This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/ky3voF2sy2_TgHkgb3QQ1UPW7S8.roa File: ky3voF2sy2_TgHkgb3QQ1UPW7S8.roa (raw, json) Hash identifier: o6KbfAsBN8N6++Ydy1AmV5C+RsQD1rP6/4fRX1c0900= Subject key identifier: 93:2D:EF:A0:5D:AC:CB:6F:D3:80:79:20:6F:74:10:D5:43:D6:ED:2F Certificate issuer: /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b Certificate serial: 019B7834609D598DCBE099619BD8D90026C3 Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/ky3voF2sy2_TgHkgb3QQ1UPW7S8.roa Signing time: Thu 01 Jan 2026 06:17:37 +0000 ROA not before: Thu 01 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204121 IP address blocks: 185.114.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:60:9d:59:8d:cb:e0:99:61:9b:d8:d9:00:26:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b Validity Not Before: Jan 1 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=932defa05daccb6fd38079206f7410d543d6ed2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:40:5e:9d:6c:f9:20:e9:6c:9b:99:ee:a1:1d: 1e:e3:0d:de:9a:7c:78:81:55:01:dd:1d:08:d2:4f: 89:80:e1:70:ed:70:a4:a3:c6:ab:43:31:85:aa:88: a6:d1:5b:5e:ea:ff:2c:30:54:67:0a:ca:38:4c:40: d4:18:0f:16:3a:37:da:24:14:57:7f:62:e6:a0:81: db:c2:08:c1:b6:58:ac:28:ff:20:f2:89:d3:fd:23: 99:df:42:fd:94:7e:6d:0d:17:91:42:c4:dd:e3:23: 09:0c:18:5f:b3:a5:45:13:d2:63:67:44:16:38:41: dd:ed:a4:81:68:f8:10:6d:a9:25:f8:bb:cb:54:1c: cb:67:c7:a9:86:7e:ac:f0:cc:b1:8d:8d:57:d0:b3: f1:ba:9b:81:ec:3d:12:17:f4:8a:7d:3f:c5:1f:43: bb:01:17:8c:1b:57:1e:2f:f8:02:14:a6:74:54:05: f4:8f:e0:4f:d7:7e:a3:09:65:f2:66:c7:b1:1d:af: e4:c1:b2:55:4e:c1:0a:fd:95:4c:4f:38:79:88:2b: c5:6a:ab:08:02:66:7f:59:f1:3e:2f:d1:de:52:65: f1:b7:c2:30:e0:2b:5a:dc:48:bb:5a:97:85:7c:6c: a9:24:42:81:f2:77:9b:ea:60:1e:e3:7d:39:49:37: 0f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2D:EF:A0:5D:AC:CB:6F:D3:80:79:20:6F:74:10:D5:43:D6:ED:2F X509v3 Authority Key Identifier: keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/ky3voF2sy2_TgHkgb3QQ1UPW7S8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.0.0/22 Signature Algorithm: sha256WithRSAEncryption 56:19:32:e1:78:c1:b7:02:9a:ac:95:19:71:3a:37:53:a8:28: 32:f8:b0:df:54:82:28:93:88:3a:ec:89:93:03:2f:46:ce:31: 9c:a0:f5:a9:6c:b8:a5:4e:86:00:2f:79:35:06:73:4a:8e:17: e7:36:45:1e:08:64:bd:72:f8:35:96:91:e5:aa:e7:6a:6a:73: 67:a7:ef:24:e1:d4:60:e9:28:0d:89:d7:a7:01:7f:1f:b9:84: d0:ca:4a:88:70:ea:2d:14:b4:20:19:f0:92:ab:b8:cf:e4:7a: fa:d1:69:ad:4d:a0:a8:59:7d:cc:49:0e:2a:43:48:04:de:ee: 11:48:18:13:0e:be:92:f4:48:e9:5d:ff:ed:bb:86:30:13:1c: 3d:e8:e9:63:62:c9:1f:51:32:51:c3:97:2e:df:37:1f:79:b1: bc:ec:1e:d2:2b:a0:f7:ca:ec:b5:14:37:04:a8:52:93:8d:70: 85:dc:d1:f5:85:cd:93:7b:78:9c:a5:49:9b:3e:1b:ad:78:25: c7:8a:f6:84:0f:f1:34:a8:f6:29:4a:3e:6c:b6:26:b8:4c:90: 3c:15:08:0d:ab:00:06:cb:39:9d:66:fe:69:91:79:86:b6:4f: aa:bc:0a:47:28:64:88:ce:22:2c:be:52:e4:1d:e4:96:fa:1c: 95:ec:90:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NGCdWY3L4Jlhm9jZACbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YmIyNGM0Yjk3ODNjYTIzYjZlZDVlNzUwNDQzZWVkM2E3 MmY5M2IwHhcNMjYwMTAxMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzJkZWZhMDVkYWNjYjZmZDM4MDc5MjA2Zjc0MTBkNTQzZDZlZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEBenWz5IOlsm5nuoR0e4w3emnx4 gVUB3R0I0k+JgOFw7XCko8arQzGFqoim0Vte6v8sMFRnCso4TEDUGA8WOjfaJBRX f2LmoIHbwgjBtlisKP8g8onT/SOZ30L9lH5tDReRQsTd4yMJDBhfs6VFE9JjZ0QW OEHd7aSBaPgQbakl+LvLVBzLZ8ephn6s8MyxjY1X0LPxupuB7D0SF/SKfT/FH0O7 AReMG1ceL/gCFKZ0VAX0j+BP136jCWXyZsexHa/kwbJVTsEK/ZVMTzh5iCvFaqsI AmZ/WfE+L9HeUmXxt8Iw4Cta3Ei7WpeFfGypJEKB8neb6mAe4305STcP5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJMt76BdrMtv04B5IG90ENVD1u0vMB8GA1UdIwQY MBaAFMe7JMS5eDyiO27V51BEPu06cvk7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hZDA4ZTYtNzMzMi00NmExLWJmNzIt NGI1OTU3YWE3NDdmLzEva3kzdm9GMnN5Ml9UZ0hrZ2IzUVExVVBXN1M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hZDA4ZTYtNzMzMi00NmExLWJmNzItNGI1OTU3YWE3NDdm LzEveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXIAMA0G CSqGSIb3DQEBCwUAA4IBAQBWGTLheMG3ApqslRlxOjdTqCgy+LDfVIIok4g67ImT Ay9GzjGcoPWpbLilToYAL3k1BnNKjhfnNkUeCGS9cvg1lpHlqudqanNnp+8k4dRg 6SgNidenAX8fuYTQykqIcOotFLQgGfCSq7jP5Hr60WmtTaCoWX3MSQ4qQ0gE3u4R SBgTDr6S9EjpXf/tu4YwExw96OljYskfUTJRw5cu3zcfebG87B7SK6D3yuy1FDcE qFKTjXCF3NH1hc2Te3icpUmbPhuteCXHivaED/E0qPYpSj5stia4TJA8FQgNqwAG yzmdZv5pkXmGtk+qvApHKGSIziIsvlLkHeSW+hyV7JC7 -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:53 2026 by rpki-client