This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6swKWJ3RVSBb3kris3f0ko_KYRI.roa File: 6swKWJ3RVSBb3kris3f0ko_KYRI.roa (raw, json) Hash identifier: um5Tmyhx6mJ6s7HbN/bB3dIOSyuHBZetzjJn/y2o9JA= Subject key identifier: EA:CC:0A:58:9D:D1:55:20:5B:DE:4A:E2:B3:77:F4:92:8F:CA:61:12 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AA717590A0DE40A8C6FE55E9B923C0501 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6swKWJ3RVSBb3kris3f0ko_KYRI.roa Signing time: Fri 21 Nov 2025 15:45:16 +0000 ROA not before: Fri 21 Nov 2025 15:45:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 31.56.125.0/24 maxlen: 24 31.56.192.0/24 maxlen: 24 31.56.193.0/24 maxlen: 24 31.56.195.0/24 maxlen: 24 31.56.218.0/24 maxlen: 24 31.57.132.0/24 maxlen: 24 31.57.191.0/24 maxlen: 24 31.57.221.0/24 maxlen: 24 31.57.237.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 00:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a7:17:59:0a:0d:e4:0a:8c:6f:e5:5e:9b:92:3c:05:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 21 15:45:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eacc0a589dd155205bde4ae2b377f4928fca6112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:78:6c:0d:ba:95:fb:ec:80:95:0f:c0:36:df: cc:32:3f:1f:aa:22:cd:3a:51:ce:6e:35:de:3a:5b: 0b:52:bc:d5:77:ca:89:90:d0:13:ef:11:c6:26:72: 85:b8:f9:7a:7b:33:5a:5a:47:c9:23:4f:be:d1:6e: 09:3b:cb:3c:79:6c:0f:b6:ee:50:3e:94:0f:1f:64: d8:63:d5:15:d7:7a:40:c0:17:da:92:b0:ce:ea:b5: 82:cf:07:55:a6:14:e3:7a:c2:5e:13:68:04:63:ba: c1:d9:b6:8d:6a:67:6a:67:3d:76:16:b6:ae:bb:64: b0:c1:06:d3:78:92:56:60:8d:7c:43:15:e0:06:31: e7:24:e9:15:99:f5:cb:de:50:7c:bd:41:d7:0a:c5: 05:cd:46:17:05:ce:b0:b5:27:64:0d:3a:5b:d7:57: ae:bd:b8:1f:fa:3c:5d:f1:42:ac:0b:36:65:42:ba: 04:f2:aa:e2:57:4c:4c:57:e1:5b:f1:cd:df:0a:34: b6:a1:b0:c0:a0:74:7b:c0:ae:a2:06:b1:1f:7e:a6: 78:9e:19:35:c0:88:9e:85:50:f1:e0:5d:71:35:c7: 49:44:f4:19:c3:ec:e2:d9:5d:f8:a5:06:47:81:18: f2:af:d2:93:f6:71:75:5a:77:15:2f:ae:59:42:6a: c3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CC:0A:58:9D:D1:55:20:5B:DE:4A:E2:B3:77:F4:92:8F:CA:61:12 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6swKWJ3RVSBb3kris3f0ko_KYRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.125.0/24 31.56.192.0/23 31.56.195.0/24 31.56.218.0/24 31.57.132.0/24 31.57.191.0/24 31.57.221.0/24 31.57.237.0/24 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption 33:2c:9e:3a:0c:aa:9a:63:8e:f2:69:99:7f:c3:44:72:5d:65: 40:41:12:ce:de:3c:f5:3c:46:61:52:ce:24:59:eb:3a:3b:69: 92:1c:4a:52:62:d4:5a:41:fa:fa:ee:50:95:b1:4c:e8:91:e0: a5:3a:99:b6:df:ca:6a:92:41:34:92:a3:ae:46:b1:18:ef:22: bd:04:7b:69:ab:fd:e4:88:2c:c0:f9:28:e3:8a:5d:6e:7d:51: 79:1d:7b:1f:4f:fe:e3:15:24:46:5c:d8:60:f1:79:c4:8a:ea: c2:bd:5b:b2:1c:e8:34:ee:1d:5e:f6:58:fc:3c:4c:35:4c:52: 56:4e:c3:13:9c:3a:fe:bd:37:9d:cf:ed:04:37:f1:ab:ca:23: fd:fb:15:4a:99:f0:21:13:a0:d6:d0:97:55:e8:e0:84:54:92: be:5c:4e:c8:75:8f:29:68:a6:2c:81:71:27:62:4d:c9:f9:b7: 7b:14:10:ec:2e:cf:08:b7:30:56:eb:50:5a:8d:ce:9c:58:4a: b5:3f:1b:75:0d:1b:b7:8e:2f:78:c6:15:2c:31:95:38:5a:9c: 82:f1:a2:06:3d:19:46:5b:57:8d:c5:98:a7:36:c5:a6:eb:ce: 7d:9d:a6:8f:9d:ba:6c:a3:4a:fe:57:e4:6e:2e:1c:54:16:6f: b4:35:7d:34 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZqnF1kKDeQKjG/lXpuSPAUBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTIxMTU0NTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWNjMGE1ODlkZDE1NTIwNWJkZTRhZTJiMzc3ZjQ5MjhmY2E2MTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHhsDbqV++yAlQ/ANt/MMj8fqiLN OlHObjXeOlsLUrzVd8qJkNAT7xHGJnKFuPl6ezNaWkfJI0++0W4JO8s8eWwPtu5Q PpQPH2TYY9UV13pAwBfakrDO6rWCzwdVphTjesJeE2gEY7rB2baNamdqZz12Frau u2SwwQbTeJJWYI18QxXgBjHnJOkVmfXL3lB8vUHXCsUFzUYXBc6wtSdkDTpb11eu vbgf+jxd8UKsCzZlQroE8qriV0xMV+Fb8c3fCjS2obDAoHR7wK6iBrEffqZ4nhk1 wIiehVDx4F1xNcdJRPQZw+zi2V34pQZHgRjyr9KT9nF1WncVL65ZQmrDgQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFOrMClid0VUgW95K4rN39JKPymESMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNnN3S1dKM1JWU0JiM2tyaXMzZjBrb19LWVJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAHzh9AwQB HzjAAwQAHzjDAwQAHzjaAwQAHzmEAwQAHzm/AwQAHzndAwQAHzntAwQAHzrnMA0G CSqGSIb3DQEBCwUAA4IBAQAzLJ46DKqaY47yaZl/w0RyXWVAQRLO3jz1PEZhUs4k Wes6O2mSHEpSYtRaQfr67lCVsUzokeClOpm238pqkkE0kqOuRrEY7yK9BHtpq/3k iCzA+Sjjil1ufVF5HXsfT/7jFSRGXNhg8XnEiurCvVuyHOg07h1e9lj8PEw1TFJW TsMTnDr+vTedz+0EN/GryiP9+xVKmfAhE6DW0JdV6OCEVJK+XE7IdY8paKYsgXEn Yk3J+bd7FBDsLs8ItzBW61Bajc6cWEq1Pxt1DRu3ji94xhUsMZU4WpyC8aIGPRlG W1eNxZinNsWm6859naaPnbpso0r+V+RuLhxUFm+0NX00 -----END CERTIFICATE-----Generated at Sat Nov 22 07:22:43 2025 by rpki-client