This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KYSnwomDynzzjGj2US6SESMkTL0.roa File: KYSnwomDynzzjGj2US6SESMkTL0.roa (raw, json) Hash identifier: 2LV+Gxrw0kRkkYVz8vq1CxFNKUXh6PUMmRyicuRD4Ro= Subject key identifier: 29:84:A7:C2:89:83:CA:7C:F3:8C:68:F6:51:2E:92:11:23:24:4C:BD Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAD05B1286F66F568CC22F0A3E4E67 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KYSnwomDynzzjGj2US6SESMkTL0.roa Signing time: Thu 01 Jan 2026 00:17:38 +0000 ROA not before: Thu 01 Jan 2026 00:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207994 IP address blocks: 5.253.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d0:5b:12:86:f6:6f:56:8c:c2:2f:0a:3e:4e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2984a7c28983ca7cf38c68f6512e921123244cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3a:f0:c0:59:41:77:db:49:91:33:fd:1f:23: 1a:97:09:74:2e:77:a1:7c:32:71:b1:14:f6:38:ee: 32:df:5e:42:0d:41:59:26:b5:06:72:50:5d:50:4c: e2:bd:3a:0a:2b:f4:0c:82:2b:76:0a:9a:99:18:e2: f2:74:83:2b:f2:8f:d1:63:7d:2b:d0:d6:a4:ef:16: d8:e9:3d:21:19:46:8c:54:c0:5c:ca:2c:3d:d7:f6: d5:de:e8:66:f9:3e:4c:2d:5b:a5:d8:9e:59:fa:20: 88:4f:d9:65:fe:4b:db:cd:01:16:e4:70:be:be:2a: c0:49:0c:b4:89:14:94:bd:fd:50:93:b3:66:b4:27: 89:7b:77:55:ce:14:14:11:85:8e:20:a5:43:43:d3: 32:97:3e:90:24:d5:b1:38:e0:8d:61:30:06:58:19: 53:89:b4:b6:60:44:19:be:4f:fc:90:3b:39:b0:24: f5:f0:a0:68:81:9b:2c:bb:59:72:53:6a:81:2a:23: 94:4b:e0:12:54:ec:18:43:b9:eb:74:d9:5b:87:c9: bd:1c:06:58:89:c2:d2:b6:33:34:77:fc:48:08:ec: 2a:6b:ea:48:5f:42:57:5e:0a:5c:a5:77:c8:32:74: 77:5e:4c:92:2b:16:92:cf:51:33:29:23:84:0c:30: 93:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:84:A7:C2:89:83:CA:7C:F3:8C:68:F6:51:2E:92:11:23:24:4C:BD X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KYSnwomDynzzjGj2US6SESMkTL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.37.0/24 Signature Algorithm: sha256WithRSAEncryption 81:50:d9:2b:05:86:6e:8a:46:af:96:f1:ac:68:1e:e9:21:ea: 83:6c:e5:ee:a0:70:77:ea:20:06:be:63:11:4d:67:70:66:4c: 3a:fa:3b:d3:83:ab:7d:af:60:3e:ca:07:64:3c:4d:aa:37:95: 00:4a:2f:91:1f:52:d7:62:a1:54:8e:5c:a7:7d:d6:ae:36:12: 21:4d:bf:c1:d5:c9:b7:4b:75:65:02:ab:95:93:15:70:8f:2f: 4b:95:da:62:c4:23:9d:55:fd:9e:59:39:e5:05:e2:f0:ba:bf: c6:6c:93:59:a1:6b:c3:51:9f:32:8e:40:26:65:4d:8a:b7:45: b2:e0:d1:d2:e5:85:10:7d:64:2b:65:fd:2c:3e:4a:99:f3:6d: 26:db:f3:da:94:67:d8:61:6d:ea:cf:99:f4:6b:73:13:f7:2a: 12:17:9f:73:5b:02:5a:c4:98:93:f8:81:34:7a:d6:e5:f5:31: 0b:20:17:a7:2c:d8:c4:2c:b4:d6:9b:fd:8c:08:ee:97:0d:39: 68:bc:93:10:15:af:1b:a0:c5:34:ed:31:f8:8c:40:eb:bc:05: 1e:07:8c:09:c3:b9:10:80:15:a4:a6:93:cb:cd:dd:4f:c9:75: 98:58:a5:78:e2:32:67:0c:8b:3b:fe:c2:72:3f:3a:35:44:ef: 0f:66:c4:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26tBbEob2b1aMwi8KPk5nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTg0YTdjMjg5ODNjYTdjZjM4YzY4ZjY1MTJlOTIxMTIzMjQ0Y2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDrwwFlBd9tJkTP9HyMalwl0Lneh fDJxsRT2OO4y315CDUFZJrUGclBdUEzivToKK/QMgit2CpqZGOLydIMr8o/RY30r 0Nak7xbY6T0hGUaMVMBcyiw91/bV3uhm+T5MLVul2J5Z+iCIT9ll/kvbzQEW5HC+ virASQy0iRSUvf1Qk7NmtCeJe3dVzhQUEYWOIKVDQ9Mylz6QJNWxOOCNYTAGWBlT ibS2YEQZvk/8kDs5sCT18KBogZssu1lyU2qBKiOUS+ASVOwYQ7nrdNlbh8m9HAZY icLStjM0d/xICOwqa+pIX0JXXgpcpXfIMnR3XkySKxaSz1EzKSOEDDCTQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCmEp8KJg8p884xo9lEukhEjJEy9MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvS1lTbndvbUR5bnp6akdqMlVTNlNFU01rVEwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf0lMA0G CSqGSIb3DQEBCwUAA4IBAQCBUNkrBYZuikavlvGsaB7pIeqDbOXuoHB36iAGvmMR TWdwZkw6+jvTg6t9r2A+ygdkPE2qN5UASi+RH1LXYqFUjlynfdauNhIhTb/B1cm3 S3VlAquVkxVwjy9LldpixCOdVf2eWTnlBeLwur/GbJNZoWvDUZ8yjkAmZU2Kt0Wy 4NHS5YUQfWQrZf0sPkqZ820m2/PalGfYYW3qz5n0a3MT9yoSF59zWwJaxJiT+IE0 etbl9TELIBenLNjELLTWm/2MCO6XDTlovJMQFa8boMU07TH4jEDrvAUeB4wJw7kQ gBWkppPLzd1PyXWYWKV44jJnDIs7/sJyPzo1RO8PZsQU -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:56 2026 by rpki-client