This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/kvsR5vGqCUlad7hcwSexC9HOmQU.roa File: kvsR5vGqCUlad7hcwSexC9HOmQU.roa (raw, json) Hash identifier: BQWcBL0pNsLmhZ/6jOKzXhoMqdBErbR1kzhV9E5bnP0= Subject key identifier: 92:FB:11:E6:F1:AA:09:49:5A:77:B8:5C:C1:27:B1:0B:D1:CE:99:05 Certificate issuer: /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52 Certificate serial: 019BDB675809C991B965C9AF4E3E8280AA7C Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/kvsR5vGqCUlad7hcwSexC9HOmQU.roa Signing time: Tue 20 Jan 2026 12:35:41 +0000 ROA not before: Tue 20 Jan 2026 12:35:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211540 IP address blocks: 195.242.204.0/23 maxlen: 24 213.177.190.0/24 maxlen: 24 2a14:6d40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:67:58:09:c9:91:b9:65:c9:af:4e:3e:82:80:aa:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52 Validity Not Before: Jan 20 12:35:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92fb11e6f1aa09495a77b85cc127b10bd1ce9905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:0c:e4:b6:d8:b0:86:a4:2b:6d:9c:fa:ef: 6f:c3:d7:85:d2:13:88:e4:80:11:24:33:9d:bd:d0: 0e:0d:b7:44:69:8a:9b:07:0d:fd:05:30:6c:78:68: 2d:b8:76:e9:4a:3b:0d:db:ca:b5:7d:5d:10:ae:8d: bb:a8:2e:a7:41:60:bf:2a:3e:a6:c3:5c:47:4f:53: a1:c1:55:75:e4:fc:da:68:22:41:5d:1d:84:d7:49: 5e:c0:b3:44:43:42:88:7a:82:cc:ea:8c:d8:dd:c9: 5d:9f:d0:2d:3e:5c:bd:47:6a:f0:57:bb:a7:91:51: 18:50:60:57:29:74:ef:57:1f:1f:36:39:b6:8d:ba: 29:40:77:92:01:2d:9f:f5:f6:d7:70:86:d4:d5:eb: f2:87:1a:95:32:a1:65:c1:41:c2:b0:aa:bb:6c:7d: 0d:f4:7a:14:f8:ec:7d:22:4a:65:5d:60:46:62:30: 52:8d:17:13:e2:20:13:b4:0f:4c:63:33:35:cc:5b: de:25:2e:79:6c:fd:66:a7:ef:83:18:45:c4:68:22: 61:d8:d5:a0:2b:ff:54:f6:e3:9b:4e:70:3a:4a:48: ce:27:be:50:a5:46:ee:70:12:bc:d8:73:02:19:98: 20:3f:d9:5a:f0:6f:eb:dd:13:7e:73:d7:4b:9c:17: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FB:11:E6:F1:AA:09:49:5A:77:B8:5C:C1:27:B1:0B:D1:CE:99:05 X509v3 Authority Key Identifier: keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/kvsR5vGqCUlad7hcwSexC9HOmQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.204.0/23 213.177.190.0/24 IPv6: 2a14:6d40::/29 Signature Algorithm: sha256WithRSAEncryption 67:f9:60:1b:b3:5c:06:47:05:c4:78:1a:8b:50:d3:4e:ca:86: 08:4a:bc:78:04:6a:ca:88:e6:93:2c:9c:e5:18:60:cd:59:22: 01:3d:b1:54:34:73:f5:c6:3b:5e:9d:19:74:d1:cf:12:be:20: