This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/KM6LXRdvYX6Jdf5znnByrZNFbWE.roa File: KM6LXRdvYX6Jdf5znnByrZNFbWE.roa (raw, json) Hash identifier: 5T8qLatFSeA8HvsDJI4XbxLYpOTROjWzeS8VVr76EJg= Subject key identifier: 28:CE:8B:5D:17:6F:61:7E:89:75:FE:73:9E:70:72:AD:93:45:6D:61 Certificate issuer: /CN=65516ddc7331e2e269dc57d9c7632f25de7d0c6e Certificate serial: 019B7E393B33D0B3D63C6D57F9575710639F Authority key identifier: 65:51:6D:DC:73:31:E2:E2:69:DC:57:D9:C7:63:2F:25:DE:7D:0C:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/KM6LXRdvYX6Jdf5znnByrZNFbWE.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8999 IP address blocks: 193.7.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3b:33:d0:b3:d6:3c:6d:57:f9:57:57:10:63:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65516ddc7331e2e269dc57d9c7632f25de7d0c6e Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28ce8b5d176f617e8975fe739e7072ad93456d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a8:11:47:4d:49:a7:60:50:83:3e:47:c6:0c: b9:64:4d:08:ea:dc:38:31:4c:27:31:17:f6:ec:eb: 50:55:a8:ed:f2:e1:d4:9a:6a:b7:3c:a8:23:80:36: f2:7e:75:00:b6:0d:8b:4f:4d:44:34:b6:6a:c3:a6: a2:d7:cd:fd:ed:b6:78:71:2d:eb:d0:62:cd:02:fc: 02:a2:b9:92:b6:6f:22:e8:4c:00:6b:54:39:ac:e8: ca:7d:59:94:6a:af:e5:02:42:c0:8a:79:35:e5:0a: cb:ee:08:71:c6:fa:c9:30:4a:03:af:18:5c:82:e9: ca:11:1a:ea:14:e9:36:8e:8f:72:a0:da:16:b0:34: 88:f8:7c:8e:72:75:78:48:f6:65:ce:66:7b:0a:79: 69:a0:b4:fa:e6:6e:52:0b:c7:f2:d7:76:d9:9c:96: 7c:aa:39:02:c1:4f:19:b5:3a:08:d0:59:d2:06:c2: c3:9b:84:b4:43:c5:06:82:f2:b3:cd:84:b2:de:f0: 17:d7:fa:70:82:b7:a5:a3:8e:3b:5c:75:f0:3a:0b: ff:0b:04:1e:97:db:ec:57:a5:57:85:43:f8:c2:2f: 98:a4:0e:ad:53:c2:17:77:c4:ed:ac:13:ce:d8:9f: 08:0f:68:d4:7f:56:12:03:09:0f:a3:60:fc:63:24: 4d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CE:8B:5D:17:6F:61:7E:89:75:FE:73:9E:70:72:AD:93:45:6D:61 X509v3 Authority Key Identifier: keyid:65:51:6D:DC:73:31:E2:E2:69:DC:57:D9:C7:63:2F:25:DE:7D:0C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/KM6LXRdvYX6Jdf5znnByrZNFbWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.7.212.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:66:bc:01:a4:52:4d:12:e4:38:6f:f5:e9:38:97:1b:72:8b: 86:31:e6:d7:44:6d:55:eb:35:7d:b4:37:38:ae:e4:f8:38:91: 78:30:f6:58:74:95:32:54:84:34:38:33:98:32:19:c6:48:d1: be:82:1d:46:88:e5:d9:36:81:cd:bc:6f:d6:9c:60:4a:04:41: 5b:3c:75:7c:82:7d:e4:ec:0f:37:85:21:8b:be:06:d8:e7:01: a4:d5:d8:40:d9:a3:86:fb:1a:9b:77:0f:e9:b1:f7:03:7b:40: 06:0d:9c:b0:8c:af:03:f2:b5:05:8e:cd:84:d5:35:1c:3e:89: c1:5b:02:ab:a1:12:98:23:e3:48:35:db:ad:9b:82:0a:9a:ed: 66:8f:d2:3b:bc:a2:a1:e7:2e:b3:58:9c:ef:26:b3:dd:0b:6e: f7:1c:7f:2c:70:04:16:28:a8:94:c6:ea:f2:fc:64:48:e4:d7: 23:96:73:1c:7a:f4:a8:bc:1c:7d:6b:3a:32:e7:26:2b:0b:86: 91:f0:7a:49:bb:53:0f:90:c7:85:31:32:fb:6b:be:d3:9d:68: 42:d2:23:e6:4e:10:82:65:f9:2a:c5:ae:fc:1f:eb:0e:1a:2b: ec:e5:85:e8:92:60:8b:19:bf:99:f9:4e:80:af:bd:fb:6c:f7: 64:3d:46:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OTsz0LPWPG1X+VdXEGOfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NTE2ZGRjNzMzMWUyZTI2OWRjNTdkOWM3NjMyZjI1ZGU3 ZDBjNmUwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGNlOGI1ZDE3NmY2MTdlODk3NWZlNzM5ZTcwNzJhZDkzNDU2ZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3agRR01Jp2BQgz5Hxgy5ZE0I6tw4 MUwnMRf27OtQVajt8uHUmmq3PKgjgDbyfnUAtg2LT01ENLZqw6ai18397bZ4cS3r 0GLNAvwCormStm8i6EwAa1Q5rOjKfVmUaq/lAkLAink15QrL7ghxxvrJMEoDrxhc gunKERrqFOk2jo9yoNoWsDSI+HyOcnV4SPZlzmZ7CnlpoLT65m5SC8fy13bZnJZ8 qjkCwU8ZtToI0FnSBsLDm4S0Q8UGgvKzzYSy3vAX1/pwgrelo447XHXwOgv/CwQe l9vsV6VXhUP4wi+YpA6tU8IXd8TtrBPO2J8ID2jUf1YSAwkPo2D8YyRN2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCjOi10Xb2F+iXX+c55wcq2TRW1hMB8GA1UdIwQY MBaAFGVRbdxzMeLiadxX2cdjLyXefQxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlZGdDNITXg0dUpwM0ZmWngyTXZKZDU5REc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84ZGVmMTItODk3ZS00ZTIyLWFhOGIt ODM0YjljMTBiZjQ4LzEvS002TFhSZHZZWDZKZGY1em5uQnlyWk5GYldFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi84ZGVmMTItODk3ZS00ZTIyLWFhOGItODM0YjljMTBiZjQ4 LzEvWlZGdDNITXg0dUpwM0ZmWngyTXZKZDU5REc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwQfUMA0G CSqGSIb3DQEBCwUAA4IBAQBsZrwBpFJNEuQ4b/XpOJcbcouGMebXRG1V6zV9tDc4 ruT4OJF4MPZYdJUyVIQ0ODOYMhnGSNG+gh1GiOXZNoHNvG/WnGBKBEFbPHV8gn3k 7A83hSGLvgbY5wGk1dhA2aOG+xqbdw/psfcDe0AGDZywjK8D8rUFjs2E1TUcPonB WwKroRKYI+NINdutm4IKmu1mj9I7vKKh5y6zWJzvJrPdC273HH8scAQWKKiUxury /GRI5NcjlnMcevSovBx9azoy5yYrC4aR8HpJu1MPkMeFMTL7a77TnWhC0iPmThCC Zfkqxa78H+sOGivs5YXokmCLGb+Z+U6Ar737bPdkPUYW -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:04 2026 by rpki-client