This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/kyxqx7NPhGb4ggxOfoZpnu1n_S0.roa File: kyxqx7NPhGb4ggxOfoZpnu1n_S0.roa (raw, json) Hash identifier: TCL6ozSUuPbHKcQL9MhFYjm+l3Ilnl3GbAL+XQhGlFc= Subject key identifier: 93:2C:6A:C7:B3:4F:84:66:F8:82:0C:4E:7E:86:69:9E:ED:67:FD:2D Certificate issuer: /CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e Certificate serial: 019B7F15226508DAD5BEC05AFD0FD73F293B Authority key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/kyxqx7NPhGb4ggxOfoZpnu1n_S0.roa Signing time: Fri 02 Jan 2026 14:20:50 +0000 ROA not before: Fri 02 Jan 2026 14:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209528 IP address blocks: 45.135.64.0/22 maxlen: 24 185.162.136.0/22 maxlen: 24 2a09:2bc0::/32 maxlen: 32 2a0e:8940::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:22:65:08:da:d5:be:c0:5a:fd:0f:d7:3f:29:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e Validity Not Before: Jan 2 14:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=932c6ac7b34f8466f8820c4e7e86699eed67fd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:bd:89:78:85:4e:00:4b:44:43:0b:d3:32: 41:5c:c2:c0:e3:c6:75:27:61:aa:7c:4c:13:15:ad: 86:1d:5e:66:ca:1d:db:ea:29:58:12:ba:66:bc:ae: 69:b8:95:68:e3:6e:8a:31:4f:97:25:03:1d:0c:26: 4d:bc:4b:20:a6:04:0d:4b:48:af:d3:cd:f9:aa:20: d1:3d:8a:9d:7e:c3:a8:78:8c:a5:c7:e4:6e:d4:b1: c8:90:f5:aa:bc:bb:cb:09:96:75:0c:bc:7e:17:1f: b9:ca:bf:2b:0b:dc:19:d4:27:ba:f0:79:c5:cb:b0: 87:65:55:f0:84:8c:84:4f:6e:60:89:23:dc:66:b1: 1a:8b:63:b6:20:72:8e:46:f7:01:f4:75:18:7d:b7: ef:a0:c8:16:c7:ed:89:3e:89:67:18:39:fd:fa:8f: 7a:e6:76:f5:03:74:e6:54:6f:7a:68:e7:52:27:a3: 10:2e:d5:f2:54:a1:68:05:59:b0:80:f2:c2:34:64: 50:90:b0:cd:39:bc:c7:9c:31:f2:e2:59:13:90:2b: a2:56:e9:58:81:dc:12:a7:af:fe:22:30:38:d3:b1: 25:54:39:27:c1:20:59:10:c8:4c:22:f8:1d:4e:96: f7:d0:2e:51:c5:7c:ee:14:6a:d7:fb:18:6b:fa:18: 5d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2C:6A:C7:B3:4F:84:66:F8:82:0C:4E:7E:86:69:9E:ED:67:FD:2D X509v3 Authority Key Identifier: keyid:50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/kyxqx7NPhGb4ggxOfoZpnu1n_S0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.64.0/22 185.162.136.0/22 IPv6: 2a09:2bc0::/32 2a0e:8940::/29 Signature Algorithm: sha256WithRSAEncryption a5:68:0f:15:c5:15:71:3d:00:3c:76:3e:86:04:46:a9:2c:25: d0:3a:a7:1e:5f:0b:92:83:b6:bc:e0:33:58:63:99:45:f4:92: 