This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/KySMxnvF90PjpBprfeEW8zLJBsQ.roa File: KySMxnvF90PjpBprfeEW8zLJBsQ.roa (raw, json) Hash identifier: 09+AS3+Vj5/qH+7uma3i3M0Di8vIqcUIDLvOelFcjJs= Subject key identifier: 2B:24:8C:C6:7B:C5:F7:43:E3:A4:1A:6B:7D:E1:16:F3:32:C9:06:C4 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F81089C2144A826FD310BFE25F6ADDC Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/KySMxnvF90PjpBprfeEW8zLJBsQ.roa Signing time: Fri 02 Jan 2026 16:18:41 +0000 ROA not before: Fri 02 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 45.139.68.0/23 maxlen: 24 45.150.80.0/23 maxlen: 24 95.214.38.0/24 maxlen: 24 95.214.39.0/24 maxlen: 24 193.36.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:08:9c:21:44:a8:26:fd:31:0b:fe:25:f6:ad:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b248cc67bc5f743e3a41a6b7de116f332c906c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:88:55:d8:9a:70:2d:95:35:af:76:45:d6: b0:3f:b9:27:1b:4c:8d:ef:7e:ce:b6:1d:3b:97:8e: 98:8e:5f:03:1c:be:ef:5a:4e:b7:4c:70:70:5c:cc: e0:d9:1e:62:8a:8a:63:ea:3c:74:db:b6:cd:fa:09: d8:f3:da:1e:2e:b7:96:cc:47:8d:e8:2d:82:8b:b4: 9c:9c:bc:7c:8b:73:71:f4:37:18:27:30:25:93:76: 1f:b6:2f:81:0f:af:ff:d3:ef:59:39:ae:6f:53:48: a4:07:7e:3f:00:98:18:94:d5:ba:f3:33:87:de:bc: a2:90:03:c6:6b:d1:9d:ae:96:45:f8:a7:cd:a4:38: f1:75:fe:87:68:cc:f2:9c:e2:6d:bd:c0:9c:f8:a6: 93:7a:58:08:d0:8b:38:85:ae:21:b0:34:38:5b:ae: 7d:6f:f4:52:f5:aa:00:ee:b2:28:a4:77:aa:9a:e9: 00:b4:88:f8:cd:66:58:07:fe:78:41:2f:8f:72:ef: bd:85:b9:ba:83:32:a5:e0:52:c4:c9:4f:2a:73:95: 62:d8:57:d2:dd:d4:c1:16:02:83:65:26:db:fc:5c: 74:3b:b1:65:3f:46:b3:56:3c:97:f9:03:2a:05:73: 04:cd:30:fa:6f:79:3a:af:a4:ca:41:1f:5c:44:cb: 5b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:24:8C:C6:7B:C5:F7:43:E3:A4:1A:6B:7D:E1:16:F3:32:C9:06:C4 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/KySMxnvF90PjpBprfeEW8zLJBsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.68.0/23 45.150.80.0/23 95.214.38.0/23 193.36.163.0/24 Signature Algorithm: sha256WithRSAEncryption b4:5d:2b:5f:a3:4a:23:95:5e:98:ee:e6:45:c5:e0:8a:82:e6: 2e:b6:ac:de:28:43:f6:30:eb:f6:b1:ab:4b:40:ce:2e:0b:07: 6e:d6:0d:3e:40:cc:40:3d:ed:24:ee:57:e8:30:cf:59:e5:e0: 85:3a:6c:36:5d:8a:76:dd:f8:a5:44:2b:db:14:d8:b3:a9:c6: 27:c8:9c:c9:e2:2c:65:70:71:c3:a7:04:22:b2:0f:5e:ee:d6: 3e:c1:6f:f3:7e:91:0a:02:7b:6e:c0:39:00:1a:47:2e:fa:bd: 9d:0c:bd:34:e1:50:eb:cc:9f:15:82:30:32:26:05:1e:f3:94: bd:13:fe:56:3e:e7:d5:46:ec:00:56:56:de:c3:fb:68:f4:37: 65:ed:fc:01:4e:ee:7a:b9:64:d0:07:a4:37:e7:26:ad:0f:26: 73:86:ed:e7:f3:54:18:b3:db:7f:e6:cd:64:46:fd:3a:f4:07: da:58:45:8f:57:4b:e8:cd:a2:8e:ee:6c:f2:a8:21:49:05:e7: 09:f0:29:63:9f:aa:f3:da:4a:48:f2:bf:e8:f8:0f:0f:20:9a: 98:5d:d1:01:0d:94:8d:6e:70:c6:74:bc:a6:45:fa:06:43:c9: a1:e5:9c:32:89:2e:05:dc:0f:fb:51:32:a3:16:df:78:66:1e: 98:66:6b:16 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/gQicIUSoJv0xC/4l9q3cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjI0OGNjNjdiYzVmNzQzZTNhNDFhNmI3ZGUxMTZmMzMyYzkwNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeyIVdiacC2VNa92RdawP7knG0yN 737Oth07l46Yjl8DHL7vWk63THBwXMzg2R5iiopj6jx027bN+gnY89oeLreWzEeN 6C2Ci7ScnLx8i3Nx9DcYJzAlk3Yfti+BD6//0+9ZOa5vU0ikB34/AJgYlNW68zOH 3ryikAPGa9GdrpZF+KfNpDjxdf6HaMzynOJtvcCc+KaTelgI0Is4ha4hsDQ4W659 b/RS9aoA7rIopHeqmukAtIj4zWZYB/54QS+Pcu+9hbm6gzKl4FLEyU8qc5Vi2FfS 3dTBFgKDZSbb/Fx0O7FlP0azVjyX+QMqBXMEzTD6b3k6r6TKQR9cRMtbQQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCskjMZ7xfdD46Qaa33hFvMyyQbEMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvS3lTTXhudkY5MFBqcEJwcmZlRVc4ekxKQnNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLYtEAwQB LZZQAwQBX9YmAwQAwSSjMA0GCSqGSIb3DQEBCwUAA4IBAQC0XStfo0ojlV6Y7uZF xeCKguYutqzeKEP2MOv2satLQM4uCwdu1g0+QMxAPe0k7lfoMM9Z5eCFOmw2XYp2 3filRCvbFNizqcYnyJzJ4ixlcHHDpwQisg9e7tY+wW/zfpEKAntuwDkAGkcu+r2d DL004VDrzJ8VgjAyJgUe85S9E/5WPufVRuwAVlbew/to9Ddl7fwBTu56uWTQB6Q3 5yatDyZzhu3n81QYs9t/5s1kRv069AfaWEWPV0vozaKO7mzyqCFJBecJ8Cljn6rz 2kpI8r/o+A8PIJqYXdEBDZSNbnDGdLymRfoGQ8mh5ZwyiS4F3A/7UTKjFt94Zh6Y ZmsW -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:35 2026 by rpki-client