This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/KuMp-T9rHWOUUL9bo8UBMERxJdY.roa File: KuMp-T9rHWOUUL9bo8UBMERxJdY.roa (raw, json) Hash identifier: h2sZnCOwhT2tqn40Qa1cfFPCyVBeCwa6Egkx9SNG7y8= Subject key identifier: 2A:E3:29:F9:3F:6B:1D:63:94:50:BF:5B:A3:C5:01:30:44:71:25:D6 Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88 Certificate serial: 019B7B36F84CED05B85A8B66D6579CBFF4B4 Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/KuMp-T9rHWOUUL9bo8UBMERxJdY.roa Signing time: Thu 01 Jan 2026 20:19:18 +0000 ROA not before: Thu 01 Jan 2026 20:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39830 IP address blocks: 83.173.124.0/23 maxlen: 24 83.173.124.0/24 maxlen: 24 83.173.125.0/24 maxlen: 24 83.173.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f8:4c:ed:05:b8:5a:8b:66:d6:57:9c:bf:f4:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88 Validity Not Before: Jan 1 20:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ae329f93f6b1d639450bf5ba3c50130447125d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ba:73:99:a7:2c:d2:b7:12:8c:0d:33:2c:14: d7:53:55:15:41:47:7e:7a:22:f3:1b:4f:a7:eb:ea: 1c:da:e5:a0:3e:30:ce:7b:89:c2:6b:96:f1:e6:f6: e9:d7:97:f2:b8:72:bb:41:e4:cb:01:c0:45:38:42: 2e:a8:4e:c1:d4:1f:bb:ab:b2:d1:49:c5:c7:8a:11: ba:7a:6c:ed:05:f7:6d:1d:8f:29:ef:e1:a7:50:8f: de:24:c0:bd:4f:3d:86:0f:dd:93:0a:a4:9f:11:3b: 7d:00:df:99:58:f3:56:68:b2:e5:d6:ea:a5:1b:75: 04:a1:88:86:96:b3:2b:55:9b:52:31:ac:f8:45:ce: 17:32:e2:a3:e6:09:a4:bf:c7:13:fc:a1:85:5f:ad: d5:bd:d6:44:1e:06:71:1c:ed:01:a2:70:d2:43:46: 1e:06:1a:b7:ce:19:4f:f8:52:00:80:42:e7:61:ae: 77:f8:d9:a0:d3:cb:a7:67:e7:9a:52:3b:5f:8c:c5: a2:a9:09:56:7b:2a:6b:52:6a:c5:a0:8e:c6:0b:1b: b1:97:da:f6:48:03:67:cf:90:5c:bf:46:80:57:28: a0:81:e2:14:d3:08:ed:f6:21:5a:e4:6d:8a:4d:af: c4:87:3a:e3:0a:f6:f5:ee:82:d9:80:1c:5f:d1:28: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E3:29:F9:3F:6B:1D:63:94:50:BF:5B:A3:C5:01:30:44:71:25:D6 X509v3 Authority Key Identifier: keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/KuMp-T9rHWOUUL9bo8UBMERxJdY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.173.124.0-83.173.126.255 Signature Algorithm: sha256WithRSAEncryption 2d:13:19:b0:9b:af:6e:db:76:11:08:50:96:e8:ec:d2:61:a2: ff:78:f5:66:12:88:96:e7:80:85:30:75:9f:05:a0:34:bb:8a: 71:9f:ff:45:91:d1:fe:81:a9:33:25:e5:11:16:12:3c:86:62: ff:4a:97:5a:4a:28:fa:35:aa:55:8b:61:56:a3:09:23:bd:a0: cd:a4:df:34:57:8e:ab:5e:8f:39:af:7d:ba:38:3f:42:74:5b: f6:80:d7:b1:36:4a:c3:5a:26:c3:94:ed:58:06:d0:f9:f3:f6: e4:99:c8:36:bb:ab:b1:b3:fb:37:d0:5e:c3:78:85:fd:9c:7f: 3d:12:bc:f1:5f:94:05:99:87:28:eb:78:36:3b:a7:37:37:e0: dc:ef:ee:97:70:58:26:b8:3f:b0:ef:9d:d7:ba:d2:23:16:e6: 66:c7:1b:10:36:aa:fc:64:83:18:67:42:7b:1e:9d:f4:36:ce: 8d:11:16:d5:3f:4f:7b:65:b5:37:ad:41:3a:bd:ad:17:c7:f0: 76:4b:2e:5d:b2:08:10:bf:3b:f5:c5:15:18:b0:bf:bc:17:e9: ce:24:c2:ba:8c:cd:c2:1a:be:18:21:22:2a:fe:33:31:f7:a0: 36:95:69:c1:0c:70:0e:3b:da:35:e3:4a:89:ff:51:0b:72:23: 69:34:b5:f7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NvhM7QW4Wotm1lecv/S0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YjMzMmQ1N2NlMTRmYWIxZWJkNzQ2ODE3ZGQ3MDEwNjJj NzRhODgwHhcNMjYwMTAxMjAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWUzMjlmOTNmNmIxZDYzOTQ1MGJmNWJhM2M1MDEzMDQ0NzEyNWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubpzmacs0rcSjA0zLBTXU1UVQUd+ eiLzG0+n6+oc2uWgPjDOe4nCa5bx5vbp15fyuHK7QeTLAcBFOEIuqE7B1B+7q7LR ScXHihG6emztBfdtHY8p7+GnUI/eJMC9Tz2GD92TCqSfETt9AN+ZWPNWaLLl1uql G3UEoYiGlrMrVZtSMaz4Rc4XMuKj5gmkv8cT/KGFX63VvdZEHgZxHO0BonDSQ0Ye Bhq3zhlP+FIAgELnYa53+Nmg08unZ+eaUjtfjMWiqQlWeyprUmrFoI7GCxuxl9r2 SANnz5Bcv0aAVyiggeIU0wjt9iFa5G2KTa/EhzrjCvb17oLZgBxf0SiwlQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCrjKfk/ax1jlFC/W6PFATBEcSXWMB8GA1UdIwQY MBaAFImzMtV84U+rHr10aBfdcBBix0qIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQt NDZhMGRmNzc0ZmUxLzEvS3VNcC1UOXJIV09VVUw5Ym84VUJNRVJ4SmRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQtNDZhMGRmNzc0ZmUx LzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJTrXwD BABTrX4wDQYJKoZIhvcNAQELBQADggEBAC0TGbCbr27bdhEIUJbo7NJhov949WYS iJbngIUwdZ8FoDS7inGf/0WR0f6BqTMl5REWEjyGYv9Kl1pKKPo1qlWLYVajCSO9 oM2k3zRXjqtejzmvfbo4P0J0W/aA17E2SsNaJsOU7VgG0Pnz9uSZyDa7q7Gz+zfQ XsN4hf2cfz0SvPFflAWZhyjreDY7pzc34Nzv7pdwWCa4P7Dvnde60iMW5mbHGxA2 qvxkgxhnQnsenfQ2zo0RFtU/T3tltTetQTq9rRfH8HZLLl2yCBC/O/XFFRiwv7wX 6c4kwrqMzcIavhghIir+MzH3oDaVacEMcA472jXjSon/UQtyI2k0tfc= -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:41 2026 by rpki-client