This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KMF_iz-NOAh8H55NGyB7bmQ6Ybc.roa File: KMF_iz-NOAh8H55NGyB7bmQ6Ybc.roa (raw, json) Hash identifier: HkE5lhUo3gkkDwSUhYi/9pAHiiZtQRZqWX6h5L4QEbk= Subject key identifier: 28:C1:7F:8B:3F:8D:38:08:7C:1F:9E:4D:1B:20:7B:6E:64:3A:61:B7 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12D24F60CF2E4903228B5855A4236E Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KMF_iz-NOAh8H55NGyB7bmQ6Ybc.roa Signing time: Fri 02 Jan 2026 00:19:26 +0000 ROA not before: Fri 02 Jan 2026 00:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44547 IP address blocks: 5.175.136.0/24 maxlen: 24 89.144.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d2:4f:60:cf:2e:49:03:22:8b:58:55:a4:23:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28c17f8b3f8d38087c1f9e4d1b207b6e643a61b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:49:7a:b2:50:8a:d9:7d:d4:5f:89:d4:03:5c: 29:63:4a:41:8a:fb:5f:59:6e:3e:78:f9:cf:65:e5: 4e:88:08:50:25:55:2d:9f:83:4d:cd:6f:bc:6c:68: 5e:8a:12:06:0c:48:b9:a0:67:77:35:49:a5:b0:46: 0a:8e:c1:73:92:0e:41:33:8a:7a:84:33:ce:ea:a9: 26:29:95:13:c4:a6:bb:22:81:88:eb:94:3e:b7:c0: b5:90:3f:71:ef:33:51:b1:d0:ac:f5:bd:8a:6f:dd: 60:e7:10:83:3c:75:3a:fb:9c:0a:e3:33:b6:62:ce: d0:d5:e7:81:20:3a:5e:13:85:df:7a:5c:cf:bc:29: 10:ac:df:a8:ed:5b:90:1e:f1:b2:9f:5f:d3:4a:9e: 62:2b:ff:c1:57:43:ae:ee:3c:38:b2:16:d7:5e:be: cd:7b:81:ce:a6:82:f5:f5:20:58:1c:af:05:f3:b6: 30:43:00:c7:6d:55:38:15:b2:0f:e2:ab:ec:7f:17: 89:81:1b:83:00:88:a8:4f:4b:22:48:08:06:f0:fc: 24:02:73:9f:0c:a2:db:60:84:6f:7e:2f:fd:46:ac: 52:35:73:72:1e:4e:85:60:66:7e:bb:78:ad:58:5d: 2a:48:18:d8:9a:c4:0a:b0:fe:59:74:f8:6d:67:7a: 67:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C1:7F:8B:3F:8D:38:08:7C:1F:9E:4D:1B:20:7B:6E:64:3A:61:B7 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KMF_iz-NOAh8H55NGyB7bmQ6Ybc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.136.0/24 89.144.20.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:f8:e9:40:b2:ea:e9:09:f3:16:ea:ce:99:19:9b:32:17:1c: 8d:c1:54:ca:0f:4e:f9:58:db:3d:00:b8:4d:30:4e:ed:bf:af: 81:f9:e8:10:e8:f6:9a:ad:63:d4:b3:4d:88:c2:ef:cf:51:b3: f3:7d:50:db:b4:22:c4:10:ba:39:c1:a8:53:89:80:fd:04:1d: 60:32:d2:e3:2a:73:bb:9b:17:c0:48:34:51:c5:1c:75:68:86: be:c9:23:a6:dc:99:87:26:3b:1c:3a:f8:be:0c:6c:fe:21:1f: 53:65:a2:c5:a7:d6:28:37:a1:66:ac:5a:05:a2:82:e3:c4:1b: 1c:d8:55:06:7a:b7:30:6c:05:15:a6:bf:8e:06:1f:11:7d:ce: f8:bf:df:17:6a:11:6f:96:4b:9f:e4:00:0b:ae:1e:0a:50:11: 65:5a:ce:37:98:1c:df:04:d0:61:6a:68:f5:53:3e:2f:3f:db: 55:98:43:37:68:78:eb:4b:3c:c6:61:88:ff:fb:be:38:44:4f: f7:0c:70:2c:63:e9:71:b2:97:30:64:0d:0b:54:27:cb:56:b8: 3b:1e:4b:cc:24:7d:52:7f:4b:63:c7:82:05:b0:c2:00:4a:bf: 22:54:20:5d:d9:9c:78:33:fd:c2:84:37:0b:84:45:df:85:15: 0e:76:66:72 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EtJPYM8uSQMii1hVpCNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGMxN2Y4YjNmOGQzODA4N2MxZjllNGQxYjIwN2I2ZTY0M2E2MWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kl6slCK2X3UX4nUA1wpY0pBivtf WW4+ePnPZeVOiAhQJVUtn4NNzW+8bGheihIGDEi5oGd3NUmlsEYKjsFzkg5BM4p6 hDPO6qkmKZUTxKa7IoGI65Q+t8C1kD9x7zNRsdCs9b2Kb91g5xCDPHU6+5wK4zO2 Ys7Q1eeBIDpeE4XfelzPvCkQrN+o7VuQHvGyn1/TSp5iK//BV0Ou7jw4shbXXr7N e4HOpoL19SBYHK8F87YwQwDHbVU4FbIP4qvsfxeJgRuDAIioT0siSAgG8PwkAnOf DKLbYIRvfi/9RqxSNXNyHk6FYGZ+u3itWF0qSBjYmsQKsP5ZdPhtZ3pnDwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCjBf4s/jTgIfB+eTRsge25kOmG3MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvS01GX2l6LU5PQWg4SDU1Tkd5QjdibVE2WWJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABa+IAwQA WZAUMA0GCSqGSIb3DQEBCwUAA4IBAQBa+OlAsurpCfMW6s6ZGZsyFxyNwVTKD075 WNs9ALhNME7tv6+B+egQ6PaarWPUs02Iwu/PUbPzfVDbtCLEELo5wahTiYD9BB1g MtLjKnO7mxfASDRRxRx1aIa+ySOm3JmHJjscOvi+DGz+IR9TZaLFp9YoN6FmrFoF ooLjxBsc2FUGercwbAUVpr+OBh8Rfc74v98XahFvlkuf5AALrh4KUBFlWs43mBzf BNBhamj1Uz4vP9tVmEM3aHjrSzzGYYj/+744RE/3DHAsY+lxspcwZA0LVCfLVrg7 HkvMJH1Sf0tjx4IFsMIASr8iVCBd2Zx4M/3ChDcLhEXfhRUOdmZy -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:13 2026 by rpki-client