This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/KYeOuPy-sh1SLcoPNXSyZQIU0MI.roa File: KYeOuPy-sh1SLcoPNXSyZQIU0MI.roa (raw, json) Hash identifier: Sr5K6ccTAcON+APYQXJhtPURh7qUu9XiFdatnlSg6xs= Subject key identifier: 29:87:8E:B8:FC:BE:B2:1D:52:2D:CA:0F:35:74:B2:65:02:14:D0:C2 Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5 Certificate serial: 019B7CEDE01E1B746D4F50209F1CCC52ABCB Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/KYeOuPy-sh1SLcoPNXSyZQIU0MI.roa Signing time: Fri 02 Jan 2026 04:18:42 +0000 ROA not before: Fri 02 Jan 2026 04:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215574 IP address blocks: 2001:67c:ddc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e0:1e:1b:74:6d:4f:50:20:9f:1c:cc:52:ab:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5 Validity Not Before: Jan 2 04:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29878eb8fcbeb21d522dca0f3574b2650214d0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d8:16:e9:cc:1a:11:74:be:e1:75:3a:c4:ba: 0f:40:b9:3e:4a:d6:0d:49:d9:d5:e1:80:13:ac:f6: cf:31:e1:85:5a:bf:a2:ab:6e:07:d8:be:1f:32:08: 81:56:31:73:29:2a:fb:27:72:fe:aa:d0:31:23:93: e1:96:ee:42:5d:38:b1:d6:c3:17:d2:20:ca:56:e5: 54:c5:55:d6:d8:ae:a6:91:45:d0:ba:08:08:26:2d: 65:75:66:03:77:bd:b3:ee:6a:b1:ec:4e:6e:c6:d2: f4:c0:2d:aa:c0:4b:60:99:ef:aa:f8:65:b9:be:43: 58:17:66:41:e9:5a:05:4c:9a:4c:6b:43:ef:48:57: 1e:9f:2b:fb:94:44:ea:50:6a:7e:f2:dd:3e:dc:f4: 4e:80:86:e9:41:b4:ac:f5:8b:d2:8c:6a:cb:20:96: 0c:aa:33:56:e3:3a:77:6c:a7:48:cf:a5:5d:dd:12: 0e:ee:ba:a9:d0:6a:8b:db:b6:00:9e:05:aa:4a:9e: 47:c4:ed:74:3b:ab:41:48:04:69:32:34:05:7c:44: 31:88:07:1b:72:3e:b3:99:e9:5a:50:11:c1:f0:31: f0:85:d0:b3:28:09:43:98:2b:b6:63:dc:e3:6a:53: a7:3e:d8:9a:a5:51:49:15:e4:20:f4:ea:7a:ea:2c: 0d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:87:8E:B8:FC:BE:B2:1D:52:2D:CA:0F:35:74:B2:65:02:14:D0:C2 X509v3 Authority Key Identifier: keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/KYeOuPy-sh1SLcoPNXSyZQIU0MI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ddc::/48 Signature Algorithm: sha256WithRSAEncryption 17:d7:df:df:66:a1:b4:05:05:95:07:c3:68:a8:71:d7:20:4e: 2d:67:c8:91:75:49:92:30:66:59:2b:d6:7b:af:56:b6:cd:51: 91:a3:0e:7d:7d:73:3e:bf:54:bd:02:cc:8b:b4:40:0c:47:3a: 1f:d4:ae:2d:e3:b5:58:d0:4a:99:76:a2:70:30:af:83:bd:3a: df:9e:df:f1:21:5f:d6:68:0d:4d:d0:95:74:0d:46:a1:b1:86: 33:ad:57:64:de:67:06:5e:19:97:06:b8:3d:ff:52:8b:5c:fd: c9:d9:08:03:de:67:1a:2a:34:92:a8:25:f4:e6:8c:7b:86:a2: 2b:dc:f1:63:82:72:15:d0:89:d9:46:be:46:7f:73:00:db:22: 76:3c:0f:2d:7c:71:2c:6d:1d:3d:44:02:a6:a2:5d:3d:84:0d: 8c:f2:e6:18:0a:43:de:fb:a3:8b:8c:a6:4c:16:f5:ac:5c:75: 49:fc:41:0c:3f:8e:1f:e2:dd:0e:29:14:f3:82:a8:2e:25:cd: 20:4c:34:75:8b:e5:48:c0:5c:10:21:5d:9e:92:51:59:9a:97: 56:0a:0f:f2:a1:d4:b8:f6:87:f7:14:69:ac:93:72:5a:88:56: 40:e1:10:93:9c:7f:c2:22:48:b1:f6:8b:70:a6:ca:a1:5e:73: 63:cf:5a:2d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87eAeG3RtT1AgnxzMUqvLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NjRjZGVlZTM0NjExNmNiOTY0MWJhNDgwMGY1NWI5OTA2 ZGMzYTUwHhcNMjYwMTAyMDQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTg3OGViOGZjYmViMjFkNTIyZGNhMGYzNTc0YjI2NTAyMTRkMGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NgW6cwaEXS+4XU6xLoPQLk+StYN SdnV4YATrPbPMeGFWr+iq24H2L4fMgiBVjFzKSr7J3L+qtAxI5Phlu5CXTix1sMX 0iDKVuVUxVXW2K6mkUXQuggIJi1ldWYDd72z7mqx7E5uxtL0wC2qwEtgme+q+GW5 vkNYF2ZB6VoFTJpMa0PvSFcenyv7lETqUGp+8t0+3PROgIbpQbSs9YvSjGrLIJYM qjNW4zp3bKdIz6Vd3RIO7rqp0GqL27YAngWqSp5HxO10O6tBSARpMjQFfEQxiAcb cj6zmelaUBHB8DHwhdCzKAlDmCu2Y9zjalOnPtiapVFJFeQg9Op66iwNIwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCmHjrj8vrIdUi3KDzV0smUCFNDCMB8GA1UdIwQY MBaAFDlkze7jRhFsuWQbpIAPVbmQbcOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hMDE4YTctNmI1Yy00MjM5LTg5Yjct MmEwMjQ3ZmJiNmQ1LzEvS1llT3VQeS1zaDFTTGNvUE5YU3laUUlVME1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hMDE4YTctNmI1Yy00MjM5LTg5YjctMmEwMjQ3ZmJiNmQ1 LzEvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA3c MA0GCSqGSIb3DQEBCwUAA4IBAQAX19/fZqG0BQWVB8NoqHHXIE4tZ8iRdUmSMGZZ K9Z7r1a2zVGRow59fXM+v1S9AsyLtEAMRzof1K4t47VY0EqZdqJwMK+DvTrfnt/x IV/WaA1N0JV0DUahsYYzrVdk3mcGXhmXBrg9/1KLXP3J2QgD3mcaKjSSqCX05ox7 hqIr3PFjgnIV0InZRr5Gf3MA2yJ2PA8tfHEsbR09RAKmol09hA2M8uYYCkPe+6OL jKZMFvWsXHVJ/EEMP44f4t0OKRTzgqguJc0gTDR1i+VIwFwQIV2eklFZmpdWCg/y odS49of3FGmsk3JaiFZA4RCTnH/CIkix9otwpsqhXnNjz1ot -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:51 2026 by rpki-client