This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/km0TI5gSsaXM0ksLgopKp3QzU78.roa File: km0TI5gSsaXM0ksLgopKp3QzU78.roa (raw, json) Hash identifier: duTA4ngL0m0KQkmYbp4PQQqGU8slrpfiT+Ukyerp3dc= Subject key identifier: 92:6D:13:23:98:12:B1:A5:CC:D2:4B:0B:82:8A:4A:A7:74:33:53:BF Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8 Certificate serial: 019B7A5A7492A5152EB5E30DEC9E1503C8E1 Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/km0TI5gSsaXM0ksLgopKp3QzU78.roa Signing time: Thu 01 Jan 2026 16:18:26 +0000 ROA not before: Thu 01 Jan 2026 16:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30925 IP address blocks: 83.98.224.0/19 maxlen: 24 109.109.96.0/19 maxlen: 24 185.26.56.0/22 maxlen: 24 185.34.156.0/22 maxlen: 24 185.34.168.0/22 maxlen: 24 185.142.248.0/22 maxlen: 24 2a02:988::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:74:92:a5:15:2e:b5:e3:0d:ec:9e:15:03:c8:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8 Validity Not Before: Jan 1 16:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=926d13239812b1a5ccd24b0b828a4aa7743353bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:28:c6:cc:27:60:3b:5a:8e:a2:f4:89:a1:b3: 17:d6:d5:07:3d:5b:15:a8:49:b6:c6:df:8b:79:c4: 0b:78:4f:b7:a9:e3:2a:da:01:f7:0b:c3:23:b4:49: 63:ac:fd:0e:8d:49:d5:a3:80:f2:0d:13:be:83:89: df:58:c2:39:96:92:39:5b:33:cc:79:c6:f7:0a:d9: 63:0c:07:06:26:f9:9f:a4:1a:a7:93:cd:a9:c5:e5: 53:96:c8:d2:da:bb:82:f9:4b:f5:ff:55:6c:6b:fc: 96:53:ec:1f:a1:19:ef:c3:2e:11:0d:11:66:09:67: d5:08:2e:fc:e2:9b:50:de:2b:fd:c4:e7:fa:8b:b5: 92:78:3c:04:dd:7d:2c:d5:49:fd:9c:d7:9b:54:74: 61:44:ce:6a:3a:26:e7:fe:79:d7:62:33:f9:3f:ab: ff:ec:51:c6:7c:95:64:b0:31:89:b5:84:c0:9c:d7: ee:a5:9b:8a:a3:eb:46:9d:53:37:43:c5:f2:17:18: 8a:b7:9c:7b:84:f9:e6:1e:5c:20:7a:11:09:84:b5: af:b5:67:5d:d3:87:28:2a:db:fd:44:d2:7b:3d:ce: 06:0b:a3:1f:e0:8f:f5:ee:7c:31:d4:8e:44:36:d2: 9e:b0:7c:92:1c:03:1c:2c:c7:fe:86:01:4a:c3:f9: c0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6D:13:23:98:12:B1:A5:CC:D2:4B:0B:82:8A:4A:A7:74:33:53:BF X509v3 Authority Key Identifier: keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/km0TI5gSsaXM0ksLgopKp3QzU78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.98.224.0/19 109.109.96.0/19 185.26.56.0/22 185.34.156.0/22 185.34.168.0/22 185.142.248.0/22 IPv6: 2a02:988::/32 Signature Algorithm: sha256WithRSAEncryption 