This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/km-4vtkMju8YDFwfvSEjlUQ22j4.roa File: km-4vtkMju8YDFwfvSEjlUQ22j4.roa (raw, json) Hash identifier: tlvaU4xsevUcHU/LjQvPOfIm/KaNsUt+aqw3Q+T646U= Subject key identifier: 92:6F:B8:BE:D9:0C:8E:EF:18:0C:5C:1F:BD:21:23:95:44:36:DA:3E Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019BFA49AB435AABEF1864820C7AAFD4C728 Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/km-4vtkMju8YDFwfvSEjlUQ22j4.roa Signing time: Mon 26 Jan 2026 12:31:30 +0000 ROA not before: Mon 26 Jan 2026 12:31:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48292 IP address blocks: 213.238.160.0/24 maxlen: 24 213.238.161.0/24 maxlen: 24 213.238.162.0/24 maxlen: 24 213.238.163.0/24 maxlen: 24 213.238.164.0/24 maxlen: 24 213.238.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:49:ab:43:5a:ab:ef:18:64:82:0c:7a:af:d4:c7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 26 12:31:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=926fb8bed90c8eef180c5c1fbd2123954436da3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:86:f8:8c:7f:dd:d8:01:c7:4c:d1:ce:89: 63:5c:74:34:4d:b4:19:87:17:02:2b:9d:ea:bf:3e: dc:24:41:97:98:13:d1:57:55:09:ae:83:80:4c:1b: bf:64:95:cc:fd:53:80:73:7f:44:58:09:dd:f5:5c: 5d:a9:bf:d5:a5:cd:e4:b2:4d:48:f8:30:56:cb:0d: 47:79:f3:55:c5:18:fb:63:d0:81:e0:3c:42:7e:e6: 6e:81:31:e6:02:f2:a0:77:93:dc:05:fe:af:df:c2: 81:6a:9b:4d:a4:75:86:c4:e6:65:dc:75:1f:64:dc: 77:7f:a5:d0:24:4d:6d:c1:9e:65:23:d2:fb:df:0a: fd:a9:72:33:3a:3d:fd:97:a1:ae:1e:5f:2e:82:74: 05:50:1d:33:b5:b9:63:d9:f5:91:04:91:52:5b:95: 81:5f:2c:23:2e:76:87:5b:3d:b3:bc:fe:5e:a0:b1: 75:41:95:66:85:eb:fe:00:5c:a8:ac:fa:12:bf:cf: d9:fe:ec:c4:d3:14:f0:48:56:bc:e1:29:2e:80:e2: ae:31:1b:e8:0e:d2:c4:d8:34:39:79:4e:5b:07:a7: 50:51:33:15:4d:3a:a9:f9:67:65:c3:b5:1b:1e:ec: d7:99:d6:64:d5:20:40:43:6b:ee:2b:7d:f8:91:a6: 62:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6F:B8:BE:D9:0C:8E:EF:18:0C:5C:1F:BD:21:23:95:44:36:DA:3E X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/km-4vtkMju8YDFwfvSEjlUQ22j4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.160.0-213.238.165.255 Signature Algorithm: sha256WithRSAEncryption 18:b0:fb:92:b2:c9:3e:fe:2c:2c:e3:ed:a4:18:44:81:3a:51: 80:67:bd:e6:4b:d0:6e:98:2d:e4:03:f9:f5:f7:c6:c9:cd:ab: b1:75:65:b8:32:26:a0:c1:bc:eb:9b:9f:16:b1:31:ca:e7:d7: 3a:64:9d:98:79:a5:d7:f0:97:4c:47:38:ba:91:55:b2:8e:2c: 5d:d9:7e:b4:33:74:0d:47:33:01:f2:77:e1:5e:62:f6:cd:a6: 40:76:fb:c9:2e:1f:76:a1:e3:fc:fe:ad:d0:22:e4:08:5a:09: d6:58:c1:d6:3f:d4:41:3e:f4:d3:6f:aa:3f:f3:c8:b5:d4:e5: 01:5e:e9:48:a6:9a:5e:d4:3a:9e:50:e7:10:5b:64:1a:fc:62: 81:76:e6:32:4c:29:8c:32:c9:0a:a6:88:cb:9e:31:67:2d:a9: 23:81:5c:c2:3c:97:0a:33:2b:52:01:12:1b:22:61:af:38:4e: e0:fb:a0:58:c8:04:eb:79:f3:13:be:13:4e:e8:38:6a:43:0f: 4f:af:b1:7a:5e:ed:56:c4:18:f7:b8:ae:38:67:05:76:d6:7f: e2:c5:a0:15:7c:97:75:f0:ec:a5:a0:b3:2f:02:34:15:61:e3: 7c:36:f4:d6:5f:4a:64:99:95:37:c1:0d:d6:06:aa:1e:99:f8: b7:c9:eb:bb -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZv6SatDWqvvGGSCDHqv1McoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTI2MTIzMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjZmYjhiZWQ5MGM4ZWVmMTgwYzVjMWZiZDIxMjM5NTQ0MzZkYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtByG+Ix/3dgBx0zRzoljXHQ0TbQZ hxcCK53qvz7cJEGXmBPRV1UJroOATBu/ZJXM/VOAc39EWAnd9Vxdqb/Vpc3ksk1I +DBWyw1HefNVxRj7Y9CB4DxCfuZugTHmAvKgd5PcBf6v38KBaptNpHWGxOZl3HUf ZNx3f6XQJE1twZ5lI9L73wr9qXIzOj39l6GuHl8ugnQFUB0ztblj2fWRBJFSW5WB XywjLnaHWz2zvP5eoLF1QZVmhev+AFyorPoSv8/Z/uzE0xTwSFa84SkugOKuMRvo DtLE2DQ5eU5bB6dQUTMVTTqp+Wdlw7UbHuzXmdZk1SBAQ2vuK334kaZi8wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJJvuL7ZDI7vGAxcH70hI5VENto+MB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEva20tNHZ0a01qdThZREZ3ZnZTRWpsVVEyMmo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXV7qAD BAHV7qQwDQYJKoZIhvcNAQELBQADggEBABiw+5KyyT7+LCzj7aQYRIE6UYBnveZL 0G6YLeQD+fX3xsnNq7F1ZbgyJqDBvOubnxaxMcrn1zpknZh5pdfwl0xHOLqRVbKO LF3ZfrQzdA1HMwHyd+FeYvbNpkB2+8kuH3ah4/z+rdAi5AhaCdZYwdY/1EE+9NNv qj/zyLXU5QFe6Uimml7UOp5Q5xBbZBr8YoF25jJMKYwyyQqmiMueMWctqSOBXMI8 lwozK1IBEhsiYa84TuD7oFjIBOt58xO+E07oOGpDD0+vsXpe7VbEGPe4rjhnBXbW f+LFoBV8l3Xw7KWgsy8CNBVh43w29NZfSmSZlTfBDdYGqh6Z+LfJ67s= -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:24 2026 by rpki-client