This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/kvrpde2NkZn_MY5z8yP0kUJPKB0.roa File: kvrpde2NkZn_MY5z8yP0kUJPKB0.roa (raw, json) Hash identifier: nyyXOBMDEJmgos3/uP4abipU5IsMQkBb228KURVxjm8= Subject key identifier: 92:FA:E9:75:ED:8D:91:99:FF:31:8E:73:F3:23:F4:91:42:4F:28:1D Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0 Certificate serial: 019B797F27FEF597989AFDC6B95431B184B7 Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/kvrpde2NkZn_MY5z8yP0kUJPKB0.roa Signing time: Thu 01 Jan 2026 12:18:55 +0000 ROA not before: Thu 01 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57834 IP address blocks: 185.197.124.0/24 maxlen: 24 185.197.125.0/24 maxlen: 24 185.197.126.0/24 maxlen: 24 185.197.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:27:fe:f5:97:98:9a:fd:c6:b9:54:31:b1:84:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0 Validity Not Before: Jan 1 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92fae975ed8d9199ff318e73f323f491424f281d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:ab:4d:fa:6f:c4:09:ba:37:19:f2:01:0f: 3a:45:1c:7b:86:c2:40:d6:f2:dc:c2:24:25:a9:7f: e3:08:60:8f:23:f1:06:38:40:3d:f5:14:1f:d0:1a: a5:68:92:59:18:88:aa:9e:e4:69:73:22:5e:60:fb: 6f:13:b1:9d:ec:29:a2:e4:e2:be:d2:6e:22:94:e5: b8:96:35:c6:d4:6b:92:32:08:42:d8:06:cc:0f:ca: c6:14:ac:f0:54:b4:c6:3d:1d:80:40:f0:da:57:4e: b4:e6:3c:d6:d3:39:51:7f:5d:2e:7b:9b:42:b9:e3: 55:8c:0b:28:35:4b:ba:ba:b4:d0:71:4e:67:fd:76: 34:6b:35:68:fd:a2:97:fe:7d:1a:fe:59:0e:0f:91: ed:c6:71:0e:ea:f1:da:96:e2:09:27:58:b1:58:b7: 03:13:b2:85:07:8b:b0:30:ec:52:9a:48:ca:56:75: c4:03:55:ba:71:64:ce:d6:ff:76:73:9b:9d:a2:6d: 89:1d:e6:80:6e:fb:18:78:ef:91:51:d8:b4:11:28: 81:67:6a:04:d1:03:21:24:b2:44:6a:8e:83:4e:39: 46:ac:94:da:af:57:8c:5b:8a:72:90:e1:ae:8b:d6: 92:82:3a:9c:05:25:8f:2b:54:fa:44:eb:1b:b7:f3: 8e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FA:E9:75:ED:8D:91:99:FF:31:8E:73:F3:23:F4:91:42:4F:28:1D X509v3 Authority Key Identifier: keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/kvrpde2NkZn_MY5z8yP0kUJPKB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.124.0/22 Signature Algorithm: sha256WithRSAEncryption 28:89:4e:fe:62:5d:d6:62:e6:47:2e:89:51:ec:d6:77:3b:5a: 65:0b:7f:c5:ba:93:5e:86:b2:d5:be:33:c9:c2:11:32:b8:3d: 9b:cb:b2:0b:22:14:be:8a:2e:fc:21:60:aa:47:a0:ea:79:7a: e8:9c:8d:60:37:e9:db:22:12:08:15:bb:9b:c0:05:45:24:99: c2:38:a7:b6:eb:71:8c:c2:3e:f0:44:fb:7f:b3:d1:d0:99:71: 53:03:3a:2a:05:38:97:9d:21:0b:bd:82:26:02:75:c9:82:45: c7:c3:7e:5c:0f:5b:50:28:e2:a5:1f:bc:d5:71:5f:30:92:45: 07:5e:d7:00:6b:b0:ab:8b:63:31:1e:62:44:e4:f1:56:e3:1a: 84:44:bb:05:4a:1c:44:7f:34:19:3a:e6:15:eb:96:b7:d0:c8: 54:66:69:92:f9:e2:75:0c:7a:0a:90:17:d1:dc:23:2a:e8:5b: 76:9d:2d:51:ef:2c:eb:8e:9c:db:04:12:71:b6:68:32:5d:cc: b3:6c:c3:30:12:7b:e1:b4:69:7d:d3:58:9f:bc:8a:21:2e:48: ec:be:03:7f:c7:db:d7:c1:b0:79:fc:c2:a7:59:e6:a0:48:70: 88:12:95:6c:6e:6b:1c:9a:38:8a:52:bc:c7:a5:73:1e:09:b2: 2a:c3:02:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fyf+9ZeYmv3GuVQxsYS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYmEwNDNlMWM0YjUyNDQ3YThlMzY3YmJjMTMwNzUxOWZh NWZhZTAwHhcNMjYwMTAxMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmZhZTk3NWVkOGQ5MTk5ZmYzMThlNzNmMzIzZjQ5MTQyNGYyODFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWqrTfpvxAm6NxnyAQ86RRx7hsJA 1vLcwiQlqX/jCGCPI/EGOEA99RQf0BqlaJJZGIiqnuRpcyJeYPtvE7Gd7Cmi5OK+ 0m4ilOW4ljXG1GuSMghC2AbMD8rGFKzwVLTGPR2AQPDaV0605jzW0zlRf10ue5tC ueNVjAsoNUu6urTQcU5n/XY0azVo/aKX/n0a/lkOD5HtxnEO6vHaluIJJ1ixWLcD E7KFB4uwMOxSmkjKVnXEA1W6cWTO1v92c5udom2JHeaAbvsYeO+RUdi0ESiBZ2oE 0QMhJLJEao6DTjlGrJTar1eMW4pykOGui9aSgjqcBSWPK1T6ROsbt/OOtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJL66XXtjZGZ/zGOc/Mj9JFCTygdMB8GA1UdIwQY MBaAFM+6BD4cS1JEeo42e7wTB1GfpfrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjMzZDgtY2NlYi00NTA2LWEyZWYt YzBjYTgwYTA1ZTJhLzEva3ZycGRlMk5rWm5fTVk1ejh5UDBrVUpQS0IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8zZjMzZDgtY2NlYi00NTA2LWEyZWYtYzBjYTgwYTA1ZTJh LzEvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucV8MA0G CSqGSIb3DQEBCwUAA4IBAQAoiU7+Yl3WYuZHLolR7NZ3O1plC3/FupNehrLVvjPJ whEyuD2by7ILIhS+ii78IWCqR6DqeXronI1gN+nbIhIIFbubwAVFJJnCOKe263GM wj7wRPt/s9HQmXFTAzoqBTiXnSELvYImAnXJgkXHw35cD1tQKOKlH7zVcV8wkkUH XtcAa7Cri2MxHmJE5PFW4xqERLsFShxEfzQZOuYV65a30MhUZmmS+eJ1DHoKkBfR 3CMq6Ft2nS1R7yzrjpzbBBJxtmgyXcyzbMMwEnvhtGl901ifvIohLkjsvgN/x9vX wbB5/MKnWeagSHCIEpVsbmscmjiKUrzHpXMeCbIqwwIo -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:28 2026 by rpki-client