This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/kyDGRd8zbEMUETtukg77Ui7V8qY.roa File: kyDGRd8zbEMUETtukg77Ui7V8qY.roa (raw, json) Hash identifier: devk2rJm/x4h0LaLa8i6gGbkJIFyEo6sNK4CrBpAYrs= Subject key identifier: 93:20:C6:45:DF:33:6C:43:14:11:3B:6E:92:0E:FB:52:2E:D5:F2:A6 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019B7C133DC57A4168AF19E847FE0048BE9E Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/kyDGRd8zbEMUETtukg77Ui7V8qY.roa Signing time: Fri 02 Jan 2026 00:19:54 +0000 ROA not before: Fri 02 Jan 2026 00:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197033 IP address blocks: 217.119.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3d:c5:7a:41:68:af:19:e8:47:fe:00:48:be:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Jan 2 00:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9320c645df336c4314113b6e920efb522ed5f2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b7:9a:37:e9:71:4d:25:44:d3:0d:94:c4:cc: 47:ff:67:38:58:b1:b1:2d:7f:9b:99:be:6a:23:44: 44:c7:44:4d:1f:05:85:b3:09:67:ed:2f:10:ab:13: 41:86:10:6e:55:5e:87:01:1f:2f:e9:cb:64:5a:6e: e2:ba:26:51:e3:c3:dd:b5:36:f3:2b:d8:7b:df:2f: 84:f7:82:f5:77:21:ef:53:70:e4:dc:38:0c:d4:f0: 25:50:5f:6a:e3:bf:97:cb:e8:4b:96:7e:60:7a:32: 03:a0:a1:08:46:55:c5:27:6c:b1:4f:e2:3c:c5:a9: d7:69:b0:ff:67:b1:55:20:12:6b:ba:6d:bf:2d:a1: 38:dd:2f:37:98:08:54:3d:ff:d8:05:10:fc:2f:a0: 66:34:4b:61:18:ca:71:22:be:23:5d:1c:36:9c:d4: cc:85:08:78:8a:fd:3e:8b:e6:15:db:0d:ab:d7:aa: 36:66:95:f8:a6:ca:c5:2d:da:1a:5f:e3:bc:e2:6b: 01:11:9f:0a:5f:4f:35:f5:bb:14:07:f0:ce:46:31: 98:fa:5d:2d:fd:b9:9e:56:5b:cd:c6:12:64:66:f4: 3b:4a:99:fd:e9:c0:9c:ad:34:fb:e2:b2:21:b1:61: b6:fc:f7:b5:b6:d8:62:b4:0d:75:7b:22:39:1f:1e: 30:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:20:C6:45:DF:33:6C:43:14:11:3B:6E:92:0E:FB:52:2E:D5:F2:A6 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/kyDGRd8zbEMUETtukg77Ui7V8qY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.119.185.0/24 Signature Algorithm: sha256WithRSAEncryption 85:01:da:a0:a4:a4:41:e6:1a:fb:72:f1:6b:93:57:4d:6a:58: 5b:54:03:ae:4c:e3:b6:56:e2:38:88:4d:84:5e:b4:8c:18:64: ee:c3:a6:47:ef:ce:5c:1e:ce:94:ca:1f:64:8f:5e:b1:84:03: 9b:86:f6:20:13:92:9a:63:5c:73:3c:b8:a0:13:93:89:ba:2c: b7:3f:9b:c3:7d:66:7a:7d:fb:07:e6:d8:f7:36:0d:39:6a:7e: 0e:63:79:0f:a1:df:99:ba:51:4b:4f:48:da:b0:95:68:85:8d: 7d:44:75:d9:3b:95:5d:fc:a8:2f:0b:62:4f:58:3e:3e:0b:25: 83:3d:2c:ac:db:0c:e7:1e:1b:2b:07:6a:35:ba:c8:3a:e3:d6: bb:b8:d9:2d:2c:11:a3:54:1c:44:ea:5f:a1:37:84:2f:65:51: 8c:c4:30:b7:9c:d7:ed:47:80:5f:dd:e0:11:09:f1:f8:23:f4: dc:b5:46:69:8b:e0:ed:0e:d2:e0:62:a1:db:5d:a0:34:59:b8: 97:82:a5:1b:c2:e3:d6:fc:b6:25:a5:31:10:03:f6:86:12:dc: 97:3d:59:10:e5:ef:fa:46:ae:c5:48:62:f6:56:6c:58:db:3e: eb:5c:38:cb:63:2e:74:ec:d9:8c:c7:68:e0:3e:2f:2d:6d:9f: 9a:88:22:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ez3FekForxnoR/4ASL6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwMTAyMDAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzIwYzY0NWRmMzM2YzQzMTQxMTNiNmU5MjBlZmI1MjJlZDVmMmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LeaN+lxTSVE0w2UxMxH/2c4WLGx LX+bmb5qI0REx0RNHwWFswln7S8QqxNBhhBuVV6HAR8v6ctkWm7iuiZR48PdtTbz K9h73y+E94L1dyHvU3Dk3DgM1PAlUF9q47+Xy+hLln5gejIDoKEIRlXFJ2yxT+I8 xanXabD/Z7FVIBJrum2/LaE43S83mAhUPf/YBRD8L6BmNEthGMpxIr4jXRw2nNTM hQh4iv0+i+YV2w2r16o2ZpX4psrFLdoaX+O84msBEZ8KX0819bsUB/DORjGY+l0t /bmeVlvNxhJkZvQ7Spn96cCcrTT74rIhsWG2/Pe1tthitA11eyI5Hx4wPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJMgxkXfM2xDFBE7bpIO+1Iu1fKmMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEva3lER1JkOHpiRU1VRVR0dWtnNzdVaTdWOHFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Xe5MA0G CSqGSIb3DQEBCwUAA4IBAQCFAdqgpKRB5hr7cvFrk1dNalhbVAOuTOO2VuI4iE2E XrSMGGTuw6ZH785cHs6Uyh9kj16xhAObhvYgE5KaY1xzPLigE5OJuiy3P5vDfWZ6 ffsH5tj3Ng05an4OY3kPod+ZulFLT0jasJVohY19RHXZO5Vd/KgvC2JPWD4+CyWD PSys2wznHhsrB2o1usg649a7uNktLBGjVBxE6l+hN4QvZVGMxDC3nNftR4Bf3eAR CfH4I/TctUZpi+DtDtLgYqHbXaA0WbiXgqUbwuPW/LYlpTEQA/aGEtyXPVkQ5e/6 Rq7FSGL2VmxY2z7rXDjLYy507NmMx2jgPi8tbZ+aiCJr -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:47 2026 by rpki-client