This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/kyAnq1WhsVJncnKUARTnZXexAHQ.roa File: kyAnq1WhsVJncnKUARTnZXexAHQ.roa (raw, json) Hash identifier: HXGqiyEsuKNZZeMEs+AQuJKUjdQKlIpOx7iVefKBvw8= Subject key identifier: 93:20:27:AB:55:A1:B1:52:67:72:72:94:01:14:E7:65:77:B1:00:74 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77595C30C3003542F937CA6D816B07FD Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/kyAnq1WhsVJncnKUARTnZXexAHQ.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58337 IP address blocks: 93.119.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5c:30:c3:00:35:42:f9:37:ca:6d:81:6b:07:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=932027ab55a1b152677272940114e76577b10074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:97:6e:b7:85:e4:d1:30:4e:e9:08:96:09:9d: d4:5e:77:a4:3e:8c:92:af:a2:f4:a7:03:06:b0:25: 12:da:c8:84:62:31:cf:25:40:1b:6b:32:87:8e:23: d6:2f:f8:fa:f8:dc:5a:e1:87:50:a6:08:02:74:9b: 87:22:b1:20:69:d0:58:63:86:1b:f6:e5:a5:ef:4a: 0f:03:be:0d:f5:b6:3d:7f:8e:09:6e:13:3a:6a:f9: ad:0f:21:1f:28:d0:86:64:b3:9a:ea:d5:c4:e3:f1: 0c:88:f6:dc:c3:48:87:f0:90:93:24:b8:07:0d:cc: 05:8c:81:a3:15:72:9c:9e:f0:b1:96:87:9e:38:e0: f8:a1:38:a2:7a:8c:99:24:51:2e:14:b8:87:9b:d7: 6a:36:3d:8a:bc:33:df:a4:f1:2c:cc:9f:38:94:6a: 07:b1:16:06:fb:e7:4b:2d:a3:9d:e8:d9:ec:36:8f: 92:77:04:8f:28:83:68:0a:1f:3d:9e:31:23:c3:4f: fe:65:1e:2b:5d:b9:f4:4f:f9:1b:41:f7:a2:a7:57: a3:13:22:f2:f0:07:57:40:c9:5e:3b:26:98:81:de: 79:9e:5e:c2:09:f6:d0:09:29:a7:e1:6c:86:23:62: 71:78:0c:67:c1:eb:9a:a5:80:18:59:e2:f5:c1:37: 4a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:20:27:AB:55:A1:B1:52:67:72:72:94:01:14:E7:65:77:B1:00:74 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/kyAnq1WhsVJncnKUARTnZXexAHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.119.192.0/24 Signature Algorithm: sha256WithRSAEncryption c4:58:37:fc:ae:cd:cd:71:96:65:c0:0e:5f:a6:71:cc:1c:4a: f4:6b:ac:87:f0:95:20:28:f6:27:e9:d6:f8:e8:cb:ec:77:42: cd:fa:36:7f:12:3a:42:23:b3:c8:ad:71:d3:79:5c:a1:33:00: 58:89:b1:dd:28:23:42:ff:68:15:90:db:72:49:e2:7b:de:3a: 92:4e:c6:6b:49:29:8c:08:82:40:1b:ce:fa:b9:ac:64:6b:76: d4:9a:84:28:76:ff:84:5c:82:b7:27:c5:5f:21:d6:45:f2:6b: 1c:ed:d6:b2:2f:ba:4d:99:ad:59:dc:cf:a2:2b:56:b9:67:d4: 3c:0a:8a:85:43:1e:e8:d0:47:bd:f8:d7:bc:da:77:24:15:c2: e3:93:95:21:d5:03:4b:83:0b:27:b3:51:b0:76:66:66:e6:54: bd:27:b4:17:0b:3b:12:5d:64:78:c8:2b:a8:b1:cd:8f:e5:ed: a1:7f:0d:50:b8:32:c5:52:ad:f2:a9:e1:d0:a9:e1:a2:0a:67: 0e:ac:c0:ba:0f:b1:13:a3:4a:0a:82:d8:80:99:b4:dd:a2:6f: e9:6b:86:8c:cb:24:e8:01:10:3a:52:0d:ca:82:e3:3c:6e:67: e4:9b:db:ad:55:97:59:c7:3d:db:6e:eb:81:69:a4:9a:b6:14: 77:82:23:d6 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WVwwwwA1Qvk3ym2Bawf9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzIwMjdhYjU1YTFiMTUyNjc3MjcyOTQwMTE0ZTc2NTc3YjEwMDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5dut4Xk0TBO6QiWCZ3UXnekPoyS r6L0pwMGsCUS2siEYjHPJUAbazKHjiPWL/j6+Nxa4YdQpggCdJuHIrEgadBYY4Yb 9uWl70oPA74N9bY9f44JbhM6avmtDyEfKNCGZLOa6tXE4/EMiPbcw0iH8JCTJLgH DcwFjIGjFXKcnvCxloeeOOD4oTiieoyZJFEuFLiHm9dqNj2KvDPfpPEszJ84lGoH sRYG++dLLaOd6NnsNo+SdwSPKINoCh89njEjw0/+ZR4rXbn0T/kbQfeip1ejEyLy 8AdXQMleOyaYgd55nl7CCfbQCSmn4WyGI2JxeAxnweuapYAYWeL1wTdKhwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJMgJ6tVobFSZ3JylAEU52V3sQB0MB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL2t5QW5xMVdoc1ZKbmNuS1VBUlRuWlhleEFIUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABdd8Aw DQYJKoZIhvcNAQELBQADggEBAMRYN/yuzc1xlmXADl+mccwcSvRrrIfwlSAo9ifp 1vjoy+x3Qs36Nn8SOkIjs8itcdN5XKEzAFiJsd0oI0L/aBWQ23JJ4nveOpJOxmtJ KYwIgkAbzvq5rGRrdtSahCh2/4RcgrcnxV8h1kXyaxzt1rIvuk2ZrVncz6IrVrln 1DwKioVDHujQR73417zadyQVwuOTlSHVA0uDCyezUbB2ZmbmVL0ntBcLOxJdZHjI K6ixzY/l7aF/DVC4MsVSrfKp4dCp4aIKZw6swLoPsROjSgqC2ICZtN2ib+lrhozL JOgBEDpSDcqC4zxuZ+Sb261Vl1nHPdtu64FppJq2FHeCI9Y= -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:33 2026 by rpki-client