This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/9_KMCCpdv__dNX3XCcGQGoY_t7E.roa File: 9_KMCCpdv__dNX3XCcGQGoY_t7E.roa (raw, json) Hash identifier: 4J310WOIoaFhdk7Rws5ylL5JHddp0w2bpHJlXbfEDWM= Subject key identifier: F7:F2:8C:08:2A:5D:BF:FF:DD:35:7D:D7:09:C1:90:1A:86:3F:B7:B1 Certificate issuer: /CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab Certificate serial: 019B7E38372416516A3073D5E0B48C1F06A7 Authority key identifier: 3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/9_KMCCpdv__dNX3XCcGQGoY_t7E.roa Signing time: Fri 02 Jan 2026 10:19:31 +0000 ROA not before: Fri 02 Jan 2026 10:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204796 IP address blocks: 185.240.0.0/22 maxlen: 24 195.158.252.0/23 maxlen: 23 195.190.11.0/24 maxlen: 24 2001:67c:11f8::/48 maxlen: 48 2a0c:6880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:37:24:16:51:6a:30:73:d5:e0:b4:8c:1f:06:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab Validity Not Before: Jan 2 10:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7f28c082a5dbfffdd357dd709c1901a863fb7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:95:7c:65:7c:f2:f8:b6:05:37:33:9a:be: ce:c9:74:ba:5d:87:61:14:dc:11:6b:80:d1:23:8a: 99:f7:07:d4:29:27:45:c7:d2:67:a2:f6:ff:8c:14: 0e:13:e2:f8:c1:82:88:79:da:d1:3f:a7:e7:0d:34: bb:26:70:36:eb:0b:79:9b:5e:d6:9d:e5:e6:6b:1d: 20:38:97:29:63:c0:69:a3:ae:87:d0:0a:61:c7:32: c4:77:28:eb:7d:93:7f:0d:ab:98:96:db:86:0e:f8: a4:ba:39:2e:3f:05:ec:bc:fa:45:99:c0:14:19:b3: e6:8b:a1:49:62:c7:88:2c:95:dd:f7:20:05:28:aa: cf:d5:3a:da:f3:a4:0a:09:c7:12:ed:8f:44:89:e1: 41:18:da:05:65:67:72:af:63:a4:cf:e6:65:d7:6c: c0:e9:d1:d6:c2:0b:66:2f:1b:2e:a8:90:3c:79:53: 68:65:3d:e7:7e:0e:72:6f:c4:fa:76:4d:d9:ff:5f: 4b:8f:ff:67:49:27:76:f1:17:8a:21:81:38:0c:3a: 7c:bc:b1:54:4a:dd:ea:e3:69:b8:0e:8f:a3:8b:8d: e4:57:32:21:8b:5c:66:db:3b:59:6b:ba:76:c0:30: 32:e9:7f:df:46:4b:87:98:ef:ec:83:cc:6b:fb:03: fe:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F2:8C:08:2A:5D:BF:FF:DD:35:7D:D7:09:C1:90:1A:86:3F:B7:B1 X509v3 Authority Key Identifier: keyid:3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/9_KMCCpdv__dNX3XCcGQGoY_t7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.0.0/22 195.158.252.0/23 195.190.11.0/24 IPv6: 2001:67c:11f8::/48 2a0c:6880::/32 Signature Algorithm: sha256WithRSAEncryption 08:07:fc:d5:cb:b2:a6:68:77:f5:a5:e3:54:96:16:c4:61:19: 74:f4:f1:19:aa:1b:6c:09:65:36:0a:fe:e7:76:ae:af:d8:f4: