This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa File: Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa (raw, json) Hash identifier: qaufeqdeipVE1r+9GyOAZSAG0hMF1qh7wENk1s7zB2A= Subject key identifier: 2A:4C:BF:44:28:95:65:D2:45:E6:A4:33:83:38:C3:20:55:97:1D:1A Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019B7C1287142BA797595D88347AB5CFC385 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa Signing time: Fri 02 Jan 2026 00:19:07 +0000 ROA not before: Fri 02 Jan 2026 00:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198587 IP address blocks: 87.251.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:87:14:2b:a7:97:59:5d:88:34:7a:b5:cf:c3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Jan 2 00:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a4cbf44289565d245e6a4338338c32055971d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:c6:f7:ba:0f:e2:83:1e:a7:6a:20:a6:5b: c7:f3:f7:ed:51:be:d1:3b:91:05:1f:eb:3a:b5:97: 18:5f:6f:d1:b4:65:80:d4:e9:20:f8:ad:b0:80:ac: f9:be:b1:fc:6e:f6:de:b9:54:6a:b3:1c:f3:07:45: 79:eb:2b:f4:b1:39:9f:12:c4:9d:c2:36:36:59:d2: 13:2c:35:42:d6:f0:06:13:a2:48:3d:1c:b6:43:1f: 1b:d7:c1:33:84:81:b4:99:7c:41:a9:77:68:9a:1d: 04:77:8f:30:d3:f6:5d:da:7c:32:66:c1:43:cc:59: aa:8c:74:ce:88:9b:e4:b0:35:83:d7:49:a5:61:33: 6b:43:40:3a:5d:15:25:01:09:bf:ae:3c:e5:7f:a0: 75:93:44:77:cc:fe:82:ff:08:85:57:f7:1c:78:c3: e0:2a:cb:d9:5c:51:0b:8e:de:60:5b:a6:7e:82:9a: d3:51:61:04:66:0f:3b:4e:cf:a6:1f:17:5f:3b:01: 03:cb:45:cc:14:78:43:e6:cc:fe:10:b2:43:d9:3e: 25:9a:c7:d3:36:72:f6:09:fb:09:02:b4:f1:13:d4: e3:5f:4e:8b:19:3a:9f:c9:82:21:22:83:51:81:03: b0:4d:0c:b4:53:d1:ba:79:29:15:c3:a7:ef:03:06: d1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4C:BF:44:28:95:65:D2:45:E6:A4:33:83:38:C3:20:55:97:1D:1A X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.251.74.0/24 Signature Algorithm: sha256WithRSAEncryption 27:2c:4d:f0:d5:29:89:48:9d:6f:c8:97:db:18:2f:ab:a3:0f: 6f:ee:e4:c2:55:6a:f8:54:78:72:cf:5c:9b:a5:86:d0:db:49: a9:45:3f:cb:f0:86:1d:ad:03:7c:f6:b7:76:82:d1:a0:0d:3b: 82:7c:4e:33:4a:44:d2:f1:40:48:51:55:98:b5:33:19:f4:a0: 9b:f5:9d:04:79:c7:26:02:39:08:f8:8c:09:1b:60:40:78:ac: 8d:28:f3:3d:b2:7c:a2:d2:7a:f6:92:f2:88:f5:e3:a0:68:24: fa:a8:f8:d8:b0:33:1c:5e:08:26:32:77:f9:37:59:fe:46:99: d4:b1:d2:34:84:01:97:c4:ad:9c:63:dd:ae:39:ce:6a:40:f0: 02:e2:7f:6d:29:9d:e8:43:ae:d1:28:b2:7a:88:9c:f5:9a:14: 9b:58:ca:86:ab:dc:7b:c1:55:43:e6:b5:0c:4c:3a:44:de:3e: 6b:53:56:dd:61:17:93:e8:cb:1a:24:f8:e6:a5:f6:bd:c7:a5: 80:de:bb:03:50:68:07:c6:c9:da:78:67:8e:11:b5:cf:dc:e7: 5f:7b:ec:ff:be:bf:86:f0:01:78:ca:24:fc:eb:7d:60:97:0b: a5:1e:83:98:d7:3d:16:5c:9b:22:3f:c1:d7:63:d0:c3:f1:8d: 6c:e5:6c:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EocUK6eXWV2INHq1z8OFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwMTAyMDAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTRjYmY0NDI4OTU2NWQyNDVlNmE0MzM4MzM4YzMyMDU1OTcxZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAPG97oP4oMep2ogplvH8/ftUb7R O5EFH+s6tZcYX2/RtGWA1Okg+K2wgKz5vrH8bvbeuVRqsxzzB0V56yv0sTmfEsSd wjY2WdITLDVC1vAGE6JIPRy2Qx8b18EzhIG0mXxBqXdomh0Ed48w0/Zd2nwyZsFD zFmqjHTOiJvksDWD10mlYTNrQ0A6XRUlAQm/rjzlf6B1k0R3zP6C/wiFV/cceMPg KsvZXFELjt5gW6Z+gprTUWEEZg87Ts+mHxdfOwEDy0XMFHhD5sz+ELJD2T4lmsfT NnL2CfsJArTxE9TjX06LGTqfyYIhIoNRgQOwTQy0U9G6eSkVw6fvAwbRRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCpMv0QolWXSReakM4M4wyBVlx0aMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvS2t5X1JDaVZaZEpGNXFRemd6akRJRldYSFJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/tKMA0G CSqGSIb3DQEBCwUAA4IBAQAnLE3w1SmJSJ1vyJfbGC+row9v7uTCVWr4VHhyz1yb pYbQ20mpRT/L8IYdrQN89rd2gtGgDTuCfE4zSkTS8UBIUVWYtTMZ9KCb9Z0Eeccm AjkI+IwJG2BAeKyNKPM9snyi0nr2kvKI9eOgaCT6qPjYsDMcXggmMnf5N1n+RpnU sdI0hAGXxK2cY92uOc5qQPAC4n9tKZ3oQ67RKLJ6iJz1mhSbWMqGq9x7wVVD5rUM TDpE3j5rU1bdYReT6MsaJPjmpfa9x6WA3rsDUGgHxsnaeGeOEbXP3Odfe+z/vr+G 8AF4yiT8631glwulHoOY1z0WXJsiP8HXY9DD8Y1s5WzS -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:27 2026 by rpki-client