This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/KXyie0iIEa-7G3ixjFBCnY_0B8M.roa File: KXyie0iIEa-7G3ixjFBCnY_0B8M.roa (raw, json) Hash identifier: DrnATyYPW56PH5jHhZSjYGRLKEU8XN0oqs1ULl795lo= Subject key identifier: 29:7C:A2:7B:48:88:11:AF:BB:1B:78:B1:8C:50:42:9D:8F:F4:07:C3 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791077676516354D6D5C055C37A9EC6A Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/KXyie0iIEa-7G3ixjFBCnY_0B8M.roa Signing time: Thu 01 Jan 2026 10:18:00 +0000 ROA not before: Thu 01 Jan 2026 10:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216076 IP address blocks: 188.132.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:77:67:65:16:35:4d:6d:5c:05:5c:37:a9:ec:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=297ca27b488811afbb1b78b18c50429d8ff407c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bc:b9:86:df:e8:d0:5d:b4:b9:9c:71:af:62: 08:8a:57:e1:f3:da:fe:7e:63:2a:9a:78:30:10:85: 1e:9c:03:0a:fa:19:b4:e1:e4:5d:4f:49:a8:61:5f: 18:a4:2d:cd:36:ac:c0:b0:8e:b0:17:01:c1:21:24: 7e:f4:0c:d3:43:09:91:61:74:bf:3f:ad:39:f6:ac: aa:c3:3a:fe:47:a4:7b:f0:35:4d:f4:cd:cc:14:80: f1:a9:11:98:7b:cb:04:c2:53:a0:26:ab:c4:36:32: 7b:c2:78:43:43:07:90:cc:35:d4:9a:d8:ab:c4:e4: 66:a2:a1:02:ae:b1:18:ea:81:57:b9:8b:ac:14:dc: 83:b5:34:94:ad:a8:87:09:7a:26:04:e0:81:1a:10: 7b:db:72:f2:d9:88:32:e2:e3:cd:93:03:ed:cc:37: 84:b1:97:32:41:71:67:cc:a7:f6:f0:f7:3d:ed:0f: 83:5a:72:f3:ae:38:c4:06:c5:a5:3f:3f:7f:16:de: ac:5a:ef:07:3f:ff:02:c4:d2:66:75:ee:62:43:80: 0d:7f:28:2c:a2:dc:32:a7:17:58:40:bd:22:5d:84: c1:04:b4:cb:44:c9:88:f2:0f:a0:b4:2f:4e:7e:64: d2:10:c1:40:81:0c:f3:7b:be:1a:93:47:42:56:9e: a2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7C:A2:7B:48:88:11:AF:BB:1B:78:B1:8C:50:42:9D:8F:F4:07:C3 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/KXyie0iIEa-7G3ixjFBCnY_0B8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.160.0/24 Signature Algorithm: sha256WithRSAEncryption 61:3f:7d:7b:dd:2d:d5:6d:e3:06:20:d3:bd:e1:fd:cd:22:36: 51:3e:47:6e:ac:46:f1:3e:2f:07:24:ee:65:9a:5b:91:a2:f6: e6:d8:c1:59:bf:12:2b:76:01:96:d8:91:f6:2b:0a:fd:0b:1d: 08:b9:00:8f:10:bd:60:1c:51:f4:71:fa:22:64:3e:e7:9c:77: 84:0c:58:3a:d3:ec:a6:c8:ed:19:18:f0:87:f8:65:6f:26:59: 7a:09:35:49:77:70:a6:50:68:f9:19:07:16:0d:8e:06:28:17: b1:58:61:63:a4:15:bf:30:f2:e0:e9:73:84:7b:7b:aa:56:31: 61:dc:07:3a:84:a4:d0:d6:8d:b7:52:88:71:14:82:70:ed:f3: 65:2c:a4:34:91:2f:32:21:df:d9:ab:08:41:3a:21:1a:14:de: 48:71:db:64:1b:0e:36:c1:96:b9:d3:64:8f:07:95:6e:2f:48: e4:4f:20:f5:f6:05:0e:6a:b0:41:ba:79:e7:9d:ac:eb:cf:38: d8:97:8e:a4:20:fa:85:55:1b:0b:eb:2e:fe:dd:07:85:21:2e: 78:2b:c9:a7:2c:2a:7d:17:b7:7b:60:88:4f:be:df:69:fb:03: 84:1e:d5:e3:7e:3e:25:27:0c:9d:3e:08:76:6f:a4:cb:3a:29: 68:f6:6e:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHdnZRY1TW1cBVw3qexqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTdjYTI3YjQ4ODgxMWFmYmIxYjc4YjE4YzUwNDI5ZDhmZjQwN2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1by5ht/o0F20uZxxr2IIilfh89r+ fmMqmngwEIUenAMK+hm04eRdT0moYV8YpC3NNqzAsI6wFwHBISR+9AzTQwmRYXS/ P6059qyqwzr+R6R78DVN9M3MFIDxqRGYe8sEwlOgJqvENjJ7wnhDQweQzDXUmtir xORmoqECrrEY6oFXuYusFNyDtTSUraiHCXomBOCBGhB723Ly2Ygy4uPNkwPtzDeE sZcyQXFnzKf28Pc97Q+DWnLzrjjEBsWlPz9/Ft6sWu8HP/8CxNJmde5iQ4ANfygs otwypxdYQL0iXYTBBLTLRMmI8g+gtC9OfmTSEMFAgQzze74ak0dCVp6i0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCl8ontIiBGvuxt4sYxQQp2P9AfDMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvS1h5aWUwaUlFYS03RzNpeGpGQkNuWV8wQjhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvISgMA0G CSqGSIb3DQEBCwUAA4IBAQBhP3173S3VbeMGINO94f3NIjZRPkdurEbxPi8HJO5l mluRovbm2MFZvxIrdgGW2JH2Kwr9Cx0IuQCPEL1gHFH0cfoiZD7nnHeEDFg60+ym yO0ZGPCH+GVvJll6CTVJd3CmUGj5GQcWDY4GKBexWGFjpBW/MPLg6XOEe3uqVjFh 3Ac6hKTQ1o23UohxFIJw7fNlLKQ0kS8yId/ZqwhBOiEaFN5IcdtkGw42wZa502SP B5VuL0jkTyD19gUOarBBunnnnazrzzjYl46kIPqFVRsL6y7+3QeFIS54K8mnLCp9 F7d7YIhPvt9p+wOEHtXjfj4lJwydPgh2b6TLOilo9m6P -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:13 2026 by rpki-client