This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/kaSyniqYasueS7oYVxIylvVfl10.roa File: kaSyniqYasueS7oYVxIylvVfl10.roa (raw, json) Hash identifier: 5pRT38fJuSZmqHDoSajFywjw8KAYcFC3TRSNOKLIxFY= Subject key identifier: 91:A4:B2:9E:2A:98:6A:CB:9E:4B:BA:18:57:12:32:96:F5:5F:97:5D Certificate issuer: /CN=4de1d371cd9f26a11fb64946674c31975f7c2edf Certificate serial: 019B7D5D2C74E39707D06FB486B5040566D4 Authority key identifier: 4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/kaSyniqYasueS7oYVxIylvVfl10.roa Signing time: Fri 02 Jan 2026 06:20:16 +0000 ROA not before: Fri 02 Jan 2026 06:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205057 IP address blocks: 185.231.92.0/22 maxlen: 22 185.231.92.0/24 maxlen: 24 185.231.93.0/24 maxlen: 24 185.231.94.0/24 maxlen: 24 185.231.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2c:74:e3:97:07:d0:6f:b4:86:b5:04:05:66:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4de1d371cd9f26a11fb64946674c31975f7c2edf Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91a4b29e2a986acb9e4bba1857123296f55f975d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:bb:15:33:65:76:f1:a4:49:f3:7e:76:48: db:de:13:68:0e:fc:62:4f:bd:2e:0f:0e:64:be:fc: 01:46:30:04:5f:cf:02:21:48:b2:20:bf:f8:41:cc: 71:2c:54:58:a9:9e:4d:7a:1d:38:55:a0:80:35:c1: 8c:32:d6:5c:c5:ac:cd:d0:76:8a:a9:8b:64:d8:07: fc:ad:f0:75:7f:12:2c:07:93:92:87:45:32:3c:db: 6e:90:64:ee:54:23:3e:b3:f7:29:7b:dc:8d:31:28: 7f:24:60:7d:42:05:66:9a:b1:aa:4f:e7:51:e8:fd: 35:d3:82:54:99:55:d8:c9:8c:cd:49:e1:00:d7:71: c5:e2:e8:0e:a5:ef:d3:9a:9c:63:2b:a0:8a:fa:70: 92:ba:39:b8:06:a8:54:42:fb:62:cb:46:b6:e9:49: c0:92:f5:c9:41:a4:68:eb:e1:31:73:14:21:76:e4: 20:f3:94:91:66:24:b8:d6:e2:e1:d2:29:4b:65:85: 98:0c:5e:cc:e2:68:ff:19:65:60:80:e9:36:89:f2: 84:41:b2:d6:a0:fd:04:a9:e5:39:6d:66:41:b3:4e: 02:7c:ae:53:3c:2f:9e:40:f2:eb:43:85:52:52:0a: 5c:61:d1:62:e2:b9:93:dc:0d:9a:06:6b:c5:b8:a8: b1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A4:B2:9E:2A:98:6A:CB:9E:4B:BA:18:57:12:32:96:F5:5F:97:5D X509v3 Authority Key Identifier: keyid:4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/kaSyniqYasueS7oYVxIylvVfl10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.92.0/22 Signature Algorithm: sha256WithRSAEncryption 70:96:bb:44:cd:e4:ca:a6:e7:47:f4:f8:bc:11:b9:32:f2:6d: 09:43:e1:d4:16:d1:8e:dd:88:15:50:c3:8a:f7:e0:ae:74:92: 