This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/KG2bwdMHpiZ-qNVrmFbejxgZnXw.roa File: KG2bwdMHpiZ-qNVrmFbejxgZnXw.roa (raw, json) Hash identifier: /SATlKhWfLl21S+M8PJymfOJAuNbA6mH3Elkc2JeqqY= Subject key identifier: 28:6D:9B:C1:D3:07:A6:26:7E:A8:D5:6B:98:56:DE:8F:18:19:9D:7C Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Certificate serial: 019B7F82771FD6963099E2BE073ABED83FDF Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/KG2bwdMHpiZ-qNVrmFbejxgZnXw.roa Signing time: Fri 02 Jan 2026 16:20:15 +0000 ROA not before: Fri 02 Jan 2026 16:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15731 IP address blocks: 185.73.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:77:1f:d6:96:30:99:e2:be:07:3a:be:d8:3f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Validity Not Before: Jan 2 16:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=286d9bc1d307a6267ea8d56b9856de8f18199d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:53:30:f0:d7:32:62:36:5b:92:30:89:52:e3: 12:1a:4f:ce:f9:21:58:19:71:df:54:7c:b8:a9:5f: f2:95:ac:8c:00:b4:e5:77:36:12:63:96:91:71:03: d1:09:fb:16:cb:97:75:7a:ef:cd:f7:90:b0:7d:c1: f0:28:1c:b9:48:e7:c6:0b:46:75:57:b9:65:08:47: b4:04:d4:c1:a6:56:47:c2:aa:ba:73:cd:eb:45:19: 6a:65:33:b6:18:92:47:80:f5:49:ce:37:b9:e4:68: 27:95:ae:6a:de:ac:aa:00:ad:89:3c:de:2b:96:be: 0b:89:3a:07:2b:08:92:55:28:88:66:5f:9c:5b:8c: ca:d7:44:3a:6e:8b:51:02:b3:1c:70:fc:9e:67:1f: 3b:c5:63:d0:7e:1d:6a:5c:af:52:b5:57:e1:79:23: f9:9d:f8:4c:db:17:d6:7f:c8:36:9e:8e:1e:5a:80: e4:3d:66:d1:07:b1:d3:b9:3e:3a:c3:37:9b:c0:76: 26:d3:7f:4d:97:9e:41:8d:97:f7:71:e3:73:55:d0: 2a:6b:04:23:ad:fb:a7:6f:b1:07:cc:ac:2d:7e:98: 45:2d:df:78:b8:e5:3e:b7:20:75:62:ea:7e:9a:a7: 21:9b:d7:16:08:cb:6b:cf:20:76:4a:f3:c4:e0:cf: 19:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6D:9B:C1:D3:07:A6:26:7E:A8:D5:6B:98:56:DE:8F:18:19:9D:7C X509v3 Authority Key Identifier: keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/KG2bwdMHpiZ-qNVrmFbejxgZnXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.126.0/24 Signature Algorithm: sha256WithRSAEncryption 34:60:f7:49:0f:3c:d4:9c:a9:5c:53:cd:f5:80:3e:00:31:b3: 28:bb:59:4f:6a:67:03:8e:6e:2a:f3:db:5a:0b:58:fd:3c:0b: c2:47:9d:78:db:03:ec:52:65:59:72:51:76:b4:15:5e:97:8e: 57:86:10:69:32:0f:56:23:42:a5:d3:e3:5e:22:2d:a1:07:80: 08:8c:49:82:91:ca:3a:7c:c7:ab:f0:45:ef:82:72:d6:4e:b6: 14:3a:ba:9f:26:66:fb:1f:4c:e8:40:42:ff:f9:5a:40:9c:e7: e8:27:86:bc:6f:3d:84:5e:9a:10:df:85:ad:2f:f3:e4:4a:e9: 0f:22:e8:86:65:31:d5:9e:44:1e:f6:1c:ed:8c:cc:27:ae:71: 88:b0:ac:7b:38:fe:91:c7:26:1f:e3:91:64:d5:26:4f:0f:9a: 06:1b:85:e4:d1:13:88:52:f5:1b:51:ff:de:0c:9f:c3:08:52: ac:dd:fc:8c:39:c4:db:f2:5a:8c:a1:eb:e6:b2:cd:9b:40:3d: a3:4f:cb:26:76:ce:24:f9:b4:1f:76:e3:bc:30:4d:1f:3e:49: 8a:75:d9:c0:9d:ed:da:27:14:87:13:72:e3:86:22:69:64:d7: 1a:86:cd:ab:44:82:37:c4:87:00:cd:36:1e:1f:a3:f6:04:ea: 0c:a4:57:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gncf1pYwmeK+Bzq+2D/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlM2YzMWM5ZWFjZTZmMGE1ZWNjZGI4ZGYyYjAxYzczNTE1 Njg2ODYwHhcNMjYwMTAyMTYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODZkOWJjMWQzMDdhNjI2N2VhOGQ1NmI5ODU2ZGU4ZjE4MTk5ZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVMw8NcyYjZbkjCJUuMSGk/O+SFY GXHfVHy4qV/ylayMALTldzYSY5aRcQPRCfsWy5d1eu/N95CwfcHwKBy5SOfGC0Z1 V7llCEe0BNTBplZHwqq6c83rRRlqZTO2GJJHgPVJzje55Ggnla5q3qyqAK2JPN4r lr4LiToHKwiSVSiIZl+cW4zK10Q6botRArMccPyeZx87xWPQfh1qXK9StVfheSP5 nfhM2xfWf8g2no4eWoDkPWbRB7HTuT46wzebwHYm039Nl55BjZf3ceNzVdAqawQj rfunb7EHzKwtfphFLd94uOU+tyB1Yup+mqchm9cWCMtrzyB2SvPE4M8Z1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFChtm8HTB6YmfqjVa5hW3o8YGZ18MB8GA1UdIwQY MBaAFA4/Mcnqzm8KXszbjfKwHHNRVoaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYt ZGQ1ZGRkMDVkYjBiLzEvS0cyYndkTUhwaVotcU5Wcm1GYmVqeGdablh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYtZGQ1ZGRkMDVkYjBi LzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUl+MA0G CSqGSIb3DQEBCwUAA4IBAQA0YPdJDzzUnKlcU831gD4AMbMou1lPamcDjm4q89ta C1j9PAvCR5142wPsUmVZclF2tBVel45XhhBpMg9WI0Kl0+NeIi2hB4AIjEmCkco6 fMer8EXvgnLWTrYUOrqfJmb7H0zoQEL/+VpAnOfoJ4a8bz2EXpoQ34WtL/PkSukP IuiGZTHVnkQe9hztjMwnrnGIsKx7OP6RxyYf45Fk1SZPD5oGG4Xk0ROIUvUbUf/e DJ/DCFKs3fyMOcTb8lqMoevmss2bQD2jT8smds4k+bQfduO8ME0fPkmKddnAne3a JxSHE3LjhiJpZNcahs2rRII3xIcAzTYeH6P2BOoMpFfI -----END CERTIFICATE-----Generated at Mon Jan 12 13:29:01 2026 by rpki-client