de:da:60:1d:78:9c:7a:b4:40:4c:45:89:22:db:06:6c:e8:43: e2:3b:42:d5:b7:60:34:7b:96:0c:a8:94:e9:9d:06:48:d7:96: ee:d5:44:82:c2:c2:2a:6c:e9:0a:fc:3e:d2:59:3e:4d:3e:5b: 93:53:78:50:5b:04:af:d8:9e:cf:fd:0f:9e:af:e0:78:82:f1: 03:ba:f3:55:ae:e3:10:77:af:92:40:f8:4b:bb:cb:6f:fa:8e: 28:1c:96:1c:9c:b6:65:98:74:bb:ea:72:05:af:7c:5b:34:3d: 05:35:a3:73:1c:08:3d:12:b7:59:15:db:87:d8:56:e3:ba:d7: f8:e9:e0:8c:a8:c6:f2:ff:a5:9e:d0:4b:0c:af:f7:f4:a4:b5: 17:b6:b9:d2:12:c4:4e:1f:f7:3b:e6:79:5c:19:8c:53:24:1d: d4:03:48:a9:72:a2:b7:97:8f:39:7d:7d:90:03:cc:d2:bf:f3: bb:8a:d5:4f:fd:5b:c3:02:47:d1:0d:8d:44:07:7f:32:75:cc: b3:65:88:be -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZvbZ1gJyZG5ZcmvTj6CgKp8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjVhOGMwMDk1ODI1ZTEzZjQ2YmRiMzcwYjdmZGNhOWI5 ZjhhNTIwHhcNMjYwMTIwMTIzNTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmZiMTFlNmYxYWEwOTQ5NWE3N2I4NWNjMTI3YjEwYmQxY2U5OTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts0M5LbYsIakK22c+u9vw9eF0hOI 5IARJDOdvdAODbdEaYqbBw39BTBseGgtuHbpSjsN28q1fV0Qro27qC6nQWC/Kj6m w1xHT1OhwVV15PzaaCJBXR2E10lewLNEQ0KIeoLM6ozY3cldn9AtPly9R2rwV7un kVEYUGBXKXTvVx8fNjm2jbopQHeSAS2f9fbXcIbU1evyhxqVMqFlwUHCsKq7bH0N 9HoU+Ox9IkplXWBGYjBSjRcT4iATtA9MYzM1zFveJS55bP1mp++DGEXEaCJh2NWg K/9U9uObTnA6SkjOJ75QpUbucBK82HMCGZggP9la8G/r3RN+c9dLnBci8QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJL7EebxqglJWne4XMEnsQvRzpkFMB8GA1UdIwQY MBaAFPO1qMAJWCXhP0a9s3C3/cqbn4pSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdXb3dBbFlKZUVfUnIyemNMZjl5cHVmaWxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lMjY2NmUtNjllMS00MzdlLWEwMjEt MjkyNmJiYzE2Nzk2LzEva3ZzUjV2R3FDVWxhZDdoY3dTZXhDOUhPbVFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9lMjY2NmUtNjllMS00MzdlLWEwMjEtMjkyNmJiYzE2Nzk2 LzEvODdXb3dBbFlKZUVfUnIyemNMZjl5cHVmaWxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBw/LMAwQA 1bG+MA0EAgACMAcDBQMqFG1AMA0GCSqGSIb3DQEBCwUAA4IBAQBn+WAbs1wGRwXE eBqLUNNOyoYISrx4BGrKiOaTLJzlGGDNWSIBPbFUNHP1xjtenRl00c8SviDe2mAd eJx6tEBMRYki2wZs6EPiO0LVt2A0e5YMqJTpnQZI15bu1USCwsIqbOkK/D7SWT5N PluTU3hQWwSv2J7P/Q+er+B4gvEDuvNVruMQd6+SQPhLu8tv+o4oHJYcnLZlmHS7 6nIFr3xbND0FNaNzHAg9ErdZFduH2Fbjutf46eCMqMby/6We0EsMr/f0pLUXtrnS EsROH/c75nlcGYxTJB3UA0ipcqK3l485fX2QA8zSv/O7itVP/VvDAkfRDY1EB38y dcyzZYi+ -----END CERTIFICATE-----Generated at Mon Feb 2 09:40:39 2026 by rpki-client