This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/KmKUDYbWzZSjgabLwAbzPGNpEj4.roa File: KmKUDYbWzZSjgabLwAbzPGNpEj4.roa (raw, json) Hash identifier: gEj/zakI9SzJ7fJ3jtxSZdeEm1on8i6srVsSVZBtSIE= Subject key identifier: 2A:62:94:0D:86:D6:CD:94:A3:81:A6:CB:C0:06:F3:3C:63:69:12:3E Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3919A9890A59BBC228CF4809B4708C Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/KmKUDYbWzZSjgabLwAbzPGNpEj4.roa Signing time: Fri 02 Jan 2026 10:20:29 +0000 ROA not before: Fri 02 Jan 2026 10:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 163.5.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:19:a9:89:0a:59:bb:c2:28:cf:48:09:b4:70:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a62940d86d6cd94a381a6cbc006f33c6369123e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:10:7f:33:3f:11:d3:7d:51:2c:ff:ab:08: 51:c7:4f:86:57:74:a6:bf:2f:5a:81:09:3c:ad:4d: de:e4:bb:65:ad:74:6f:4e:b0:2d:2c:f2:29:9e:cd: 17:b5:9e:65:08:c8:bd:3f:d9:fe:84:b1:89:a6:71: 9a:1b:b4:ea:73:7a:f6:e4:2d:a9:65:ca:41:03:13: 19:4c:d3:19:83:9a:d7:61:eb:3d:75:d6:06:45:e6: 10:2e:9c:d3:39:dd:6d:55:87:14:2b:87:07:bc:42: 69:60:55:09:f1:22:2d:cd:d6:0b:3e:ab:e9:79:44: 87:3d:59:7b:74:2f:e9:05:a7:d7:cf:be:ed:dd:1c: 6b:72:68:b0:51:37:22:5b:8c:45:b9:bb:df:3a:d3: fb:bd:ab:2b:0b:ef:e5:9f:ee:e6:b7:d6:05:53:74: d8:50:c9:5a:c2:11:17:ac:6e:cf:b6:1b:09:08:d6: 01:84:2a:1e:df:ea:1e:8c:54:00:08:98:92:20:56: 0c:be:9a:93:1c:6b:b7:33:0a:a0:22:e6:c4:4b:c5: 18:cb:c4:9d:0b:df:a2:db:24:40:20:73:ee:2f:32: f0:3c:ed:94:ba:c8:96:05:42:1d:9e:3e:2f:9a:ef: b4:dd:50:b5:ee:65:7a:d9:22:79:7c:59:ba:39:5b: d4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:62:94:0D:86:D6:CD:94:A3:81:A6:CB:C0:06:F3:3C:63:69:12:3E X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/KmKUDYbWzZSjgabLwAbzPGNpEj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.66.0/24 Signature Algorithm: sha256WithRSAEncryption aa:a2:c6:95:d0:f4:53:85:ab:73:f2:36:08:66:6f:6c:70:dd: fa:40:1f:16:e6:e8:19:a6:2a:7a:0e:56:28:fb:b2:68:47:13: eb:9e:35:d5:36:a1:cd:14:a9:3b:87:56:dd:fb:40:05:16:7d: b3:99:5d:c7:a7:ea:df:c5:cb:6a:af:ce:d5:79:16:e2:a4:5c: 65:18:7b:5e:3d:e7:e2:5a:b5:3c:68:3c:34:7e:5b:37:91:ea: e5:cb:fa:a5:d8:6a:d3:d8:61:8e:cc:50:e1:58:4e:53:46:aa: dc:d6:c3:d2:8a:14:10:9f:ae:54:11:79:cc:d6:e2:64:5e:f6: e0:3b:d7:dc:f3:d4:1f:44:f2:aa:67:5d:8e:52:54:df:f4:58: c3:8b:60:07:91:25:8d:e8:6d:d2:be:73:80:fe:4e:ea:e4:41: 02:54:c3:8c:2a:29:ce:d0:6f:35:7d:11:53:80:2b:36:c9:0a: cd:89:87:14:82:a7:dd:e3:19:15:56:32:d3:26:cf:cd:9e:af: bd:96:3a:f1:37:c3:92:83:f8:90:fe:70:37:ec:cd:ee:1b:a8: 5c:51:64:57:29:c5:0f:64:32:8f:8d:6f:b5:47:01:cb:33:b1: 26:d8:2c:58:c0:d2:9a:49:62:40:9c:a1:7f:e6:47:49:ff:22: 4f:2f:00:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORmpiQpZu8Ioz0gJtHCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTYyOTQwZDg2ZDZjZDk0YTM4MWE2Y2JjMDA2ZjMzYzYzNjkxMjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpIQfzM/EdN9USz/qwhRx0+GV3Sm vy9agQk8rU3e5LtlrXRvTrAtLPIpns0XtZ5lCMi9P9n+hLGJpnGaG7Tqc3r25C2p ZcpBAxMZTNMZg5rXYes9ddYGReYQLpzTOd1tVYcUK4cHvEJpYFUJ8SItzdYLPqvp eUSHPVl7dC/pBafXz77t3RxrcmiwUTciW4xFubvfOtP7vasrC+/ln+7mt9YFU3TY UMlawhEXrG7PthsJCNYBhCoe3+oejFQACJiSIFYMvpqTHGu3MwqgIubES8UYy8Sd C9+i2yRAIHPuLzLwPO2UusiWBUIdnj4vmu+03VC17mV62SJ5fFm6OVvUJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCpilA2G1s2Uo4Gmy8AG8zxjaRI+MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvS21LVURZYld6WlNqZ2FiTHdBYnpQR05wRWo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowVCMA0G CSqGSIb3DQEBCwUAA4IBAQCqosaV0PRThatz8jYIZm9scN36QB8W5ugZpip6DlYo +7JoRxPrnjXVNqHNFKk7h1bd+0AFFn2zmV3Hp+rfxctqr87VeRbipFxlGHtePefi WrU8aDw0fls3kerly/ql2GrT2GGOzFDhWE5TRqrc1sPSihQQn65UEXnM1uJkXvbg O9fc89QfRPKqZ12OUlTf9FjDi2AHkSWN6G3SvnOA/k7q5EECVMOMKinO0G81fRFT gCs2yQrNiYcUgqfd4xkVVjLTJs/Nnq+9ljrxN8OSg/iQ/nA37M3uG6hcUWRXKcUP ZDKPjW+1RwHLM7Em2CxYwNKaSWJAnKF/5kdJ/yJPLwCc -----END CERTIFICATE-----Generated at Thu Jan 8 17:25:06 2026 by rpki-client