This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/KYZm_9MuL_c9ERWs0Td3tSLq0RM.roa File: KYZm_9MuL_c9ERWs0Td3tSLq0RM.roa (raw, json) Hash identifier: fei8OCGwkyhg3dv3nNRDFJMFMNR03cAB020hgr7s0HQ= Subject key identifier: 29:86:66:FF:D3:2E:2F:F7:3D:11:15:AC:D1:37:77:B5:22:EA:D1:13 Certificate issuer: /CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f Certificate serial: 019B7C1265D64CD414A98DFC6F42599FA5DC Authority key identifier: 50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/KYZm_9MuL_c9ERWs0Td3tSLq0RM.roa Signing time: Fri 02 Jan 2026 00:18:59 +0000 ROA not before: Fri 02 Jan 2026 00:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49282 IP address blocks: 91.194.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:65:d6:4c:d4:14:a9:8d:fc:6f:42:59:9f:a5:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f Validity Not Before: Jan 2 00:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=298666ffd32e2ff73d1115acd13777b522ead113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:18:99:47:7c:00:96:e7:04:63:cc:05:9f:fd: fe:22:db:cc:51:5a:78:05:42:4d:a4:4f:c4:ca:7d: 19:0e:ec:ca:25:67:30:12:66:46:3f:f2:8e:e4:a0: bf:f1:ed:47:1e:f2:55:48:69:4c:df:4b:82:0b:c5: 86:95:0f:0e:ef:c3:f9:13:33:62:d5:bd:37:b8:a3: a8:ba:a6:eb:32:ab:ec:7c:ea:4c:2f:e7:16:e9:a0: 8a:96:6f:cb:8a:be:63:1b:ca:f4:f0:a6:a7:f8:69: 6a:14:92:6b:3a:d0:60:84:d2:0c:48:aa:76:c7:7a: 43:fc:06:e9:c4:65:39:5b:19:18:bf:0b:fb:0a:4c: 8b:29:3a:9a:f1:03:bf:4f:33:00:3a:06:d4:66:50: f6:82:04:03:9c:0e:58:70:98:72:73:01:fa:5b:8e: d4:38:9b:22:fa:79:cb:49:9b:fd:a5:3c:20:02:d0: 13:fb:04:b5:0f:10:c8:c1:21:d0:c2:0d:06:f8:92: c7:93:72:fa:44:0f:68:ff:be:4b:08:17:d4:f3:b9: 2b:0c:8b:6b:68:e0:9c:6b:2d:9e:16:9e:8f:47:22: b7:f8:2a:87:7e:b5:2a:7c:5d:28:bc:cc:c3:b8:21: 9f:b7:4c:a2:fe:be:34:86:90:de:fd:60:6c:1d:92: 11:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:86:66:FF:D3:2E:2F:F7:3D:11:15:AC:D1:37:77:B5:22:EA:D1:13 X509v3 Authority Key Identifier: keyid:50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/KYZm_9MuL_c9ERWs0Td3tSLq0RM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.27.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:28:61:63:10:8c:06:ec:ec:f8:03:96:27:20:4e:84:96:60: 6f:71:75:63:e3:0c:c5:2a:d0:76:ea:1b:2e:c4:cd:cd:8a:76: 4f:98:22:45:c6:0f:38:cd:cc:e3:92:b3:2b:25:e5:9e:52:94: e6:77:11:27:a1:04:c3:fe:02:03:c2:80:f7:c4:65:fa:09:60: a6:b2:2e:af:32:47:ff:ee:49:62:7a:fd:b9:94:99:fe:f8:68: ea:76:9f:d7:e6:10:c3:9f:f7:32:66:92:e9:23:0a:c3:fd:da: fd:62:4b:9a:c9:30:a3:1e:1e:cc:99:17:08:34:c5:80:24:f6: 95:1b:05:2b:34:28:3a:e4:34:e3:9a:d7:af:af:a2:59:92:e6: c6:cc:d4:a3:c4:07:d6:ea:52:da:dc:a1:da:8d:96:33:8d:69: 01:56:01:85:4b:5d:b5:e8:89:c6:73:01:21:bd:33:3a:38:1a: 74:99:17:de:6d:7b:59:2c:77:1d:48:e5:3b:1a:dd:5a:f9:6e: 0b:12:5a:72:fc:79:5f:9b:c3:1c:fc:08:5e:d0:06:3f:a0:78: 54:6b:aa:a2:9a:8b:90:e4:4c:ff:6b:3a:64:cf:1c:79:e1:68: 68:05:48:8c:06:87:36:a4:1c:6e:db:2e:22:11:5a:a7:0d:11: 5b:3a:f3:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EmXWTNQUqY38b0JZn6XcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNWNkNjFhOWY2ZGU5ZGFjYzBkM2M5MjE3MDZkZjdkNTBh ZmJkNmYwHhcNMjYwMTAyMDAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTg2NjZmZmQzMmUyZmY3M2QxMTE1YWNkMTM3NzdiNTIyZWFkMTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthiZR3wAlucEY8wFn/3+ItvMUVp4 BUJNpE/Eyn0ZDuzKJWcwEmZGP/KO5KC/8e1HHvJVSGlM30uCC8WGlQ8O78P5EzNi 1b03uKOouqbrMqvsfOpML+cW6aCKlm/Lir5jG8r08Kan+GlqFJJrOtBghNIMSKp2 x3pD/AbpxGU5WxkYvwv7CkyLKTqa8QO/TzMAOgbUZlD2ggQDnA5YcJhycwH6W47U OJsi+nnLSZv9pTwgAtAT+wS1DxDIwSHQwg0G+JLHk3L6RA9o/75LCBfU87krDItr aOCcay2eFp6PRyK3+CqHfrUqfF0ovMzDuCGft0yi/r40hpDe/WBsHZIRewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCmGZv/TLi/3PREVrNE3d7Ui6tETMB8GA1UdIwQY MBaAFFBc1hqfbenazA08khcG331Qr71vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZ6V0dwOXQ2ZHJNRFR5U0Z3YmZmVkN2dlc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hMzczNWEtZWNjYy00MWQ3LWI3MjMt ZTAxMjM3YjVmYzEwLzEvS1labV85TXVMX2M5RVJXczBUZDN0U0xxMFJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9hMzczNWEtZWNjYy00MWQ3LWI3MjMtZTAxMjM3YjVmYzEw LzEvVUZ6V0dwOXQ2ZHJNRFR5U0Z3YmZmVkN2dlc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8IbMA0G CSqGSIb3DQEBCwUAA4IBAQCbKGFjEIwG7Oz4A5YnIE6ElmBvcXVj4wzFKtB26hsu xM3NinZPmCJFxg84zczjkrMrJeWeUpTmdxEnoQTD/gIDwoD3xGX6CWCmsi6vMkf/ 7kliev25lJn++Gjqdp/X5hDDn/cyZpLpIwrD/dr9YkuayTCjHh7MmRcINMWAJPaV GwUrNCg65DTjmtevr6JZkubGzNSjxAfW6lLa3KHajZYzjWkBVgGFS1216InGcwEh vTM6OBp0mRfebXtZLHcdSOU7Gt1a+W4LElpy/Hlfm8Mc/Ahe0AY/oHhUa6qimouQ 5Ez/azpkzxx54WhoBUiMBoc2pBxu2y4iEVqnDRFbOvOI -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:14 2026 by rpki-client