:2B:D5:A0:49:C7:A6:D5:AA:63:BD:39:D3:24:91:00:1C:A2:4B Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a Certificate serial: 019B797E634FBAA815901A676072B8518E9A Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/K1Er1aBJx6bVqmO9OdMkkQAcoks.roa Signing time: Thu 01 Jan 2026 12:18:04 +0000 ROA not before: Thu 01 Jan 2026 12:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8875 IP address blocks: 185.219.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:63:4f:ba:a8:15:90:1a:67:60:72:b8:51:8e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a Validity Not Before: Jan 1 12:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b512bd5a049c7a6d5aa63bd39d32491001ca24b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:c1:d2:5b:cf:60:82:ed:53:ef:2d:c6:ba: 62:92:d6:1c:81:6a:e2:61:86:a1:4b:3c:df:18:1c: 3f:e8:20:fb:b0:ef:bf:b1:49:d8:a0:f7:c5:f6:59: 5e:5b:d5:eb:30:66:fc:74:02:e3:48:9d:c8:43:43: 50:27:42:51:48:37:0c:69:6a:d4:de:b2:ec:ca:dc: 83:0f:55:f4:03:e4:9f:53:c5:b0:68:22:2c:56:e0: 6f:cc:bb:c3:1d:3d:dd:07:e2:98:69:e5:b3:a8:5d: 63:59:47:92:28:a7:37:6b:a3:2c:59:65:ac:05:7f: 23:bb:3a:f0:fd:1a:a8:59:0d:72:28:f4:f8:7a:d1: 52:ec:c0:95:05:c6:36:a7:9b:eb:56:91:9e:66:b3: 98:55:b6:01:77:0a:94:96:2e:7f:05:a8:02:a4:98: fd:a0:04:89:a1:5b:21:e8:6e:51:4e:a7:a8:99:a7: f2:31:cb:1f:a6:61:21:d0:fb:db:93:4f:1c:f8:90: 26:68:6e:20:f9:d4:2e:e8:31:4a:46:55:6c:46:de: df:8b:5e:89:41:a2:a4:2e:48:af:87:39:f4:8f:52: b4:e7:29:ba:54:d0:0a:25:55:e7:3d:bb:64:2e:8c: 25:9e:c7:d8:ca:8e:5c:4d:26:ed:fc:d5:58:a8:a9: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:51:2B:D5:A0:49:C7:A6:D5:AA:63:BD:39:D3:24:91:00:1C:A2:4B X509v3 Authority Key Identifier: keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/K1Er1aBJx6bVqmO9OdMkkQAcoks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.152.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:79:a9:ee:31:d2:08:ef:d7:b9:82:2d:9d:d5:08:8e:b7:3f: 3e:23:86:8b:2e:c8:7c:8b:a3:41:35:8d:d8:50:93:8d:c6:67: 6e:cb:e8:19:dc:de:5b:2f:75:74:80:74:c1:8f:79:8f:41:4d: 95:66:9e:e9:5a:c3:20:4e:f4:e1:c7:cb:17:7a:61:51:db:f8: 01:4d:49:a5:7b:e8:38:62:3f:7a:4b:74:6a:64:e8:33:07:37: 8b:93:ad:a1:0b:de:e2:3f:17:59:18:97:4a:e4:42:0c:35:75: 70:d8:04:82:54:17:79:0d:2d:19:96:5b:a6:3e:99:41:0c:51: 5a:fe:22:ec:5f:48:32:82:48:93:eb:a1:ba:79:68:10:85:52: 81:fa:f7:51:b9:ff:72:ad:e7:02:c1:3f:b1:ba:2b:d4:1c:8e: b9:3f:02:c6:ab:49:c0:32:e5:b0:19:f8:55:0e:9b:37:f0:48: 88:ca:ef:cc:9b:93:80:18:18:17:b1:98:71:b5:f0:52:95:02: 44:bd:21:4f:02:1b:bc:96:30:b4:2d:d8:f8:6e:92:f6:2e:49: a9:76:c9:61:c9:2e:29:40:be:78:be:8b:1c:0b:2a:8d:4d:04: 56:63:ce:fd:d8:8b:a6:b4:23:93:5a:c2:c5:0d:51:40:fa:80: 52:cd:5b:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmNPuqgVkBpnYHK4UY6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZTJmNGFiYTBiYzliM2UzYWIxODU2NDk3YTQwMDcxOTcx YjcwNGEwHhcNMjYwMTAxMTIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjUxMmJkNWEwNDljN2E2ZDVhYTYzYmQzOWQzMjQ5MTAwMWNhMjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTHB0lvPYILtU+8txrpiktYcgWri YYahSzzfGBw/6CD7sO+/sUnYoPfF9lleW9XrMGb8dALjSJ3IQ0NQJ0JRSDcMaWrU 3rLsytyDD1X0A+SfU8WwaCIsVuBvzLvDHT3dB+KYaeWzqF1jWUeSKKc3a6MsWWWs BX8juzrw/RqoWQ1yKPT4etFS7MCVBcY2p5vrVpGeZrOYVbYBdwqUli5/BagCpJj9 oASJoVsh6G5RTqeomafyMcsfpmEh0Pvbk08c+JAmaG4g+dQu6DFKRlVsRt7fi16J QaKkLkivhzn0j1K05ym6VNAKJVXnPbtkLowlnsfYyo5cTSbt/NVYqKn+VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCtRK9WgScem1apjvTnTJJEAHKJLMB8GA1UdIwQY MBaAFJji9KugvJs+OrGFZJekAHGXG3BKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU9MMHE2QzhtejQ2c1lWa2w2UUFjWmNiY0VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS85MmQ1NjQtNWQwOS00MjhlLWFmODAt ODg4MjE5OWJjY2I0LzEvSzFFcjFhQkp4NmJWcW1POU9kTWtrUUFjb2tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS85MmQ1NjQtNWQwOS00MjhlLWFmODAtODg4MjE5OWJjY2I0 LzEvbU9MMHE2QzhtejQ2c1lWa2w2UUFjWmNiY0VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuduYMA0G CSqGSIb3DQEBCwUAA4IBAQCaeanuMdII79e5gi2d1QiOtz8+I4aLLsh8i6NBNY3Y UJONxmduy+gZ3N5bL3V0gHTBj3mPQU2VZp7pWsMgTvThx8sXemFR2/gBTUmle+g4 Yj96S3RqZOgzBzeLk62hC97iPxdZGJdK5EIMNXVw2ASCVBd5DS0ZllumPplBDFFa /iLsX0gygkiT66G6eWgQhVKB+vdRuf9yrecCwT+xuivUHI65PwLGq0nAMuWwGfhV Dps38EiIyu/Mm5OAGBgXsZhxtfBSlQJEvSFPAhu8ljC0Ldj4bpL2LkmpdslhyS4p QL54voscCyqNTQRWY8792IumtCOTWsLFDVFA+oBSzVtk -----END CERTIFICATE-----Generated at Mon Jan 26 15:18:07 2026 by rpki-client