This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/KytpCVKCeCWJxaC4a7hhDMjICE4.roa
File: KytpCVKCeCWJxaC4a7hhDMjICE4.roa (raw, json)
Hash identifier: qpX1hsz4N1aVbQnjTC1/LhdiYlriVHEuhmRD7DIMIf0=
Subject key identifier: 2B:2B:69:09:52:82:78:25:89:C5:A0:B8:6B:B8:61:0C:C8:C8:08:4E
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 019B22139E99DDA77317F90239DF48BE4277
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/KytpCVKCeCWJxaC4a7hhDMjICE4.roa
Signing time: Mon 15 Dec 2025 12:54:29 +0000
ROA not before: Mon 15 Dec 2025 12:54:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.182.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 12:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:22:13:9e:99:dd:a7:73:17:f9:02:39:df:48:be:42:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Dec 15 12:54:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b2b69095282782589c5a0b86bb8610cc8c8084e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:4f:48:53:40:07:8d:2b:6c:a8:cd:66:2f:
35:1e:d0:1a:07:af:9f:51:85:ba:09:7f:76:70:f3:
a5:20:68:ca:93:80:d5:c7:68:32:7a:88:94:f8:74:
97:b4:b1:04:f9:13:07:ba:0a:fb:70:90:1e:24:35:
7d:5f:93:80:69:c0:74:ee:01:88:ad:6d:96:eb:44:
2e:0b:0b:b7:13:58:56:2d:96:5c:c0:fb:b9:a9:ca:
a3:e4:dd:82:40:5c:22:21:b2:e7:9a:88:5b:a3:e2:
e8:f0:b3:3f:3b:40:9e:34:ce:d9:42:39:f1:26:f9:
dd:70:f4:d0:f6:46:d4:1e:ba:61:75:ea:cb:07:41:
57:6a:4f:0d:69:de:e7:39:5d:42:40:43:e4:30:cc:
34:97:41:3e:2e:00:a8:82:00:0d:45:94:c9:5c:99:
57:09:44:ab:ef:3e:b2:d9:bf:00:4d:13:88:10:34:
70:66:c9:10:c7:4d:45:4b:38:1d:dc:8d:d9:85:5d:
ce:6a:8a:aa:bd:9e:63:76:c4:5c:e9:d5:fd:5f:43:
9e:65:ae:fe:ca:46:df:57:f8:9d:24:bd:46:2e:4e:
9e:c6:3a:cd:11:fd:48:86:64:1e:cf:9d:bf:0f:10:
fe:fa:1c:08:88:d8:a3:fb:97:4f:69:70:c6:68:d3:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2B:69:09:52:82:78:25:89:C5:A0:B8:6B:B8:61:0C:C8:C8:08:4E
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/KytpCVKCeCWJxaC4a7hhDMjICE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.65.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b5:ff:64:b5:57:c8:dc:7e:44:ab:78:57:95:9e:56:0a:f0:
bd:2e:c7:59:8d:2e:07:33:e2:2a:85:30:f3:04:cc:46:e7:dc:
e1:2b:2a:e2:75:c3:c2:6f:99:4c:7c:ed:f8:5f:bc:24:62:aa:
4e:57:14:80:5c:a1:fd:7f:f8:5d:f1:84:0a:d9:1e:4e:6e:b7:
03:41:69:9b:7b:da:01:6c:0b:87:2e:55:ed:6c:c4:11:ad:66:
7f:20:f4:86:a5:a2:60:c6:e6:1c:dd:d4:cf:d8:0c:7e:88:9d:
4f:35:e6:ee:a6:2e:e5:de:c7:6e:7b:90:fa:d2:f5:b8:d3:42:
02:a1:f9:60:30:30:c7:44:95:aa:b2:7a:26:47:35:89:37:52:
88:a5:e7:60:5c:4d:45:f4:d6:99:2b:6b:2e:8c:da:a8:c2:3f:
6c:12:23:f4:c7:73:db:1e:cf:f2:01:f3:df:12:d1:9c:9b:96:
6f:57:94:e0:8f:63:57:f3:af:c6:ed:23:92:45:49:b6:81:5b:
a6:e9:6a:7f:67:3d:66:76:d4:5a:22:42:32:55:ec:c6:70:ec:
c9:5b:3e:2f:9e:1c:a4:21:32:4c:c4:db:57:89:3b:6a:e0:aa:
22:a5:55:05:98:87:b1:64:92:1d:7e:3f:a3:a6:89:81:4c:d4:
32:10:cf:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZsiE56Z3adzF/kCOd9IvkJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjUxMjE1MTI1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjJiNjkwOTUyODI3ODI1ODljNWEwYjg2YmI4NjEwY2M4YzgwODRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc9PSFNAB40rbKjNZi81HtAaB6+f
UYW6CX92cPOlIGjKk4DVx2gyeoiU+HSXtLEE+RMHugr7cJAeJDV9X5OAacB07gGI
rW2W60QuCwu3E1hWLZZcwPu5qcqj5N2CQFwiIbLnmohbo+Lo8LM/O0CeNM7ZQjnx
JvndcPTQ9kbUHrphderLB0FXak8Nad7nOV1CQEPkMMw0l0E+LgCoggANRZTJXJlX
CUSr7z6y2b8ATROIEDRwZskQx01FSzgd3I3ZhV3OaoqqvZ5jdsRc6dX9X0OeZa7+
ykbfV/idJL1GLk6exjrNEf1IhmQez52/DxD++hwIiNij+5dPaXDGaNPHJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCsraQlSgnglicWguGu4YQzIyAhOMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvS3l0cENWS0NlQ1dKeGFDNGE3aGhETWpJQ0U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubZBMA0G
CSqGSIb3DQEBCwUAA4IBAQABtf9ktVfI3H5Eq3hXlZ5WCvC9LsdZjS4HM+IqhTDz
BMxG59zhKyridcPCb5lMfO34X7wkYqpOVxSAXKH9f/hd8YQK2R5ObrcDQWmbe9oB
bAuHLlXtbMQRrWZ/IPSGpaJgxuYc3dTP2Ax+iJ1PNebupi7l3sdue5D60vW400IC
oflgMDDHRJWqsnomRzWJN1KIpedgXE1F9NaZK2sujNqowj9sEiP0x3PbHs/yAfPf
EtGcm5ZvV5Tgj2NX86/G7SOSRUm2gVum6Wp/Zz1mdtRaIkIyVezGcOzJWz4vnhyk
ITJMxNtXiTtq4KoipVUFmIexZJIdfj+jpomBTNQyEM/L
-----END CERTIFICATE-----
Generated at Mon Dec 15 17:21:40 2025 by rpki-client