This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/KYrFJEDEjhc9HhmYSiPT-yYtVPQ.roa File: KYrFJEDEjhc9HhmYSiPT-yYtVPQ.roa (raw, json) Hash identifier: /AaiErA0b5IK+9x0vkOcwB+KnCvGEkMNKJApI/jbN6I= Subject key identifier: 29:8A:C5:24:40:C4:8E:17:3D:1E:19:98:4A:23:D3:FB:26:2D:54:F4 Certificate issuer: /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290 Certificate serial: 019B7B36E782551A6018827FDFA02548433B Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/KYrFJEDEjhc9HhmYSiPT-yYtVPQ.roa Signing time: Thu 01 Jan 2026 20:19:14 +0000 ROA not before: Thu 01 Jan 2026 20:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57773 IP address blocks: 91.198.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e7:82:55:1a:60:18:82:7f:df:a0:25:48:43:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290 Validity Not Before: Jan 1 20:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=298ac52440c48e173d1e19984a23d3fb262d54f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ca:5a:bf:3d:3c:bc:74:b6:84:27:96:60:12: 4e:ab:97:3d:94:ed:a4:d5:c6:84:eb:c2:21:02:a9: 92:cd:3c:67:2c:56:fe:fb:1a:06:91:49:4b:9f:0b: 01:b4:9d:fa:41:42:82:34:58:58:2e:c0:79:49:45: 7b:d0:b9:79:6b:a1:c0:7c:f4:bb:05:bb:b1:52:a5: 5b:78:f4:ef:7c:25:ec:43:93:1e:44:67:19:5e:42: 43:34:a8:0c:21:e1:39:14:bb:88:05:df:6e:2c:85: 83:b4:e1:4e:3b:ed:ee:37:fa:29:3f:71:18:ec:eb: 15:99:57:e5:7a:38:35:aa:b4:0c:0b:4c:ac:3f:1a: f0:c1:46:c6:2e:cc:32:da:7f:9d:2d:8e:0e:ac:6b: 07:2a:1c:52:92:81:4c:28:44:44:23:54:39:77:98: a5:49:7f:25:99:e5:59:0e:c5:27:f4:2b:db:95:97: 42:11:9d:42:83:bb:2d:71:3a:7f:f3:dc:44:ed:e0: 67:bb:fa:51:fd:f2:d2:fb:37:cc:99:60:68:35:cd: ad:bd:82:4d:96:af:ab:d0:b3:37:56:55:2b:be:80: ee:f0:1f:98:f9:66:96:d0:f0:57:1b:b7:47:57:9e: 62:de:11:c2:d4:d8:c1:e0:1f:6a:66:eb:cb:02:03: 2d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8A:C5:24:40:C4:8E:17:3D:1E:19:98:4A:23:D3:FB:26:2D:54:F4 X509v3 Authority Key Identifier: keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/KYrFJEDEjhc9HhmYSiPT-yYtVPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.135.0/24 Signature Algorithm: sha256WithRSAEncryption 54:06:41:91:89:0e:f7:e7:d7:77:5e:11:82:89:d2:84:6a:29: 55:96:f1:0f:71:14:ec:e8:f6:01:65:5c:4b:42:21:92:63:56: bf:e6:b0:84:99:81:c1:b0:f2:ea:ec:ca:14:8c:fd:5f:c0:24: 92:fa:ec:45:08:72:bd:d1:0c:c0:2c:c4:28:dc:f2:84:93:59: d0:6e:b9:bd:47:0b:fe:e7:67:f6:a2:37:2e:2b:9e:75:65:39: be:56:4d:22:48:ee:a7:31:60:a3:f8:9e:a3:0f:df:4e:12:94: cd:27:e5:a9:d4:fe:6e:66:c4:7f:1b:6e:83:91:7f:9c:d9:5b: 14:0a:ee:da:d3:cb:c7:90:a9:59:18:4c:94:8e:3c:28:29:d8: 25:6a:e9:80:82:92:28:42:c8:15:fa:83:da:c6:25:4d:63:d4: 5f:0f:4c:70:74:18:55:1c:e5:c4:55:26:c4:ca:00:f9:cd:79: 6f:80:7f:ef:2e:b9:ea:58:23:f6:8f:9d:53:f2:49:81:02:99: 5f:a3:5f:6b:9d:07:d2:8a:9c:bb:a9:f0:39:a2:ca:fb:d2:5b: cf:52:0f:d7:ea:ee:cf:3c:dc:95:e6:c0:d4:8e:35:17:81:dc: 13:a4:f8:28:34:26:2e:b5:f8:41:f9:e2:d0:d3:d2:0d:7d:5b: bd:07:63:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NueCVRpgGIJ/36AlSEM7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWQ1NmVlNjAxZGFjM2RmYTYxZGZlNTJjYmY1YjAwYjdi N2EyOTAwHhcNMjYwMTAxMjAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOThhYzUyNDQwYzQ4ZTE3M2QxZTE5OTg0YTIzZDNmYjI2MmQ1NGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Mpavz08vHS2hCeWYBJOq5c9lO2k 1caE68IhAqmSzTxnLFb++xoGkUlLnwsBtJ36QUKCNFhYLsB5SUV70Ll5a6HAfPS7 BbuxUqVbePTvfCXsQ5MeRGcZXkJDNKgMIeE5FLuIBd9uLIWDtOFOO+3uN/opP3EY 7OsVmVflejg1qrQMC0ysPxrwwUbGLswy2n+dLY4OrGsHKhxSkoFMKEREI1Q5d5il SX8lmeVZDsUn9CvblZdCEZ1Cg7stcTp/89xE7eBnu/pR/fLS+zfMmWBoNc2tvYJN lq+r0LM3VlUrvoDu8B+Y+WaW0PBXG7dHV55i3hHC1NjB4B9qZuvLAgMtoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCmKxSRAxI4XPR4ZmEoj0/smLVT0MB8GA1UdIwQY MBaAFEStVu5gHaw9+mHf5Sy/WwC3t6KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jZmE1YjAtNzk4OC00ZmU5LTlkZDUt ZWVkMjA0ZWQ5NzgwLzEvS1lyRkpFREVqaGM5SGhtWVNpUFQteVl0VlBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9jZmE1YjAtNzk4OC00ZmU5LTlkZDUtZWVkMjA0ZWQ5Nzgw LzEvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8aHMA0G CSqGSIb3DQEBCwUAA4IBAQBUBkGRiQ7359d3XhGCidKEailVlvEPcRTs6PYBZVxL QiGSY1a/5rCEmYHBsPLq7MoUjP1fwCSS+uxFCHK90QzALMQo3PKEk1nQbrm9Rwv+ 52f2ojcuK551ZTm+Vk0iSO6nMWCj+J6jD99OEpTNJ+Wp1P5uZsR/G26DkX+c2VsU Cu7a08vHkKlZGEyUjjwoKdglaumAgpIoQsgV+oPaxiVNY9RfD0xwdBhVHOXEVSbE ygD5zXlvgH/vLrnqWCP2j51T8kmBAplfo19rnQfSipy7qfA5osr70lvPUg/X6u7P PNyV5sDUjjUXgdwTpPgoNCYutfhB+eLQ09INfVu9B2NW -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:34 2026 by rpki-client