This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/KMY6j_E36uvUuAHSCVi8RVwyNZk.roa File: KMY6j_E36uvUuAHSCVi8RVwyNZk.roa (raw, json) Hash identifier: 385QQx7zFPQ/GIVaSJKLaxgbyTlGMuSuRpzfcwObgl8= Subject key identifier: 28:C6:3A:8F:F1:37:EA:EB:D4:B8:01:D2:09:58:BC:45:5C:32:35:99 Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019B791063849146DB56DD0CA3F1D18361CA Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/KMY6j_E36uvUuAHSCVi8RVwyNZk.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 194.31.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:63:84:91:46:db:56:dd:0c:a3:f1:d1:83:61:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28c63a8ff137eaebd4b801d20958bc455c323599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:99:60:e0:16:3c:ea:7b:a8:cc:42:65:39: ee:ba:f0:0f:ad:68:fb:fc:7e:0b:2d:77:61:af:f5: 48:78:a7:44:5e:55:76:8f:d4:a6:60:ec:ce:65:0a: 35:1a:3e:f6:16:c4:7d:8c:30:34:11:fd:33:d1:b5: 47:d6:0c:6f:88:4d:38:d4:9e:44:e0:1d:fc:c3:6a: 8a:2a:08:33:49:5d:5c:ce:22:ea:a9:c3:5f:59:cc: c4:9e:49:f9:62:77:ca:79:70:71:e9:78:e9:83:57: 69:9c:ff:78:d2:06:11:93:a0:b3:91:1c:e3:3e:ba: 50:5d:52:af:a1:1c:18:7c:a3:7b:97:51:04:74:70: c5:e2:0c:bd:6e:4e:7b:94:b0:ce:38:15:31:9c:d3: 8c:a2:56:b9:ce:b2:ab:e4:ef:41:03:54:94:77:49: 17:2b:e9:95:c1:f0:75:ad:00:38:a7:e6:db:02:a8: fa:93:15:81:b6:ad:86:cc:6b:09:ae:ed:3d:f5:a2: 9d:84:47:1b:6c:17:7d:11:18:45:a5:79:e6:a5:63: 72:d0:52:9d:28:7f:87:bb:8f:c2:6d:74:36:0e:68: 6b:4b:28:71:8c:6d:4d:57:04:ae:e3:ea:dd:aa:50: 5f:8f:10:b7:bd:2c:32:b9:e9:2e:51:49:d4:e3:c6: 2e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C6:3A:8F:F1:37:EA:EB:D4:B8:01:D2:09:58:BC:45:5C:32:35:99 X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/KMY6j_E36uvUuAHSCVi8RVwyNZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.167.0/24 Signature Algorithm: sha256WithRSAEncryption 03:26:f6:2e:be:69:27:dd:dd:90:56:a5:de:3e:9f:52:b5:23: f1:f9:3e:2d:9d:92:63:f3:9a:01:d6:e6:95:ea:07:93:3d:f2: 3b:c0:d3:3c:b2:4d:10:23:00:f6:9f:04:18:6d:78:0e:6e:9e: 87:65:db:5e:72:74:25:75:d3:53:7d:97:81:2c:c0:d6:d2:b9: 79:36:a7:2f:ef:09:e9:87:89:e8:c7:7d:f1:f3:33:09:cf:33: 31:0d:e8:a5:dd:70:3f:fd:52:88:cd:5b:b8:d3:63:d5:ad:53: 71:0f:91:25:a3:01:b4:44:86:46:41:96:6a:82:9d:26:2f:19: a8:d6:a3:70:62:05:40:cc:51:ef:88:6d:c1:61:ca:98:d3:2c: c7:00:dd:a6:0f:9d:38:94:ba:a1:37:44:91:a8:c9:28:e5:51: 98:ef:9a:e4:c4:5c:0b:4c:32:81:90:27:cd:36:74:ff:46:86: 3c:60:19:ee:6d:0f:6c:9f:63:14:df:03:e1:77:8b:1f:99:94: d1:87:a7:9a:92:fe:20:91:fa:08:46:f3:1e:00:38:57:f2:00: f6:22:78:71:a8:5c:f9:5f:e6:53:9a:9a:f6:79:29:9c:97:70: 13:a7:7d:31:d5:94:e6:fc:0e:74:8a:7b:9f:76:4c:3e:cd:40: 0f:8e:d2:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGOEkUbbVt0Mo/HRg2HKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGM2M2E4ZmYxMzdlYWViZDRiODAxZDIwOTU4YmM0NTVjMzIzNTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+yZYOAWPOp7qMxCZTnuuvAPrWj7 /H4LLXdhr/VIeKdEXlV2j9SmYOzOZQo1Gj72FsR9jDA0Ef0z0bVH1gxviE041J5E 4B38w2qKKggzSV1cziLqqcNfWczEnkn5YnfKeXBx6Xjpg1dpnP940gYRk6CzkRzj PrpQXVKvoRwYfKN7l1EEdHDF4gy9bk57lLDOOBUxnNOMola5zrKr5O9BA1SUd0kX K+mVwfB1rQA4p+bbAqj6kxWBtq2GzGsJru099aKdhEcbbBd9ERhFpXnmpWNy0FKd KH+Hu4/CbXQ2DmhrSyhxjG1NVwSu4+rdqlBfjxC3vSwyuekuUUnU48YuYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCjGOo/xN+rr1LgB0glYvEVcMjWZMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvS01ZNmpfRTM2dXZVdUFIU0NWaThSVnd5TlprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh+nMA0G CSqGSIb3DQEBCwUAA4IBAQADJvYuvmkn3d2QVqXePp9StSPx+T4tnZJj85oB1uaV 6geTPfI7wNM8sk0QIwD2nwQYbXgObp6HZdtecnQlddNTfZeBLMDW0rl5Nqcv7wnp h4nox33x8zMJzzMxDeil3XA//VKIzVu402PVrVNxD5ElowG0RIZGQZZqgp0mLxmo 1qNwYgVAzFHviG3BYcqY0yzHAN2mD504lLqhN0SRqMko5VGY75rkxFwLTDKBkCfN NnT/RoY8YBnubQ9sn2MU3wPhd4sfmZTRh6eakv4gkfoIRvMeADhX8gD2InhxqFz5 X+ZTmpr2eSmcl3ATp30x1ZTm/A50inufdkw+zUAPjtJb -----END CERTIFICATE-----Generated at Sun Jan 11 23:38:20 2026 by rpki-client