This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/Kykq1xGxMlT5a0eYnS1HXmTKDxA.roa File: Kykq1xGxMlT5a0eYnS1HXmTKDxA.roa (raw, json) Hash identifier: +Eb/M7C3hM4Sh969DjZVwwfd7ldL2GxYpQACuuK/nSo= Subject key identifier: 2B:29:2A:D7:11:B1:32:54:F9:6B:47:98:9D:2D:47:5E:64:CA:0F:10 Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32 Certificate serial: 019B7C7F924A0989DC05EA3DD491E19F8C68 Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/Kykq1xGxMlT5a0eYnS1HXmTKDxA.roa Signing time: Fri 02 Jan 2026 02:18:13 +0000 ROA not before: Fri 02 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 45.14.196.0/22 maxlen: 22 95.178.37.0/24 maxlen: 24 212.118.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:92:4a:09:89:dc:05:ea:3d:d4:91:e1:9f:8c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32 Validity Not Before: Jan 2 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b292ad711b13254f96b47989d2d475e64ca0f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:24:59:5b:7a:a9:c4:41:1e:40:fa:6d:f2:a2: d3:a5:28:1d:45:8c:f7:29:ca:ee:34:ce:80:81:15: 87:81:a9:ba:a5:75:f6:92:39:26:3a:94:12:43:96: 38:a7:fa:67:0c:f5:36:5f:2c:c9:39:49:c8:8a:cd: 12:d3:bb:bc:50:9b:25:fb:e5:6f:46:5f:ef:fc:5a: 5d:aa:5b:5e:f9:fc:85:d6:e7:30:79:45:cc:ca:56: 3c:77:ad:55:73:68:19:a6:2f:54:d9:8c:02:e9:c9: da:5d:e9:eb:ec:59:76:b5:d8:1b:97:20:c2:39:c9: 12:cd:3e:84:1a:92:78:e8:b3:df:a0:d0:9e:b6:aa: df:bc:4f:66:6d:04:1d:01:cb:fd:be:33:ac:57:e7: 82:50:ee:31:2f:a9:e2:25:9e:29:b7:bf:68:ae:48: 4c:a4:2d:3d:fc:93:84:8c:69:cd:a4:9b:49:4a:44: 5b:a1:14:f8:62:99:e5:38:f1:74:de:b3:46:0d:17: 7c:47:6c:8e:53:05:41:c9:91:bd:b1:83:44:e5:de: 8a:13:35:00:26:e9:f1:4e:df:72:5f:09:e2:0e:bd: 13:7f:4a:3a:11:9b:13:c3:05:4b:02:42:b4:64:3e: df:94:e1:f5:05:ee:2c:a8:7e:59:95:e8:3a:2e:f0: ef:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:29:2A:D7:11:B1:32:54:F9:6B:47:98:9D:2D:47:5E:64:CA:0F:10 X509v3 Authority Key Identifier: keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/Kykq1xGxMlT5a0eYnS1HXmTKDxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.196.0/22 95.178.37.0/24 212.118.58.0/23 Signature Algorithm: sha256WithRSAEncryption 97:58:11:f6:09:1c:ca:6a:24:0e:d7:08:7d:94:48:a7:54:92: 23:ca:1a:fb:c6:b6:0f:f8:c1:5e:16:45:87:5a:a1:68:2d:4e: 59:20:b7:2f:85:f9:03:70:47:65:0e:5a:e6:d4:dd:62:67:74: 9f:89:f3:2b:83:9c:4b:ba:ac:17:d5:77:f1:b1:0e:0e:be:5d: b8:46:67:25:3b:85:6d:98:6f:1d:a9:fa:f5:83:11:d3:5f:1b: 80:af:f5:19:6b:8a:41:2c:95:b4:74:8f:69:ad:02:12:cd:dc: a9:42:7c:1f:84:12:dd:82:45:46:19:53:06:59:6b:3a:5b:13: 75:93:38:3e:06:ae:ab:94:7b:52:08:ee:08:a4:df:a8:17:3c: 70:3e:4a:16:21:79:21:78:ea:7c:01:c4:ca:60:db:f2:e3:55: 10:74:42:11:e1:17:72:bf:7c:22:f9:d8:39:a8:cb:16:62:a5: ee:4c:ff:58:fd:6f:7d:c0:86:12:ec:0b:07:0e:30:6a:eb:f6: ff:9f:89:41:41:0a:4f:bf:84:ab:5f:4b:36:7e:62:59:02:1a: 5e:fc:0f:c5:f6:f1:22:58:50:96:57:a5:d4:98:12:bc:22:a9: e6:c0:d6:54:27:d7:66:24:f2:51:49:aa:13:6e:ea:d9:22:5d: 58:81:5e:33 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8f5JKCYncBeo91JHhn4xoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZWE0ZTg4NDY2ZGU0Yzg5NjA5NDAyOGYxY2YwZGI2NjUz NjBkMzIwHhcNMjYwMTAyMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjI5MmFkNzExYjEzMjU0Zjk2YjQ3OTg5ZDJkNDc1ZTY0Y2EwZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSRZW3qpxEEeQPpt8qLTpSgdRYz3 KcruNM6AgRWHgam6pXX2kjkmOpQSQ5Y4p/pnDPU2XyzJOUnIis0S07u8UJsl++Vv Rl/v/Fpdqlte+fyF1ucweUXMylY8d61Vc2gZpi9U2YwC6cnaXenr7Fl2tdgblyDC OckSzT6EGpJ46LPfoNCetqrfvE9mbQQdAcv9vjOsV+eCUO4xL6niJZ4pt79orkhM pC09/JOEjGnNpJtJSkRboRT4YpnlOPF03rNGDRd8R2yOUwVByZG9sYNE5d6KEzUA JunxTt9yXwniDr0Tf0o6EZsTwwVLAkK0ZD7flOH1Be4sqH5Zleg6LvDvtQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCspKtcRsTJU+WtHmJ0tR15kyg8QMB8GA1UdIwQY MBaAFAfqTohGbeTIlglAKPHPDbZlNg0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2Yt MzFiMzZmNTc5ZjA2LzEvS3lrcTF4R3hNbFQ1YTBlWW5TMUhYbVRLRHhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2YtMzFiMzZmNTc5ZjA2 LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLQ7EAwQA X7IlAwQB1HY6MA0GCSqGSIb3DQEBCwUAA4IBAQCXWBH2CRzKaiQO1wh9lEinVJIj yhr7xrYP+MFeFkWHWqFoLU5ZILcvhfkDcEdlDlrm1N1iZ3SfifMrg5xLuqwX1Xfx sQ4Ovl24RmclO4VtmG8dqfr1gxHTXxuAr/UZa4pBLJW0dI9prQISzdypQnwfhBLd gkVGGVMGWWs6WxN1kzg+Bq6rlHtSCO4IpN+oFzxwPkoWIXkheOp8AcTKYNvy41UQ dEIR4Rdyv3wi+dg5qMsWYqXuTP9Y/W99wIYS7AsHDjBq6/b/n4lBQQpPv4SrX0s2 fmJZAhpe/A/F9vEiWFCWV6XUmBK8IqnmwNZUJ9dmJPJRSaoTburZIl1YgV4z -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:24 2026 by rpki-client