This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/kp-VMkih7qc6B23hHp-3gThKHNw.roa File: kp-VMkih7qc6B23hHp-3gThKHNw.roa (raw, json) Hash identifier: bxojK3FurSVV0NeQ9kkDlIbku+sPTPShkBdp5lGAEYE= Subject key identifier: 92:9F:95:32:48:A1:EE:A7:3A:07:6D:E1:1E:9F:B7:81:38:4A:1C:DC Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f Certificate serial: 019B78A2BD8D631754DF7DAADDE26F30429E Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/kp-VMkih7qc6B23hHp-3gThKHNw.roa Signing time: Thu 01 Jan 2026 08:18:09 +0000 ROA not before: Thu 01 Jan 2026 08:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215514 IP address blocks: 193.56.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:bd:8d:63:17:54:df:7d:aa:dd:e2:6f:30:42:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f Validity Not Before: Jan 1 08:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=929f953248a1eea73a076de11e9fb781384a1cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9e:00:9c:a5:b4:9b:da:4a:67:b9:08:d5:fd: 78:dd:10:fa:5b:fe:88:d1:8a:60:9f:8c:1a:16:a3: bc:a6:d4:7c:1f:c8:46:59:61:02:14:de:80:ad:6f: 84:40:fa:b1:dc:33:1e:71:6f:24:93:94:61:4a:b9: 34:be:b8:2f:de:78:14:f7:b6:9b:aa:5b:ca:c8:a3: 09:c1:29:ea:9e:b3:a4:dd:4d:c4:db:71:a4:9d:3a: 36:fa:69:4d:31:18:03:a7:3b:a6:6c:40:1e:f2:34: 77:12:3a:c6:eb:7f:09:2e:b5:97:87:d9:9c:6f:18: 98:8c:10:f8:33:af:14:5f:83:05:bf:62:71:46:dd: 0b:4d:51:69:2d:22:54:ec:ff:60:ed:4b:95:ea:21: 82:a0:ab:8f:62:f9:1e:fb:0b:2d:1a:fc:6f:e5:68: fa:c2:9e:bc:f2:c0:6a:22:39:87:20:c9:7d:e3:e8: 55:f9:3a:85:be:8b:60:be:46:c0:29:f9:d0:e8:87: 25:43:ca:12:6d:36:02:d2:46:cf:c4:e2:1b:62:9f: 5c:e8:bf:b6:fc:cc:61:2c:2c:dd:29:46:21:4a:96: 95:d1:29:86:1a:06:17:b4:24:64:74:a9:ad:b7:e8: 11:9d:3d:82:90:cb:91:f3:aa:44:95:34:05:44:c2: c7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9F:95:32:48:A1:EE:A7:3A:07:6D:E1:1E:9F:B7:81:38:4A:1C:DC X509v3 Authority Key Identifier: keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/kp-VMkih7qc6B23hHp-3gThKHNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.62.0/23 Signature Algorithm: sha256WithRSAEncryption 28:79:0a:e5:1b:e3:b8:ee:f1:48:25:66:11:bb:c5:fe:aa:c6: 14:5c:de:4b:02:80:65:02:0c:c5:73:61:1f:29:da:b2:40:06: 2d:c0:df:05:4f:ac:78:28:d6:39:20:8d:e7:50:4d:06:d8:b4: 98:04:ce:84:a4:56:53:01:e1:d9:1d:ad:0b:13:7e:7d:c9:5e: a7:ad:95:a1:81:16:95:e2:3a:ee:e8:e4:58:65:bb:8d:b5:13: d0:f5:88:9d:84:2b:03:5f:86:24:eb:7b:c3:8a:0d:b9:92:f7: bf:0c:f8:2b:3a:a3:20:ba:e1:bf:4f:e1:99:9c:eb:f6:42:08: 7f:96:dd:73:1a:4b:dd:1b:c8:c7:ca:94:46:34:9b:f0:3d:d1: 98:72:fb:43:a1:9d:86:4f:0f:c2:d1:24:62:a8:82:a8:7e:63: ef:08:a0:4f:31:94:f0:08:03:f2:0f:4f:f2:cc:8b:19:c0:2b: c7:c9:81:fd:ab:c9:2d:13:81:24:0b:dc:21:aa:77:45:df:ed: 0e:2a:4e:f3:d0:38:3b:df:a2:99:67:69:f6:0f:c6:d3:5d:0c: 61:9f:e9:63:a5:a0:f5:07:4f:45:3c:6c:82:dc:7a:5f:0d:48: f2:5c:7a:6b:79:4f:57:55:8c:1a:8f:94:a2:23:7e:c9:78:58: c1:60:fd:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4or2NYxdU332q3eJvMEKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjEzNmU2ODIwZDk0ZjAzYjFjNWQ3MWVlZTNkNGIyMjE5 MTUyOGYwHhcNMjYwMTAxMDgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjlmOTUzMjQ4YTFlZWE3M2EwNzZkZTExZTlmYjc4MTM4NGExY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z4AnKW0m9pKZ7kI1f143RD6W/6I 0Ypgn4waFqO8ptR8H8hGWWECFN6ArW+EQPqx3DMecW8kk5RhSrk0vrgv3ngU97ab qlvKyKMJwSnqnrOk3U3E23GknTo2+mlNMRgDpzumbEAe8jR3EjrG638JLrWXh9mc bxiYjBD4M68UX4MFv2JxRt0LTVFpLSJU7P9g7UuV6iGCoKuPYvke+wstGvxv5Wj6 wp688sBqIjmHIMl94+hV+TqFvotgvkbAKfnQ6IclQ8oSbTYC0kbPxOIbYp9c6L+2 /MxhLCzdKUYhSpaV0SmGGgYXtCRkdKmtt+gRnT2CkMuR86pElTQFRMLHwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJKflTJIoe6nOgdt4R6ft4E4ShzcMB8GA1UdIwQY MBaAFIKxNuaCDZTwOxxdce7j1LIhkVKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JFMjVvSU5sUEE3SEYxeDd1UFVzaUdSVW84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMjExMmUtNGUxMy00M2QwLTllYjEt MGRhM2NhYTkxNDI5LzEva3AtVk1raWg3cWM2QjIzaEhwLTNnVGhLSE53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yMjExMmUtNGUxMy00M2QwLTllYjEtMGRhM2NhYTkxNDI5 LzEvZ3JFMjVvSU5sUEE3SEYxeDd1UFVzaUdSVW84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwTg+MA0G CSqGSIb3DQEBCwUAA4IBAQAoeQrlG+O47vFIJWYRu8X+qsYUXN5LAoBlAgzFc2Ef KdqyQAYtwN8FT6x4KNY5II3nUE0G2LSYBM6EpFZTAeHZHa0LE359yV6nrZWhgRaV 4jru6ORYZbuNtRPQ9YidhCsDX4Yk63vDig25kve/DPgrOqMguuG/T+GZnOv2Qgh/ lt1zGkvdG8jHypRGNJvwPdGYcvtDoZ2GTw/C0SRiqIKofmPvCKBPMZTwCAPyD0/y zIsZwCvHyYH9q8ktE4EkC9whqndF3+0OKk7z0Dg736KZZ2n2D8bTXQxhn+ljpaD1 B09FPGyC3HpfDUjyXHpreU9XVYwaj5SiI37JeFjBYP1e -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:01 2026 by rpki-client