This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/KyqWoLebligEUftYhU_Bgu-0Lts.roa File: KyqWoLebligEUftYhU_Bgu-0Lts.roa (raw, json) Hash identifier: VENXedlneKxldlXl7e/RQWS7U/FplQnliLqOvQVsbvA= Subject key identifier: 2B:2A:96:A0:B7:9B:96:28:04:51:FB:58:85:4F:C1:82:EF:B4:2E:DB Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b Certificate serial: 019AE899DD3A1ED8072373E041759770DA16 Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/KyqWoLebligEUftYhU_Bgu-0Lts.roa Signing time: Thu 04 Dec 2025 09:03:08 +0000 ROA not before: Thu 04 Dec 2025 09:03:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7979 IP address blocks: 205.147.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:99:dd:3a:1e:d8:07:23:73:e0:41:75:97:70:da:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b Validity Not Before: Dec 4 09:03:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2b2a96a0b79b96280451fb58854fc182efb42edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ab:1a:f9:3f:5e:6d:89:84:41:03:7a:85:05: 4e:0d:16:df:45:cd:a4:03:e5:4d:3f:72:db:d3:c2: ea:9b:89:8d:b0:3e:02:d1:08:d0:f1:d1:22:05:30: 1e:e7:84:57:55:75:ce:09:00:04:c2:fa:a1:d2:db: aa:bc:c6:89:c0:0c:be:6f:5d:d3:89:84:09:2c:73: b9:b3:22:f6:a6:43:10:22:f6:ae:7f:52:df:ac:71: 43:2f:2c:b4:e9:05:85:ca:71:9a:4d:85:19:96:1a: 49:26:33:3c:42:b4:f4:dd:e1:2c:e6:33:51:03:16: 28:d8:8d:ba:5a:d1:fa:12:1a:1e:c7:f1:04:d2:dd: af:11:44:7c:18:68:9b:4d:4a:f9:5d:a0:9f:b5:f7: cc:d7:87:70:df:62:55:ea:90:fd:ae:aa:b1:79:11: a8:b2:40:dd:0c:00:6d:8e:2e:bc:d4:35:59:a4:55: 6f:28:34:d2:37:d1:c3:ae:24:7e:fc:67:0a:82:70: 33:02:1e:c6:56:15:ba:b9:73:e2:ef:d2:5a:8d:4a: 3a:2d:9c:32:63:a7:e2:ae:f5:ea:ab:c6:09:05:1e: f8:f2:9a:2a:76:0f:f0:f5:c3:fd:d3:94:ac:5c:ce: 8e:52:7a:7a:dd:0b:b9:04:72:5b:92:0d:43:2d:8e: ec:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2A:96:A0:B7:9B:96:28:04:51:FB:58:85:4F:C1:82:EF:B4:2E:DB X509v3 Authority Key Identifier: keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/KyqWoLebligEUftYhU_Bgu-0Lts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.147.26.0/24 Signature Algorithm: sha256WithRSAEncryption 81:dc:48:cf:90:96:17:52:75:63:11:36:36:0f:16:2e:5b:55: 32:19:b7:cb:5d:67:e2:97:dc:cd:7a:74:38:78:cd:ab:c7:bc: e2:f0:46:1c:d1:38:75:6d:2f:af:c4:9d:44:15:cc:23:86:02: f8:c7:b4:91:b5:17:cc:6d:9f:cb:62:fc:a1:09:35:c1:52:6e: a2:71:09:e8:91:c8:07:ff:9d:98:08:08:02:f7:0c:13:c7:39: 5c:72:c4:7a:cd:b5:9d:68:56:72:03:fa:b9:f1:55:0b:f9:3c: 7e:9b:75:c8:17:81:dc:81:29:de:ac:a3:1c:25:ea:9c:90:7c: 35:ed:51:aa:80:6b:c0:63:53:ba:11:2a:8b:56:b5:61:6c:cf: 53:45:6d:37:3a:e3:d4:19:31:9a:4c:bf:fc:9f:32:c6:f4:1f: e0:81:47:9e:3b:48:20:8c:83:ec:35:14:4c:5e:80:19:36:95: a7:d1:27:28:31:d3:20:7d:b1:99:1c:67:65:6e:18:8f:2e:5b: f5:9c:2a:d9:12:46:44:d7:8e:1e:ed:69:b9:7a:78:89:9c:da: 02:e7:35:00:3f:1b:58:27:f1:63:be:29:97:9a:40:03:64:70: ff:b9:43:8e:cc:c9:b4:d7:cd:49:a6:86:24:fe:2e:95:83:78: dd:a1:7f:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZromd06HtgHI3PgQXWXcNoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNTc2ZDg3NmUxN2U2N2FhM2IxZjFjMTBkYWIzOWRiMjkz NWUyMmIwHhcNMjUxMjA0MDkwMzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjJhOTZhMGI3OWI5NjI4MDQ1MWZiNTg4NTRmYzE4MmVmYjQyZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6sa+T9ebYmEQQN6hQVODRbfRc2k A+VNP3Lb08Lqm4mNsD4C0QjQ8dEiBTAe54RXVXXOCQAEwvqh0tuqvMaJwAy+b13T iYQJLHO5syL2pkMQIvauf1LfrHFDLyy06QWFynGaTYUZlhpJJjM8QrT03eEs5jNR AxYo2I26WtH6Ehoex/EE0t2vEUR8GGibTUr5XaCftffM14dw32JV6pD9rqqxeRGo skDdDABtji681DVZpFVvKDTSN9HDriR+/GcKgnAzAh7GVhW6uXPi79JajUo6LZwy Y6firvXqq8YJBR748poqdg/w9cP905SsXM6OUnp63Qu5BHJbkg1DLY7sqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCsqlqC3m5YoBFH7WIVPwYLvtC7bMB8GA1UdIwQY MBaAFM1XbYduF+Z6o7HxwQ2rOdspNeIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMt MWE4MGEyZjdkN2VhLzEvS3lxV29MZWJsaWdFVWZ0WWhVX0JndS0wTHRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMtMWE4MGEyZjdkN2Vh LzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzZMaMA0G CSqGSIb3DQEBCwUAA4IBAQCB3EjPkJYXUnVjETY2DxYuW1UyGbfLXWfil9zNenQ4 eM2rx7zi8EYc0Th1bS+vxJ1EFcwjhgL4x7SRtRfMbZ/LYvyhCTXBUm6icQnokcgH /52YCAgC9wwTxzlccsR6zbWdaFZyA/q58VUL+Tx+m3XIF4HcgSnerKMcJeqckHw1 7VGqgGvAY1O6ESqLVrVhbM9TRW03OuPUGTGaTL/8nzLG9B/ggUeeO0ggjIPsNRRM XoAZNpWn0ScoMdMgfbGZHGdlbhiPLlv1nCrZEkZE144e7Wm5eniJnNoC5zUAPxtY J/FjvimXmkADZHD/uUOOzMm0181JpoYk/i6Vg3jdoX9+ -----END CERTIFICATE-----Generated at Sat Dec 6 09:45:42 2025 by rpki-client