This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/KCSkG-M_vayCpo68Ad12Z_kuFiw.roa File: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (raw, json) Hash identifier: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8= Subject key identifier: 28:24:A4:1B:E3:3F:BD:AC:82:A6:8E:BC:01:DD:76:67:F9:2E:16:2C Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910E9175CD893532EB75DC5CF67BE47 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/KCSkG-M_vayCpo68Ad12Z_kuFiw.roa Signing time: Thu 01 Jan 2026 10:18:29 +0000 ROA not before: Thu 01 Jan 2026 10:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43824 IP address blocks: 193.41.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e9:17:5c:d8:93:53:2e:b7:5d:c5:cf:67:be:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2824a41be33fbdac82a68ebc01dd7667f92e162c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:81:54:50:11:96:35:63:57:41:fa:ba:17:7d: c7:79:5a:70:d6:c5:aa:14:c9:3f:c4:c4:ab:89:02: 17:9d:1d:a6:30:1e:d6:a2:0e:82:4c:39:2c:38:78: ef:ff:9b:b8:ed:7c:e0:64:e4:86:36:8e:70:87:a5: 51:30:e7:26:fe:ca:5e:e5:d8:01:98:87:bf:20:c1: a6:30:c3:65:fe:ac:23:6a:45:ce:ff:c6:0b:5a:76: 1a:1a:a0:e0:b6:e9:7a:b5:2d:b4:9c:bc:8a:2e:d5: e6:81:96:a7:8e:e4:e9:17:76:61:82:bf:55:5d:6f: 81:f4:02:d2:22:8d:ca:6a:e4:e1:60:71:de:9f:78: a5:70:06:f7:34:44:ed:d8:cb:f4:02:d4:3f:a2:e1: 70:1b:14:cc:96:73:d8:2c:81:04:4a:58:86:1e:b6: 01:65:fd:d3:03:eb:5f:90:52:6d:0a:80:5e:21:3f: a5:d4:41:86:41:ac:fe:90:94:7e:97:93:11:ac:da: 18:0f:0d:0b:89:3e:2e:fb:e7:c8:06:51:7a:27:82: 6c:bc:6c:3c:d1:a2:5b:2f:4a:fb:e4:5f:0d:e8:58: f0:2b:fc:2f:53:b9:e6:a9:f2:83:a9:5d:92:a2:4b: b6:93:4b:68:02:fb:27:39:39:93:54:59:72:ae:65: cd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:24:A4:1B:E3:3F:BD:AC:82:A6:8E:BC:01:DD:76:67:F9:2E:16:2C X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/KCSkG-M_vayCpo68Ad12Z_kuFiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.217.0/24 Signature Algorithm: sha256WithRSAEncryption 33:59:5b:4c:c1:6b:ef:e5:84:4d:fc:9c:af:65:76:16:84:7d: 95:1e:28:39:f8:e7:b3:7a:25:3a:e5:e2:bd:c7:6e:7a:6e:a1: 8a:b3:3b:40:15:68:3f:57:e5:cd:9c:f6:bc:c8:79:c0:49:ca: 70:ba:ce:b6:02:8f:62:e2:4b:71:67:06:ea:89:bf:9b:45:42: fd:4d:8c:e8:ca:85:b8:fa:76:8b:a6:52:f0:44:ac:51:bd:d6: 1a:13:fd:49:e6:ea:c1:38:5c:ee:18:92:f5:41:88:ab:03:1f: 75:27:3d:f6:b1:04:fb:5b:e2:e0:7b:83:20:dd:2a:22:4c:da: c3:ba:34:9b:25:73:0f:ce:a4:f2:5d:8d:5b:d9:be:b1:2c:0c: 4d:e3:78:e0:5c:f6:a3:e0:36:35:f3:a3:55:d4:f5:ed:a0:4e: 9d:9f:2e:2b:00:76:bc:7d:d2:18:77:c4:32:8d:a1:dc:7c:58: 9f:04:89:00:ea:79:14:38:2e:f2:23:3d:b7:22:c0:06:92:aa: 4b:87:d9:31:74:40:92:c8:25:f9:d2:c8:08:d6:85:5c:b0:97: 3b:6c:2b:53:41:91:4f:16:c2:40:35:28:70:69:ca:7b:80:f7: 23:0b:7e:ff:2b:fe:bf:b5:6d:dc:0c:e3:79:a8:86:25:0a:41: 10:40:b6:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOkXXNiTUy63XcXPZ75HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODI0YTQxYmUzM2ZiZGFjODJhNjhlYmMwMWRkNzY2N2Y5MmUxNjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4FUUBGWNWNXQfq6F33HeVpw1sWq FMk/xMSriQIXnR2mMB7Wog6CTDksOHjv/5u47XzgZOSGNo5wh6VRMOcm/spe5dgB mIe/IMGmMMNl/qwjakXO/8YLWnYaGqDgtul6tS20nLyKLtXmgZanjuTpF3Zhgr9V XW+B9ALSIo3KauThYHHen3ilcAb3NETt2Mv0AtQ/ouFwGxTMlnPYLIEESliGHrYB Zf3TA+tfkFJtCoBeIT+l1EGGQaz+kJR+l5MRrNoYDw0LiT4u++fIBlF6J4JsvGw8 0aJbL0r75F8N6FjwK/wvU7nmqfKDqV2Soku2k0toAvsnOTmTVFlyrmXNBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCgkpBvjP72sgqaOvAHddmf5LhYsMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvS0NTa0ctTV92YXlDcG82OEFkMTJaX2t1Rml3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSnZMA0G CSqGSIb3DQEBCwUAA4IBAQAzWVtMwWvv5YRN/JyvZXYWhH2VHig5+OezeiU65eK9 x256bqGKsztAFWg/V+XNnPa8yHnAScpwus62Ao9i4ktxZwbqib+bRUL9TYzoyoW4 +naLplLwRKxRvdYaE/1J5urBOFzuGJL1QYirAx91Jz32sQT7W+Lge4Mg3SoiTNrD ujSbJXMPzqTyXY1b2b6xLAxN43jgXPaj4DY186NV1PXtoE6dny4rAHa8fdIYd8Qy jaHcfFifBIkA6nkUOC7yIz23IsAGkqpLh9kxdECSyCX50sgI1oVcsJc7bCtTQZFP FsJANShwacp7gPcjC37/K/6/tW3cDON5qIYlCkEQQLaE -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:15 2026 by rpki-client