This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/kYX_14rTxL4xk_NZhk8k3x1RpPY.roa File: kYX_14rTxL4xk_NZhk8k3x1RpPY.roa (raw, json) Hash identifier: hIp7xTmDixOZEkJJdKZKoSgBQ4C+ryapmLzFskIk9N8= Subject key identifier: 91:85:FF:D7:8A:D3:C4:BE:31:93:F3:59:86:4F:24:DF:1D:51:A4:F6 Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019B7C1335E7A814B9C96A40B8565CF8339A Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/kYX_14rTxL4xk_NZhk8k3x1RpPY.roa Signing time: Fri 02 Jan 2026 00:19:52 +0000 ROA not before: Fri 02 Jan 2026 00:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 185.73.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:35:e7:a8:14:b9:c9:6a:40:b8:56:5c:f8:33:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Jan 2 00:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9185ffd78ad3c4be3193f359864f24df1d51a4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:1c:ff:53:fb:91:59:a7:26:1b:bc:05:2e: 98:f7:b7:a7:cf:87:21:7e:2a:fb:4c:ba:d7:3e:d7: 22:a4:f1:85:c0:05:a2:cf:ed:0d:7a:85:6d:b0:68: 2e:5b:db:8a:58:ac:de:bc:53:34:f9:14:aa:37:12: 54:cb:0b:74:d1:0a:c2:f4:1a:8f:f5:cf:3f:31:89: f2:03:0a:fa:b1:c1:01:43:d8:c6:26:87:1f:ba:e9: f3:1e:60:49:fd:c1:55:24:78:c8:fd:8a:4d:1b:58: 9d:58:70:20:09:36:2b:42:c5:46:a4:69:da:fa:50: 07:4c:7a:83:00:39:45:17:40:7d:09:b3:1e:0f:9c: 01:a2:34:57:2d:4d:9d:05:09:1e:d5:b4:88:96:fd: a2:09:76:e1:d6:25:1d:27:63:da:6c:4b:2f:1c:00: 92:cd:d1:29:60:37:2e:ff:32:20:3b:60:79:ce:95: 31:e6:82:ef:ec:e0:47:8d:6f:5f:e2:f3:c0:dc:9f: e9:ab:34:3c:ef:2b:b2:ec:91:bd:bf:12:6a:52:a1: f9:ae:b8:23:ef:e9:a9:a0:31:8a:83:e7:9e:1d:ca: 2b:f6:de:59:4b:9d:41:2d:9b:8a:f7:b5:de:ec:cc: 4f:44:af:12:a2:57:df:7f:07:73:ce:8a:52:56:ea: 93:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:85:FF:D7:8A:D3:C4:BE:31:93:F3:59:86:4F:24:DF:1D:51:A4:F6 X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/kYX_14rTxL4xk_NZhk8k3x1RpPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.218.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:42:38:3d:9a:b2:e6:4e:7a:7e:19:d0:90:7e:4b:a8:1f:2c: bc:91:e1:8e:20:16:16:81:db:35:e3:86:b1:ef:2e:5b:c8:3d: 3d:ce:aa:db:82:28:03:db:93:b0:f1:ed:19:9f:d3:b9:32:d2: 24:5d:e8:97:22:41:06:5d:24:16:b0:29:79:96:af:e2:00:83: d6:2d:cb:94:75:ab:73:0a:43:ae:db:16:66:b0:0f:22:a7:02: 9b:1f:cd:53:02:e9:72:67:4b:3f:1a:f8:d1:71:24:c5:71:aa: e9:11:34:b3:cd:bf:32:20:d5:28:b2:24:cc:7c:23:f6:a7:d2: df:28:34:ab:57:dc:b2:be:22:f3:05:87:d9:85:a4:77:9c:69: ff:2f:b1:df:d3:7f:09:ec:bc:19:d7:81:8b:74:c4:61:cd:fe: b0:ba:39:cd:97:bb:52:59:dc:b6:60:45:57:07:95:ec:af:20: af:df:77:0c:17:05:16:8f:05:cd:14:80:22:e5:01:65:f3:c1: c2:8f:54:0f:0a:59:68:c5:ce:67:da:2d:bd:c7:74:65:6e:dc: d9:00:67:fd:d6:af:64:07:dd:30:15:12:5a:ca:4d:87:58:eb: 13:55:95:4c:50:49:4b:a5:f8:b9:9c:22:d7:51:b3:cf:a4:fd: 26:44:44:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EzXnqBS5yWpAuFZc+DOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjYwMTAyMDAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTg1ZmZkNzhhZDNjNGJlMzE5M2YzNTk4NjRmMjRkZjFkNTFhNGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD0c/1P7kVmnJhu8BS6Y97enz4ch fir7TLrXPtcipPGFwAWiz+0NeoVtsGguW9uKWKzevFM0+RSqNxJUywt00QrC9BqP 9c8/MYnyAwr6scEBQ9jGJocfuunzHmBJ/cFVJHjI/YpNG1idWHAgCTYrQsVGpGna +lAHTHqDADlFF0B9CbMeD5wBojRXLU2dBQke1bSIlv2iCXbh1iUdJ2PabEsvHACS zdEpYDcu/zIgO2B5zpUx5oLv7OBHjW9f4vPA3J/pqzQ87yuy7JG9vxJqUqH5rrgj 7+mpoDGKg+eeHcor9t5ZS51BLZuK97Xe7MxPRK8SolfffwdzzopSVuqTJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJGF/9eK08S+MZPzWYZPJN8dUaT2MB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEva1lYXzE0clR4TDR4a19OWmhrOGszeDFScFBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUnaMA0G CSqGSIb3DQEBCwUAA4IBAQBNQjg9mrLmTnp+GdCQfkuoHyy8keGOIBYWgds144ax 7y5byD09zqrbgigD25Ow8e0Zn9O5MtIkXeiXIkEGXSQWsCl5lq/iAIPWLcuUdatz CkOu2xZmsA8ipwKbH81TAulyZ0s/GvjRcSTFcarpETSzzb8yINUosiTMfCP2p9Lf KDSrV9yyviLzBYfZhaR3nGn/L7Hf038J7LwZ14GLdMRhzf6wujnNl7tSWdy2YEVX B5XsryCv33cMFwUWjwXNFIAi5QFl88HCj1QPClloxc5n2i29x3RlbtzZAGf91q9k B90wFRJayk2HWOsTVZVMUElLpfi5nCLXUbPPpP0mRERb -----END CERTIFICATE-----Generated at Fri Jan 9 12:06:13 2026 by rpki-client