This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/kykSkOOcQi8w6pX94b-OlDgXzIQ.roa File: kykSkOOcQi8w6pX94b-OlDgXzIQ.roa (raw, json) Hash identifier: 7DW10zeILAQHRoyEHA38RaD/Z6cmAPbbDRRj/nHuYys= Subject key identifier: 93:29:12:90:E3:9C:42:2F:30:EA:95:FD:E1:BF:8E:94:38:17:CC:84 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019BE14F9F9D5D510B3DAE7EED72F0AAD450 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/kykSkOOcQi8w6pX94b-OlDgXzIQ.roa Signing time: Wed 21 Jan 2026 16:07:30 +0000 ROA not before: Wed 21 Jan 2026 16:07:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 212.66.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:4f:9f:9d:5d:51:0b:3d:ae:7e:ed:72:f0:aa:d4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Jan 21 16:07:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93291290e39c422f30ea95fde1bf8e943817cc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:fb:2d:9d:a3:13:48:a0:58:4c:b9:34:d4: 28:7f:cb:04:5f:38:bc:5b:d3:48:64:03:99:58:6a: 6e:88:c7:f5:ea:90:42:b7:74:c3:bb:d9:78:fd:58: 49:1e:c3:e8:23:b4:49:3d:6b:8e:d6:69:dc:29:b2: 9b:14:99:66:9e:08:2a:82:cc:66:ba:29:76:7e:e5: cc:d1:11:72:33:a4:93:f7:a8:40:e7:0f:89:6b:33: 69:09:1b:12:f4:cd:55:e6:23:ab:c4:55:68:b0:2e: e1:d9:3e:fc:28:2f:b8:02:1c:5f:2d:f3:42:32:46: cd:65:ec:f5:6c:5d:fe:63:23:7e:6a:07:7e:0c:35: cd:8c:b4:71:4b:64:14:65:67:10:27:94:6d:f3:73: 4f:75:61:03:73:bc:a4:94:47:8c:46:0e:b4:54:58: a7:69:1a:e6:7d:f1:ce:de:56:ac:ec:89:84:48:09: 5c:27:25:54:b8:a3:77:dc:fa:bb:bc:69:31:f5:77: 06:0b:4f:e7:7e:b5:c8:b1:9c:01:5c:18:27:14:ea: 31:64:70:6d:73:9b:ff:29:a6:20:a9:60:1c:dc:60: 09:45:41:c9:7e:a2:4d:87:8e:a7:16:66:bb:30:86: 85:5f:4c:4a:ac:93:0c:21:b7:e1:ad:5e:b3:1c:2d: 74:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:29:12:90:E3:9C:42:2F:30:EA:95:FD:E1:BF:8E:94:38:17:CC:84 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/kykSkOOcQi8w6pX94b-OlDgXzIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.66.55.0/24 Signature Algorithm: sha256WithRSAEncryption d2:b3:91:cc:6c:9d:7a:00:99:c9:20:d0:d5:a5:fa:36:25:35: 79:1c:42:c0:88:a8:8e:db:3d:6b:b2:b4:8d:c7:99:ce:8e:39: bb:f9:e7:58:c9:dd:be:27:7e:e4:97:5b:6d:7e:88:5c:7e:0e: ac:6d:aa:14:4f:e4:2e:19:5c:3e:00:2b:fd:e1:aa:fc:bd:d5: e8:e9:51:20:68:d7:0e:91:44:cb:38:d0:8d:9e:06:bd:d6:8b: 7d:d1:e5:bd:e4:f4:34:3b:86:a3:75:73:82:e1:b6:e8:15:07: ef:a2:e2:90:94:ae:03:3c:49:98:33:35:e3:1f:37:83:66:c4: 69:d7:57:3f:ab:7b:5f:0a:31:13:94:79:57:c6:59:7b:0d:00: 07:c8:b9:26:b9:6d:6c:7d:65:5c:81:9d:5c:71:c4:53:c2:a6: 5a:cc:3a:23:96:01:62:cd:62:07:e0:a9:4b:ab:d4:ee:91:72: d5:8f:0b:e3:ba:11:ac:f8:c2:82:e4:97:d4:79:15:81:b3:70: dd:0f:7c:7b:f5:d9:42:b8:c2:0a:9d:3a:5c:b4:a1:8e:1c:1a: 8a:c4:eb:61:76:be:30:3b:24:fc:bc:ad:2f:80:d3:a5:2c:7a: 6e:cf:55:88:e6:e7:c4:a5:5f:58:e7:d1:9e:df:b1:7f:7a:67: 47:d1:d7:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvhT5+dXVELPa5+7XLwqtRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwMTIxMTYwNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzI5MTI5MGUzOWM0MjJmMzBlYTk1ZmRlMWJmOGU5NDM4MTdjYzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7n7LZ2jE0igWEy5NNQof8sEXzi8 W9NIZAOZWGpuiMf16pBCt3TDu9l4/VhJHsPoI7RJPWuO1mncKbKbFJlmnggqgsxm uil2fuXM0RFyM6ST96hA5w+JazNpCRsS9M1V5iOrxFVosC7h2T78KC+4AhxfLfNC MkbNZez1bF3+YyN+agd+DDXNjLRxS2QUZWcQJ5Rt83NPdWEDc7yklEeMRg60VFin aRrmffHO3las7ImESAlcJyVUuKN33Pq7vGkx9XcGC0/nfrXIsZwBXBgnFOoxZHBt c5v/KaYgqWAc3GAJRUHJfqJNh46nFma7MIaFX0xKrJMMIbfhrV6zHC10BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJMpEpDjnEIvMOqV/eG/jpQ4F8yEMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEva3lrU2tPT2NRaTh3NnBYOTRiLU9sRGdYeklRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EI3MA0G CSqGSIb3DQEBCwUAA4IBAQDSs5HMbJ16AJnJINDVpfo2JTV5HELAiKiO2z1rsrSN x5nOjjm7+edYyd2+J37kl1ttfohcfg6sbaoUT+QuGVw+ACv94ar8vdXo6VEgaNcO kUTLONCNnga91ot90eW95PQ0O4ajdXOC4bboFQfvouKQlK4DPEmYMzXjHzeDZsRp 11c/q3tfCjETlHlXxll7DQAHyLkmuW1sfWVcgZ1cccRTwqZazDojlgFizWIH4KlL q9TukXLVjwvjuhGs+MKC5JfUeRWBs3DdD3x79dlCuMIKnTpctKGOHBqKxOthdr4w OyT8vK0vgNOlLHpuz1WI5ufEpV9Y59Ge37F/emdH0dcl -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:54 2026 by rpki-client