This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/kviMEyCZuerPbRSjjOAweNUOX9M.roa File: kviMEyCZuerPbRSjjOAweNUOX9M.roa (raw, json) Hash identifier: XkVxdbAObzQecFi8jNeAZta/hKgnPT5nn3X0mpt80lw= Subject key identifier: 92:F8:8C:13:20:99:B9:EA:CF:6D:14:A3:8C:E0:30:78:D5:0E:5F:D3 Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f Certificate serial: 019B797F3B42B2C725B752C293DAF56BEA01 Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/kviMEyCZuerPbRSjjOAweNUOX9M.roa Signing time: Thu 01 Jan 2026 12:18:59 +0000 ROA not before: Thu 01 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20648 IP address blocks: 45.80.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3b:42:b2:c7:25:b7:52:c2:93:da:f5:6b:ea:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f Validity Not Before: Jan 1 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92f88c132099b9eacf6d14a38ce03078d50e5fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:30:ae:f3:87:94:ac:52:28:f5:9f:e5:43: 53:73:61:c2:12:2d:e9:f9:27:27:45:37:ae:03:12: 9e:7a:47:ad:7f:5a:bf:12:cb:40:c1:fb:0a:9b:a3: d3:fc:f1:63:f9:03:02:83:ac:61:d9:53:e6:d3:f2: 67:fa:e3:0f:b9:39:e2:a8:ad:6e:9a:4e:55:ca:62: 9c:79:85:d1:05:07:7f:21:8f:46:f0:49:dd:89:d1: 04:df:cc:7a:79:46:47:d0:c7:b6:80:1d:a6:ca:8b: 9e:fa:b1:d0:fd:f2:41:af:1e:a5:8e:0b:02:e4:16: 16:ba:85:97:65:2a:d2:91:40:9a:fb:4d:a8:7d:ca: 53:28:30:97:70:81:15:b8:e7:b1:bc:11:9c:07:17: 36:4b:1f:d0:31:63:7b:97:b3:9e:f4:f7:07:a6:56: 4c:a2:c4:87:1c:fc:f2:31:b1:29:70:5b:db:d1:b3: 8b:fa:b9:e2:40:20:6c:75:6e:90:76:cc:87:2f:37: d7:41:49:72:f8:4b:27:83:7c:94:67:d0:c7:ae:89: f3:d2:95:10:8a:99:6a:93:1f:87:e9:a6:2d:39:ca: 62:19:db:32:f1:64:1e:75:8b:0a:fc:9c:27:97:24: 4f:e8:f7:d0:2c:dd:31:aa:7d:6c:fe:10:cf:f4:2a: ca:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F8:8C:13:20:99:B9:EA:CF:6D:14:A3:8C:E0:30:78:D5:0E:5F:D3 X509v3 Authority Key Identifier: keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/kviMEyCZuerPbRSjjOAweNUOX9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.50.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:68:32:c8:4d:30:49:22:e4:e0:8a:91:db:cd:65:d1:8d:6c: 9a:2f:4f:59:06:cf:8f:49:1e:77:84:75:f7:2c:d2:75:d3:b6: 52:ca:b9:36:0d:68:39:be:57:86:af:6d:57:b7:01:f8:3d:b2: ab:8b:1e:57:17:b8:56:b6:3e:92:79:f2:a4:3d:19:26:69:2b: 29:3b:31:96:ce:91:bf:a2:02:41:88:40:08:94:35:dd:33:f9: 0b:53:fc:a5:07:06:66:d5:37:7f:74:4c:57:2a:ee:6a:44:4c: 21:52:c6:bc:8f:37:5f:95:9c:2e:cf:fb:35:c9:08:1e:86:62: 47:a5:79:10:31:b7:eb:e7:4d:3b:80:c8:b8:b2:f2:1b:fb:68: 9c:81:b1:05:43:40:ae:2b:9d:04:ef:39:93:29:2e:17:3d:29: 1b:5d:d3:4c:89:8f:c1:3a:6c:bd:87:40:dc:b2:5f:b2:e7:57: e5:29:42:0a:fa:ac:50:50:12:d8:ba:05:e4:f1:41:6e:34:97: ad:c1:aa:3f:c7:67:4c:61:ac:49:09:0b:17:3c:aa:2c:ca:e3: 16:bf:1d:72:ac:35:72:95:2c:29:1d:37:98:ba:9f:3e:b0:2f: 50:b6:69:90:ed:2b:35:65:29:88:dc:db:d1:bf:77:32:45:f1: 83:49:ce:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fztCssclt1LCk9r1a+oBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZTI4MTQ3NWI3YmY4ZDBmYTFmNjY5ZDVhZDJkZTE2MzVl OGMwNGYwHhcNMjYwMTAxMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmY4OGMxMzIwOTliOWVhY2Y2ZDE0YTM4Y2UwMzA3OGQ1MGU1ZmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfkwrvOHlKxSKPWf5UNTc2HCEi3p +ScnRTeuAxKeeketf1q/EstAwfsKm6PT/PFj+QMCg6xh2VPm0/Jn+uMPuTniqK1u mk5VymKceYXRBQd/IY9G8EndidEE38x6eUZH0Me2gB2myoue+rHQ/fJBrx6ljgsC 5BYWuoWXZSrSkUCa+02ofcpTKDCXcIEVuOexvBGcBxc2Sx/QMWN7l7Oe9PcHplZM osSHHPzyMbEpcFvb0bOL+rniQCBsdW6QdsyHLzfXQUly+Esng3yUZ9DHronz0pUQ iplqkx+H6aYtOcpiGdsy8WQedYsK/JwnlyRP6PfQLN0xqn1s/hDP9CrKOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJL4jBMgmbnqz20Uo4zgMHjVDl/TMB8GA1UdIwQY MBaAFBPigUdbe/jQ+h9mnVrS3hY16MBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wNWI1ZDgtNDU0MS00OGE5LThjMGEt NDRmZDA0MzkzZTJiLzEva3ZpTUV5Q1p1ZXJQYlJTampPQXdlTlVPWDlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8wNWI1ZDgtNDU0MS00OGE5LThjMGEtNDRmZDA0MzkzZTJi LzEvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVAyMA0G CSqGSIb3DQEBCwUAA4IBAQBKaDLITTBJIuTgipHbzWXRjWyaL09ZBs+PSR53hHX3 LNJ107ZSyrk2DWg5vleGr21XtwH4PbKrix5XF7hWtj6SefKkPRkmaSspOzGWzpG/ ogJBiEAIlDXdM/kLU/ylBwZm1Td/dExXKu5qREwhUsa8jzdflZwuz/s1yQgehmJH pXkQMbfr5007gMi4svIb+2icgbEFQ0CuK50E7zmTKS4XPSkbXdNMiY/BOmy9h0Dc sl+y51flKUIK+qxQUBLYugXk8UFuNJetwao/x2dMYaxJCQsXPKosyuMWvx1yrDVy lSwpHTeYup8+sC9QtmmQ7Ss1ZSmI3NvRv3cyRfGDSc6+ -----END CERTIFICATE-----Generated at Thu Jan 8 08:55:16 2026 by rpki-client