This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/KOMjNkbotBRgitOKQVOMptn3kec.roa File: KOMjNkbotBRgitOKQVOMptn3kec.roa (raw, json) Hash identifier: BXNIaxjy1NVnMYQiOmHx+PnDpKyAts2Npz8b6oiCwjc= Subject key identifier: 28:E3:23:36:46:E8:B4:14:60:8A:D3:8A:41:53:8C:A6:D9:F7:91:E7 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019C2F2051AAE9415AFFC7D07244AFBFC587 Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/KOMjNkbotBRgitOKQVOMptn3kec.roa Signing time: Thu 05 Feb 2026 18:46:13 +0000 ROA not before: Thu 05 Feb 2026 18:46:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46844 IP address blocks: 135.106.134.0/24 maxlen: 24 135.106.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2f:20:51:aa:e9:41:5a:ff:c7:d0:72:44:af:bf:c5:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Feb 5 18:46:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28e3233646e8b414608ad38a41538ca6d9f791e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:aa:08:23:82:cf:b3:dc:92:a2:96:46:7a: c4:1e:f1:11:f1:a8:22:b1:67:ad:4b:ea:9c:6c:ee: 16:f7:53:d0:b7:84:38:35:7f:bb:ce:3e:7e:cb:9f: df:a3:8e:4f:5f:ba:43:c6:79:db:86:dc:97:94:be: d1:7a:e6:38:81:57:e8:47:1b:72:d2:42:01:d6:13: 1a:a6:09:61:34:11:ee:27:5a:a8:e4:72:a1:3c:bb: 23:1b:a0:36:39:95:98:fc:01:08:0c:23:4a:51:5a: fb:d7:48:cc:79:f3:87:5b:3d:c0:92:42:bc:36:ac: e1:94:6e:21:8a:58:68:53:67:9b:22:a3:5b:29:5a: fd:39:12:7d:59:f8:f1:fb:64:d3:0d:23:7a:ef:b6: b5:b0:a2:ca:88:76:65:e8:de:3b:7b:d1:7f:9a:f4: f7:41:ec:d0:fd:2f:b8:d3:9d:b3:e5:8f:60:04:86: c5:ec:d4:78:ad:cf:74:08:2a:3b:f1:bb:d2:99:b2: aa:75:0a:aa:46:0c:1b:3e:a8:b9:fb:8d:9a:3a:d1: 0d:78:81:3f:31:4f:0b:80:d6:cf:ad:35:be:84:d4: e1:82:6f:d6:00:e1:f4:9b:d5:5d:89:77:b0:f2:d0: e6:8e:39:77:09:3a:92:79:b3:cd:b6:fc:9d:40:6d: ea:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E3:23:36:46:E8:B4:14:60:8A:D3:8A:41:53:8C:A6:D9:F7:91:E7 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/KOMjNkbotBRgitOKQVOMptn3kec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.106.134.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:f3:05:c1:31:d7:28:12:a9:a1:dc:84:a8:f4:b3:51:64:3b: f3:fb:0d:1e:fa:c2:8d:d9:a9:b2:16:d8:7c:bc:28:b2:ea:2a: 64:a0:fa:4b:d0:0e:3c:6d:50:c6:b6:0c:e3:44:be:13:69:39: 04:8f:8c:3e:5b:bd:4f:33:ac:d5:3d:93:41:f0:53:7c:4c:1f: fe:fc:8f:2e:17:f4:0e:28:0f:3d:30:89:76:87:fa:5f:1b:b9: a5:d0:02:18:dc:d0:fa:86:4b:07:04:1e:24:0a:e4:33:ee:f0: 04:8f:28:a0:28:22:1e:d7:c5:b9:60:84:61:d7:20:56:ad:98: ac:c7:e4:f4:eb:d1:45:4b:ad:63:c6:90:1f:07:26:84:4d:6f: 6c:84:a2:a9:5d:6d:62:1a:39:b6:0d:cf:7f:b0:af:6d:d8:1b: c6:c6:68:c6:1e:fe:36:f0:c7:0b:3e:32:95:55:1d:79:e5:48: f8:f6:2c:c2:82:67:6b:e2:b4:d5:f9:6a:1d:48:b7:3f:32:82: bd:83:e9:39:ab:45:42:4d:60:71:7e:1a:b4:1f:92:76:b5:a9: 85:7e:cf:cf:95:9a:a1:57:5b:19:67:81:8d:22:03:d5:23:9c: 10:03:9e:94:69:d4:a2:d4:fe:86:7f:eb:bd:62:f3:65:7b:7f: 05:bb:fe:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwvIFGq6UFa/8fQckSvv8WHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjYwMjA1MTg0NjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGUzMjMzNjQ2ZThiNDE0NjA4YWQzOGE0MTUzOGNhNmQ5Zjc5MWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4uqCCOCz7PckqKWRnrEHvER8agi sWetS+qcbO4W91PQt4Q4NX+7zj5+y5/fo45PX7pDxnnbhtyXlL7ReuY4gVfoRxty 0kIB1hMapglhNBHuJ1qo5HKhPLsjG6A2OZWY/AEIDCNKUVr710jMefOHWz3AkkK8 NqzhlG4hilhoU2ebIqNbKVr9ORJ9Wfjx+2TTDSN677a1sKLKiHZl6N47e9F/mvT3 QezQ/S+4052z5Y9gBIbF7NR4rc90CCo78bvSmbKqdQqqRgwbPqi5+42aOtENeIE/ MU8LgNbPrTW+hNThgm/WAOH0m9VdiXew8tDmjjl3CTqSebPNtvydQG3qkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCjjIzZG6LQUYIrTikFTjKbZ95HnMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvS09Nak5rYm90QlJnaXRPS1FWT01wdG4za2VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh2qGMA0G CSqGSIb3DQEBCwUAA4IBAQBK8wXBMdcoEqmh3ISo9LNRZDvz+w0e+sKN2amyFth8 vCiy6ipkoPpL0A48bVDGtgzjRL4TaTkEj4w+W71PM6zVPZNB8FN8TB/+/I8uF/QO KA89MIl2h/pfG7ml0AIY3ND6hksHBB4kCuQz7vAEjyigKCIe18W5YIRh1yBWrZis x+T069FFS61jxpAfByaETW9shKKpXW1iGjm2Dc9/sK9t2BvGxmjGHv428McLPjKV VR155Uj49izCgmdr4rTV+WodSLc/MoK9g+k5q0VCTWBxfhq0H5J2tamFfs/PlZqh V1sZZ4GNIgPVI5wQA56UadSi1P6Gf+u9YvNle38Fu/4F -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:14 2026 by rpki-client