This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/ky99BlOPlH5O6f7O36UwCkNpB5c.roa File: ky99BlOPlH5O6f7O36UwCkNpB5c.roa (raw, json) Hash identifier: tyITeyFzQukDFtq+qQfcsC7Kui3xVMsWGSDU3eA4x4w= Subject key identifier: 93:2F:7D:06:53:8F:94:7E:4E:E9:FE:CE:DF:A5:30:0A:43:69:07:97 Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928 Certificate serial: 019B7F81AE4124F26180E9CAF15488740DD7 Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/ky99BlOPlH5O6f7O36UwCkNpB5c.roa Signing time: Fri 02 Jan 2026 16:19:23 +0000 ROA not before: Fri 02 Jan 2026 16:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50872 IP address blocks: 79.110.144.0/20 maxlen: 24 176.123.208.0/21 maxlen: 24 193.243.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:ae:41:24:f2:61:80:e9:ca:f1:54:88:74:0d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928 Validity Not Before: Jan 2 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=932f7d06538f947e4ee9fecedfa5300a43690797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bc:66:df:40:ee:90:28:86:d3:98:0d:45:3c: fc:73:dd:b0:21:82:00:a3:5e:a3:4e:e9:e6:07:97: 27:f4:a7:b1:3a:98:68:12:18:24:17:9e:b5:a8:44: 43:6a:a2:16:37:3d:17:c6:16:85:8d:34:2b:22:2b: 2c:be:fb:e4:64:7d:03:e6:b1:61:a9:2f:d3:00:73: b0:10:83:2a:20:44:b4:08:db:7a:f3:ec:91:38:28: 85:47:84:73:4b:df:35:f4:0c:1e:45:98:2c:d9:d9: 18:af:17:6f:25:b7:9f:3d:8a:19:7c:0b:7c:b8:86: 2f:81:e6:55:02:49:b6:2e:30:05:6d:90:d2:1f:d1: cf:6c:64:ad:ca:01:7a:24:21:47:d4:f5:c6:53:f6: 2d:e5:32:f8:b6:f0:25:40:c8:d5:d3:79:06:8c:de: 3a:a1:82:f1:ac:8e:d4:8c:29:55:26:85:07:d6:54: a8:1e:79:83:1a:39:fe:98:e0:42:42:6d:c4:27:d8: 26:05:66:35:45:dc:f8:4e:ad:0d:44:b1:49:97:67: 0e:39:45:bf:4d:10:74:a0:d8:24:2a:a3:ab:56:e4: c0:8a:bb:3b:7d:28:1c:ee:15:22:fc:19:cd:cc:ca: 25:ac:f6:65:3f:41:25:c8:d2:de:cf:f6:18:48:9e: f5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2F:7D:06:53:8F:94:7E:4E:E9:FE:CE:DF:A5:30:0A:43:69:07:97 X509v3 Authority Key Identifier: keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/ky99BlOPlH5O6f7O36UwCkNpB5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.144.0/20 176.123.208.0/21 193.243.168.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:76:1a:e4:29:06:3d:87:d9:48:80:64:68:8f:45:6c:d5:a9: ca:88:33:5d:c2:2f:14:10:1f:07:71:cf:5f:27:8f:98:32:b1: 16:36:25:7d:6f:be:23:89:e3:e8:0f:ed:48:7b:2a:77:15:71: 9c:41:5a:58:33:aa:bb:0a:62:0b:9f:a8:d2:75:ca:52:17:20: bc:9e:c9:b5:7e:0d:e4:7d:e7:61:b0:4e:8f:c2:49:a0:8b:4e: 25:1f:29:c9:f4:c1:74:f1:4d:ea:fb:ed:ea:1d:7a:fa:6e:2d: 9e:45:c8:84:53:e6:8f:b4:bb:17:0c:b2:d8:ce:ae:b5:62:c0: 0a:fd:c2:7a:41:e5:12:a5:98:1b:c9:61:e8:24:f8:e6:bd:06: 7c:b6:02:58:ce:8c:f2:d8:b1:f2:11:a5:09:b4:0a:f7:8c:6c: 35:4c:ca:35:3b:2a:63:08:c5:64:64:9c:15:88:59:dd:b4:60: 55:2b:3b:90:ae:98:4c:fb:98:aa:e4:00:82:d4:26:74:73:47: 4f:9d:10:7a:70:cf:f0:55:00:ce:79:8b:12:aa:15:ee:9a:3d: 0e:26:43:0b:df:4e:d0:83:9e:7e:70:e9:d2:a4:28:8e:e3:de: 69:08:c5:fd:6a:81:36:a9:4a:a5:4d:a7:86:b1:87:43:77:a4: e0:3c:53:99 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/ga5BJPJhgOnK8VSIdA3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ODAyNjg1ZGE3MzRiMTU3YTJkYjljY2ZmNzZkZDRlNDg5 MTE5MjgwHhcNMjYwMTAyMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzJmN2QwNjUzOGY5NDdlNGVlOWZlY2VkZmE1MzAwYTQzNjkwNzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7xm30DukCiG05gNRTz8c92wIYIA o16jTunmB5cn9KexOphoEhgkF561qERDaqIWNz0XxhaFjTQrIissvvvkZH0D5rFh qS/TAHOwEIMqIES0CNt68+yROCiFR4RzS9819AweRZgs2dkYrxdvJbefPYoZfAt8 uIYvgeZVAkm2LjAFbZDSH9HPbGStygF6JCFH1PXGU/Yt5TL4tvAlQMjV03kGjN46 oYLxrI7UjClVJoUH1lSoHnmDGjn+mOBCQm3EJ9gmBWY1Rdz4Tq0NRLFJl2cOOUW/ TRB0oNgkKqOrVuTAirs7fSgc7hUi/BnNzMolrPZlP0ElyNLez/YYSJ71+QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJMvfQZTj5R+Tun+zt+lMApDaQeXMB8GA1UdIwQY MBaAFCeAJoXac0sVei25zP923U5IkRkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEt MTIzYTg2ZDk0ODE4LzEva3k5OUJsT1BsSDVPNmY3TzM2VXdDa05wQjVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEtMTIzYTg2ZDk0ODE4 LzEvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQET26QAwQD sHvQAwQCwfOoMA0GCSqGSIb3DQEBCwUAA4IBAQAKdhrkKQY9h9lIgGRoj0Vs1anK iDNdwi8UEB8Hcc9fJ4+YMrEWNiV9b74jiePoD+1Ieyp3FXGcQVpYM6q7CmILn6jS dcpSFyC8nsm1fg3kfedhsE6Pwkmgi04lHynJ9MF08U3q++3qHXr6bi2eRciEU+aP tLsXDLLYzq61YsAK/cJ6QeUSpZgbyWHoJPjmvQZ8tgJYzozy2LHyEaUJtAr3jGw1 TMo1OypjCMVkZJwViFndtGBVKzuQrphM+5iq5ACC1CZ0c0dPnRB6cM/wVQDOeYsS qhXumj0OJkML307Qg55+cOnSpCiO495pCMX9aoE2qUqlTaeGsYdDd6TgPFOZ -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:21 2026 by rpki-client