This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/KMvjq5V4Ksx01k9TjiIKtXCe5pA.roa File: KMvjq5V4Ksx01k9TjiIKtXCe5pA.roa (raw, json) Hash identifier: 1beuOrWqdA+O+erqVb2gqs5tEOIpMoZMwqBtE6QzSbA= Subject key identifier: 28:CB:E3:AB:95:78:2A:CC:74:D6:4F:53:8E:22:0A:B5:70:9E:E6:90 Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f Certificate serial: 019B7C806B6C9EDD96564C5EEDC4A3F5DA14 Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/KMvjq5V4Ksx01k9TjiIKtXCe5pA.roa Signing time: Fri 02 Jan 2026 02:19:09 +0000 ROA not before: Fri 02 Jan 2026 02:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31052 IP address blocks: 91.205.148.0/22 maxlen: 22 193.93.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6b:6c:9e:dd:96:56:4c:5e:ed:c4:a3:f5:da:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f Validity Not Before: Jan 2 02:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28cbe3ab95782acc74d64f538e220ab5709ee690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:38:a8:8d:25:22:f5:22:29:87:b7:01:e9: fa:e8:ba:1f:77:f4:ed:77:85:87:0a:03:43:6b:5b: 86:7e:84:02:0c:cd:19:e6:ce:c7:e2:0d:de:f3:86: 16:0d:ac:71:69:b6:c5:8c:93:fd:c2:44:5f:be:02: 80:3d:d2:10:c6:8d:3e:83:d4:0b:59:74:2f:9c:da: 92:23:d4:c5:9c:18:a0:f6:7b:44:01:42:aa:cb:bf: 0b:fa:bf:52:93:fe:63:df:1b:44:f1:89:b6:f3:10: c3:3b:e4:ab:02:bc:92:49:30:74:94:1d:d1:47:b8: aa:4d:fd:f8:ba:69:aa:f5:95:c1:ae:ea:ff:96:4b: 41:00:6a:d3:c9:9e:ea:e3:ec:35:93:1f:a5:92:73: 6f:2d:bf:55:54:25:d8:45:08:6c:37:b8:af:4b:6f: ab:6a:a0:58:ee:b0:72:12:bf:c7:78:4c:c4:0d:27: 5b:2c:2f:67:ea:45:2d:1c:07:68:35:6b:3d:23:d2: d7:27:5d:7d:8f:1a:6d:af:29:09:6f:78:70:d9:46: 8b:fe:2d:f4:23:6d:a7:d9:63:c1:97:fc:bf:d8:bd: 6e:6a:59:f1:1b:20:98:a5:3e:06:13:31:4a:7b:ae: 13:d9:7d:70:b4:54:97:63:14:64:fa:9d:f8:03:d4: 5e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CB:E3:AB:95:78:2A:CC:74:D6:4F:53:8E:22:0A:B5:70:9E:E6:90 X509v3 Authority Key Identifier: keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/KMvjq5V4Ksx01k9TjiIKtXCe5pA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.148.0/22 193.93.20.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:c6:48:bd:aa:49:2b:ab:dc:85:f8:51:3d:9f:70:40:4f:17: 4e:6b:d8:15:1b:63:bb:67:c5:39:ef:b4:64:b3:47:28:1e:68: 6f:43:88:29:d8:e3:87:74:43:ca:85:83:78:e5:be:d6:a0:d8: f1:d9:59:44:6a:a3:15:6c:e8:38:b1:21:82:db:fd:88:74:7d: 4c:37:b0:e1:0d:83:6d:f3:b8:f8:f6:53:d2:6f:6e:23:4c:b1: b0:03:37:44:b8:96:c5:df:91:f7:e9:1e:cd:b8:96:96:55:dd: 1c:95:9b:4b:83:1e:5c:1d:66:c0:88:21:ef:a9:cd:8c:14:6d: 48:a3:c1:e7:49:b6:ed:77:ea:05:44:23:ae:a0:95:e8:e4:47: f3:5b:dd:86:cb:ec:a7:21:35:68:b4:43:4b:d3:4b:07:7f:9e: 38:6a:41:d4:7e:08:47:8b:e4:ed:4d:3b:29:be:83:2b:b4:ca: 9d:37:bc:83:cd:f1:3d:9f:0f:1a:65:7a:94:26:79:ae:bb:0c: be:f2:fc:41:12:d2:ee:37:76:a2:90:bf:9a:d5:a7:8a:80:ef: 9f:9a:07:11:4e:0c:c1:89:ab:23:cf:a7:86:76:8d:38:f7:54: be:5f:21:0c:42:9a:5c:44:da:79:16:7b:eb:3c:ca:32:de:2d: 3e:60:dd:81 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gGtsnt2WVkxe7cSj9doUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NmMwZTFhNzMzYWQ4MzNiY2JlNTBhODEyNDQ4YmY1ZTA5 OWU5NWYwHhcNMjYwMTAyMDIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGNiZTNhYjk1NzgyYWNjNzRkNjRmNTM4ZTIyMGFiNTcwOWVlNjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC04qI0lIvUiKYe3Aen66Lofd/Tt d4WHCgNDa1uGfoQCDM0Z5s7H4g3e84YWDaxxabbFjJP9wkRfvgKAPdIQxo0+g9QL WXQvnNqSI9TFnBig9ntEAUKqy78L+r9Sk/5j3xtE8Ym28xDDO+SrArySSTB0lB3R R7iqTf34ummq9ZXBrur/lktBAGrTyZ7q4+w1kx+lknNvLb9VVCXYRQhsN7ivS2+r aqBY7rByEr/HeEzEDSdbLC9n6kUtHAdoNWs9I9LXJ119jxptrykJb3hw2UaL/i30 I22n2WPBl/y/2L1ualnxGyCYpT4GEzFKe64T2X1wtFSXYxRk+p34A9ReMQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCjL46uVeCrMdNZPU44iCrVwnuaQMB8GA1UdIwQY MBaAFHRsDhpzOtgzvL5QqBJEi/XgmelfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEd3T0duTTYyRE84dmxDb0VrU0w5ZUNaNlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MWVhNDgtM2UzOS00MWU4LWIyMmEt NmM5YTgyNTU4MWNiLzEvS012anE1VjRLc3gwMWs5VGppSUt0WENlNXBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MWVhNDgtM2UzOS00MWU4LWIyMmEtNmM5YTgyNTU4MWNi LzEvZEd3T0duTTYyRE84dmxDb0VrU0w5ZUNaNlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW82UAwQC wV0UMA0GCSqGSIb3DQEBCwUAA4IBAQB7xki9qkkrq9yF+FE9n3BATxdOa9gVG2O7 Z8U577Rks0coHmhvQ4gp2OOHdEPKhYN45b7WoNjx2VlEaqMVbOg4sSGC2/2IdH1M N7DhDYNt87j49lPSb24jTLGwAzdEuJbF35H36R7NuJaWVd0clZtLgx5cHWbAiCHv qc2MFG1Io8HnSbbtd+oFRCOuoJXo5EfzW92Gy+ynITVotENL00sHf544akHUfghH i+TtTTspvoMrtMqdN7yDzfE9nw8aZXqUJnmuuwy+8vxBEtLuN3aikL+a1aeKgO+f mgcRTgzBiasjz6eGdo0491S+XyEMQppcRNp5FnvrPMoy3i0+YN2B -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:08 2026 by rpki-client