This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/Ky_bn3Xsgatf8rmXFVamed7DDpA.roa File: Ky_bn3Xsgatf8rmXFVamed7DDpA.roa (raw, json) Hash identifier: lQFixzgdzJ3LJLns26BHVsni9SFXWlU8fN7zBvg9XyE= Subject key identifier: 2B:2F:DB:9F:75:EC:81:AB:5F:F2:B9:97:15:56:A6:79:DE:C3:0E:90 Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990 Certificate serial: 019B7F83B2EC6F17ED264C055322962CD189 Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/Ky_bn3Xsgatf8rmXFVamed7DDpA.roa Signing time: Fri 02 Jan 2026 16:21:36 +0000 ROA not before: Fri 02 Jan 2026 16:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207628 IP address blocks: 176.119.207.0/24 maxlen: 24 2a05:ed40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b2:ec:6f:17:ed:26:4c:05:53:22:96:2c:d1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990 Validity Not Before: Jan 2 16:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b2fdb9f75ec81ab5ff2b9971556a679dec30e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0f:42:35:88:5d:04:17:ba:3c:14:01:65:51: 50:8d:79:d8:5b:11:75:c7:01:73:7d:35:b6:5b:59: c4:c6:2d:73:59:23:02:cb:14:d3:a2:39:3a:93:80: ff:9e:26:d0:d3:cc:a8:0e:d3:41:f5:21:f9:a2:22: b8:b6:e5:2b:31:11:02:ed:50:73:3a:54:4d:69:b2: 92:5f:97:b4:b2:83:2b:44:74:62:93:9e:34:ce:e6: 0a:27:68:98:4a:4d:82:c9:37:c9:bd:c1:0e:12:22: 10:09:e3:d2:dc:31:68:24:ea:61:f0:44:5c:65:34: 2f:71:27:4a:ac:0e:22:91:4b:49:03:74:28:02:f7: e5:21:40:07:da:84:36:bc:00:46:de:a9:39:07:7e: 93:55:51:1a:50:e0:83:03:ef:48:e2:67:23:8d:5e: b7:51:06:4a:6d:92:4c:9f:91:95:d2:56:c7:4c:82: 1a:d4:a6:a7:22:b4:14:14:ba:0d:ae:15:3c:37:87: a8:c7:7c:fd:bf:90:76:8f:2e:f0:24:ca:7d:bd:7a: ed:e7:57:26:2e:6e:79:81:a3:82:28:21:91:82:ff: 75:fe:01:47:2a:12:02:5d:7c:8a:2a:83:fb:30:fd: 89:24:fa:78:6a:34:35:98:dd:ff:0f:90:6b:8b:07: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2F:DB:9F:75:EC:81:AB:5F:F2:B9:97:15:56:A6:79:DE:C3:0E:90 X509v3 Authority Key Identifier: keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/Ky_bn3Xsgatf8rmXFVamed7DDpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.207.0/24 IPv6: 2a05:ed40::/29 Signature Algorithm: sha256WithRSAEncryption 98:0f:61:93:03:af:a8:39:cf:3f:2b:1c:e2:c4:9f:0e:e0:02: a0:f0:e8:65:a1:95:53:16:50:7a:b3:e9:da:9c:6e:28:f2:91: 5a:ad:50:a7:0f:23:21:8d:77:07:30:4d:d3:73:3c:e3:95:1f: 0e:b7:a3:e5:87:b6:37:cc:a9:e7:51:79:ca:a9:cd:7e:0d:71: 2c:4c:d1:cf:0e:19:d5:62:20:81:3d:e0:a3:da:cc:ee:c3:5a: 80:df:e7:b8:eb:96:cf:08:ae:0b:fb:2f:8c:f6:ff:a4:12:45: 0a:45:40:97:0f:2c:e5:e1:73:1b:e5:6e:8d:87:64:48:dd:79: 34:00:5d:fc:32:c4:6b:81:31:57:a0:5a:55:4e:c3:c0:7b:e1: f2:7b:c7:36:8e:7c:91:a0:b3:cd:3a:a8:44:21:a8:7e:f6:34: 7a:42:2d:be:da:d9:98:0a:cd:4a:bd:14:e5:e7:a5:8f:03:d2: 51:2a:0f:1a:02:57:7d:c9:75:db:7e:0c:ac:34:67:e4:f1:7e: c3:c8:68:dc:e0:ea:6a:ea:b6:fb:70:d0:57:f9:89:2f:40:53: 5d:d1:b4:3a:e6:40:b2:df:8d:ec:37:f8:4f:75:e1:ac:1d:fc: 78:89:6f:05:f5:b1:b7:2e:11:a5:d9:87:0b:71:9b:29:78:40: 9f:c7:17:a8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/g7LsbxftJkwFUyKWLNGJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMTg1MzJiYWEyZmQ4NjU4M2EyNjNiYjFmYmNjYmM4MGQ0 MGQ5OTAwHhcNMjYwMTAyMTYyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjJmZGI5Zjc1ZWM4MWFiNWZmMmI5OTcxNTU2YTY3OWRlYzMwZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg9CNYhdBBe6PBQBZVFQjXnYWxF1 xwFzfTW2W1nExi1zWSMCyxTTojk6k4D/nibQ08yoDtNB9SH5oiK4tuUrMREC7VBz OlRNabKSX5e0soMrRHRik540zuYKJ2iYSk2CyTfJvcEOEiIQCePS3DFoJOph8ERc ZTQvcSdKrA4ikUtJA3QoAvflIUAH2oQ2vABG3qk5B36TVVEaUOCDA+9I4mcjjV63 UQZKbZJMn5GV0lbHTIIa1KanIrQUFLoNrhU8N4eox3z9v5B2jy7wJMp9vXrt51cm Lm55gaOCKCGRgv91/gFHKhICXXyKKoP7MP2JJPp4ajQ1mN3/D5BriwcFRQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCsv25917IGrX/K5lxVWpnneww6QMB8GA1UdIwQY MBaAFA0YUyuqL9hlg6Jjux+8y8gNQNmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQt MmIzYTE1OWNhMmVmLzEvS3lfYm4zWHNnYXRmOHJtWEZWYW1lZDdERHBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQtMmIzYTE1OWNhMmVm LzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAsHfPMA0E AgACMAcDBQMqBe1AMA0GCSqGSIb3DQEBCwUAA4IBAQCYD2GTA6+oOc8/KxzixJ8O 4AKg8OhloZVTFlB6s+nanG4o8pFarVCnDyMhjXcHME3TczzjlR8Ot6Plh7Y3zKnn UXnKqc1+DXEsTNHPDhnVYiCBPeCj2szuw1qA3+e465bPCK4L+y+M9v+kEkUKRUCX Dyzl4XMb5W6Nh2RI3Xk0AF38MsRrgTFXoFpVTsPAe+Hye8c2jnyRoLPNOqhEIah+ 9jR6Qi2+2tmYCs1KvRTl56WPA9JRKg8aAld9yXXbfgysNGfk8X7DyGjc4Opq6rb7 cNBX+YkvQFNd0bQ65kCy343sN/hPdeGsHfx4iW8F9bG3LhGl2YcLcZspeECfxxeo -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:27 2026 by rpki-client