This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/rKVY0_fItLIiVj9V8mJDTPynXcE.roa File: rKVY0_fItLIiVj9V8mJDTPynXcE.roa (raw, json) Hash identifier: IfTS67z75TmPMIXk2VJTyDhp40a+K2K1bHBTbVIL3Og= Subject key identifier: AC:A5:58:D3:F7:C8:B4:B2:22:56:3F:55:F2:62:43:4C:FC:A7:5D:C1 Certificate issuer: /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f Certificate serial: 019B7FF06FA114CE1C1FBB700786C46FCC79 Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/rKVY0_fItLIiVj9V8mJDTPynXcE.roa Signing time: Fri 02 Jan 2026 18:20:22 +0000 ROA not before: Fri 02 Jan 2026 18:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 185.129.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:6f:a1:14:ce:1c:1f:bb:70:07:86:c4:6f:cc:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f Validity Not Before: Jan 2 18:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aca558d3f7c8b4b222563f55f262434cfca75dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:ee:93:01:8f:14:4d:7f:d6:f8:a1:a6:67: b6:1e:7c:16:1f:a2:b4:39:fd:75:16:b8:39:77:e4: 48:41:9f:af:3a:7f:0a:57:32:cf:5a:f9:29:f6:ae: 9c:74:43:9e:c5:56:72:c8:ca:dc:02:3a:e8:26:b2: 7e:f8:29:b1:62:e2:aa:8a:f2:0f:aa:ea:1a:49:58: eb:6d:e3:cc:e6:66:91:7f:f8:ac:84:de:d9:77:ec: 3f:dc:c6:63:92:ee:11:de:01:df:56:1c:14:72:36: 2f:f9:7b:ce:7f:09:1f:92:f0:c1:ef:4c:95:6b:4d: 20:9e:c7:dc:c6:85:b9:e2:76:fc:c3:ea:91:30:96: fc:b7:03:ea:62:79:35:bd:75:51:51:4d:33:2a:4b: f9:74:e1:57:b0:35:1e:c2:80:1b:f9:90:5e:a5:bf: 09:ad:e3:6c:a4:d8:a6:3f:b5:4e:0b:97:0f:8f:8f: 66:6d:88:6c:8f:b6:09:e4:e1:9d:26:96:17:08:f2: 66:39:f5:48:89:48:40:9a:5c:2c:5b:63:57:aa:bb: 1e:68:ee:67:8b:99:2f:00:ae:4a:f6:87:3a:c2:77: bc:01:3a:72:9d:f3:a5:4e:0d:d3:8a:dd:d1:78:3a: 41:f2:66:d8:c1:ac:50:6d:c3:0f:40:f1:67:42:fb: 55:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A5:58:D3:F7:C8:B4:B2:22:56:3F:55:F2:62:43:4C:FC:A7:5D:C1 X509v3 Authority Key Identifier: keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/rKVY0_fItLIiVj9V8mJDTPynXcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.121.0/24 Signature Algorithm: sha256WithRSAEncryption 56:fc:ae:a1:33:f4:3e:2b:d4:0e:ab:e8:82:fc:e3:76:a8:4d: 7e:ba:63:c4:0f:da:1f:57:51:3d:24:3b:33:9a:78:67:c2:d3: 3e:9e:29:42:44:81:ca:3d:de:e8:e4:b0:f1:d0:28:32:8f:fa: 85:5d:8b:a1:a1:d1:05:e1:5d:88:19:68:13:88:71:e8:6a:c5: 89:2f:f4:1b:35:1d:7e:9a:b7:2b:01:6a:05:cd:9f:dc:40:89: e3:90:05:cb:35:91:66:54:c6:0a:51:d8:08:ea:47:7f:b8:46: 55:7f:8c:5a:83:a2:d4:12:47:6e:91:2f:fa:4b:ea:27:e0:08: 89:1d:70:4e:c5:c6:a1:da:99:c7:3c:6a:b9:74:85:84:8d:01: 28:db:75:9b:5e:da:09:85:da:fa:a7:15:50:37:34:d5:1e:62: f4:a8:41:24:41:a5:9d:c1:4b:a6:c1:29:7a:9f:bc:8a:29:ad: 1e:68:48:8e:7d:b1:42:6e:3f:cc:ef:84:2a:67:9f:ea:ca:fd: 76:7f:44:ee:3f:98:4f:c7:67:21:b0:49:d8:d8:1a:27:85:e5: 71:23:31:79:67:2b:63:1c:14:91:17:20:4b:a7:3a:35:4f:6c: 9b:d1:fb:d1:dc:d1:0e:90:19:36:ae:cf:ac:73:69:38:9c:74: df:ec:ab:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8G+hFM4cH7twB4bEb8x5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTY2OTU3OWIzY2U2MWVlOGVlN2Q2YWY3ZTMxNGIwZjcy NjM2MWYwHhcNMjYwMTAyMTgyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2E1NThkM2Y3YzhiNGIyMjI1NjNmNTVmMjYyNDM0Y2ZjYTc1ZGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVvukwGPFE1/1vihpme2HnwWH6K0 Of11Frg5d+RIQZ+vOn8KVzLPWvkp9q6cdEOexVZyyMrcAjroJrJ++CmxYuKqivIP quoaSVjrbePM5maRf/ishN7Zd+w/3MZjku4R3gHfVhwUcjYv+XvOfwkfkvDB70yV a00gnsfcxoW54nb8w+qRMJb8twPqYnk1vXVRUU0zKkv5dOFXsDUewoAb+ZBepb8J reNspNimP7VOC5cPj49mbYhsj7YJ5OGdJpYXCPJmOfVIiUhAmlwsW2NXqrseaO5n i5kvAK5K9oc6wne8ATpynfOlTg3Tit3ReDpB8mbYwaxQbcMPQPFnQvtV4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKylWNP3yLSyIlY/VfJiQ0z8p13BMB8GA1UdIwQY MBaAFCeWaVebPOYe6O59avfjFLD3JjYfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVacFY1czg1aDdvN24xcTktTVVzUGNtTmg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMTg0MTMtYjdhYS00NTljLTk5ZmEt NGRlMWI1MjBhNTk0LzEvcktWWTBfZkl0TElpVmo5VjhtSkRUUHluWGNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xMTg0MTMtYjdhYS00NTljLTk5ZmEtNGRlMWI1MjBhNTk0 LzEvSjVacFY1czg1aDdvN24xcTktTVVzUGNtTmg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYF5MA0G CSqGSIb3DQEBCwUAA4IBAQBW/K6hM/Q+K9QOq+iC/ON2qE1+umPED9ofV1E9JDsz mnhnwtM+nilCRIHKPd7o5LDx0Cgyj/qFXYuhodEF4V2IGWgTiHHoasWJL/QbNR1+ mrcrAWoFzZ/cQInjkAXLNZFmVMYKUdgI6kd/uEZVf4xag6LUEkdukS/6S+on4AiJ HXBOxcah2pnHPGq5dIWEjQEo23WbXtoJhdr6pxVQNzTVHmL0qEEkQaWdwUumwSl6 n7yKKa0eaEiOfbFCbj/M74QqZ5/qyv12f0TuP5hPx2chsEnY2BonheVxIzF5Zytj HBSRFyBLpzo1T2yb0fvR3NEOkBk2rs+sc2k4nHTf7Kup -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:36 2026 by rpki-client