38:49:7e:51:86:51:2c:76:a3:a0:3a:b8:76:06:d6:59:8a:fd: f7:41:2e:b4:e9:70:55:c2:c0:f2:f6:78:ec:d7:c4:76:8b:b6: dc:29:dd:66:85:6e:97:37:d2:03:e0:19:b4:25:b2:3f:3b:5c: 2a:fa:0a:82:c0:ea:d6:63:1c:2e:96:d9:9d:53:3d:d3:c6:f4: 14:ff:6f:1f:a1:15:cd:49:c4:5b:fb:34:f6:28:37:11:2b:f3: 95:e3:aa:b8:ca:9e:d0:e7:e3:a0:43:e6:09:be:50:27:d7:65: 3a:29:52:bc:72:e6:fb:d1:ea:dc:24:b3:25:50:e6:66:60:e4: 01:1c:ab:af:b7:14:32:98:63:37:9b:54:59:ef:d9:4f:de:c6: e6:18:18:1c:f5:df:8f:4e:20:9d:af:be:44:a3:26:6c:0e:8a: 07:20:0e:12:86:e8:1b:ef:09:dd:02:c5:43:15:8e:c6:b4:db: 90:9c:b9:9e:b1:e3:15:83:61:a2:35:e2:f9:5d:c7:ea:2c:7f: 8d:1e:5f:42:2a:c7:4e:7e:e5:c7:f7:1c:7a:cd:57:f7:e5:22: 10:f4:9c:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XSx045cH0G+0hrUEBWbUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZTFkMzcxY2Q5ZjI2YTExZmI2NDk0NjY3NGMzMTk3NWY3 YzJlZGYwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWE0YjI5ZTJhOTg2YWNiOWU0YmJhMTg1NzEyMzI5NmY1NWY5NzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0G7FTNldvGkSfN+dkjb3hNoDvxi T70uDw5kvvwBRjAEX88CIUiyIL/4QcxxLFRYqZ5Neh04VaCANcGMMtZcxazN0HaK qYtk2Af8rfB1fxIsB5OSh0UyPNtukGTuVCM+s/cpe9yNMSh/JGB9QgVmmrGqT+dR 6P0104JUmVXYyYzNSeEA13HF4ugOpe/TmpxjK6CK+nCSujm4BqhUQvtiy0a26UnA kvXJQaRo6+ExcxQhduQg85SRZiS41uLh0ilLZYWYDF7M4mj/GWVggOk2ifKEQbLW oP0EqeU5bWZBs04CfK5TPC+eQPLrQ4VSUgpcYdFi4rmT3A2aBmvFuKixFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJGksp4qmGrLnku6GFcSMpb1X5ddMB8GA1UdIwQY MBaAFE3h03HNnyahH7ZJRmdMMZdffC7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGVIVGNjMmZKcUVmdGtsR1owd3hsMTk4THQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8wNjFmMjMtNGZiOC00NjM2LWI4NzQt NWU0MmEzZjY2ZjMyLzEva2FTeW5pcVlhc3VlUzdvWVZ4SXlsdlZmbDEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8wNjFmMjMtNGZiOC00NjM2LWI4NzQtNWU0MmEzZjY2ZjMy LzEvVGVIVGNjMmZKcUVmdGtsR1owd3hsMTk4THQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuedcMA0G CSqGSIb3DQEBCwUAA4IBAQBwlrtEzeTKpudH9Pi8Ebky8m0JQ+HUFtGO3YgVUMOK 9+CudJI4SX5RhlEsdqOgOrh2BtZZiv33QS606XBVwsDy9njs18R2i7bcKd1mhW6X N9ID4Bm0JbI/O1wq+gqCwOrWYxwultmdUz3TxvQU/28foRXNScRb+zT2KDcRK/OV 46q4yp7Q5+OgQ+YJvlAn12U6KVK8cub70ercJLMlUOZmYOQBHKuvtxQymGM3m1RZ 79lP3sbmGBgc9d+PTiCdr75EoyZsDooHIA4Shugb7wndAsVDFY7GtNuQnLmeseMV g2GiNeL5XcfqLH+NHl9CKsdOfuXH9xx6zVf35SIQ9JwW -----END CERTIFICATE-----Generated at Mon Feb 9 23:57:14 2026 by rpki-client