This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/Kiy0Jf4_Jme7VpJWikdnGteyZBw.roa File: Kiy0Jf4_Jme7VpJWikdnGteyZBw.roa (raw, json) Hash identifier: fEVRmquaw1jZNFkmMKxarAcgeViD3yJxH62xy+zCJ+E= Subject key identifier: 2A:2C:B4:25:FE:3F:26:67:BB:56:92:56:8A:47:67:1A:D7:B2:64:1C Certificate issuer: /CN=00450a86aa4f7ef77e5a75dd96ecb3c2a68fad1c Certificate serial: 019B7C121DB223741FEA5C425A194AAFBED8 Authority key identifier: 00:45:0A:86:AA:4F:7E:F7:7E:5A:75:DD:96:EC:B3:C2:A6:8F:AD:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/Kiy0Jf4_Jme7VpJWikdnGteyZBw.roa Signing time: Fri 02 Jan 2026 00:18:40 +0000 ROA not before: Fri 02 Jan 2026 00:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50034 IP address blocks: 193.104.95.0/24 maxlen: 24 2001:67c:4c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:1d:b2:23:74:1f:ea:5c:42:5a:19:4a:af:be:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00450a86aa4f7ef77e5a75dd96ecb3c2a68fad1c Validity Not Before: Jan 2 00:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a2cb425fe3f2667bb5692568a47671ad7b2641c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:0a:3e:04:6d:a8:7f:97:6b:6a:9a:f5:e9: 8a:e8:4b:a5:6f:3f:f0:eb:90:69:49:72:f1:ea:aa: 50:39:7c:bb:c4:b4:37:22:6f:af:51:b6:82:3a:ea: ed:81:29:54:9c:45:f2:d4:e8:ff:4c:8e:8b:7b:fe: 5b:c5:ce:b4:47:bc:aa:a4:cb:5e:55:04:ae:e5:7a: 96:3f:6e:73:02:e8:4a:0e:52:14:6b:94:44:5c:32: cc:3d:eb:93:b4:99:dd:1a:bb:f0:7e:b0:fe:1d:76: 1a:70:32:96:0a:4c:4d:6b:4b:8f:c5:c6:90:77:26: 83:78:b9:20:57:77:dc:e9:e9:93:ca:57:a3:cb:c9: fd:a3:2e:94:3a:cd:50:52:81:d4:b8:8d:a9:7b:b1: f2:25:9a:d0:fa:25:29:80:3f:56:a7:0a:e6:1c:fb: cf:51:20:8d:0a:1b:25:7b:6d:f5:56:e6:9a:9a:18: d6:75:59:6f:14:c1:14:1f:b5:34:6a:e4:55:de:b1: e0:b4:75:35:01:2e:87:bd:57:24:3d:d6:73:5b:7f: b2:39:7d:67:08:f7:07:cf:21:ef:e3:e6:17:be:16: 70:57:49:5d:ea:06:4c:1c:40:26:37:b4:54:75:ef: de:6c:56:d5:e8:d9:8e:3e:24:85:b4:88:c8:2b:09: fe:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2C:B4:25:FE:3F:26:67:BB:56:92:56:8A:47:67:1A:D7:B2:64:1C X509v3 Authority Key Identifier: keyid:00:45:0A:86:AA:4F:7E:F7:7E:5A:75:DD:96:EC:B3:C2:A6:8F:AD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/Kiy0Jf4_Jme7VpJWikdnGteyZBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.95.0/24 IPv6: 2001:67c:4c8::/48 Signature Algorithm: sha256WithRSAEncryption 43:c8:46:33:69:3c:e0:40:99:24:03:43:fd:65:dc:5f:b4:06: e4:77:37:e7:5a:fc:08:a2:89:f0:9d:cb:69:87:fc:5d:fd:23: 