This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/D_kycOLA_o4q0Ww5Lh36KemVeX0.roa File: D_kycOLA_o4q0Ww5Lh36KemVeX0.roa (raw, json) Hash identifier: SApi9Pszk9ISyOi0H5FxzmLbcgUJCFuE4kzxIO0qcTQ= Subject key identifier: 0F:F9:32:70:E2:C0:FE:8E:2A:D1:6C:39:2E:1D:FA:29:E9:95:79:7D Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82C082B97CF47376FFDEC587A815BE Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/D_kycOLA_o4q0Ww5Lh36KemVeX0.roa Signing time: Fri 02 Jan 2026 16:20:34 +0000 ROA not before: Fri 02 Jan 2026 16:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56382 IP address blocks: 194.50.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c0:82:b9:7c:f4:73:76:ff:de:c5:87:a8:15:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ff93270e2c0fe8e2ad16c392e1dfa29e995797d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:67:50:46:c8:08:30:6b:5b:c4:2c:a8:f4: a5:ed:95:67:8f:ec:91:63:68:4e:d1:45:56:e6:b1: 95:28:96:9b:9d:d0:b7:90:e3:08:e2:fc:c8:33:e3: 97:63:86:97:ac:f4:7a:a3:ac:c7:8a:45:42:91:cc: 60:b0:26:61:2f:b3:63:45:51:0d:c2:5b:75:08:aa: 65:6b:cf:8a:cc:df:3c:69:89:eb:86:35:f7:45:80: f7:b7:40:12:66:5d:31:4f:06:a8:80:b1:4d:28:70: c2:7e:73:b1:53:74:c6:82:1c:8c:a2:3f:aa:5a:6e: b9:81:0f:d9:6e:f8:aa:90:d8:75:79:33:c9:b9:d1: 1d:f0:ab:86:62:f9:2a:77:e0:ed:6e:dd:8a:c4:47: 6f:82:93:22:e0:b5:aa:41:45:8e:8e:67:8d:d9:37: 9c:7c:1a:01:dd:e6:9b:af:27:e8:13:7d:a8:d2:9a: 92:5a:98:e5:62:d7:7a:38:ce:f4:2d:bd:23:46:b7: 8e:6e:95:d8:04:47:d2:a6:c3:6a:3b:56:6e:54:be: f7:10:d9:63:d5:88:cd:1d:5c:37:ec:57:03:0b:dd: 85:d0:94:9b:b9:eb:41:5c:a5:74:b6:34:fb:8c:fc: ac:6c:01:9f:26:d8:ed:56:ef:b6:68:c9:3e:f3:f2: ab:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F9:32:70:E2:C0:FE:8E:2A:D1:6C:39:2E:1D:FA:29:E9:95:79:7D X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/D_kycOLA_o4q0Ww5Lh36KemVeX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.19.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:a7:3a:b3:31:f6:83:cb:99:7b:ec:26:37:32:04:e4:1a:b9: 43:67:73:6e:4b:40:d9:8d:76:3d:2c:18:2f:9d:3b:01:eb:da: fc:4d:eb:1c:b3:e3:0e:0d:51:e4:55:00:12:53:36:ec:e7:97: 7d:c6:8e:7a:a6:7d:b4:6e:b2:ec:ca:9b:f5:82:82:ed:c7:77: 11:64:63:8c:38:35:cb:39:dd:ba:76:dd:f7:4c:c1:6b:b9:f8: 7d:d5:75:e7:a3:82:d8:fb:da:7e:1f:74:91:d9:09:e9:9d:8c: 45:29:06:28:3a:67:e8:ed:6b:0b:17:1b:2d:a4:c1:09:81:ba: 86:ad:e4:ca:47:d9:e2:b2:b3:58:81:16:c5:82:3b:12:25:7e: 2b:83:89:52:76:a8:62:83:67:2d:3b:29:ee:ce:ef:8f:42:98: 9b:d6:07:bf:4a:be:3f:34:26:b1:de:f0:7b:af:fe:3c:0a:cf: 19:02:2f:8e:59:df:b3:8c:69:41:d1:3b:cf:92:fe:0f:2e:c6: ad:61:f4:54:af:fd:95:41:47:bb:62:82:1d:e7:c5:31:95:bf: 97:92:d9:e1:98:71:3a:4a:7b:e5:70:eb:fd:d0:dc:33:8b:79: 95:60:51:ea:82:d8:e2:e8:29:57:bf:06:e9:ef:f0:fb:84:57: f5:96:c6:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gsCCuXz0c3b/3sWHqBW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmY5MzI3MGUyYzBmZThlMmFkMTZjMzkyZTFkZmEyOWU5OTU3OTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEtnUEbICDBrW8QsqPSl7ZVnj+yR Y2hO0UVW5rGVKJabndC3kOMI4vzIM+OXY4aXrPR6o6zHikVCkcxgsCZhL7NjRVEN wlt1CKpla8+KzN88aYnrhjX3RYD3t0ASZl0xTwaogLFNKHDCfnOxU3TGghyMoj+q Wm65gQ/ZbviqkNh1eTPJudEd8KuGYvkqd+Dtbt2KxEdvgpMi4LWqQUWOjmeN2Tec fBoB3eabryfoE32o0pqSWpjlYtd6OM70Lb0jRreObpXYBEfSpsNqO1ZuVL73ENlj 1YjNHVw37FcDC92F0JSbuetBXKV0tjT7jPysbAGfJtjtVu+2aMk+8/Kr9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA/5MnDiwP6OKtFsOS4d+inplXl9MB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvRF9reWNPTEFfbzRxMFd3NUxoMzZLZW1WZVgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjITMA0G CSqGSIb3DQEBCwUAA4IBAQB6pzqzMfaDy5l77CY3MgTkGrlDZ3NuS0DZjXY9LBgv nTsB69r8Tescs+MODVHkVQASUzbs55d9xo56pn20brLsypv1goLtx3cRZGOMODXL Od26dt33TMFrufh91XXno4LY+9p+H3SR2QnpnYxFKQYoOmfo7WsLFxstpMEJgbqG reTKR9nisrNYgRbFgjsSJX4rg4lSdqhig2ctOynuzu+PQpib1ge/Sr4/NCax3vB7 r/48Cs8ZAi+OWd+zjGlB0TvPkv4PLsatYfRUr/2VQUe7YoId58Uxlb+XktnhmHE6 SnvlcOv90Nwzi3mVYFHqgtji6ClXvwbp7/D7hFf1lsZe -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:39 2026 by rpki-client