ec:59:f4:7a:8e:9c:ce:c3:db:4e:c6:e4:f9:24:4c:2f:81:5f: 1d:3f:b2:22:16:c4:08:0c:f9:a7:f8:b6:94:16:d9:e9:60:be: 3a:14:4d:55:53:d0:f3:8b:89:51:96:f6:53:6d:93:d9:dc:f7: 74:f3:f6:f4:97:f8:ea:e8:11:90:3c:32:9a:0f:79:6d:83:cc: c4:82:ed:6b:86:d5:b4:fd:f2:31:9d:31:ec:c3:22:6d:72:9a: b4:42:61:d0:fb:de:06:c9:be:9c:5a:8c:d8:cd:e0:9a:d1:4f: ca:11:b5:c2:a5:12:3c:e9:e0:84:8e:3f:c7:be:4a:80:6c:f2: d2:f1:47:d9:ff:45:0d:62:15:b0:9f:c9:f5:30:0a:1c:3e:e8: 37:d8:19:3e:55:28:16:3c:17:2a:5b:98:8a:fc:4d:79:80:10: 11:31:85:74:c6:5e:6c:ba:37:61:80:39:04:e6:1f:c7:4d:75: 9b:ac:d4:3b:55:3c:be:8f:3a:92:9c:4b:9e:97:42:8b:02:1a: 1a:26:c0:87:e2:d1:d5:f1:81:e0:68:9c:b8:cb:47:d6:fb:f2: 50:dc:90:91 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt+ODckFlFqMHPV4LSMHwanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMGVmNDM1OGFkYjA0MGYzMzNkOTM2MWE0MjYxZWEwZTUw ZDM4YWIwHhcNMjYwMTAyMTAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2YyOGMwODJhNWRiZmZmZGQzNTdkZDcwOWMxOTAxYTg2M2ZiN2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZOVfGV88vi2BTczmr7OyXS6XYdh FNwRa4DRI4qZ9wfUKSdFx9Jnovb/jBQOE+L4wYKIedrRP6fnDTS7JnA26wt5m17W neXmax0gOJcpY8Bpo66H0AphxzLEdyjrfZN/DauYltuGDvikujkuPwXsvPpFmcAU GbPmi6FJYseILJXd9yAFKKrP1Tra86QKCccS7Y9EieFBGNoFZWdyr2Okz+Zl12zA 6dHWwgtmLxsuqJA8eVNoZT3nfg5yb8T6dk3Z/19Lj/9nSSd28ReKIYE4DDp8vLFU St3q42m4Do+ji43kVzIhi1xm2ztZa7p2wDAy6X/fRkuHmO/sg8xr+wP+tQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFPfyjAgqXb//3TV91wnBkBqGP7exMB8GA1UdIwQY MBaAFD0O9DWK2wQPMz2TYaQmHqDlDTirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFE3ME5ZcmJCQTh6UFpOaHBDWWVvT1VOT0tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mOTQ2ZWYtOTYxOS00YmRkLTlmNDct ZDJiYzk2YTk4YTE4LzEvOV9LTUNDcGR2X19kTlgzWENjR1FHb1lfdDdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9mOTQ2ZWYtOTYxOS00YmRkLTlmNDctZDJiYzk2YTk4YTE4 LzEvUFE3ME5ZcmJCQTh6UFpOaHBDWWVvT1VOT0tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQCufAAAwQB w578AwQAw74LMBYEAgACMBADBwAgAQZ8EfgDBQAqDGiAMA0GCSqGSIb3DQEBCwUA A4IBAQAIB/zVy7KmaHf1peNUlhbEYRl09PEZqhtsCWU2Cv7ndq6v2PTsWfR6jpzO w9tOxuT5JEwvgV8dP7IiFsQIDPmn+LaUFtnpYL46FE1VU9Dzi4lRlvZTbZPZ3Pd0 8/b0l/jq6BGQPDKaD3ltg8zEgu1rhtW0/fIxnTHswyJtcpq0QmHQ+94Gyb6cWozY zeCa0U/KEbXCpRI86eCEjj/HvkqAbPLS8UfZ/0UNYhWwn8n1MAocPug32Bk+VSgW PBcqW5iK/E15gBARMYV0xl5sujdhgDkE5h/HTXWbrNQ7VTy+jzqSnEuel0KLAhoa JsCH4tHV8YHgaJy4y0fW+/JQ3JCR -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:40 2026 by rpki-client