This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/KA5g_HNHUEKe_cvpril1qZT7WME.roa File: KA5g_HNHUEKe_cvpril1qZT7WME.roa (raw, json) Hash identifier: h+IZFf9Go1iBnD4l0ji1OQ+Otog1vzczX/D4h1/qh78= Subject key identifier: 28:0E:60:FC:73:47:50:42:9E:FD:CB:E9:AE:29:75:A9:94:FB:58:C1 Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019 Certificate serial: 019B7FF211820D02ECA550CF59B03DF9233E Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/KA5g_HNHUEKe_cvpril1qZT7WME.roa Signing time: Fri 02 Jan 2026 18:22:09 +0000 ROA not before: Fri 02 Jan 2026 18:22:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203409 IP address blocks: 185.203.52.0/24 maxlen: 24 185.203.53.0/24 maxlen: 24 185.203.54.0/24 maxlen: 24 185.203.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:11:82:0d:02:ec:a5:50:cf:59:b0:3d:f9:23:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019 Validity Not Before: Jan 2 18:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=280e60fc734750429efdcbe9ae2975a994fb58c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ab:a0:95:4b:48:5e:24:bb:79:bf:b6:70:cb: 75:86:56:0d:e8:08:90:6d:92:15:49:c4:e2:ba:5d: 59:15:7a:4c:5d:a1:9a:5b:f3:f8:6d:ac:1e:b5:72: 02:52:7b:52:0d:74:e0:cd:af:5f:ac:c1:d6:dc:9a: c9:9b:cd:a7:b1:4c:76:fa:bd:df:fe:85:34:1d:0d: 7b:9c:0b:3b:0c:bf:04:a0:4f:8e:61:52:86:69:48: 31:19:9b:b6:e4:28:46:6b:c7:2d:ad:e9:0c:78:61: fd:1b:85:0c:95:bf:50:19:4a:3b:2b:8c:e2:07:66: d5:99:c8:68:42:14:4d:ff:be:79:62:47:d1:47:b5: 69:43:1b:22:14:cc:2c:ba:78:ce:03:a3:69:61:c8: c2:5d:67:b5:f7:93:b1:63:00:04:0c:a3:28:9f:15: 2f:0a:3b:02:0c:c9:71:dd:b3:52:d2:55:ba:24:4f: 06:17:cd:ed:76:a6:7c:bb:3b:6a:62:a6:e5:99:99: 43:4c:d3:ea:42:e9:ab:15:3b:5c:98:84:0e:6d:05: 5a:22:58:6a:ee:2c:d7:69:6b:4d:f8:46:cc:b4:2a: c0:01:af:54:d2:5d:c6:88:6f:d7:b5:88:93:7a:f1: 08:dd:80:34:04:29:b7:ae:d6:d7:9b:af:09:d3:16: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0E:60:FC:73:47:50:42:9E:FD:CB:E9:AE:29:75:A9:94:FB:58:C1 X509v3 Authority Key Identifier: keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/KA5g_HNHUEKe_cvpril1qZT7WME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.52.0/22 Signature Algorithm: sha256WithRSAEncryption 62:a7:5c:60:ac:53:35:c9:83:af:35:fe:6b:2a:70:19:4c:d6: 46:1b:15:a4:15:22:7e:41:76:98:70:a4:f5:aa:d5:8a:7d:ae: 2f:c8:67:84:7b:eb:2e:97:f2:d1:e9:d5:0b:09:d5:48:f7:79: 97:62:2c:31:99:4e:01:42:ad:fa:46:77:10:23:4d:c3:1d:04: 2d:8e:25:71:9b:49:d3:61:63:2b:c5:21:6b:8b:c7:e4:7c:6d: a0:e1:af:8c:60:ee:eb:ea:55:6e:29:db:b0:fb:94:f1:91:65: ff:74:35:ed:b1:b6:bc:23:a0:5d:6b:c7:07:5d:cd:90:c1:e8: c6:5b:92:f2:a9:6e:f5:1b:21:c7:52:ee:1a:45:aa:e6:eb:15: 54:8e:45:a1:27:63:53:18:e1:95:3b:04:c1:e9:cd:c6:83:7c: 77:8b:8d:5b:56:c4:41:d6:ca:f3:49:58:68:2b:89:ed:39:53: 68:3c:69:87:63:54:91:b6:1e:3a:07:fd:77:3b:2c:b6:03:7b: 57:cc:b2:0e:c5:ef:be:b3:7f:ed:6c:7b:b6:37:36:5f:02:0c: 72:e4:40:eb:62:46:46:a4:b6:05:41:f3:87:25:1d:b3:bf:85: 03:e4:00:11:97:3e:79:f7:5c:49:3c:d4:61:b1:7a:91:f7:ad: 04:96:2f:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8hGCDQLspVDPWbA9+SM+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOTdhMzExN2NhMWMxZDYyOTJhZTUyOTExYjRmMGNhNGY4 ZTkwMTkwHhcNMjYwMTAyMTgyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODBlNjBmYzczNDc1MDQyOWVmZGNiZTlhZTI5NzVhOTk0ZmI1OGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9quglUtIXiS7eb+2cMt1hlYN6AiQ bZIVScTiul1ZFXpMXaGaW/P4bawetXICUntSDXTgza9frMHW3JrJm82nsUx2+r3f /oU0HQ17nAs7DL8EoE+OYVKGaUgxGZu25ChGa8ctrekMeGH9G4UMlb9QGUo7K4zi B2bVmchoQhRN/755YkfRR7VpQxsiFMwsunjOA6NpYcjCXWe195OxYwAEDKMonxUv CjsCDMlx3bNS0lW6JE8GF83tdqZ8uztqYqblmZlDTNPqQumrFTtcmIQObQVaIlhq 7izXaWtN+EbMtCrAAa9U0l3GiG/XtYiTevEI3YA0BCm3rtbXm68J0xZLjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCgOYPxzR1BCnv3L6a4pdamU+1jBMB8GA1UdIwQY MBaAFCCXoxF8ocHWKSrlKRG08MpPjpAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzkt NzU1ZTNiOTZkNWVkLzEvS0E1Z19ITkhVRUtlX2N2cHJpbDFxWlQ3V01FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzktNzU1ZTNiOTZkNWVk LzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucs0MA0G CSqGSIb3DQEBCwUAA4IBAQBip1xgrFM1yYOvNf5rKnAZTNZGGxWkFSJ+QXaYcKT1 qtWKfa4vyGeEe+sul/LR6dULCdVI93mXYiwxmU4BQq36RncQI03DHQQtjiVxm0nT YWMrxSFri8fkfG2g4a+MYO7r6lVuKduw+5TxkWX/dDXtsba8I6Bda8cHXc2QwejG W5LyqW71GyHHUu4aRarm6xVUjkWhJ2NTGOGVOwTB6c3Gg3x3i41bVsRB1srzSVho K4ntOVNoPGmHY1SRth46B/13Oyy2A3tXzLIOxe++s3/tbHu2NzZfAgxy5EDrYkZG pLYFQfOHJR2zv4UD5AARlz5591xJPNRhsXqR960Eli+S -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:55 2026 by rpki-client