This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/cykcbeu-rgwLQ-OjxS6Yqhj041I.roa File: cykcbeu-rgwLQ-OjxS6Yqhj041I.roa (raw, json) Hash identifier: iuDx1S/A0IkY5cOorTNY72Zn6YQPsxvYZN8jQhJR8cY= Subject key identifier: 73:29:1C:6D:EB:BE:AE:0C:0B:43:E3:A3:C5:2E:98:AA:18:F4:E3:52 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B128D5069401E379205E5042228093790 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/cykcbeu-rgwLQ-OjxS6Yqhj041I.roa Signing time: Fri 12 Dec 2025 12:33:29 +0000 ROA not before: Fri 12 Dec 2025 12:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202736 IP address blocks: 109.122.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:8d:50:69:40:1e:37:92:05:e5:04:22:28:09:37:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Dec 12 12:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=73291c6debbeae0c0b43e3a3c52e98aa18f4e352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:95:a5:f4:4e:10:d9:0f:86:65:b5:fb:b1: ea:3a:2f:5c:32:a3:0d:d0:50:39:26:07:d9:14:98: 0a:82:5a:33:6f:6e:49:0b:95:c3:78:58:5b:83:29: 3a:07:c0:47:ce:0b:13:b9:90:de:d5:61:09:51:e3: b0:8f:90:0f:31:0b:16:80:22:c5:01:1e:fc:91:4d: e2:cb:18:53:4d:cb:ef:2d:44:cd:b6:fd:b0:7c:a3: 0f:d3:fd:fd:ad:ef:10:11:e2:fe:1e:28:58:08:75: c2:1f:61:92:3f:fe:25:e2:6e:d5:f9:71:5b:38:df: e5:61:77:18:2f:de:e7:6a:3c:d3:8f:13:1d:34:b0: 94:46:6a:04:6a:c5:b4:b8:c3:16:f5:32:1a:34:79: 95:fb:fa:89:79:37:b4:ef:ad:43:d5:6d:b0:b2:e7: 93:4a:c6:bc:66:1e:b2:6c:fd:04:af:af:8b:56:09: a1:2f:71:cb:38:74:f3:26:0a:82:f3:19:11:a9:7c: 0c:be:87:cc:ea:d2:dc:72:9a:8e:bb:08:ec:f3:63: f4:24:49:1e:cd:b8:b3:36:10:9d:a4:53:68:1d:97: 47:c7:4c:ea:45:9b:78:3a:3b:a5:f3:7b:83:c2:35: f6:5e:84:94:4d:66:80:e8:3e:a8:2b:d5:d9:94:a2: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:29:1C:6D:EB:BE:AE:0C:0B:43:E3:A3:C5:2E:98:AA:18:F4:E3:52 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/cykcbeu-rgwLQ-OjxS6Yqhj041I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.26.0/24 Signature Algorithm: sha256WithRSAEncryption 79:f7:b2:d4:a9:86:c0:3d:dc:35:6f:86:7d:31:d5:ef:43:c8: 5d:05:63:7c:36:95:4e:13:c2:0a:2a:2b:c5:e8:c3:71:86:4e: da:15:0d:21:61:d1:74:91:7b:df:0a:f9:81:f3:fd:7c:26:8d: 29:00:fb:f8:6e:3c:8f:fb:16:cf:7a:a9:79:d2:d0:68:d9:58: 24:f3:ca:5b:f7:43:a3:03:a6:5c:c2:78:a9:af:bd:d0:a4:80: 23:dc:e5:6a:26:69:58:04:03:0d:85:67:56:e4:31:ad:6f:47: a8:70:91:1c:d9:3f:7e:9e:18:d7:bf:b7:aa:47:ee:63:f8:b1: 80:89:10:9f:2d:d9:34:a4:98:e1:80:45:e0:90:6e:1e:d1:8b: 11:da:9f:25:f8:67:44:24:20:9a:f8:95:a5:61:dd:af:b1:5e: 0a:8d:56:b8:9a:5b:6b:f7:ab:fc:46:b3:96:2d:89:cc:68:cb: 5d:55:fb:fa:94:34:66:31:9a:ff:77:63:42:24:e8:9c:c3:02: 25:53:2f:a8:0a:8c:65:4b:19:58:40:c2:36:3b:a5:60:95:86: 97:49:20:55:84:bb:cd:3a:c0:32:e3:5a:67:f5:42:ea:2f:74: f9:90:ee:d9:a0:13:04:81:99:e8:09:27:83:92:a6:58:ef:4a: 4c:11:d3:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsSjVBpQB43kgXlBCIoCTeQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjUxMjEyMTIzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzI5MWM2ZGViYmVhZTBjMGI0M2UzYTNjNTJlOThhYTE4ZjRlMzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAyVpfROENkPhmW1+7HqOi9cMqMN 0FA5JgfZFJgKglozb25JC5XDeFhbgyk6B8BHzgsTuZDe1WEJUeOwj5APMQsWgCLF AR78kU3iyxhTTcvvLUTNtv2wfKMP0/39re8QEeL+HihYCHXCH2GSP/4l4m7V+XFb ON/lYXcYL97najzTjxMdNLCURmoEasW0uMMW9TIaNHmV+/qJeTe0761D1W2wsueT Ssa8Zh6ybP0Er6+LVgmhL3HLOHTzJgqC8xkRqXwMvofM6tLccpqOuwjs82P0JEke zbizNhCdpFNoHZdHx0zqRZt4Ojul83uDwjX2XoSUTWaA6D6oK9XZlKI1fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHMpHG3rvq4MC0Pjo8UumKoY9ONSMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvY3lrY2JldS1yZ3dMUS1PanhTNllxaGowNDFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoaMA0G CSqGSIb3DQEBCwUAA4IBAQB597LUqYbAPdw1b4Z9MdXvQ8hdBWN8NpVOE8IKKivF 6MNxhk7aFQ0hYdF0kXvfCvmB8/18Jo0pAPv4bjyP+xbPeql50tBo2Vgk88pb90Oj A6Zcwnipr73QpIAj3OVqJmlYBAMNhWdW5DGtb0eocJEc2T9+nhjXv7eqR+5j+LGA iRCfLdk0pJjhgEXgkG4e0YsR2p8l+GdEJCCa+JWlYd2vsV4KjVa4mltr96v8RrOW LYnMaMtdVfv6lDRmMZr/d2NCJOicwwIlUy+oCoxlSxlYQMI2O6VglYaXSSBVhLvN OsAy41pn9ULqL3T5kO7ZoBMEgZnoCSeDkqZY70pMEdO6 -----END CERTIFICATE-----Generated at Fri Dec 19 16:49:01 2025 by rpki-client