This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/KK_vhx-Jl1M2bFbv57SyFM6Oy1Y.roa File: KK_vhx-Jl1M2bFbv57SyFM6Oy1Y.roa (raw, json) Hash identifier: zVj3lj20TcX9NC6Ya6/FsxhHDDRzLpQa23Y4dZIhMtI= Subject key identifier: 28:AF:EF:87:1F:89:97:53:36:6C:56:EF:E7:B4:B2:14:CE:8E:CB:56 Certificate issuer: /CN=b53b0a45f060e10eccf126b6f667589b80328c95 Certificate serial: 019B7F824C1A9E6668DA1B00D18812597DE9 Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/KK_vhx-Jl1M2bFbv57SyFM6Oy1Y.roa Signing time: Fri 02 Jan 2026 16:20:04 +0000 ROA not before: Fri 02 Jan 2026 16:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25066 IP address blocks: 193.201.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:4c:1a:9e:66:68:da:1b:00:d1:88:12:59:7d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95 Validity Not Before: Jan 2 16:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28afef871f899753366c56efe7b4b214ce8ecb56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6f:5e:ec:64:9b:10:e6:22:a9:cb:0e:47:68: db:93:42:21:c9:8e:67:43:59:d1:88:a5:86:d8:6f: 69:05:86:55:8e:29:b7:79:4d:65:a1:a3:d0:e6:e4: 02:05:8d:02:e9:b5:ec:0a:70:ef:8d:d4:b9:8c:94: 12:06:23:8e:a0:ac:60:2a:8d:43:2e:3e:08:97:cf: f1:ad:fa:e7:58:d4:32:65:88:33:4a:42:05:7e:bd: ab:5a:e0:d3:62:3e:b9:5b:86:1a:87:7f:3b:f0:f7: 5f:cf:b1:8e:ae:28:e7:88:ee:d3:17:07:8d:6b:99: a5:f5:5d:16:7f:e8:ea:06:10:68:2a:02:d4:55:5f: 80:f8:e3:02:e2:f0:25:6f:57:5d:8f:1f:d7:75:86: c5:0f:74:1d:4c:77:d0:88:f5:6e:ed:ad:7d:33:a8: 06:68:60:64:5d:3b:c7:50:ad:5d:da:40:6f:16:cd: a2:e1:ec:d5:5b:ae:e2:94:16:bf:f0:1a:ee:04:5f: a1:b7:f8:f9:31:c0:ae:f0:26:95:a3:34:ad:02:53: ed:4a:b0:89:78:10:95:9d:22:57:69:b0:f4:47:53: 6f:37:ee:66:ef:75:86:d8:bb:06:88:99:79:a5:fc: ab:b9:41:6e:d3:d9:d5:63:e9:74:8a:c8:25:dd:cf: 56:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AF:EF:87:1F:89:97:53:36:6C:56:EF:E7:B4:B2:14:CE:8E:CB:56 X509v3 Authority Key Identifier: keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/KK_vhx-Jl1M2bFbv57SyFM6Oy1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.109.0/24 Signature Algorithm: sha256WithRSAEncryption 82:25:96:f6:79:46:01:f4:f7:b6:0d:3d:d2:c7:5a:c9:5c:75: d6:4d:dc:78:02:88:2f:33:d2:28:8c:45:60:25:5a:f8:01:a5: 5e:28:22:c5:c9:56:f2:97:f7:1c:ab:d2:51:40:f9:be:3d:01: 1a:8f:35:5a:f7:56:6c:9f:8f:92:6a:bb:e7:ad:f7:bf:b5:41: 13:07:bc:25:7c:6a:e9:fe:04:31:b9:96:a1:0a:e9:42:be:d7: 05:3b:c0:04:10:92:e7:71:36:34:33:98:be:7e:e8:18:3e:e3: 2c:99:ae:a4:de:48:68:82:5c:49:a0:4b:37:ee:ba:f6:9a:a4: a0:d2:f0:46:43:e3:f0:81:41:f6:03:48:fb:ab:ec:8e:37:65: 72:74:93:12:ad:17:df:b1:d3:93:98:a8:4b:aa:b1:57:70:a6: c3:0b:bc:cb:26:f4:6b:5f:36:cd:52:03:53:d5:2e:c8:a0:10: 12:e6:9f:b4:e7:9e:1c:50:85:1c:79:bd:52:8d:8a:0e:e7:c9: 4f:a3:2c:45:5c:05:d8:ee:f8:d6:15:92:26:fa:54:c1:73:80: 47:57:ff:05:1f:1a:58:af:e3:f7:24:2b:bf:dd:55:38:2b:dd: 24:12:b7:51:d9:eb:31:e8:f9:61:a7:6a:c3:17:57:97:55:00: 68:01:1c:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gkwanmZo2hsA0YgSWX3pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1M2IwYTQ1ZjA2MGUxMGVjY2YxMjZiNmY2Njc1ODliODAz MjhjOTUwHhcNMjYwMTAyMTYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGFmZWY4NzFmODk5NzUzMzY2YzU2ZWZlN2I0YjIxNGNlOGVjYjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW9e7GSbEOYiqcsOR2jbk0IhyY5n Q1nRiKWG2G9pBYZVjim3eU1loaPQ5uQCBY0C6bXsCnDvjdS5jJQSBiOOoKxgKo1D Lj4Il8/xrfrnWNQyZYgzSkIFfr2rWuDTYj65W4Yah3878Pdfz7GOrijniO7TFweN a5ml9V0Wf+jqBhBoKgLUVV+A+OMC4vAlb1ddjx/XdYbFD3QdTHfQiPVu7a19M6gG aGBkXTvHUK1d2kBvFs2i4ezVW67ilBa/8BruBF+ht/j5McCu8CaVozStAlPtSrCJ eBCVnSJXabD0R1NvN+5m73WG2LsGiJl5pfyruUFu09nVY+l0isgl3c9WHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCiv74cfiZdTNmxW7+e0shTOjstWMB8GA1UdIwQY MBaAFLU7CkXwYOEOzPEmtvZnWJuAMoyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRzS1JmQmc0UTdNOFNhMjltZFltNEF5akpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNmYxM2UtZWJlYi00ZTI2LTlmOTEt ODE4Mzc1MTgxM2Q5LzEvS0tfdmh4LUpsMU0yYkZidjU3U3lGTTZPeTFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lNmYxM2UtZWJlYi00ZTI2LTlmOTEtODE4Mzc1MTgxM2Q5 LzEvdFRzS1JmQmc0UTdNOFNhMjltZFltNEF5akpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcltMA0G CSqGSIb3DQEBCwUAA4IBAQCCJZb2eUYB9Pe2DT3Sx1rJXHXWTdx4AogvM9IojEVg JVr4AaVeKCLFyVbyl/ccq9JRQPm+PQEajzVa91Zsn4+Sarvnrfe/tUETB7wlfGrp /gQxuZahCulCvtcFO8AEEJLncTY0M5i+fugYPuMsma6k3khoglxJoEs37rr2mqSg 0vBGQ+PwgUH2A0j7q+yON2VydJMSrRffsdOTmKhLqrFXcKbDC7zLJvRrXzbNUgNT 1S7IoBAS5p+0554cUIUceb1SjYoO58lPoyxFXAXY7vjWFZIm+lTBc4BHV/8FHxpY r+P3JCu/3VU4K90kErdR2esx6Plhp2rDF1eXVQBoARx0 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:20 2026 by rpki-client