This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/KM7IJi-OJYrr9Dz6a10ZrpgcMy0.roa File: KM7IJi-OJYrr9Dz6a10ZrpgcMy0.roa (raw, json) Hash identifier: 5PJLRPh+7Dbos9ykb+bQ2poZbiGMLRX5BwbjSRk37XY= Subject key identifier: 28:CE:C8:26:2F:8E:25:8A:EB:F4:3C:FA:6B:5D:19:AE:98:1C:33:2D Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C1309CE5D0B2DC79CF53E8DB2182CE1 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/KM7IJi-OJYrr9Dz6a10ZrpgcMy0.roa Signing time: Fri 02 Jan 2026 00:19:41 +0000 ROA not before: Fri 02 Jan 2026 00:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212777 IP address blocks: 194.209.202.0/24 maxlen: 24 194.209.237.0/24 maxlen: 24 212.243.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:09:ce:5d:0b:2d:c7:9c:f5:3e:8d:b2:18:2c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28cec8262f8e258aebf43cfa6b5d19ae981c332d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:e8:68:73:77:a9:dc:dd:3f:8d:19:79:e1: f7:6c:f4:33:64:cb:e7:dd:c1:24:a1:7a:09:25:13: 7b:c1:e1:15:93:f5:0b:60:f7:7f:aa:7b:28:fc:cc: a6:f3:5f:b0:29:4a:6d:4a:af:ac:30:a2:6f:1c:0c: 7c:fb:be:57:d3:69:45:64:55:86:4d:5b:71:80:a7: cd:65:30:27:7c:66:6b:35:3c:cf:ac:d1:52:2f:66: 31:67:87:62:66:cc:42:b3:23:cf:29:9f:29:05:cf: 4b:cc:96:eb:e5:14:ee:b3:06:51:42:5b:94:50:b7: b4:60:d1:ee:3a:d5:cc:bd:14:e8:22:bb:5d:cf:7c: b8:71:f7:f7:44:b5:19:8d:03:65:42:5c:03:cb:fe: 13:e0:ce:f6:7f:dc:27:c6:3b:0f:f4:53:38:9a:88: f2:a3:a7:6c:b4:94:99:3e:06:57:47:20:24:30:fd: 18:9c:64:85:52:b8:69:2f:db:34:e6:52:8b:03:c3: 7f:f2:c8:5e:b2:db:07:39:eb:45:c6:0c:83:e7:4b: 6a:0f:a9:d0:97:24:f9:51:1d:1b:b3:02:46:53:77: c2:2d:9c:41:95:cc:66:45:21:42:17:ae:43:d4:65: 60:f5:76:d9:f1:f7:15:b6:0a:45:f3:53:ab:0e:5e: 82:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CE:C8:26:2F:8E:25:8A:EB:F4:3C:FA:6B:5D:19:AE:98:1C:33:2D X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/KM7IJi-OJYrr9Dz6a10ZrpgcMy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.202.0/24 194.209.237.0/24 212.243.178.0/24 Signature Algorithm: sha256WithRSAEncryption 66:72:77:6c:a9:68:36:95:93:05:80:c0:ad:14:53:8e:76:ee: 15:61:58:4e:84:46:2d:71:48:0f:86:4d:bc:4d:87:7d:c8:f2: f5:16:dd:bf:1e:03:2d:dd:54:87:fd:32:79:27:6f:b7:26:10: cb:18:08:ce:2e:b8:10:cf:f2:4c:a2:1a:36:5a:77:42:8b:e9: 16:6f:4f:52:ed:4c:ad:65:f7:44:db:3f:2e:72:33:06:60:b8: 8e:38:ba:db:5f:eb:f5:55:56:a7:be:0f:5b:0f:0a:f4:61:ff: 98:9e:b3:ac:67:29:b4:47:44:a4:b9:23:4b:c8:1a:c2:0c:2d: ec:67:da:a6:fc:b7:85:70:6f:ea:9c:3a:2f:77:11:76:eb:ea: 48:10:9b:33:af:a1:d1:b4:9b:1d:96:ab:0f:53:eb:61:53:c4: a0:9b:19:d7:c3:ea:c6:ed:43:7e:42:5a:11:48:6b:c7:2b:bc: 62:dc:1a:f2:f4:da:0b:96:54:fd:4c:89:ec:f6:c8:49:4c:14: ab:08:2e:66:c2:ea:1e:0c:f3:a0:18:89:e7:bf:07:b8:7b:4b: 43:59:b9:cb:d9:d3:db:f0:08:c9:48:46:48:38:52:28:46:dd: fb:3b:90:5c:6c:b4:72:f0:e0:42:83:b1:7c:30:b2:37:63:92: f7:2e:52:19 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EwnOXQstx5z1Po2yGCzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGNlYzgyNjJmOGUyNThhZWJmNDNjZmE2YjVkMTlhZTk4MWMzMzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoPoaHN3qdzdP40ZeeH3bPQzZMvn 3cEkoXoJJRN7weEVk/ULYPd/qnso/Mym81+wKUptSq+sMKJvHAx8+75X02lFZFWG TVtxgKfNZTAnfGZrNTzPrNFSL2YxZ4diZsxCsyPPKZ8pBc9LzJbr5RTuswZRQluU ULe0YNHuOtXMvRToIrtdz3y4cff3RLUZjQNlQlwDy/4T4M72f9wnxjsP9FM4mojy o6dstJSZPgZXRyAkMP0YnGSFUrhpL9s05lKLA8N/8shestsHOetFxgyD50tqD6nQ lyT5UR0bswJGU3fCLZxBlcxmRSFCF65D1GVg9XbZ8fcVtgpF81OrDl6CnQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCjOyCYvjiWK6/Q8+mtdGa6YHDMtMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvS003SUppLU9KWXJyOUR6NmExMFpycGdjTXkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwtHKAwQA wtHtAwQA1POyMA0GCSqGSIb3DQEBCwUAA4IBAQBmcndsqWg2lZMFgMCtFFOOdu4V YVhOhEYtcUgPhk28TYd9yPL1Ft2/HgMt3VSH/TJ5J2+3JhDLGAjOLrgQz/JMoho2 WndCi+kWb09S7UytZfdE2z8ucjMGYLiOOLrbX+v1VVanvg9bDwr0Yf+YnrOsZym0 R0SkuSNLyBrCDC3sZ9qm/LeFcG/qnDovdxF26+pIEJszr6HRtJsdlqsPU+thU8Sg mxnXw+rG7UN+QloRSGvHK7xi3Bry9NoLllT9TIns9shJTBSrCC5mwuoeDPOgGInn vwe4e0tDWbnL2dPb8AjJSEZIOFIoRt37O5BcbLRy8OBCg7F8MLI3Y5L3LlIZ -----END CERTIFICATE-----Generated at Mon Jan 26 17:45:40 2026 by rpki-client