This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KV14a5X4eJV-38cEWidRC0RIUdc.roa File: KV14a5X4eJV-38cEWidRC0RIUdc.roa (raw, json) Hash identifier: vOhrOnzusoOFhqdjJjdRXmE2K32KdgRL4CK2PZvvWMo= Subject key identifier: 29:5D:78:6B:95:F8:78:95:7E:DF:C7:04:5A:27:51:0B:44:48:51:D7 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797ED18DE166C6287E143CC55AF6A4B0 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KV14a5X4eJV-38cEWidRC0RIUdc.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201406 IP address blocks: 92.247.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d1:8d:e1:66:c6:28:7e:14:3c:c5:5a:f6:a4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=295d786b95f878957edfc7045a27510b444851d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:63:df:d8:df:c1:12:5d:e2:ae:c9:32:8b:fa: 6a:de:e9:18:42:10:02:49:d3:bb:22:92:63:d1:60: 9b:2b:44:ea:60:67:37:93:62:1b:3b:a6:ce:3c:5e: cd:67:fe:e6:e3:0c:20:03:e1:ba:51:83:86:34:c9: 3b:a8:5a:98:e2:b0:1d:ac:08:6d:24:66:c3:f2:ab: b2:c6:04:d6:a5:2a:1e:c0:d2:d1:c7:12:65:4b:cc: 8a:f9:b3:f5:b1:66:8d:d7:ef:58:6a:a2:7e:64:55: 26:4d:16:a9:1d:1d:21:c8:96:1b:5b:49:54:ff:bc: e2:c2:10:cc:d1:5a:3c:4f:63:4e:e2:bd:16:dc:32: 36:07:e8:67:a0:7c:26:87:8a:f5:02:a3:2a:da:6a: 91:92:78:04:25:36:89:89:23:5c:a8:db:c9:bf:9e: 08:c2:c0:27:fa:23:34:0e:a0:ac:f1:cc:63:48:1d: be:bd:42:84:e8:88:c1:2f:23:f6:ae:6d:ba:c9:c9: 9c:d3:a4:82:cc:32:b6:0e:1a:ae:67:6f:ff:0f:f1: 5f:86:ca:28:55:e6:99:2b:74:a6:a4:01:59:62:08: 7c:b1:b6:f9:88:3e:9d:5c:8d:f6:be:11:44:e8:07: d7:53:3f:17:9a:39:43:bc:f8:3f:83:01:69:d4:3c: 3b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5D:78:6B:95:F8:78:95:7E:DF:C7:04:5A:27:51:0B:44:48:51:D7 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KV14a5X4eJV-38cEWidRC0RIUdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.247.112.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:43:67:d0:05:f2:a8:82:88:82:94:9b:91:44:47:1b:9a:a0: 1c:8e:ce:97:f1:dc:e3:68:d6:15:b4:cc:cf:ec:47:30:7b:e7: ce:22:b6:67:42:d5:ec:b3:2a:dd:eb:1d:40:26:6c:68:6e:ab: a4:6b:6a:53:02:4d:c8:da:c3:72:5f:29:eb:12:b2:01:7c:c5: 4b:e8:74:7c:05:30:d0:03:0e:20:70:2a:60:bf:6c:6e:e7:b2: 46:b8:b7:f9:27:51:90:5b:5d:00:2e:1a:f2:54:b6:48:48:8e: cf:3d:3e:b7:d8:cd:37:d0:92:74:2f:e6:23:42:62:c4:93:3a: b6:bd:18:27:d0:98:6f:96:f1:82:db:9e:97:6b:09:1e:d5:fb: 5a:96:f9:1f:c7:01:bc:d1:cb:d1:67:5f:50:24:58:75:3e:1f: 3b:8a:7c:ba:f6:58:fd:21:02:4b:bf:eb:18:db:0f:12:ed:d6: 68:f3:81:a5:89:21:7d:66:12:d8:f6:41:63:1a:27:e9:d2:69: f6:a1:b0:39:7c:7d:8a:9c:cc:06:3d:c6:e1:ab:e5:36:4d:bc: 09:5a:61:fe:40:81:9e:be:55:37:4e:8a:14:d6:e4:82:ea:4f: c0:5e:e6:de:83:1a:0f:dd:b6:8d:98:c8:8a:3f:6f:4a:07:b0: 23:26:8a:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftGN4WbGKH4UPMVa9qSwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTVkNzg2Yjk1Zjg3ODk1N2VkZmM3MDQ1YTI3NTEwYjQ0NDg1MWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmPf2N/BEl3irskyi/pq3ukYQhAC SdO7IpJj0WCbK0TqYGc3k2IbO6bOPF7NZ/7m4wwgA+G6UYOGNMk7qFqY4rAdrAht JGbD8quyxgTWpSoewNLRxxJlS8yK+bP1sWaN1+9YaqJ+ZFUmTRapHR0hyJYbW0lU /7ziwhDM0Vo8T2NO4r0W3DI2B+hnoHwmh4r1AqMq2mqRkngEJTaJiSNcqNvJv54I wsAn+iM0DqCs8cxjSB2+vUKE6IjBLyP2rm26ycmc06SCzDK2DhquZ2//D/Ffhsoo VeaZK3SmpAFZYgh8sbb5iD6dXI32vhFE6AfXUz8XmjlDvPg/gwFp1Dw7BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCldeGuV+HiVft/HBFonUQtESFHXMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvS1YxNGE1WDRlSlYtMzhjRVdpZFJDMFJJVWRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXPdwMA0G CSqGSIb3DQEBCwUAA4IBAQB+Q2fQBfKogoiClJuRREcbmqAcjs6X8dzjaNYVtMzP 7Ecwe+fOIrZnQtXssyrd6x1AJmxobquka2pTAk3I2sNyXynrErIBfMVL6HR8BTDQ Aw4gcCpgv2xu57JGuLf5J1GQW10ALhryVLZISI7PPT632M030JJ0L+YjQmLEkzq2 vRgn0JhvlvGC256Xawke1ftalvkfxwG80cvRZ19QJFh1Ph87iny69lj9IQJLv+sY 2w8S7dZo84GliSF9ZhLY9kFjGifp0mn2obA5fH2KnMwGPcbhq+U2TbwJWmH+QIGe vlU3TooU1uSC6k/AXubegxoP3baNmMiKP29KB7AjJoq6 -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:36 2026 by rpki-client