7c:f8:76:26:d1:4c:a0:a7:81:e6:57:e9:1e:72:25:2a:c6:8b: 63:a4:51:c9:0e:ca:79:c9:e4:d7:74:f7:dd:a7:9a:08:aa:24: 56:3d:a9:17:b4:1e:59:70:21:4f:09:8d:26:8a:eb:18:76:03: 11:a0:ae:c9:08:d8:ac:17:a0:11:9d:cc:fc:f6:09:51:84:c5: fc:8b:e2:15:ae:a6:7f:ee:8b:76:57:f8:57:ef:76:2d:af:b4: d8:11:ba:20:f7:83:ad:35:24:60:cf:ae:91:2f:0c:e6:e4:44: 71:03:2b:5c:32:fd:cc:6c:71:be:8b:93:ed:8a:9c:1d:30:84: 2a:73:2e:78:e5:93:4b:24:19:a0:20:cb:b7:c7:a9:04:21:f7: 3e:97:21:b6:22:aa:06:35:5e:9f:13:05:d9:27:67:5e:6c:5e: 83:de:e5:a3:d3:95:ae:9f:f2:fc:b6:6e:20:cf:0f:c1:e9:2a: 2e:2f:e6:73:10:81:a0:0c:f6:e9:c0:0a:01:00:9c:e6:68:95: aa:c8:47:46:ab:f3:ab:1a:17:a9:5e:4b:3a:4c:10:76:52:fd: c1:1b:be:99 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8Eh2yI3Qf6lxCWhlKr77YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNDUwYTg2YWE0ZjdlZjc3ZTVhNzVkZDk2ZWNiM2MyYTY4 ZmFkMWMwHhcNMjYwMTAyMDAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTJjYjQyNWZlM2YyNjY3YmI1NjkyNTY4YTQ3NjcxYWQ3YjI2NDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtroKPgRtqH+Xa2qa9emK6Eulbz/w 65BpSXLx6qpQOXy7xLQ3Im+vUbaCOurtgSlUnEXy1Oj/TI6Le/5bxc60R7yqpMte VQSu5XqWP25zAuhKDlIUa5REXDLMPeuTtJndGrvwfrD+HXYacDKWCkxNa0uPxcaQ dyaDeLkgV3fc6emTylejy8n9oy6UOs1QUoHUuI2pe7HyJZrQ+iUpgD9WpwrmHPvP USCNChsle231VuaamhjWdVlvFMEUH7U0auRV3rHgtHU1AS6HvVckPdZzW3+yOX1n CPcHzyHv4+YXvhZwV0ld6gZMHEAmN7RUde/ebFbV6NmOPiSFtIjIKwn+qQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCostCX+PyZnu1aSVopHZxrXsmQcMB8GA1UdIwQY MBaAFABFCoaqT373flp13Zbss8Kmj60cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUVVS2hxcFBmdmQtV25YZGx1eXp3cWFQclJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jOGJmZWMtNzBhOS00ZjVkLTk3NGYt YjExYWI4M2ZjMzYzLzEvS2l5MEpmNF9KbWU3VnBKV2lrZG5HdGV5WkJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jOGJmZWMtNzBhOS00ZjVkLTk3NGYtYjExYWI4M2ZjMzYz LzEvQUVVS2hxcFBmdmQtV25YZGx1eXp3cWFQclJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwWhfMA8E AgACMAkDBwAgAQZ8BMgwDQYJKoZIhvcNAQELBQADggEBAEPIRjNpPOBAmSQDQ/1l 3F+0BuR3N+da/AiiifCdy2mH/F39I3z4dibRTKCngeZX6R5yJSrGi2OkUckOynnJ 5Nd0992nmgiqJFY9qRe0HllwIU8JjSaK6xh2AxGgrskI2KwXoBGdzPz2CVGExfyL 4hWupn/ui3ZX+Ffvdi2vtNgRuiD3g601JGDPrpEvDObkRHEDK1wy/cxscb6Lk+2K nB0whCpzLnjlk0skGaAgy7fHqQQh9z6XIbYiqgY1Xp8TBdknZ15sXoPe5aPTla6f 8vy2biDPD8HpKi4v5nMQgaAM9unACgEAnOZolarIR0ar86saF6leSzpMEHZS/cEb vpk= -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:27 2026 by rpki-client