This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/kKma-2Zbn1iUfh8H0hZFI9MaXNQ.roa File: kKma-2Zbn1iUfh8H0hZFI9MaXNQ.roa (raw, json) Hash identifier: X3aIaqPbekNW2pJLmcUFR+20YsF8iBTk6G9dxR1mG+g= Subject key identifier: 90:A9:9A:FB:66:5B:9F:58:94:7E:1F:07:D2:16:45:23:D3:1A:5C:D4 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C80A0201F19D230D4DB22AD7428E9C8 Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/kKma-2Zbn1iUfh8H0hZFI9MaXNQ.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208485 IP address blocks: 89.45.34.0/24 maxlen: 24 93.114.187.0/24 maxlen: 24 188.215.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a0:20:1f:19:d2:30:d4:db:22:ad:74:28:e9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90a99afb665b9f58947e1f07d2164523d31a5cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:30:5e:8d:69:9b:72:85:fa:98:45:19:28: 14:52:b4:32:15:e4:55:cc:48:75:9c:fd:eb:97:82: 6d:1b:64:96:71:73:a3:d7:e8:64:69:97:5b:68:f2: dc:f2:36:b4:85:9f:c9:68:66:59:ee:1b:c5:8f:fe: f1:53:d2:b0:18:03:2a:bb:3b:5d:42:4c:a8:ff:92: f8:c2:40:12:c7:ed:c9:cb:6d:70:4d:9c:fc:72:3a: eb:2d:90:c6:73:6f:ef:0f:4f:4c:56:33:3b:47:d8: 7a:74:ed:a9:67:58:03:83:8b:0d:d0:02:25:87:da: 8d:34:1a:b7:aa:12:23:3a:2a:94:c6:8d:29:b1:c3: df:de:4e:0c:37:5c:38:19:ad:cf:c8:d3:5a:8b:87: dd:62:78:72:0c:d5:49:88:72:7b:c9:d5:43:4d:29: f6:43:3f:05:a5:09:50:41:ba:ca:34:a5:1e:9c:ea: dc:cc:1b:06:9d:bb:fa:dd:2c:4d:e8:f3:23:83:ce: c4:b8:1d:b7:b9:e5:2c:8c:e5:a5:c5:0d:02:5d:c8: d8:ca:e6:e6:18:b6:78:a6:ea:dc:97:89:71:91:ce: a1:13:25:4d:28:52:6d:12:32:c0:5e:3a:1b:80:ac: 8c:93:65:b3:5b:18:17:a6:f8:7d:e8:a7:be:4f:5b: 2c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A9:9A:FB:66:5B:9F:58:94:7E:1F:07:D2:16:45:23:D3:1A:5C:D4 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/kKma-2Zbn1iUfh8H0hZFI9MaXNQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.45.34.0/24 93.114.187.0/24 188.215.72.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:2d:27:7d:08:80:ed:81:aa:91:4c:09:1c:5d:1c:7a:2b:aa: 6c:2d:a0:1f:89:53:56:cf:a9:c7:9e:c3:60:07:c2:d2:40:8d: e2:5e:c5:0a:0b:71:4e:f4:ae:b0:f9:66:7e:2d:df:20:8c:1e: 0d:96:76:1a:80:51:0d:24:5e:d0:f5:5e:fd:06:17:37:84:c3: 86:88:41:3b:84:9c:e1:55:e4:fa:cb:e1:6d:5b:57:55:4b:70: 49:42:41:de:d6:ce:ff:09:35:2c:02:ac:d8:47:d6:14:09:43: d7:18:f4:85:8b:cb:3a:df:ba:37:b1:5a:ba:bb:55:55:99:32: 1d:43:53:32:81:68:70:e1:bc:1e:5d:44:74:24:e4:f6:ac:5e: 06:b0:df:dd:e3:b1:81:cb:4a:3c:3f:a5:8c:9e:34:cf:bb:a6: 44:e1:6b:1a:2e:a3:5e:2e:59:e6:ab:91:a9:18:c2:14:a4:59: 45:6e:88:4f:08:33:c6:c6:f8:ff:ac:b7:50:83:0d:78:41:53: 82:11:9e:9c:c7:55:96:25:46:b4:c7:da:c5:86:7a:8b:6e:13: 1b:75:fe:34:fe:8b:3e:eb:fc:d1:7c:bc:43:64:06:33:60:b8: 4a:f0:c0:a7:3e:c4:4c:c2:b4:9d:df:bf:d0:b5:d5:0d:ff:3b: 54:23:b0:c1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gKAgHxnSMNTbIq10KOnIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGE5OWFmYjY2NWI5ZjU4OTQ3ZTFmMDdkMjE2NDUyM2QzMWE1Y2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqgwXo1pm3KF+phFGSgUUrQyFeRV zEh1nP3rl4JtG2SWcXOj1+hkaZdbaPLc8ja0hZ/JaGZZ7hvFj/7xU9KwGAMquztd Qkyo/5L4wkASx+3Jy21wTZz8cjrrLZDGc2/vD09MVjM7R9h6dO2pZ1gDg4sN0AIl h9qNNBq3qhIjOiqUxo0pscPf3k4MN1w4Ga3PyNNai4fdYnhyDNVJiHJ7ydVDTSn2 Qz8FpQlQQbrKNKUenOrczBsGnbv63SxN6PMjg87EuB23ueUsjOWlxQ0CXcjYyubm GLZ4purcl4lxkc6hEyVNKFJtEjLAXjobgKyMk2WzWxgXpvh96Ke+T1ssEwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJCpmvtmW59YlH4fB9IWRSPTGlzUMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEva0ttYS0yWmJuMWlVZmg4SDBoWkZJOU1hWE5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWS0iAwQA XXK7AwQAvNdIMA0GCSqGSIb3DQEBCwUAA4IBAQAfLSd9CIDtgaqRTAkcXRx6K6ps LaAfiVNWz6nHnsNgB8LSQI3iXsUKC3FO9K6w+WZ+Ld8gjB4NlnYagFENJF7Q9V79 Bhc3hMOGiEE7hJzhVeT6y+FtW1dVS3BJQkHe1s7/CTUsAqzYR9YUCUPXGPSFi8s6 37o3sVq6u1VVmTIdQ1MygWhw4bweXUR0JOT2rF4GsN/d47GBy0o8P6WMnjTPu6ZE 4WsaLqNeLlnmq5GpGMIUpFlFbohPCDPGxvj/rLdQgw14QVOCEZ6cx1WWJUa0x9rF hnqLbhMbdf40/os+6/zRfLxDZAYzYLhK8MCnPsRMwrSd37/QtdUN/ztUI7DB -----END CERTIFICATE-----Generated at Wed Jan 21 07:48:05 2026 by rpki-client