This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/KfM_Z_Z-SNR188s2cAL37I8urEE.roa File: KfM_Z_Z-SNR188s2cAL37I8urEE.roa (raw, json) Hash identifier: UID52aiMOKJSN+qhsE3djfMdcKj7BbWtDHOsP/vEFqQ= Subject key identifier: 29:F3:3F:67:F6:7E:48:D4:75:F3:CB:36:70:02:F7:EC:8F:2E:AC:41 Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab Certificate serial: 019B7C11290CC4E5E6F6DDF45DC2A2991469 Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/KfM_Z_Z-SNR188s2cAL37I8urEE.roa Signing time: Fri 02 Jan 2026 00:17:38 +0000 ROA not before: Fri 02 Jan 2026 00:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21100 IP address blocks: 193.106.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:29:0c:c4:e5:e6:f6:dd:f4:5d:c2:a2:99:14:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab Validity Not Before: Jan 2 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29f33f67f67e48d475f3cb367002f7ec8f2eac41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9f:c6:65:6d:07:07:95:45:e1:56:bd:6d:7d: 68:37:d2:bd:e3:f6:f0:9a:e0:93:3b:59:a0:05:89: 9c:c0:7f:51:cc:33:0a:29:59:b8:00:40:f0:9c:bc: 66:bd:5e:98:4f:99:01:e6:7a:f8:25:83:fc:02:91: 8c:59:7b:dd:f9:c0:c2:bc:5d:7c:24:82:05:41:d0: cb:b4:d7:35:95:3b:d7:ad:7e:c3:48:f8:4e:eb:47: 14:e5:07:c5:5c:bc:4c:a7:4a:2c:13:1d:fa:a3:ed: a3:4a:a2:c4:81:16:c4:25:65:35:b5:40:42:3f:f7: e5:71:0b:43:f4:73:b2:47:ce:f7:1a:b9:e0:32:d1: 3a:ff:6c:5f:07:3e:89:2c:22:84:6d:a9:ff:bb:e2: 2b:7b:59:db:25:85:a0:c0:29:12:73:d1:f5:21:04: cb:0a:5f:f2:1b:9a:b8:d0:62:4a:cf:4b:54:88:fd: 89:99:83:c4:6e:b1:09:83:33:19:fe:a4:07:5c:ce: 90:44:0c:d9:e3:c5:68:a6:da:98:8d:a0:73:6f:8c: 43:8e:73:f3:cf:86:a3:39:41:a5:c6:be:4d:ed:cf: 84:d7:22:86:f0:43:0d:14:bb:8a:7e:89:29:5c:16: f1:ee:59:bb:20:18:65:10:da:34:1c:03:00:0e:4c: db:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F3:3F:67:F6:7E:48:D4:75:F3:CB:36:70:02:F7:EC:8F:2E:AC:41 X509v3 Authority Key Identifier: keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/KfM_Z_Z-SNR188s2cAL37I8urEE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.106.150.0/24 Signature Algorithm: sha256WithRSAEncryption b3:77:88:6b:07:26:1e:4d:23:62:5b:78:82:3e:d0:54:17:ea: ce:79:1c:ad:05:f1:92:55:f8:18:61:f4:17:c6:13:49:5b:e6: ef:cc:2f:bf:6d:a1:49:95:ef:d5:07:40:d3:d9:5f:14:ab:2a: 02:f8:69:b3:9b:04:00:f6:69:cf:45:61:fc:da:b7:39:34:3e: 07:0d:1f:b1:ad:b1:98:78:6c:e8:e7:28:24:69:c7:22:79:c2: 0b:bd:3a:01:99:95:91:62:4f:8b:b7:26:ed:a4:8a:f3:74:4c: 61:26:d0:12:b8:8d:17:5c:5e:cc:07:8c:2e:5f:de:89:6f:85: 38:c4:6e:19:91:4b:7c:78:e9:22:05:9a:83:87:b2:d2:fc:4f: 40:6e:14:c9:3f:14:24:d7:2a:4b:49:9a:6a:6c:d5:6d:8b:59: 6e:ce:8c:ea:4d:ed:7f:a4:89:b4:88:91:51:ed:bb:81:6e:20: cd:bb:0b:f0:04:74:bb:ed:7d:1a:b3:8f:a5:9e:05:ab:c7:b0: 32:8a:0a:c4:bc:72:b3:29:99:88:72:e3:ae:c8:eb:3c:e6:7b: a7:ac:cf:96:de:83:0b:5b:a2:2d:73:70:c9:f7:a2:18:40:85: 4b:4c:c5:cd:ca:4c:bd:e3:26:76:8f:2b:68:98:97:6a:34:49: 1a:3f:a9:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ESkMxOXm9t30XcKimRRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDBmZDY4YzFiNmI1NjliOWY3YzQ4MTNhYzEyZGVkNmFl NWU4YWIwHhcNMjYwMTAyMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWYzM2Y2N2Y2N2U0OGQ0NzVmM2NiMzY3MDAyZjdlYzhmMmVhYzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5/GZW0HB5VF4Va9bX1oN9K94/bw muCTO1mgBYmcwH9RzDMKKVm4AEDwnLxmvV6YT5kB5nr4JYP8ApGMWXvd+cDCvF18 JIIFQdDLtNc1lTvXrX7DSPhO60cU5QfFXLxMp0osEx36o+2jSqLEgRbEJWU1tUBC P/flcQtD9HOyR873GrngMtE6/2xfBz6JLCKEban/u+Ire1nbJYWgwCkSc9H1IQTL Cl/yG5q40GJKz0tUiP2JmYPEbrEJgzMZ/qQHXM6QRAzZ48VoptqYjaBzb4xDjnPz z4ajOUGlxr5N7c+E1yKG8EMNFLuKfokpXBbx7lm7IBhlENo0HAMADkzbbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCnzP2f2fkjUdfPLNnAC9+yPLqxBMB8GA1UdIwQY MBaAFP3Q/WjBtrVpuffEgTrBLe1q5eirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUt NWNjZjZmNGI3OTIwLzEvS2ZNX1pfWi1TTlIxODhzMmNBTDM3STh1ckVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUtNWNjZjZmNGI3OTIw LzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWqWMA0G CSqGSIb3DQEBCwUAA4IBAQCzd4hrByYeTSNiW3iCPtBUF+rOeRytBfGSVfgYYfQX xhNJW+bvzC+/baFJle/VB0DT2V8UqyoC+GmzmwQA9mnPRWH82rc5ND4HDR+xrbGY eGzo5ygkacciecILvToBmZWRYk+LtybtpIrzdExhJtASuI0XXF7MB4wuX96Jb4U4 xG4ZkUt8eOkiBZqDh7LS/E9AbhTJPxQk1ypLSZpqbNVti1luzozqTe1/pIm0iJFR 7buBbiDNuwvwBHS77X0as4+lngWrx7AyigrEvHKzKZmIcuOuyOs85nunrM+W3oML W6Itc3DJ96IYQIVLTMXNyky94yZ2jytomJdqNEkaP6ma -----END CERTIFICATE-----Generated at Mon Jan 26 13:25:13 2026 by rpki-client