This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa File: kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa (raw, json) Hash identifier: lYivRiiWhdQqSTdJmm6RVAol+uwcwmFLCfnYj2bvGyA= Subject key identifier: 93:21:50:BA:08:D5:4A:01:DB:28:FE:C2:A7:7C:AF:75:F4:E4:33:B6 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019B79ED489B551D69A3F6CAB488543077B0 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209183 IP address blocks: 185.69.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:48:9b:55:1d:69:a3:f6:ca:b4:88:54:30:77:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=932150ba08d54a01db28fec2a77caf75f4e433b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:78:52:85:3c:80:2f:74:40:96:54:54:3b:d4: b7:08:77:9c:5a:ee:81:a9:75:93:7b:a8:a5:f3:9c: c8:c2:e5:d4:4d:f2:81:33:f3:6f:5f:48:07:ce:9c: 58:8a:b0:79:11:45:8b:3a:7d:93:ea:7c:52:50:f4: 36:24:f2:59:9d:79:b7:fe:de:ab:87:9f:ab:f7:ba: 84:4e:1b:9c:ea:ae:85:9b:62:bb:7c:1b:e7:73:6e: cc:3f:70:02:30:bc:ba:20:15:0c:48:8d:ab:6b:4d: e6:01:d3:43:81:67:e4:b5:90:db:13:ce:bb:33:e3: 14:64:90:39:ef:30:5c:6b:ac:b3:08:90:74:ba:b0: 82:03:03:a7:3c:60:12:54:3a:0c:9d:46:3c:86:b9: 00:1f:78:17:42:13:40:29:57:dc:88:f4:1e:0b:3e: 20:cf:6e:e1:a5:b3:5b:ce:8b:e5:3a:5b:e9:a6:04: 6e:ce:bc:28:62:03:b8:f5:bc:ed:d4:0e:1d:bd:8b: 0a:52:d8:b2:0a:50:e6:21:f2:cf:7f:35:b2:79:72: 2e:48:bf:46:fa:0b:ad:58:f3:7a:e2:76:8d:13:fe: bf:b7:a9:e0:cd:12:a1:d9:d0:7f:21:40:d8:f6:a8: 22:0d:99:5e:86:89:b0:02:d8:b3:65:67:2d:2a:e0: 8f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:21:50:BA:08:D5:4A:01:DB:28:FE:C2:A7:7C:AF:75:F4:E4:33:B6 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.223.0/24 Signature Algorithm: sha256WithRSAEncryption b8:52:ed:fe:f2:0b:77:bc:b8:4c:e2:a0:fa:e0:55:fe:9c:7c: 3e:70:7d:32:56:ef:35:96:94:0f:bf:b3:42:c2:2a:a3:f5:71: 4b:2e:76:f5:fc:9d:95:4e:ee:5d:53:84:1e:97:fb:0d:ff:98: ce:6a:7f:f0:3a:5a:35:88:79:e1:d7:19:bc:42:47:23:5e:88: 89:27:5b:31:a9:6f:d7:d5:e1:2a:31:95:9b:29:c2:9f:17:2e: 0a:a5:75:92:1a:82:fa:fb:2c:a2:4c:64:23:af:27:82:66:db: b2:1b:dc:43:d6:91:1e:3c:cf:99:47:f7:38:2f:ea:ca:ce:45: d1:ef:f7:70:3d:2a:6c:97:47:45:6b:d9:f2:5b:72:a2:59:f9: ec:98:2d:67:96:76:19:1c:96:ca:5f:df:8c:7d:e6:a5:e4:05: 91:2d:d1:b1:d2:dc:04:e4:cd:c8:a1:cc:d2:a3:8f:85:ed:cb: a9:39:c1:b3:fe:31:8a:05:cd:06:a2:ef:73:a2:36:52:e4:0f: c6:51:db:2e:29:8b:ad:92:09:71:95:90:2f:a1:73:1e:e5:0e: 5c:57:78:85:45:76:8a:fe:36:bf:aa:29:64:e4:ca:83:ab:d1: fd:1b:31:00:dd:a3:e3:4f:7d:be:13:75:a2:3c:bb:d3:cd:19: 3a:30:fb:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57UibVR1po/bKtIhUMHewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzIxNTBiYTA4ZDU0YTAxZGIyOGZlYzJhNzdjYWY3NWY0ZTQzM2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHhShTyAL3RAllRUO9S3CHecWu6B qXWTe6il85zIwuXUTfKBM/NvX0gHzpxYirB5EUWLOn2T6nxSUPQ2JPJZnXm3/t6r h5+r97qEThuc6q6Fm2K7fBvnc27MP3ACMLy6IBUMSI2ra03mAdNDgWfktZDbE867 M+MUZJA57zBca6yzCJB0urCCAwOnPGASVDoMnUY8hrkAH3gXQhNAKVfciPQeCz4g z27hpbNbzovlOlvppgRuzrwoYgO49bzt1A4dvYsKUtiyClDmIfLPfzWyeXIuSL9G +gutWPN64naNE/6/t6ngzRKh2dB/IUDY9qgiDZlehomwAtizZWctKuCPTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJMhULoI1UoB2yj+wqd8r3X05DO2MB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEva3lGUXVnalZTZ0hiS1A3Q3AzeXZkZlRrTTdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUXfMA0G CSqGSIb3DQEBCwUAA4IBAQC4Uu3+8gt3vLhM4qD64FX+nHw+cH0yVu81lpQPv7NC wiqj9XFLLnb1/J2VTu5dU4Qel/sN/5jOan/wOlo1iHnh1xm8QkcjXoiJJ1sxqW/X 1eEqMZWbKcKfFy4KpXWSGoL6+yyiTGQjryeCZtuyG9xD1pEePM+ZR/c4L+rKzkXR 7/dwPSpsl0dFa9nyW3KiWfnsmC1nlnYZHJbKX9+Mfeal5AWRLdGx0twE5M3IoczS o4+F7cupOcGz/jGKBc0Gou9zojZS5A/GUdsuKYutkglxlZAvoXMe5Q5cV3iFRXaK /ja/qilk5MqDq9H9GzEA3aPjT32+E3WiPLvTzRk6MPsS -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:51 2026 by rpki-client