This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/koyfl1fbRQ7wL_4CDR4bR8SUJ6w.roa File: koyfl1fbRQ7wL_4CDR4bR8SUJ6w.roa (raw, json) Hash identifier: +ihoHt66MtdHz9TjemIYSdtViPsR/B1PabBEU1L+tYw= Subject key identifier: 92:8C:9F:97:57:DB:45:0E:F0:2F:FE:02:0D:1E:1B:47:C4:94:27:AC Certificate issuer: /CN=d48551e26169b3b3e124f6964e2702e95768253e Certificate serial: 019B7EA62EC46AC7AA2E9A1E25BCCF28E000 Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/koyfl1fbRQ7wL_4CDR4bR8SUJ6w.roa Signing time: Fri 02 Jan 2026 12:19:38 +0000 ROA not before: Fri 02 Jan 2026 12:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203640 IP address blocks: 185.29.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:2e:c4:6a:c7:aa:2e:9a:1e:25:bc:cf:28:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e Validity Not Before: Jan 2 12:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=928c9f9757db450ef02ffe020d1e1b47c49427ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c1:5b:90:a5:33:ff:ed:fa:73:9d:a8:d1:46: d6:a3:a3:92:61:25:16:9e:70:76:3a:ef:d1:9a:9d: 2c:d3:b4:7c:8d:c7:d2:63:9d:b8:81:5a:27:1b:b9: a7:b9:ab:8c:18:ab:c9:e7:7f:00:ae:16:26:d7:04: ed:1f:b7:49:cd:52:c1:8f:b5:ea:90:4d:fa:9a:93: 3e:68:af:2e:4f:01:6e:70:3f:fa:7d:91:70:b7:af: 88:e1:42:f6:fe:fb:89:54:6a:c3:42:46:3e:ca:34: 38:51:1d:c1:1e:3f:c7:c9:43:fb:2c:d7:4d:05:ee: d3:4f:29:7e:61:b6:e0:27:b2:ae:6f:c8:6c:46:2f: eb:ae:31:db:7d:cb:48:31:d1:ec:64:02:73:48:6a: 7e:d5:56:82:95:8e:ca:9e:a2:09:22:e5:d7:b7:dd: 5c:d2:46:f4:da:30:af:a9:76:0c:e9:1c:47:ad:81: 57:64:b4:4a:f4:1a:8b:4a:16:3d:7c:3b:d0:3b:61: af:6d:ff:c6:59:bf:c3:46:f1:f4:e0:80:d6:fe:63: 00:fa:17:01:ee:7e:2b:b6:e8:21:bb:15:a4:2b:25: 6e:0a:67:8b:ff:cb:03:b2:bd:48:e2:b8:4d:be:38: de:4e:16:e5:0b:6b:4b:03:af:b4:fe:74:75:43:1d: b9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8C:9F:97:57:DB:45:0E:F0:2F:FE:02:0D:1E:1B:47:C4:94:27:AC X509v3 Authority Key Identifier: keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/koyfl1fbRQ7wL_4CDR4bR8SUJ6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.108.0/22 Signature Algorithm: sha256WithRSAEncryption 92:88:d8:95:b9:5f:eb:16:ba:3d:c7:23:0b:2b:a8:ce:dc:6a: 82:af:ff:67:56:46:68:f8:9d:9a:2a:4b:67:4c:02:76:29:16: 6b:08:5a:df:c1:e0:5e:00:fb:09:a0:03:78:b5:a2:26:6d:c8: 56:48:6d:69:7a:e8:d8:c5:16:77:0a:eb:dc:47:74:b0:b1:c9: fc:92:65:c1:5e:5f:85:58:60:64:c6:d3:ce:7e:a5:aa:60:82: f0:f0:29:67:b3:6d:88:77:d1:e1:de:55:32:48:f8:fc:92:86: 91:9c:68:ca:e5:06:87:0f:12:79:0f:d7:62:22:ec:23:fd:97: bc:ef:17:5f:f2:d7:51:8c:60:45:7c:54:e2:76:75:c1:9b:e8: 0b:63:b1:06:f7:b6:a6:62:d6:f4:64:90:64:22:a9:a7:fe:b4: f2:ac:c0:de:4d:51:ea:c4:80:22:e3:10:d8:c7:ee:e5:aa:f9: 24:21:46:4a:4d:ce:cf:11:fe:9b:40:68:2b:62:3d:48:ec:79: 5b:4d:2f:b1:cb:5a:75:2d:c0:02:f8:64:f3:89:22:fe:8c:72: 9b:d6:49:ba:e6:de:38:d0:c2:c7:53:16:c0:42:e8:4d:f6:3c: c6:e8:5b:b3:80:29:00:4b:fe:9c:a6:67:59:42:c0:19:a9:2d: 38:ad:fd:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pi7EaseqLpoeJbzPKOAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ODU1MWUyNjE2OWIzYjNlMTI0ZjY5NjRlMjcwMmU5NTc2 ODI1M2UwHhcNMjYwMTAyMTIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjhjOWY5NzU3ZGI0NTBlZjAyZmZlMDIwZDFlMWI0N2M0OTQyN2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8FbkKUz/+36c52o0UbWo6OSYSUW nnB2Ou/Rmp0s07R8jcfSY524gVonG7mnuauMGKvJ538ArhYm1wTtH7dJzVLBj7Xq kE36mpM+aK8uTwFucD/6fZFwt6+I4UL2/vuJVGrDQkY+yjQ4UR3BHj/HyUP7LNdN Be7TTyl+YbbgJ7Kub8hsRi/rrjHbfctIMdHsZAJzSGp+1VaClY7KnqIJIuXXt91c 0kb02jCvqXYM6RxHrYFXZLRK9BqLShY9fDvQO2Gvbf/GWb/DRvH04IDW/mMA+hcB 7n4rtughuxWkKyVuCmeL/8sDsr1I4rhNvjjeThblC2tLA6+0/nR1Qx25wwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJKMn5dX20UO8C/+Ag0eG0fElCesMB8GA1UdIwQY MBaAFNSFUeJhabOz4ST2lk4nAulXaCU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlWUjRtRnBzN1BoSlBhV1RpY0M2VmRvSlQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lYWQyNzctODRjOS00YjhlLTg3OWUt NWY3MzI2NzEwMmE2LzEva295ZmwxZmJSUTd3TF80Q0RSNGJSOFNVSjZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lYWQyNzctODRjOS00YjhlLTg3OWUtNWY3MzI2NzEwMmE2 LzEvMUlWUjRtRnBzN1BoSlBhV1RpY0M2VmRvSlQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuR1sMA0G CSqGSIb3DQEBCwUAA4IBAQCSiNiVuV/rFro9xyMLK6jO3GqCr/9nVkZo+J2aKktn TAJ2KRZrCFrfweBeAPsJoAN4taImbchWSG1peujYxRZ3CuvcR3Swscn8kmXBXl+F WGBkxtPOfqWqYILw8Clns22Id9Hh3lUySPj8koaRnGjK5QaHDxJ5D9diIuwj/Ze8 7xdf8tdRjGBFfFTidnXBm+gLY7EG97amYtb0ZJBkIqmn/rTyrMDeTVHqxIAi4xDY x+7lqvkkIUZKTc7PEf6bQGgrYj1I7HlbTS+xy1p1LcAC+GTziSL+jHKb1km65t44 0MLHUxbAQuhN9jzG6FuzgCkAS/6cpmdZQsAZqS04rf03 -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:40 2026 by rpki-client