This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/KJY5nxCnM8VflNqrt-fuQ6cuQes.roa File: KJY5nxCnM8VflNqrt-fuQ6cuQes.roa (raw, json) Hash identifier: CD+3ziwBgnP7/0qdqqYvm343nyyRQZA21pgLWpHPvXc= Subject key identifier: 28:96:39:9F:10:A7:33:C5:5F:94:DA:AB:B7:E7:EE:43:A7:2E:41:EB Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a Certificate serial: 019B7BA4E06306D25A53A72CF3E4E712B94D Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/KJY5nxCnM8VflNqrt-fuQ6cuQes.roa Signing time: Thu 01 Jan 2026 22:19:21 +0000 ROA not before: Thu 01 Jan 2026 22:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34762 IP address blocks: 185.194.84.0/23 maxlen: 24 194.213.114.0/23 maxlen: 24 194.213.114.0/24 maxlen: 24 194.213.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e0:63:06:d2:5a:53:a7:2c:f3:e4:e7:12:b9:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a Validity Not Before: Jan 1 22:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2896399f10a733c55f94daabb7e7ee43a72e41eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:44:06:d0:08:82:2f:6a:19:3d:2f:16:f5:aa: a7:37:4c:e6:42:72:d0:62:40:27:51:3c:c0:eb:b8: 1e:f8:4b:7f:21:8b:9c:44:8e:a4:de:b9:58:5b:a2: e6:93:ec:02:bb:09:9b:78:cf:78:c9:f8:c0:3a:42: ce:93:27:ad:fd:70:9a:df:24:57:ea:33:e7:ac:b1: 40:53:9f:c2:de:da:a2:59:ca:90:38:c6:8d:42:36: 7b:1e:8d:2d:6e:37:3e:51:33:5a:9e:3d:a6:2e:96: 1f:9f:d0:f1:9f:d1:86:70:da:ad:2d:6d:f8:a7:a5: c8:70:6e:ba:a1:16:60:18:c4:71:2b:7a:b5:8e:2c: d8:f4:f0:53:14:21:6f:98:73:87:90:fe:48:a4:b4: b8:f1:16:6e:0f:7c:61:06:80:90:92:2c:70:8b:59: 0a:46:97:40:95:37:57:06:64:38:5e:8e:8f:31:5d: c5:aa:df:90:51:2f:a2:8d:32:eb:e0:d4:78:cf:dd: 90:8b:2c:7c:6d:2e:ff:d6:14:0a:ab:59:7a:80:34: 4e:94:0c:c8:a7:1d:8c:00:1d:70:28:b5:1a:2a:26: ab:a0:10:27:12:f8:45:6d:8b:9d:72:fb:15:1a:07: 37:fc:17:aa:c7:5a:80:95:9f:b0:cc:8d:c5:b1:4c: 3b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:96:39:9F:10:A7:33:C5:5F:94:DA:AB:B7:E7:EE:43:A7:2E:41:EB X509v3 Authority Key Identifier: keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/KJY5nxCnM8VflNqrt-fuQ6cuQes.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.84.0/23 194.213.114.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:73:6a:4e:4d:42:b3:5a:1d:02:c3:19:fc:31:64:db:50:46: db:86:d4:35:7c:93:d0:1d:37:53:d5:87:22:52:d9:c2:d0:d8: 78:73:50:05:46:b0:04:29:9a:5f:b5:d2:50:f9:1a:44:23:38: 4d:74:a9:44:2d:05:bd:de:9a:09:93:ef:01:8b:76:81:36:e7: 5f:1a:29:03:42:96:fb:7c:17:e8:30:08:d4:f1:02:23:fb:f5: 17:4f:e2:a4:f4:12:3c:9e:ca:28:c5:a7:e9:30:29:b4:d5:fd: 8b:27:45:17:ab:ac:93:0c:db:3e:4c:7b:d1:56:de:59:5d:be: 56:f8:18:0a:52:b8:b4:f4:e6:af:9c:44:49:2c:89:87:25:0a: 66:f5:06:0c:fd:64:8b:b4:6b:bd:68:59:b8:40:e6:a0:4b:4a: 6c:74:75:e4:06:96:f3:d5:29:66:e9:45:e4:56:d2:b3:1b:bc: 14:f9:96:f2:5d:4c:4e:43:8d:92:18:ce:9d:4f:19:27:2c:5c: d5:f0:33:be:96:3a:ce:cb:94:3d:92:b2:c2:64:99:54:ee:77: b6:db:a1:96:df:c5:af:8b:65:c7:61:2f:9f:99:66:56:57:94: 86:06:24:55:fd:ac:ea:65:3f:35:eb:24:fe:99:24:7a:a9:cb: 86:e0:3e:80 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pOBjBtJaU6cs8+TnErlNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5YTJjMmVjZjU4YzQ0YjM1YTBkYTI5NTdmZjRkY2EyZTYw YjY4NmEwHhcNMjYwMTAxMjIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODk2Mzk5ZjEwYTczM2M1NWY5NGRhYWJiN2U3ZWU0M2E3MmU0MWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0QG0AiCL2oZPS8W9aqnN0zmQnLQ YkAnUTzA67ge+Et/IYucRI6k3rlYW6Lmk+wCuwmbeM94yfjAOkLOkyet/XCa3yRX 6jPnrLFAU5/C3tqiWcqQOMaNQjZ7Ho0tbjc+UTNanj2mLpYfn9Dxn9GGcNqtLW34 p6XIcG66oRZgGMRxK3q1jizY9PBTFCFvmHOHkP5IpLS48RZuD3xhBoCQkixwi1kK RpdAlTdXBmQ4Xo6PMV3Fqt+QUS+ijTLr4NR4z92Qiyx8bS7/1hQKq1l6gDROlAzI px2MAB1wKLUaKiaroBAnEvhFbYudcvsVGgc3/Beqx1qAlZ+wzI3FsUw7EwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCiWOZ8QpzPFX5Taq7fn7kOnLkHrMB8GA1UdIwQY MBaAFJmiwuz1jESzWg2ilX/03KLmC2hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAt ZTVkNTA3YTgyNmJmLzEvS0pZNW54Q25NOFZmbE5xcnQtZnVRNmN1UWVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAtZTVkNTA3YTgyNmJm LzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBucJUAwQB wtVyMA0GCSqGSIb3DQEBCwUAA4IBAQAbc2pOTUKzWh0Cwxn8MWTbUEbbhtQ1fJPQ HTdT1YciUtnC0Nh4c1AFRrAEKZpftdJQ+RpEIzhNdKlELQW93poJk+8Bi3aBNudf GikDQpb7fBfoMAjU8QIj+/UXT+Kk9BI8nsooxafpMCm01f2LJ0UXq6yTDNs+THvR Vt5ZXb5W+BgKUri09OavnERJLImHJQpm9QYM/WSLtGu9aFm4QOagS0psdHXkBpbz 1Slm6UXkVtKzG7wU+ZbyXUxOQ42SGM6dTxknLFzV8DO+ljrOy5Q9krLCZJlU7ne2 26GW38Wvi2XHYS+fmWZWV5SGBiRV/azqZT816yT+mSR6qcuG4D6A -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:54 2026 by rpki-client