This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/KyVEKpHR2pEtmXPUgs4zC61gxuI.roa File: KyVEKpHR2pEtmXPUgs4zC61gxuI.roa (raw, json) Hash identifier: Q7viCoyzEt3Uww0tv97oy1K7pyQCSZn83eGufGRHE/A= Subject key identifier: 2B:25:44:2A:91:D1:DA:91:2D:99:73:D4:82:CE:33:0B:AD:60:C6:E2 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F136FC1A546C4E05FA7AE5D5EEF4E7E Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/KyVEKpHR2pEtmXPUgs4zC61gxuI.roa Signing time: Fri 02 Jan 2026 14:18:58 +0000 ROA not before: Fri 02 Jan 2026 14:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 77.90.167.0/24 maxlen: 24 213.209.135.0/24 maxlen: 24 213.209.141.0/24 maxlen: 24 213.209.153.0/24 maxlen: 24 213.209.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:6f:c1:a5:46:c4:e0:5f:a7:ae:5d:5e:ef:4e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b25442a91d1da912d9973d482ce330bad60c6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:a1:77:4d:d1:78:2f:94:14:bd:c4:e9:e9: 16:58:b8:4b:4e:2e:1d:2f:66:dc:ba:1b:74:27:48: 0f:2a:12:98:9a:59:b9:81:c5:ac:fb:9d:04:bd:3d: 5a:b1:c8:0e:60:61:fb:ae:ba:c0:ca:a1:50:12:04: d1:21:91:ed:1e:b4:24:78:41:71:68:da:6b:19:eb: 1f:59:7c:a1:e5:32:cd:36:92:64:09:10:a2:a5:ef: d3:ef:51:33:4b:c1:82:5c:04:a0:b7:1e:f7:80:a0: bc:b8:5e:f6:ea:e2:1f:76:89:b6:23:5c:25:88:31: 83:9f:3c:21:f3:71:aa:b1:b4:ae:7c:d6:30:81:33: fd:02:6a:4e:60:b1:a4:fe:17:37:a4:e2:6d:8e:62: c8:0a:56:ed:ea:a0:82:95:06:04:6f:11:f7:17:90: b0:cb:ef:43:3c:cd:a2:18:0e:89:ef:ca:27:84:55: cb:cd:f4:e9:87:44:4e:37:77:09:f4:c8:08:c5:59: b4:90:b0:e3:03:4d:22:b8:9d:f3:d9:95:9d:0c:60: 26:30:bb:4e:00:a7:7c:c7:26:d9:54:e0:9a:b4:4b: b3:ce:bf:a4:55:89:14:d3:1a:72:74:46:de:46:19: 55:3e:2e:be:ca:5d:ca:d8:da:b2:c0:43:4d:3c:83: 05:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:25:44:2A:91:D1:DA:91:2D:99:73:D4:82:CE:33:0B:AD:60:C6:E2 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/KyVEKpHR2pEtmXPUgs4zC61gxuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.167.0/24 213.209.135.0/24 213.209.141.0/24 213.209.153.0-213.209.154.255 Signature Algorithm: sha256WithRSAEncryption 68:df:9c:18:57:bc:5d:41:49:13:1b:32:b1:86:b1:fd:6a:9e: ef:ed:81:e7:56:bc:86:d5:e4:48:cc:3b:50:22:70:c4:8b:4c: e8:68:0e:78:4d:79:b0:11:be:13:bf:3d:ee:5c:0f:3f:54:2d: 42:f5:20:8e:0a:c7:ab:68:06:50:80:37:69:3e:1c:ab:72:b3: 1a:83:72:1a:0b:93:c7:00:d8:0a:0b:d4:b9:04:52:13:d5:41: fd:a4:10:b1:38:28:e8:cb:c2:53:7c:6b:2e:09:6e:54:ec:41: 3f:91:d2:61:a5:f8:cb:d3:73:fa:cb:eb:70:dc:fc:16:e1:b6: ee:8d:65:44:60:a5:a4:d6:c7:1f:50:57:80:b4:ac:b0:41:21: c1:0d:26:a4:68:27:8e:74:c7:21:63:a1:ff:5f:05:3b:0c:9e: d4:c8:e3:22:48:24:2e:9e:f2:c4:8a:73:44:6f:9d:94:00:67: 8f:31:7a:c3:f0:f7:20:64:ef:b8:f5:46:1e:d7:63:42:b9:a5: 0a:64:47:4a:62:e5:a2:3b:cf:99:75:f1:b9:2d:9c:69:1b:d2: a9:27:d8:52:e0:ac:22:d4:38:56:f9:94:dd:0e:94:83:96:83: fe:2c:b0:0b:b7:22:6a:02:38:31:5a:a9:dd:53:62:08:bd:ec: cb:61:d3:57 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/E2/BpUbE4F+nrl1e705+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjI1NDQyYTkxZDFkYTkxMmQ5OTczZDQ4MmNlMzMwYmFkNjBjNmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8Shd03ReC+UFL3E6ekWWLhLTi4d L2bcuht0J0gPKhKYmlm5gcWs+50EvT1ascgOYGH7rrrAyqFQEgTRIZHtHrQkeEFx aNprGesfWXyh5TLNNpJkCRCipe/T71EzS8GCXASgtx73gKC8uF726uIfdom2I1wl iDGDnzwh83GqsbSufNYwgTP9AmpOYLGk/hc3pOJtjmLIClbt6qCClQYEbxH3F5Cw y+9DPM2iGA6J78onhFXLzfTph0RON3cJ9MgIxVm0kLDjA00iuJ3z2ZWdDGAmMLtO AKd8xybZVOCatEuzzr+kVYkU0xpydEbeRhlVPi6+yl3K2NqywENNPIMFuwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFCslRCqR0dqRLZlz1ILOMwutYMbiMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvS3lWRUtwSFIycEV0bVhQVWdzNHpDNjFneHVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQATVqnAwQA 1dGHAwQA1dGNMAwDBADV0ZkDBADV0ZowDQYJKoZIhvcNAQELBQADggEBAGjfnBhX vF1BSRMbMrGGsf1qnu/tgedWvIbV5EjMO1AicMSLTOhoDnhNebARvhO/Pe5cDz9U LUL1II4Kx6toBlCAN2k+HKtysxqDchoLk8cA2AoL1LkEUhPVQf2kELE4KOjLwlN8 ay4JblTsQT+R0mGl+MvTc/rL63Dc/Bbhtu6NZURgpaTWxx9QV4C0rLBBIcENJqRo J450xyFjof9fBTsMntTI4yJIJC6e8sSKc0RvnZQAZ48xesPw9yBk77j1Rh7XY0K5 pQpkR0pi5aI7z5l18bktnGkb0qkn2FLgrCLUOFb5lN0OlIOWg/4ssAu3ImoCODFa qd1TYgi97Mth01c= -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:55 2026 by rpki-client