This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/KggeSoYJuTH0OsCrW287o_IBVIU.roa File: KggeSoYJuTH0OsCrW287o_IBVIU.roa (raw, json) Hash identifier: 3X9Kd87JdDMTWZvK8kLFjDZVe2SDW7wiUWXk0sGtCM8= Subject key identifier: 2A:08:1E:4A:86:09:B9:31:F4:3A:C0:AB:5B:6F:3B:A3:F2:01:54:85 Certificate issuer: /CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0 Certificate serial: 019B78A35D465AE6A052F6EC36B08376FA1D Authority key identifier: 9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/KggeSoYJuTH0OsCrW287o_IBVIU.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211974 IP address blocks: 185.203.220.0/22 maxlen: 24 2a12:9740::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5d:46:5a:e6:a0:52:f6:ec:36:b0:83:76:fa:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0 Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a081e4a8609b931f43ac0ab5b6f3ba3f2015485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:c0:27:cc:3a:e8:57:47:2c:3d:35:ab:f2: 41:c4:92:f1:20:7b:8e:e0:63:c3:84:c1:8c:0f:71: 32:3d:c1:5f:d5:36:ae:56:28:dc:4a:0a:2e:d1:3f: 8f:09:da:81:14:3a:40:e1:58:7d:84:9e:6e:ca:59: 34:22:3e:91:58:54:da:f9:21:24:58:82:84:6d:59: c0:e5:c4:08:a0:86:7d:d3:6d:56:ba:8a:92:ac:30: e7:de:2e:8e:46:8f:85:b6:2f:ed:c2:b4:21:75:27: b7:58:73:41:33:f1:7b:b3:b5:c5:7c:7c:7e:64:af: d3:f7:89:c6:3a:3c:78:b8:c2:26:5c:08:b4:67:2a: dc:b7:cc:6f:c0:72:38:2e:e9:53:24:7d:38:53:56: 95:f2:4e:1d:32:01:32:0d:b1:3b:bc:0a:f2:63:d1: a0:92:e6:7d:45:8b:2b:69:b5:57:88:37:1f:1e:76: 6e:22:5a:9c:1f:90:f6:6b:83:4b:37:a0:ab:a7:41: 4d:2e:2c:bb:62:73:22:33:51:e0:07:91:6a:1c:e2: 2a:af:4c:8e:ed:a8:02:b6:57:b3:fa:7a:14:c7:a6: 69:18:41:09:73:c1:50:52:b8:d3:85:ef:48:7a:30: 98:c3:37:4e:5d:43:5c:84:b2:0b:ec:99:c6:0f:39: 10:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:08:1E:4A:86:09:B9:31:F4:3A:C0:AB:5B:6F:3B:A3:F2:01:54:85 X509v3 Authority Key Identifier: keyid:9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/KggeSoYJuTH0OsCrW287o_IBVIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.220.0/22 IPv6: 2a12:9740::/29 Signature Algorithm: sha256WithRSAEncryption a1:23:ab:b9:b8:15:6d:75:21:cb:c8:32:e5:58:9d:2e:2c:21: 86:d7:78:b6:75:7c:2d:b5:dd:a1:90:b3:87:c7:e8:55:fe:93: 98:ee:bf:f2:df:a7:b0:3e:bb:7c:d8:29:39:a5:a3:12:5c:b4: 37:be:4a:d2:af:1b:c7:47:4f:b8:5a:dd:1b:5a:dd:1f:29:18: 88:97:99:c0:30:94:b3:42:97:bb:9d:ba:8b:33:51:8f:58:0e: 06:e0:c2:56:dc:0c:a6:26:c2:90:7c:a2:a6:a5:51:09:29:62: 50:41:ba:99:6a:db:91:c8:11:57:d8:d8:0b:5f:b7:d6:e4:d7: 96:20:b1:d8:be:1e:2f:a9:90:70:1f:e2:75:c9:80:bc:98:85: 75:9a:99:24:49:7c:f8:30:6e:7c:2c:43:d4:98:15:1a:59:39: 08:39:af:d3:6b:a5:2d:4e:f3:52:a8:1c:93:5b:db:c2:eb:c2: b4:73:ae:26:37:73:bd:51:aa:f4:4e:74:21:bf:5f:80:06:00: 76:a1:52:81:2c:c8:6c:19:13:5b:dc:ff:09:f4:b7:35:07:a0: ee:4b:30:72:eb:84:72:d9:1c:cb:02:df:56:f4:78:21:5e:71: a6:77:03:b8:e0:4d:39:49:79:5c:1f:a0:1f:2c:1b:97:f9:46: d0:21:f4:8b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4o11GWuagUvbsNrCDdvodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMWJhMTY1M2ZjYTdjODAxNzIzY2E0NmZmNDQyZTZiYWMx ZTkxYTAwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTA4MWU0YTg2MDliOTMxZjQzYWMwYWI1YjZmM2JhM2YyMDE1NDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwPAJ8w66FdHLD01q/JBxJLxIHuO 4GPDhMGMD3EyPcFf1TauVijcSgou0T+PCdqBFDpA4Vh9hJ5uylk0Ij6RWFTa+SEk WIKEbVnA5cQIoIZ9021WuoqSrDDn3i6ORo+Fti/twrQhdSe3WHNBM/F7s7XFfHx+ ZK/T94nGOjx4uMImXAi0Zyrct8xvwHI4LulTJH04U1aV8k4dMgEyDbE7vAryY9Gg kuZ9RYsrabVXiDcfHnZuIlqcH5D2a4NLN6Crp0FNLiy7YnMiM1HgB5FqHOIqr0yO 7agCtlez+noUx6ZpGEEJc8FQUrjThe9IejCYwzdOXUNchLIL7JnGDzkQRwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCoIHkqGCbkx9DrAq1tvO6PyAVSFMB8GA1UdIwQY MBaAFJ4boWU/ynyAFyPKRv9ELmusHpGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmh1aFpUX0tmSUFYSThwR18wUXVhNndla2FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zODk0MjQtYWFiYS00NDkxLTlmYmEt ZmNiNDNkNGY2NzE0LzEvS2dnZVNvWUp1VEgwT3NDclcyODdvX0lCVklVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8zODk0MjQtYWFiYS00NDkxLTlmYmEtZmNiNDNkNGY2NzE0 LzEvbmh1aFpUX0tmSUFYSThwR18wUXVhNndla2FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucvcMA0E AgACMAcDBQMqEpdAMA0GCSqGSIb3DQEBCwUAA4IBAQChI6u5uBVtdSHLyDLlWJ0u LCGG13i2dXwttd2hkLOHx+hV/pOY7r/y36ewPrt82Ck5paMSXLQ3vkrSrxvHR0+4 Wt0bWt0fKRiIl5nAMJSzQpe7nbqLM1GPWA4G4MJW3AymJsKQfKKmpVEJKWJQQbqZ atuRyBFX2NgLX7fW5NeWILHYvh4vqZBwH+J1yYC8mIV1mpkkSXz4MG58LEPUmBUa WTkIOa/Ta6UtTvNSqByTW9vC68K0c64mN3O9Uar0TnQhv1+ABgB2oVKBLMhsGRNb 3P8J9Lc1B6DuSzBy64Ry2RzLAt9W9HghXnGmdwO44E05SXlcH6AfLBuX+UbQIfSL -----END CERTIFICATE-----Generated at Sun Jan 11 14:49:56 2026 by rpki-client