This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/kmCUPPc6lTNv_u7mema7HMLgcDw.roa File: kmCUPPc6lTNv_u7mema7HMLgcDw.roa (raw, json) Hash identifier: 98IXv7Ij0PQAjbS0Cy17Mw0UcfqVw00v4lRLDtL2tzo= Subject key identifier: 92:60:94:3C:F7:3A:95:33:6F:FE:EE:E6:7A:66:BB:1C:C2:E0:70:3C Certificate issuer: /CN=335e725cacf83c97f457a56762cf846d643117cd Certificate serial: 019B7A5A99ABA23FA238534D31CD6D30DB11 Authority key identifier: 33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/kmCUPPc6lTNv_u7mema7HMLgcDw.roa Signing time: Thu 01 Jan 2026 16:18:36 +0000 ROA not before: Thu 01 Jan 2026 16:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 82.98.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.crl rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.mft rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:99:ab:a2:3f:a2:38:53:4d:31:cd:6d:30:db:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335e725cacf83c97f457a56762cf846d643117cd Validity Not Before: Jan 1 16:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9260943cf73a95336ffeeee67a66bb1cc2e0703c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:48:04:bb:d9:87:0e:f4:2d:f9:47:40:0c: ab:73:04:fa:fe:e1:cf:b3:a7:ba:85:ec:1a:76:00: 01:f0:55:b3:a7:d1:c7:87:6b:41:a2:e6:94:2c:e4: 16:da:9c:09:53:a5:9c:99:84:f8:0d:48:f7:a8:8e: ff:f4:13:76:66:6b:4b:f8:63:cd:1c:a1:6d:a9:e7: a9:e4:bd:7e:91:24:97:86:6d:97:1b:70:87:ec:73: 13:20:e9:5f:6c:e9:45:ca:ac:fb:d5:62:a0:3f:04: 59:46:78:1b:1b:96:3b:1e:02:eb:52:12:1f:b7:31: 10:ad:0b:ee:6e:e9:8a:21:94:f1:ca:7a:19:8b:80: cb:de:e4:41:e6:1f:9b:71:af:35:f1:81:e5:53:af: 77:78:79:99:4d:7d:28:c4:1b:52:66:c2:8b:bf:da: 71:78:da:49:69:cb:78:5c:f4:bf:b0:d5:af:07:8e: 3f:27:16:67:83:1f:4e:0e:c1:da:36:3b:34:28:07: 98:e8:88:93:fa:b5:e3:d6:d0:44:09:ad:dc:b6:c8: 18:00:c3:f6:2b:72:d6:8f:fe:c6:72:21:11:0c:bf: 0f:1e:c8:ff:b3:37:0a:0b:7c:5f:47:d7:9b:0e:fd: 0a:2b:8b:62:53:ab:62:1d:3f:3b:8f:09:4e:4d:e2: 70:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:60:94:3C:F7:3A:95:33:6F:FE:EE:E6:7A:66:BB:1C:C2:E0:70:3C X509v3 Authority Key Identifier: keyid:33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/kmCUPPc6lTNv_u7mema7HMLgcDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.98.128.0/18 Signature Algorithm: sha256WithRSAEncryption 4b:94:83:92:34:9d:7a:00:fc:7d:5c:86:40:54:26:51:d2:19: 56:30:a0:7c:f7:66:aa:6f:07:28:38:b6:36:cf:b6:55:48:da: f7:7f:b3:cc:89:60:53:bb:1e:12:44:a5:57:a5:af:b0:39:60: 89:f2:94:a7:ba:34:51:d8:de:c7:75:7a:28:52:4b:f5:74:9e: 52:ff:27:e1:47:ad:c9:c3:89:13:e6:ac:f6:bc:67:2e:bb:1f: b1:0a:d2:50:53:6e:84:b4:65:74:f1:3b:96:40:d2:72:60:1c: 5d:26:f9:5d:71:28:d9:57:5b:10:f5:5e:22:47:1a:f0:5a:d9: d7:8a:14:61:a6:76:d2:73:5c:e8:ff:1a:e9:9c:f9:6f:47:1d: 8c:3f:61:d0:5d:12:07:79:2e:83:46:16:a2:7b:83:59:01:8b: 2a:af:ec:7b:7a:d7:85:df:94:55:4f:e9:dc:7f:bc:fd:32:9f: 06:d0:ae:3c:86:60:96:dd:81:d8:ee:23:fb:d8:db:8e:13:14: 14:17:d5:dc:a5:a4:5b:af:f4:b5:da:99:b1:15:4d:9f:37:3d: 19:0b:bf:1b:88:e4:bd:3b:47:2c:22:ef:8b:ad:c1:28:7a:da: e5:92:bb:43:fe:ec:4e:1a:39:c5:86:0a:74:a7:71:d5:73:30: a8:12:4a:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wpmroj+iOFNNMc1tMNsRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNWU3MjVjYWNmODNjOTdmNDU3YTU2NzYyY2Y4NDZkNjQz MTE3Y2QwHhcNMjYwMTAxMTYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjYwOTQzY2Y3M2E5NTMzNmZmZWVlZTY3YTY2YmIxY2MyZTA3MDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWpIBLvZhw70LflHQAyrcwT6/uHP s6e6hewadgAB8FWzp9HHh2tBouaULOQW2pwJU6WcmYT4DUj3qI7/9BN2ZmtL+GPN HKFtqeep5L1+kSSXhm2XG3CH7HMTIOlfbOlFyqz71WKgPwRZRngbG5Y7HgLrUhIf tzEQrQvubumKIZTxynoZi4DL3uRB5h+bca818YHlU693eHmZTX0oxBtSZsKLv9px eNpJact4XPS/sNWvB44/JxZngx9ODsHaNjs0KAeY6IiT+rXj1tBECa3ctsgYAMP2 K3LWj/7GciERDL8PHsj/szcKC3xfR9ebDv0KK4tiU6tiHT87jwlOTeJwaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJJglDz3OpUzb/7u5npmuxzC4HA8MB8GA1UdIwQY MBaAFDNeclys+DyX9FelZ2LPhG1kMRfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTE1eVhLejRQSmYwVjZWbllzLUViV1F4RjgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wMjY1NDgtNTAxMi00YWQwLWE1YmIt ODJjMDU2MDU5NWNkLzEva21DVVBQYzZsVE52X3U3bWVtYTdITUxnY0R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8wMjY1NDgtNTAxMi00YWQwLWE1YmItODJjMDU2MDU5NWNk LzEvTTE1eVhLejRQSmYwVjZWbllzLUViV1F4RjgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGUmKAMA0G CSqGSIb3DQEBCwUAA4IBAQBLlIOSNJ16APx9XIZAVCZR0hlWMKB892aqbwcoOLY2 z7ZVSNr3f7PMiWBTux4SRKVXpa+wOWCJ8pSnujRR2N7HdXooUkv1dJ5S/yfhR63J w4kT5qz2vGcuux+xCtJQU26EtGV08TuWQNJyYBxdJvldcSjZV1sQ9V4iRxrwWtnX ihRhpnbSc1zo/xrpnPlvRx2MP2HQXRIHeS6DRhaie4NZAYsqr+x7eteF35RVT+nc f7z9Mp8G0K48hmCW3YHY7iP72NuOExQUF9XcpaRbr/S12pmxFU2fNz0ZC78biOS9 O0csIu+LrcEoetrlkrtD/uxOGjnFhgp0p3HVczCoEkr0 -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:55 2026 by rpki-client