23:79:af:20:2b:92:d1:97:04:49:54:6d:88:e9:5e:53:62:ed: 27:3c:2c:e0:16:5c:97:30:f4:2e:be:62:4b:c9:60:59:5b:2d: 75:67:d3:8d:b0:1f:da:73:89:b8:33:39:2c:3f:06:32:29:29: b7:65:57:a2:e2:b5:32:ae:f7:6d:d0:5d:35:26:eb:da:95:42: c6:d9:1e:64:b2:90:0e:a0:64:c4:da:7c:a6:26:ef:0b:a0:9a: 40:da:a4:7d:cb:2e:42:ec:16:44:34:62:0f:4f:ac:63:6e:fa: 45:08:05:7d:ec:c7:45:fd:00:b4:59:ae:d7:83:56:f8:6a:4b: aa:9b:bf:64:6d:cd:23:13:93:b4:b1:80:b5:a9:39:6e:c7:ab: bf:8c:8d:29:cc:ce:98:ac:78:39:0a:0d:94:de:2e:e1:b0:ab: 0e:83:3b:80:ec:a4:58:19:cc:49:67:30:e7:56:65:b0:0d:3d: 7e:11:43:06:3f:6f:e6:ab:ca:67:a2:8e:52:d3:27:83:ed:79: 50:af:2e:62:7e:53:58:03:99:d5:14:9b:5b:87:ae:49:36:2b: 4c:41:e5:6d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/FSJlCNrVvsBa/Q/XPyk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMWMxMDU3YmNiOWQxZTBkMTU3NDhiN2YzMmM1OWY4Yzdi NzJhNGUwHhcNMjYwMTAyMTQyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzJjNmFjN2IzNGY4NDY2Zjg4MjBjNGU3ZTg2Njk5ZWVkNjdmZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplm9iXiFTgBLREML0zJBXMLA48Z1 J2GqfEwTFa2GHV5myh3b6ilYErpmvK5puJVo426KMU+XJQMdDCZNvEsgpgQNS0iv 0835qiDRPYqdfsOoeIylx+Ru1LHIkPWqvLvLCZZ1DLx+Fx+5yr8rC9wZ1Ce68HnF y7CHZVXwhIyET25giSPcZrEai2O2IHKORvcB9HUYfbfvoMgWx+2JPolnGDn9+o96 5nb1A3TmVG96aOdSJ6MQLtXyVKFoBVmwgPLCNGRQkLDNObzHnDHy4lkTkCuiVulY gdwSp6/+IjA407ElVDknwSBZEMhMIvgdTpb30C5RxXzuFGrX+xhr+hhdEQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJMsasezT4Rm+IIMTn6GaZ7tZ/0tMB8GA1UdIwQY MBaAFFAcEFe8udHg0VdIt/MsWfjHtypOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJ3UVY3eTUwZURSVjBpMzh5eFotTWUzS2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iYTNmYTEtZjlkMC00MDk3LWJkYzkt ZDcxN2U0ZGZjYjNkLzEva3l4cXg3TlBoR2I0Z2d4T2ZvWnBudTFuX1MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iYTNmYTEtZjlkMC00MDk3LWJkYzktZDcxN2U0ZGZjYjNk LzEvVUJ3UVY3eTUwZURSVjBpMzh5eFotTWUzS2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCLYdAAwQC uaKIMBQEAgACMA4DBQAqCSvAAwUDKg6JQDANBgkqhkiG9w0BAQsFAAOCAQEApWgP FcUVcT0APHY+hgRGqSwl0DqnHl8LkoO2vOAzWGOZRfSSI3mvICuS0ZcESVRtiOle U2LtJzws4BZclzD0Lr5iS8lgWVstdWfTjbAf2nOJuDM5LD8GMikpt2VXouK1Mq73 bdBdNSbr2pVCxtkeZLKQDqBkxNp8pibvC6CaQNqkfcsuQuwWRDRiD0+sY276RQgF fezHRf0AtFmu14NW+GpLqpu/ZG3NIxOTtLGAtak5bserv4yNKczOmKx4OQoNlN4u 4bCrDoM7gOykWBnMSWcw51ZlsA09fhFDBj9v5qvKZ6KOUtMng+15UK8uYn5TWAOZ 1RSbW4euSTYrTEHlbQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:34 2026 by rpki-client