55:60:10:e4:c1:4b:4b:62:54:e2:21:9a:f2:27:d9:f0:73:8a: 1a:9b:2d:be:be:31:e2:6f:af:cf:87:e4:6f:4f:d5:0b:82:91: b5:13:16:ce:36:73:d4:0a:93:f5:37:4d:33:ec:eb:b1:ad:35: c4:8d:98:40:dd:17:14:6e:86:f5:18:46:77:7c:61:84:62:17: 69:c6:b1:cf:c6:4c:41:74:68:c1:e0:0c:ef:a5:af:f2:fd:8f: 33:01:0d:f3:7a:d9:b5:81:1d:8e:fd:7b:b1:3a:5b:cc:c4:18: e4:51:7c:31:8b:04:5f:16:d9:b9:de:26:7f:94:e9:0e:eb:9a: 48:52:58:a8:5b:d7:2d:0d:09:bd:e7:aa:52:b8:fd:eb:be:39: 2a:9f:28:8e:4d:df:42:9e:32:ca:de:19:da:a9:ae:9d:35:ad: 31:f3:31:4d:58:fe:c7:4d:1e:e1:48:39:da:75:c7:d2:23:a6: 93:71:60:55:72:e9:05:d0:0b:39:ec:ad:3a:0d:ed:85:6a:fb: 34:57:14:5a:aa:0c:8a:c8:b6:7e:65:03:92:af:32:8a:73:1b: 95:f5:a3:13:c6:f7:59:64:e1:74:ec:1b:bc:86:73:1a:ee:08: 49:4f:e0:c3:da:1b:c2:ce:12:f6:ec:1b:78:34:d6:fc:01:7b: b1:fe:a7:70 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt6WnSSpRUuteMN7J4VA8jhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTRhNjAxY2EzNWM2YzgzNzZiODlhYWY0NDNiNjNlYTQz OWNkYjgwHhcNMjYwMTAxMTYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjZkMTMyMzk4MTJiMWE1Y2NkMjRiMGI4MjhhNGFhNzc0MzM1M2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CjGzCdgO1qOovSJobMX1tUHPVsV qEm2xt+LecQLeE+3qeMq2gH3C8MjtEljrP0OjUnVo4DyDRO+g4nfWMI5lpI5WzPM ecb3CtljDAcGJvmfpBqnk82pxeVTlsjS2ruC+Uv1/1Vsa/yWU+wfoRnvwy4RDRFm CWfVCC784ptQ3iv9xOf6i7WSeDwE3X0s1Un9nNebVHRhRM5qOibn/nnXYjP5P6v/ 7FHGfJVksDGJtYTAnNfupZuKo+tGnVM3Q8XyFxiKt5x7hPnmHlwgehEJhLWvtWdd 04coKtv9RNJ7Pc4GC6Mf4I/17nwx1I5ENtKesHySHAMcLMf+hgFKw/nA1QIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFJJtEyOYErGlzNJLC4KKSqd0M1O/MB8GA1UdIwQY MBaAFLGkpgHKNcbIN2uJqvRDtj6kOc24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAt M2E1NjI4Y2M4MWQ5LzEva20wVEk1Z1NzYVhNMGtzTGdvcEtwM1F6VTc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAtM2E1NjI4Y2M4MWQ5 LzEvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQFU2LgAwQF bW1gAwQCuRo4AwQCuSKcAwQCuSKoAwQCuY74MA0EAgACMAcDBQAqAgmIMA0GCSqG SIb3DQEBCwUAA4IBAQBVYBDkwUtLYlTiIZryJ9nwc4oamy2+vjHib6/Ph+RvT9UL gpG1ExbONnPUCpP1N00z7OuxrTXEjZhA3RcUbob1GEZ3fGGEYhdpxrHPxkxBdGjB 4Azvpa/y/Y8zAQ3zetm1gR2O/XuxOlvMxBjkUXwxiwRfFtm53iZ/lOkO65pIUlio W9ctDQm956pSuP3rvjkqnyiOTd9CnjLK3hnaqa6dNa0x8zFNWP7HTR7hSDnadcfS I6aTcWBVcukF0As57K06De2Favs0VxRaqgyKyLZ+ZQOSrzKKcxuV9aMTxvdZZOF0 7Bu8hnMa7ghJT+DD2hvCzhL27Bt4NNb8AXux/qdw -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:05 2026 by rpki-client