This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/KvPSPYiMofHoVvDkuy76IpD7FIg.roa File: KvPSPYiMofHoVvDkuy76IpD7FIg.roa (raw, json) Hash identifier: Mlo4RDiRvwndc4Eb1qzhPPj36O1+QMrpHmy4zsicFwU= Subject key identifier: 2A:F3:D2:3D:88:8C:A1:F1:E8:56:F0:E4:BB:2E:FA:22:90:FB:14:88 Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b Certificate serial: 019B7910C115BE1446FD8152968F5D1B7741 Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/KvPSPYiMofHoVvDkuy76IpD7FIg.roa Signing time: Thu 01 Jan 2026 10:18:19 +0000 ROA not before: Thu 01 Jan 2026 10:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213152 IP address blocks: 193.37.226.0/23 maxlen: 23 193.37.230.0/23 maxlen: 23 2a0f:b480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c1:15:be:14:46:fd:81:52:96:8f:5d:1b:77:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b Validity Not Before: Jan 1 10:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2af3d23d888ca1f1e856f0e4bb2efa2290fb1488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b8:2f:f7:83:ae:b4:ba:2b:86:c0:91:6c:1f: ca:f9:f3:6f:42:cd:05:b6:84:a4:1b:37:1a:17:dc: 11:8e:fc:0b:e1:86:ca:26:33:3e:1c:58:af:6d:52: 23:a8:ad:13:6d:88:b3:06:b2:51:22:15:71:76:7e: 54:96:c5:cd:d0:74:8e:f9:5b:1a:1c:2a:82:21:d0: 5f:59:53:ea:fb:8c:e1:4e:05:28:27:9f:3d:b0:c2: d4:07:74:81:c8:be:24:f8:c1:13:6e:03:60:5a:64: ac:73:1a:ac:61:61:c9:02:58:f0:6d:d1:3e:9c:4b: d7:1b:4d:f7:e6:eb:81:4c:6f:c4:65:a0:77:92:49: d6:af:6e:47:f2:16:b9:18:87:11:44:8f:b5:6f:fa: 61:cf:e9:d0:1c:fd:e2:74:82:11:19:1c:d8:f0:39: b4:6e:74:39:16:fb:74:cd:07:d3:60:c0:81:57:b3: 64:5d:03:78:9d:51:33:d5:65:36:70:a3:c0:f6:87: be:8c:c5:6b:5f:e8:6e:8f:aa:2c:39:5b:d2:44:d3: 3c:2b:df:fe:ab:32:65:c7:d8:55:5e:31:b6:44:1e: ce:ba:82:ec:5b:0d:86:02:bd:6e:0c:40:d2:dd:b9: 7f:49:e0:b3:22:cb:6b:87:ba:04:d8:71:f4:91:4b: 6d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F3:D2:3D:88:8C:A1:F1:E8:56:F0:E4:BB:2E:FA:22:90:FB:14:88 X509v3 Authority Key Identifier: keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/KvPSPYiMofHoVvDkuy76IpD7FIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.226.0/23 193.37.230.0/23 IPv6: 2a0f:b480::/29 Signature Algorithm: sha256WithRSAEncryption 15:3b:60:12:be:70:66:87:ff:51:66:84:fd:b6:5e:ca:27:d3: 7b:20:24:31:89:3f:e3:0b:83:39:82:b0:05:2c:e7:44:7d:20: f3:dc:68:a9:23:ed:e9:72:4a:e7:1f:03:b3:9f:fa:44:cb:48: 90:8a:37:49:ac:7f:dc:15:64:c6:51:69:34:a0:6b:25:2e:89: 4a:19:f9:20:00:6b:5c:7d:a9:5b:2e:41:09:f1:1f:0a:a6:83: 7f:32:0b:c1:59:df:af:2a:5f:83:3d:4d:2c:34:91:27:09:0b: 1f:e5:41:2e:bc:41:dd:8b:ad:63:fc:79:75:f7:2c:d7:33:94: 32:c2:e0:7f:e1:8d:24:ee:a2:15:e6:c7:a1:a8:c7:2a:cb:7b: 20:a5:27:f4:44:6a:24:9f:99:81:de:51:34:cc:e8:23:8f:53: c9:a5:f1:5e:b3:85:d4:1a:25:b2:54:a3:8a:3d:ae:28:ef:32: 1a:fe:8c:bb:f5:4d:da:fc:3d:0f:7d:8f:07:0f:2b:f3:02:26: ff:5f:de:7e:bc:48:78:13:5b:a4:79:f7:b0:64:38:40:05:86: e1:ed:97:87:4e:9b:41:1f:fb:94:d1:ce:c5:76:53:a4:ff:75: 0b:3c:fc:c5:7e:f1:fb:c8:81:4b:4a:0c:18:19:cb:d3:dd:c4: 8f:19:41:d3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EMEVvhRG/YFSlo9dG3dBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZjE5ODcxYjE3NTlmMzIzNzAxMmU0YjZkYmI2YzJmZDJi ZThiNGIwHhcNMjYwMTAxMTAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWYzZDIzZDg4OGNhMWYxZTg1NmYwZTRiYjJlZmEyMjkwZmIxNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbgv94OutLorhsCRbB/K+fNvQs0F toSkGzcaF9wRjvwL4YbKJjM+HFivbVIjqK0TbYizBrJRIhVxdn5UlsXN0HSO+Vsa HCqCIdBfWVPq+4zhTgUoJ589sMLUB3SByL4k+METbgNgWmSscxqsYWHJAljwbdE+ nEvXG0335uuBTG/EZaB3kknWr25H8ha5GIcRRI+1b/phz+nQHP3idIIRGRzY8Dm0 bnQ5Fvt0zQfTYMCBV7NkXQN4nVEz1WU2cKPA9oe+jMVrX+huj6osOVvSRNM8K9/+ qzJlx9hVXjG2RB7OuoLsWw2GAr1uDEDS3bl/SeCzIstrh7oE2HH0kUtteQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCrz0j2IjKHx6Fbw5Lsu+iKQ+xSIMB8GA1UdIwQY MBaAFJ7xmHGxdZ8yNwEuS227bC/SvotLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hMzZkYmItNjAyNy00M2M0LTgxOTQt NGEwY2IyNTVkNzNhLzEvS3ZQU1BZaU1vZkhvVnZEa3V5NzZJcEQ3RklnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hMzZkYmItNjAyNy00M2M0LTgxOTQtNGEwY2IyNTVkNzNh LzEvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwSXiAwQB wSXmMA0EAgACMAcDBQMqD7SAMA0GCSqGSIb3DQEBCwUAA4IBAQAVO2ASvnBmh/9R ZoT9tl7KJ9N7ICQxiT/jC4M5grAFLOdEfSDz3GipI+3pckrnHwOzn/pEy0iQijdJ rH/cFWTGUWk0oGslLolKGfkgAGtcfalbLkEJ8R8KpoN/MgvBWd+vKl+DPU0sNJEn CQsf5UEuvEHdi61j/Hl19yzXM5QywuB/4Y0k7qIV5sehqMcqy3sgpSf0RGokn5mB 3lE0zOgjj1PJpfFes4XUGiWyVKOKPa4o7zIa/oy79U3a/D0PfY8HDyvzAib/X95+ vEh4E1ukefewZDhABYbh7ZeHTptBH/uU0c7FdlOk/3ULPPzFfvH7yIFLSgwYGcvT 3cSPGUHT -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:09 2026 by rpki-client