This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/KbmQvdtw005bLkDFKvnTpXFlk4g.roa File: KbmQvdtw005bLkDFKvnTpXFlk4g.roa (raw, json) Hash identifier: dXlkajMu1mbeHv48NSi0zEYpzy7e58YEKKA2joNBYBw= Subject key identifier: 29:B9:90:BD:DB:70:D3:4E:5B:2E:40:C5:2A:F9:D3:A5:71:65:93:88 Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4 Certificate serial: 019B7D5CE08D2967A24313483E1494015F18 Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/KbmQvdtw005bLkDFKvnTpXFlk4g.roa Signing time: Fri 02 Jan 2026 06:19:57 +0000 ROA not before: Fri 02 Jan 2026 06:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9100 IP address blocks: 193.247.208.0/24 maxlen: 24 193.247.209.0/24 maxlen: 24 193.247.210.0/24 maxlen: 24 193.247.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e0:8d:29:67:a2:43:13:48:3e:14:94:01:5f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4 Validity Not Before: Jan 2 06:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29b990bddb70d34e5b2e40c52af9d3a571659388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:92:6c:c6:05:47:0a:72:76:a6:ea:bb:d7:8b: 46:02:41:14:ec:9d:54:00:1e:cd:a7:77:b5:b9:c8: 81:17:ad:35:ad:ca:92:ec:5b:4a:e6:28:57:fa:ae: 1f:3e:0b:60:a7:38:26:e1:4c:5e:c0:81:51:0d:63: d6:d0:73:1a:d1:d3:37:4d:e4:f0:20:9d:ef:fb:3b: 75:a3:ec:01:5d:4a:ea:e9:43:a2:c9:7e:54:aa:77: 1b:60:bc:ca:ff:b3:49:41:d8:3b:b3:21:4d:f5:1f: 52:2d:05:3e:1c:38:22:28:5c:13:a5:27:99:ba:bc: 99:fa:a6:12:33:bd:ac:ad:4c:13:70:a6:00:00:9a: e6:66:fb:c5:a1:3b:99:3f:f8:fa:29:6f:94:bd:72: f3:e4:f5:fc:6d:03:6b:e9:54:e6:16:74:78:fd:91: 13:96:d9:3c:48:7e:8c:1d:84:9c:a2:41:a1:8e:da: f6:cb:ac:5c:5f:49:44:3d:26:f5:e1:08:bd:b1:7e: 88:a7:11:f3:bb:72:86:b7:00:21:db:49:ef:38:e2: 11:eb:51:ce:fc:c8:89:00:ac:26:fb:f7:34:68:47: 90:80:b3:0b:d1:dc:89:64:54:bc:3e:29:c5:d2:5d: f8:ab:4a:bc:e3:28:4b:c6:8e:43:07:eb:50:a7:0b: 5f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B9:90:BD:DB:70:D3:4E:5B:2E:40:C5:2A:F9:D3:A5:71:65:93:88 X509v3 Authority Key Identifier: keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/KbmQvdtw005bLkDFKvnTpXFlk4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.247.208.0/22 Signature Algorithm: sha256WithRSAEncryption 17:3e:e3:99:26:ef:6e:11:99:de:63:23:43:d3:08:71:e3:b1: c9:33:69:86:47:10:5a:94:60:ce:54:ac:cc:3c:12:a9:96:cc: 0a:ec:57:2d:aa:c0:da:9e:76:8b:b9:66:73:18:78:e0:81:aa: 93:0e:6a:86:3b:e9:44:a1:12:0e:91:8d:ef:d6:c0:a2:c7:26: 69:3f:2d:46:c5:53:33:cc:a7:f0:8f:b9:68:65:6f:a7:c1:de: 24:21:20:3a:51:36:39:f7:25:09:1c:4a:bf:01:5c:c1:e2:a0: 8f:d1:9c:48:c1:9d:37:9c:5c:17:52:88:b3:07:f4:38:ff:d1: a8:08:0a:b7:1f:1f:af:98:59:e4:6d:55:ef:86:d9:6e:70:97: 84:7d:8a:3a:08:eb:60:7c:23:df:3a:90:ec:48:6b:b2:88:ea: e3:d7:4e:c5:a7:ec:d9:b2:39:27:b4:42:82:75:a7:ca:1d:63: 13:52:f3:95:ce:ee:10:0b:84:ca:0b:52:66:8e:d6:71:78:57: 7a:53:b7:d7:cd:1e:0d:59:38:80:d5:5f:13:05:3e:bc:18:5e: 63:49:10:51:95:f5:26:da:f9:af:ad:24:e7:fc:bf:fc:7e:76: c0:bb:d6:ed:22:0b:87:45:1a:36:8f:cd:34:42:82:0e:e9:fd: 53:f8:84:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XOCNKWeiQxNIPhSUAV8YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDExYjcwNzg3OGJkNzdmYmZmMTVmMjc3NTJjMDhhNGFh NTU2ZjQwHhcNMjYwMTAyMDYxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWI5OTBiZGRiNzBkMzRlNWIyZTQwYzUyYWY5ZDNhNTcxNjU5Mzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5JsxgVHCnJ2puq714tGAkEU7J1U AB7Np3e1uciBF601rcqS7FtK5ihX+q4fPgtgpzgm4UxewIFRDWPW0HMa0dM3TeTw IJ3v+zt1o+wBXUrq6UOiyX5UqncbYLzK/7NJQdg7syFN9R9SLQU+HDgiKFwTpSeZ uryZ+qYSM72srUwTcKYAAJrmZvvFoTuZP/j6KW+UvXLz5PX8bQNr6VTmFnR4/ZET ltk8SH6MHYScokGhjtr2y6xcX0lEPSb14Qi9sX6IpxHzu3KGtwAh20nvOOIR61HO /MiJAKwm+/c0aEeQgLML0dyJZFS8PinF0l34q0q84yhLxo5DB+tQpwtf+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCm5kL3bcNNOWy5AxSr506VxZZOIMB8GA1UdIwQY MBaAFMnRG3B4eL13+/8V8ndSwIpKpVb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kY2RkZmEtYTA1OS00ZmYwLWE4MDkt NWVhYmZiMWU1MTMwLzEvS2JtUXZkdHcwMDViTGtERkt2blRwWEZsazRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9kY2RkZmEtYTA1OS00ZmYwLWE4MDktNWVhYmZiMWU1MTMw LzEveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwffQMA0G CSqGSIb3DQEBCwUAA4IBAQAXPuOZJu9uEZneYyND0whx47HJM2mGRxBalGDOVKzM PBKplswK7FctqsDannaLuWZzGHjggaqTDmqGO+lEoRIOkY3v1sCixyZpPy1GxVMz zKfwj7loZW+nwd4kISA6UTY59yUJHEq/AVzB4qCP0ZxIwZ03nFwXUoizB/Q4/9Go CAq3Hx+vmFnkbVXvhtlucJeEfYo6COtgfCPfOpDsSGuyiOrj107Fp+zZsjkntEKC dafKHWMTUvOVzu4QC4TKC1JmjtZxeFd6U7fXzR4NWTiA1V8TBT68GF5jSRBRlfUm 2vmvrSTn/L/8fnbAu9btIguHRRo2j800QoIO6f1T+IRZ -----END CERTIFICATE-----Generated at Mon Jan 26 15:16:10 2026 by rpki-client