This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/KmFH08iC5J-95oBTnRmMORdBhYQ.roa File: KmFH08iC5J-95oBTnRmMORdBhYQ.roa (raw, json) Hash identifier: jxzbdMpWjw66b8Fw1Ba2LpATegGadHxvfHdlKL67I8A= Subject key identifier: 2A:61:47:D3:C8:82:E4:9F:BD:E6:80:53:9D:19:8C:39:17:41:85:84 Certificate issuer: /CN=6e831066ea8fe20b067a136006b7af906633843b Certificate serial: 019B7AC8ED3FDBB2E7B5AFD7745EFDA4AAC6 Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/KmFH08iC5J-95oBTnRmMORdBhYQ.roa Signing time: Thu 01 Jan 2026 18:19:06 +0000 ROA not before: Thu 01 Jan 2026 18:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49923 IP address blocks: 193.104.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ed:3f:db:b2:e7:b5:af:d7:74:5e:fd:a4:aa:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b Validity Not Before: Jan 1 18:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a6147d3c882e49fbde680539d198c3917418584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d1:fe:b3:96:e1:f5:80:7b:3a:f9:6f:39:0f: f7:a6:6d:aa:03:9c:cc:56:94:da:40:3d:ac:2e:5a: 1c:03:d3:e8:7e:fc:4b:e4:d5:ee:bb:49:12:ef:5e: f9:e8:46:08:4c:0d:6a:f4:1f:49:1b:45:ae:44:91: ec:71:bf:fe:84:2a:53:2c:78:a2:e3:91:54:ba:d3: 17:0f:d4:fa:7f:b1:92:14:01:98:56:dc:52:32:cf: b1:a9:bd:76:dc:98:96:ac:c1:ff:20:98:b6:99:21: cf:30:e4:b4:25:08:1c:49:5d:9c:85:c0:c6:33:3a: 72:3e:b6:18:c5:88:25:22:69:8b:51:c4:dd:b6:01: f8:33:9e:8d:2d:76:4a:79:a4:01:41:d4:78:2e:89: 80:2c:3c:39:72:9b:5b:0c:a8:67:ba:75:68:c8:a6: 28:3e:54:a7:6f:a7:80:6f:a9:33:13:6d:c1:4a:bf: 55:fa:2c:cc:2f:d2:b1:72:8c:73:36:d8:06:26:aa: a3:ca:be:e6:a6:2b:e0:a9:87:d7:16:6e:6f:43:a6: e4:30:cb:fa:06:d9:d9:df:89:e8:8d:34:76:0a:3f: 0a:f8:6a:d2:e4:6a:91:1a:9d:0e:dd:7b:dc:cf:4b: f0:4b:56:0f:23:d1:46:77:fb:9c:2e:52:67:df:bc: c9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:61:47:D3:C8:82:E4:9F:BD:E6:80:53:9D:19:8C:39:17:41:85:84 X509v3 Authority Key Identifier: keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/KmFH08iC5J-95oBTnRmMORdBhYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.48.0/24 Signature Algorithm: sha256WithRSAEncryption a7:03:5b:32:98:bd:e4:c4:2f:3d:06:7a:d9:4d:cf:e3:6b:68: c9:9b:0a:84:38:31:af:06:09:d3:71:77:be:9f:b7:f5:a4:fd: ce:5e:e2:20:45:a9:e6:b4:74:32:47:05:25:0d:58:2e:2a:65: 1c:5a:a6:bf:8d:04:01:32:f1:6b:08:25:11:ed:01:fd:f2:b4: ac:80:93:e5:5c:1d:75:ee:d7:6a:00:c9:4d:5d:8f:86:16:64: 6c:63:70:76:8d:3c:f4:ba:44:44:03:0f:a4:3d:10:2c:cb:9a: f6:e4:13:8a:f8:0f:65:3b:2a:33:a8:5d:d4:fe:ab:7e:9d:d0: 9a:70:76:01:c0:33:8b:6e:de:6a:85:47:31:77:11:da:a0:c2: ad:67:d6:13:eb:55:f2:a1:0f:ae:49:5e:a3:72:e4:e8:e1:17: b9:0a:b2:36:68:54:e6:db:55:d9:5f:cf:c0:b7:7c:78:9c:6e: f3:0a:6a:6a:c5:42:49:50:d2:5c:22:70:95:67:9b:88:ce:89: 2e:0f:fe:37:ff:6f:26:5f:01:6b:d1:d7:c4:03:d8:b5:86:cd: a7:81:69:7c:46:60:20:6c:8d:d1:3f:66:00:2d:8e:b6:10:ad: 81:3e:9b:ed:41:18:ac:6f:08:a9:0b:2f:6f:33:4c:df:dd:31: 31:60:cc:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yO0/27Lnta/XdF79pKrGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODMxMDY2ZWE4ZmUyMGIwNjdhMTM2MDA2YjdhZjkwNjYz Mzg0M2IwHhcNMjYwMTAxMTgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTYxNDdkM2M4ODJlNDlmYmRlNjgwNTM5ZDE5OGMzOTE3NDE4NTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9H+s5bh9YB7OvlvOQ/3pm2qA5zM VpTaQD2sLlocA9PofvxL5NXuu0kS71756EYITA1q9B9JG0WuRJHscb/+hCpTLHii 45FUutMXD9T6f7GSFAGYVtxSMs+xqb123JiWrMH/IJi2mSHPMOS0JQgcSV2chcDG MzpyPrYYxYglImmLUcTdtgH4M56NLXZKeaQBQdR4LomALDw5cptbDKhnunVoyKYo PlSnb6eAb6kzE23BSr9V+izML9KxcoxzNtgGJqqjyr7mpivgqYfXFm5vQ6bkMMv6 BtnZ34nojTR2Cj8K+GrS5GqRGp0O3Xvcz0vwS1YPI9FGd/ucLlJn37zJNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCphR9PIguSfveaAU50ZjDkXQYWEMB8GA1UdIwQY MBaAFG6DEGbqj+ILBnoTYAa3r5BmM4Q7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9NUVp1cVA0Z3NHZWhOZ0JyZXZrR1l6aERzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iZDE5ZmQtZjM2OS00MmJmLTkyNmYt MmE0ZGQyM2EyZjlhLzEvS21GSDA4aUM1Si05NW9CVG5SbU1PUmRCaFlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9iZDE5ZmQtZjM2OS00MmJmLTkyNmYtMmE0ZGQyM2EyZjlh LzEvYm9NUVp1cVA0Z3NHZWhOZ0JyZXZrR1l6aERzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWgwMA0G CSqGSIb3DQEBCwUAA4IBAQCnA1symL3kxC89BnrZTc/ja2jJmwqEODGvBgnTcXe+ n7f1pP3OXuIgRanmtHQyRwUlDVguKmUcWqa/jQQBMvFrCCUR7QH98rSsgJPlXB11 7tdqAMlNXY+GFmRsY3B2jTz0ukREAw+kPRAsy5r25BOK+A9lOyozqF3U/qt+ndCa cHYBwDOLbt5qhUcxdxHaoMKtZ9YT61XyoQ+uSV6jcuTo4Re5CrI2aFTm21XZX8/A t3x4nG7zCmpqxUJJUNJcInCVZ5uIzokuD/43/28mXwFr0dfEA9i1hs2ngWl8RmAg bI3RP2YALY62EK2BPpvtQRisbwipCy9vM0zf3TExYMxN -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:19 2026 by rpki-client