This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa File: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (raw, json) Hash identifier: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4= Subject key identifier: 92:C9:99:6E:EF:C4:BF:99:AD:9B:27:D2:A5:59:9A:CE:9A:87:2C:62 Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b Certificate serial: 019B7DCAD2A75FA9E7CB6B74E0FC1877A46E Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa Signing time: Fri 02 Jan 2026 08:20:02 +0000 ROA not before: Fri 02 Jan 2026 08:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25540 IP address blocks: 185.13.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d2:a7:5f:a9:e7:cb:6b:74:e0:fc:18:77:a4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b Validity Not Before: Jan 2 08:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92c9996eefc4bf99ad9b27d2a5599ace9a872c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:13:ff:09:0a:ca:b5:04:b6:cb:83:2e:b3:e8: 82:5c:fd:19:2a:6a:a3:4d:61:f7:9e:3c:54:38:4f: ca:9b:b2:a3:31:b4:05:c1:11:c7:6d:07:fb:3a:80: b1:1f:42:23:9c:81:5f:91:36:b6:16:fa:86:bc:d6: 3d:33:5b:37:3b:aa:d0:4d:81:4b:1a:79:fd:d9:57: 42:b4:b9:6d:8e:ba:e5:06:c9:3b:e3:48:31:75:88: 45:e6:3c:5c:4e:93:4c:00:9a:8b:58:a3:11:cd:e9: 2c:33:66:5a:0e:8c:2b:de:b6:bf:66:a1:8e:0f:1b: fa:cf:fc:c3:38:30:43:4c:7b:dd:e6:5e:b0:5a:9c: 2a:a5:f2:db:83:02:6b:e4:98:6a:a4:c4:53:41:b9: 19:16:c4:22:98:db:40:97:d3:2a:b6:84:39:57:a8: d0:a3:0c:e5:52:01:99:22:88:7a:28:5e:ad:d9:e8: 75:48:ee:11:28:21:e0:6c:7a:74:3a:20:9a:38:6f: 4e:5d:cf:f0:b9:0e:8c:29:72:8f:d7:b8:08:85:6f: b6:c9:ad:27:74:bf:ec:5a:46:b9:7d:fc:30:3d:f2: c1:fb:fe:41:a7:7d:6e:6a:48:2d:a3:b4:63:70:3c: fa:02:e0:ce:70:d6:75:30:cf:b3:76:d3:95:1f:38: f3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C9:99:6E:EF:C4:BF:99:AD:9B:27:D2:A5:59:9A:CE:9A:87:2C:62 X509v3 Authority Key Identifier: keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.13.214.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:5f:c7:63:d8:52:6c:b6:f0:f1:94:1b:07:ba:6f:6a:1e:25: 40:d6:36:9f:b9:22:8d:26:85:f9:85:83:2d:59:e8:c0:a8:fc: cb:18:02:eb:bb:46:3f:04:9f:9c:f8:de:4e:87:5e:a4:e3:b9: 81:84:ac:95:43:cc:2f:05:4b:f9:d3:bb:bb:dd:13:b4:f9:7b: f1:1a:10:6c:88:ff:83:7a:c8:08:e2:d5:b9:ee:fe:31:1e:23: 0e:53:c7:f5:04:f6:b8:71:98:6e:4d:a8:8e:79:18:ff:55:a8: 36:4f:19:c6:de:bd:3f:00:8a:e2:5a:71:28:e4:79:8a:0a:b5: db:e1:75:e2:0f:66:55:54:9a:ed:e6:3f:60:cd:3f:09:91:94: 14:78:b4:62:3a:ff:2c:da:71:f5:74:c8:a5:a2:45:8b:61:80: 46:4f:59:1c:d5:fd:d5:30:55:32:58:5f:3c:00:37:0e:0c:85: 83:84:cd:3d:82:ff:a7:ed:df:6b:47:c1:33:6b:86:07:d1:c9: 7e:15:16:4a:89:63:51:3a:98:b0:63:4f:86:0b:e0:11:3e:98: c8:2c:97:9e:c4:17:30:ad:39:a2:70:be:d3:44:b4:45:fe:be: fd:5e:82:52:aa:92:8d:9c:06:8f:85:96:3e:67:3c:16:08:c4: 9a:3e:d7:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ytKnX6nny2t04PwYd6RuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3N2MyMDczNzExNmJjNmQ1ZTViMjI0OTMxY2YxM2RkN2Y3 OWY5NWIwHhcNMjYwMTAyMDgyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmM5OTk2ZWVmYzRiZjk5YWQ5YjI3ZDJhNTU5OWFjZTlhODcyYzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhP/CQrKtQS2y4Mus+iCXP0ZKmqj TWH3njxUOE/Km7KjMbQFwRHHbQf7OoCxH0IjnIFfkTa2FvqGvNY9M1s3O6rQTYFL Gnn92VdCtLltjrrlBsk740gxdYhF5jxcTpNMAJqLWKMRzeksM2ZaDowr3ra/ZqGO Dxv6z/zDODBDTHvd5l6wWpwqpfLbgwJr5JhqpMRTQbkZFsQimNtAl9MqtoQ5V6jQ owzlUgGZIoh6KF6t2eh1SO4RKCHgbHp0OiCaOG9OXc/wuQ6MKXKP17gIhW+2ya0n dL/sWka5ffwwPfLB+/5Bp31uakgto7RjcDz6AuDOcNZ1MM+zdtOVHzjzhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJLJmW7vxL+ZrZsn0qVZms6ahyxiMB8GA1UdIwQY MBaAFId8IHNxFrxtXlsiSTHPE91/eflbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgt ZTcyMzJmODQ0OGIwLzEva3NtWmJ1X0V2NW10bXlmU3BWbWF6cHFITEdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgtZTcyMzJmODQ0OGIw LzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQ3WMA0G CSqGSIb3DQEBCwUAA4IBAQAPX8dj2FJstvDxlBsHum9qHiVA1jafuSKNJoX5hYMt WejAqPzLGALru0Y/BJ+c+N5Oh16k47mBhKyVQ8wvBUv507u73RO0+XvxGhBsiP+D esgI4tW57v4xHiMOU8f1BPa4cZhuTaiOeRj/Vag2TxnG3r0/AIriWnEo5HmKCrXb 4XXiD2ZVVJrt5j9gzT8JkZQUeLRiOv8s2nH1dMilokWLYYBGT1kc1f3VMFUyWF88 ADcODIWDhM09gv+n7d9rR8Eza4YH0cl+FRZKiWNROpiwY0+GC+ARPpjILJeexBcw rTmicL7TRLRF/r79XoJSqpKNnAaPhZY+ZzwWCMSaPtfE -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:15 2026 by rpki-client