This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/KvYzATzwIL9g-iqhBKjN6pRQns4.roa File: KvYzATzwIL9g-iqhBKjN6pRQns4.roa (raw, json) Hash identifier: Bq4sJCKB4JPFIy91hhv99d4z3fVb9NtKRyY/klM1Ank= Subject key identifier: 2A:F6:33:01:3C:F0:20:BF:60:FA:2A:A1:04:A8:CD:EA:94:50:9E:CE Certificate issuer: /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517 Certificate serial: 019B797ED799128A451ABF5CEBB9F90ADA5F Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/KvYzATzwIL9g-iqhBKjN6pRQns4.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35684 IP address blocks: 193.239.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 06:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d7:99:12:8a:45:1a:bf:5c:eb:b9:f9:0a:da:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517 Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2af633013cf020bf60fa2aa104a8cdea94509ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:07:56:19:82:12:1a:42:c9:7a:01:3d:ec:d7: a5:b9:a7:57:19:8f:03:3e:d3:0e:8b:68:5a:cb:93: 38:4f:e0:13:0b:33:e7:22:15:27:f3:98:fb:03:00: 1f:4d:05:e6:0a:4a:14:83:51:28:77:46:6b:c3:de: 5a:fd:a6:81:7a:23:95:ae:44:90:69:58:d5:59:7a: 8f:9a:ba:ae:b9:93:30:6c:93:99:03:3b:fb:bd:52: 49:af:87:66:58:d8:a7:48:62:67:98:80:ca:96:da: 7c:cd:e7:98:c3:bb:b0:48:06:48:de:37:bb:99:4f: 0b:1b:f8:94:74:14:b8:05:c3:86:28:da:c0:a9:00: 13:0c:5d:b0:59:31:52:c6:8f:2e:55:fb:f0:1f:e6: 34:7f:9c:cd:8a:ba:3c:0a:7b:18:df:b6:78:39:c8: b0:30:17:49:96:3d:62:57:5a:cc:0f:a1:d0:90:04: 38:6b:6f:7c:6b:d1:cf:88:15:09:e1:6c:e2:46:97: 08:03:a0:ce:e5:37:26:c4:43:8c:90:db:a3:17:83: 85:18:6d:d9:ec:cd:0e:2d:dd:21:5e:1e:4d:4e:60: 23:2d:99:1a:61:d7:61:72:b9:db:b5:dc:77:d9:bf: 39:73:b5:4c:5f:41:0c:f2:9d:81:64:49:97:9c:41: 19:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F6:33:01:3C:F0:20:BF:60:FA:2A:A1:04:A8:CD:EA:94:50:9E:CE X509v3 Authority Key Identifier: keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/KvYzATzwIL9g-iqhBKjN6pRQns4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.162.0/23 Signature Algorithm: sha256WithRSAEncryption 43:ae:3d:90:05:df:9d:12:cf:35:f1:26:72:44:49:41:bd:be: fa:a2:7e:14:a7:e5:20:28:f7:0b:1f:93:b3:54:45:47:24:cd: 19:eb:18:9c:ae:57:b6:20:04:f9:df:c4:a4:e2:46:d1:99:dd: b5:b9:db:cb:20:89:e8:6c:b4:7f:c5:7f:28:13:63:1d:a0:0e: b6:63:fc:b3:67:6a:1b:75:ff:63:50:15:2c:0c:b2:39:1d:72: 1d:14:52:11:9c:e0:00:37:23:28:fb:32:73:a3:a6:4b:5b:80: 5c:77:ea:97:f1:93:11:0a:ed:fa:b4:4a:d7:01:97:58:3b:75: d2:7d:85:15:87:62:1d:a6:67:db:8c:db:4e:e9:43:11:03:dc: 49:37:bc:48:87:f8:d9:5a:24:78:84:a7:82:2f:43:63:d4:0a: 1e:8c:5b:4e:1e:a5:a6:89:86:68:22:9e:39:01:83:cf:7d:7d: 1c:60:d0:2f:47:26:b7:7a:c8:94:1a:cc:77:ce:5a:b4:a7:6f: 8f:7e:7a:1f:fd:c7:30:0c:09:d9:65:99:05:f2:d3:75:88:ec: 69:06:91:79:96:48:0b:a5:3f:4b:fe:5f:0b:bd:ae:da:c0:e3: 6d:24:0a:bd:52:f8:fd:e7:ea:f2:f4:31:88:83:bf:14:b0:ba: df:e6:02:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fteZEopFGr9c67n5CtpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNTFiNWI4MTMyZjllMzA3YjcxN2EzZTFlNTRkMWY3ZjQ1 YWU1MTcwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWY2MzMwMTNjZjAyMGJmNjBmYTJhYTEwNGE4Y2RlYTk0NTA5ZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AdWGYISGkLJegE97NeluadXGY8D PtMOi2hay5M4T+ATCzPnIhUn85j7AwAfTQXmCkoUg1Eod0Zrw95a/aaBeiOVrkSQ aVjVWXqPmrquuZMwbJOZAzv7vVJJr4dmWNinSGJnmIDKltp8zeeYw7uwSAZI3je7 mU8LG/iUdBS4BcOGKNrAqQATDF2wWTFSxo8uVfvwH+Y0f5zNiro8CnsY37Z4Ociw MBdJlj1iV1rMD6HQkAQ4a298a9HPiBUJ4WziRpcIA6DO5TcmxEOMkNujF4OFGG3Z 7M0OLd0hXh5NTmAjLZkaYddhcrnbtdx32b85c7VMX0EM8p2BZEmXnEEZ7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCr2MwE88CC/YPoqoQSozeqUUJ7OMB8GA1UdIwQY MBaAFI9RtbgTL54we3F6Ph5U0ff0WuUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajFHMXVCTXZuakI3Y1hvLUhsVFI5X1JhNVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYTI0MjctYjMzYi00YjgxLWFmMzct ZTIyNTFlNDg5Y2JiLzEvS3ZZekFUendJTDlnLWlxaEJLak42cFJRbnM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kYTI0MjctYjMzYi00YjgxLWFmMzctZTIyNTFlNDg5Y2Ji LzEvajFHMXVCTXZuakI3Y1hvLUhsVFI5X1JhNVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwe+iMA0G CSqGSIb3DQEBCwUAA4IBAQBDrj2QBd+dEs818SZyRElBvb76on4Up+UgKPcLH5Oz VEVHJM0Z6xicrle2IAT538Sk4kbRmd21udvLIInobLR/xX8oE2MdoA62Y/yzZ2ob df9jUBUsDLI5HXIdFFIRnOAANyMo+zJzo6ZLW4Bcd+qX8ZMRCu36tErXAZdYO3XS fYUVh2IdpmfbjNtO6UMRA9xJN7xIh/jZWiR4hKeCL0Nj1AoejFtOHqWmiYZoIp45 AYPPfX0cYNAvRya3esiUGsx3zlq0p2+Pfnof/ccwDAnZZZkF8tN1iOxpBpF5lkgL pT9L/l8Lva7awONtJAq9Uvj95+ry9DGIg78UsLrf5gJ+ -----END CERTIFICATE-----Generated at Fri Jan 2 14:42:29 2026 by rpki-client