This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/KGVSyU1wIj7N4iY-yGjJQ4nk1wo.roa File: KGVSyU1wIj7N4iY-yGjJQ4nk1wo.roa (raw, json) Hash identifier: JwvzeqlxWkg3az+woqZ5+VwCzs4K2YIxQ2yc7nZEKzM= Subject key identifier: 28:65:52:C9:4D:70:22:3E:CD:E2:26:3E:C8:68:C9:43:89:E4:D7:0A Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2 Certificate serial: 019B77C6C25184A21E7642012046BD076EF5 Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/KGVSyU1wIj7N4iY-yGjJQ4nk1wo.roa Signing time: Thu 01 Jan 2026 04:17:53 +0000 ROA not before: Thu 01 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61029 IP address blocks: 185.77.196.0/24 maxlen: 24 2a03:1980:d113::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c2:51:84:a2:1e:76:42:01:20:46:bd:07:6e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2 Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=286552c94d70223ecde2263ec868c94389e4d70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:e8:4e:23:70:63:01:ce:3c:4a:29:d7:76: b5:61:bd:94:0d:de:8c:36:22:39:ce:5e:73:95:03: e1:24:7b:88:c0:a6:75:8b:8d:86:cd:cb:47:c2:c1: 61:8b:b7:88:86:9d:b5:ee:1f:57:87:51:02:1f:7f: 49:5d:97:54:f9:63:33:03:4e:09:32:6c:c0:40:19: 20:8c:c4:52:b7:17:a7:d6:a8:e5:77:ed:2d:0c:1d: c3:5c:31:a0:fc:e4:b8:8d:1a:37:ad:c7:f9:c6:e8: 3e:6b:c6:24:7e:5f:3a:07:24:66:d8:f6:47:95:43: 75:9f:2a:f2:fb:82:49:ee:d2:84:55:43:5e:70:a0: 37:9a:a2:cd:26:6c:2d:93:80:bc:7f:b5:4e:ae:92: b4:73:3e:a1:a8:30:26:c1:d5:0c:c3:0f:6a:3d:01: ac:9e:d5:fc:ed:73:37:b2:14:e8:6d:10:96:bc:05: 8e:25:00:6b:ca:87:0d:92:62:2f:80:73:67:0c:93: d9:c6:7d:8b:ff:cd:e0:d3:4d:9a:8f:ab:2a:83:b9: b0:e2:bf:06:9f:2c:ba:3f:88:a3:d6:99:2b:48:a0: 15:7d:17:1b:d6:e9:7a:ba:7a:da:f2:ec:ab:f3:21: c6:63:02:4a:b0:57:8e:2f:46:f7:1c:8d:ac:8b:ff: ab:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:65:52:C9:4D:70:22:3E:CD:E2:26:3E:C8:68:C9:43:89:E4:D7:0A X509v3 Authority Key Identifier: keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/KGVSyU1wIj7N4iY-yGjJQ4nk1wo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.196.0/24 IPv6: 2a03:1980:d113::/48 Signature Algorithm: sha256WithRSAEncryption 86:a9:a6:d1:b1:5a:6e:70:68:11:8f:0f:14:86:5a:f5:f5:d1: d5:24:93:65:f7:55:7e:a4:c3:27:eb:84:1b:90:53:00:84:f5: 15:a8:69:fb:41:aa:1a:05:85:b3:6e:2d:68:ea:4e:9a:20:05: aa:66:40:dd:86:1a:b9:9a:31:ab:ce:64:c0:88:34:8b:99:fd: 33:31:00:bb:52:84:98:cd:14:00:8a:a1:b2:0c:30:5a:d7:41: ba:c4:27:83:c9:0f:51:cc:ee:ae:2f:99:9a:8a:cf:63:2e:d9: a9:7f:43:36:b9:d3:f0:be:67:3d:5f:9d:36:a1:38:61:11:a9: 8a:37:1d:97:09:b6:45:21:8d:63:f7:62:7e:9e:1c:2c:08:7c: 19:e6:90:6e:04:b8:b3:23:fd:49:8a:da:ff:23:4e:24:b4:f9: 01:e9:40:47:73:54:38:47:4b:dc:f0:d5:c0:36:3b:04:18:6f: 16:fa:dd:59:07:50:81:ba:33:cf:68:4d:9c:89:ce:16:34:8d: d1:54:fa:c6:f3:98:0b:4f:b5:cf:6a:ef:64:23:a8:6c:7a:4d: 37:0a:47:b5:8a:65:dc:60:a8:a6:31:c4:9e:7f:6e:c9:f1:d2: 1d:75:0e:0f:ea:25:eb:32:fa:32:05:87:6b:c1:73:7a:10:f7: 06:06:87:c8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xsJRhKIedkIBIEa9B271MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZmY1YmNmNzM5YjA3MzJmYjFiY2RiNzE3ZWM3MTdmNmYx Y2IwZTIwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODY1NTJjOTRkNzAyMjNlY2RlMjI2M2VjODY4Yzk0Mzg5ZTRkNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpnoTiNwYwHOPEop13a1Yb2UDd6M NiI5zl5zlQPhJHuIwKZ1i42GzctHwsFhi7eIhp217h9Xh1ECH39JXZdU+WMzA04J MmzAQBkgjMRStxen1qjld+0tDB3DXDGg/OS4jRo3rcf5xug+a8Ykfl86ByRm2PZH lUN1nyry+4JJ7tKEVUNecKA3mqLNJmwtk4C8f7VOrpK0cz6hqDAmwdUMww9qPQGs ntX87XM3shTobRCWvAWOJQBryocNkmIvgHNnDJPZxn2L/83g002aj6sqg7mw4r8G nyy6P4ij1pkrSKAVfRcb1ul6unra8uyr8yHGYwJKsFeOL0b3HI2si/+rVwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFChlUslNcCI+zeImPshoyUOJ5NcKMB8GA1UdIwQY MBaAFCL/W89zmwcy+xvNtxfscX9vHLDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2Ut NzYwM2U1ZGQ1NzA3LzEvS0dWU3lVMXdJajdONGlZLXlHakpRNG5rMXdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2UtNzYwM2U1ZGQ1NzA3 LzEvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuU3EMA8E AgACMAkDBwAqAxmA0RMwDQYJKoZIhvcNAQELBQADggEBAIapptGxWm5waBGPDxSG WvX10dUkk2X3VX6kwyfrhBuQUwCE9RWoaftBqhoFhbNuLWjqTpogBapmQN2GGrma MavOZMCINIuZ/TMxALtShJjNFACKobIMMFrXQbrEJ4PJD1HM7q4vmZqKz2Mu2al/ Qza50/C+Zz1fnTahOGERqYo3HZcJtkUhjWP3Yn6eHCwIfBnmkG4EuLMj/UmK2v8j TiS0+QHpQEdzVDhHS9zw1cA2OwQYbxb63VkHUIG6M89oTZyJzhY0jdFU+sbzmAtP tc9q72QjqGx6TTcKR7WKZdxgqKYxxJ5/bsnx0h11Dg/qJesy+jIFh2vBc3oQ9wYG h8g= -----END CERTIFICATE-----Generated at Mon Jan 26 04:43:12 2026 by rpki-client