This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/kvhWSo_x96V7zZC_rVD2Maa8i54.roa File: kvhWSo_x96V7zZC_rVD2Maa8i54.roa (raw, json) Hash identifier: qfz5ah9cuUpNmxR2qW4TEQ0nz3dnEGjO26IFDZy8YxE= Subject key identifier: 92:F8:56:4A:8F:F1:F7:A5:7B:CD:90:BF:AD:50:F6:31:A6:BC:8B:9E Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C8082751E27F3E7E8546A6CB7E743F2 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/kvhWSo_x96V7zZC_rVD2Maa8i54.roa Signing time: Fri 02 Jan 2026 02:19:15 +0000 ROA not before: Fri 02 Jan 2026 02:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 95.81.92.0/24 maxlen: 24 95.81.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:82:75:1e:27:f3:e7:e8:54:6a:6c:b7:e7:43:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92f8564a8ff1f7a57bcd90bfad50f631a6bc8b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:bd:7a:7e:ac:cf:91:63:76:92:b4:fc:8a: 7d:9e:cc:17:16:fb:6f:70:f1:7d:e7:a7:c0:a5:7f: d6:6a:de:f2:81:63:66:98:68:63:10:fb:93:2d:f1: ce:b3:29:05:62:5b:36:bc:13:3c:ba:ac:5e:96:07: 6d:a6:1a:35:83:32:48:b2:61:db:bb:4f:ba:72:f6: e2:0c:b8:44:29:e1:9b:13:d8:5d:93:eb:61:72:e0: d7:9e:92:14:6f:83:f0:c2:93:80:ec:7c:6c:e2:37: 77:e9:6c:76:21:18:14:73:b3:7d:a7:76:17:2b:ab: 2b:59:76:97:b2:b6:b5:d3:6e:2a:84:1d:f2:fa:ed: 49:a0:b6:ac:a3:35:06:73:de:f5:1a:f6:3c:27:a3: f1:d0:41:36:59:b1:01:6c:3d:76:23:24:73:e4:2f: 9f:07:c2:68:7e:9a:cd:02:2c:08:88:e8:70:c4:fb: f0:5f:da:7f:c4:19:02:16:00:1e:31:f8:ea:dc:1c: ea:96:53:49:48:fb:ed:ff:5c:32:be:b3:e8:62:f5: da:91:e7:52:48:57:a5:ec:9a:85:76:d1:0b:5a:e5: 15:99:79:2c:de:11:e0:5b:66:f8:db:98:eb:3b:8a: ea:4c:40:74:da:3f:17:9d:5c:32:75:90:71:86:7b: 98:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F8:56:4A:8F:F1:F7:A5:7B:CD:90:BF:AD:50:F6:31:A6:BC:8B:9E X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/kvhWSo_x96V7zZC_rVD2Maa8i54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.81.92.0/24 95.81.117.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:dc:f9:6a:8d:dd:13:95:26:a5:7d:95:db:d5:8a:6a:0d:ee: 68:18:ff:97:ea:7e:3b:a9:52:ec:7e:50:08:5d:f8:99:19:96: 6b:ad:cc:db:96:b0:ae:8f:3f:be:fe:90:69:37:9b:2e:40:b7: 66:53:28:e8:3c:b4:2e:5f:a0:f1:a5:d9:e4:15:2c:ce:e6:ec: 9d:4d:ee:a2:54:e0:1d:ce:cc:1c:24:27:b3:d7:88:a6:b5:45: 25:f8:45:b2:09:55:a5:f0:96:bc:08:fb:e0:db:61:b9:16:8d: bf:c2:d2:c2:f9:8a:27:07:7a:6f:5c:b0:69:d9:83:d6:f7:6b: 5a:08:1e:23:7d:17:b0:33:0e:5e:37:c3:e3:1a:bf:5b:e3:4f: 83:9b:3a:4d:84:18:f5:83:10:6e:db:a9:1f:c0:aa:9f:e3:a7: 28:7a:aa:17:d7:65:f9:d3:35:19:dd:74:fb:99:cb:1f:48:20: 01:5d:94:3e:af:c9:ec:0e:8a:59:88:ba:7b:c2:21:24:e3:6d: ed:90:6e:1f:ce:cb:f0:ee:17:c3:00:6c:ac:fa:33:3f:a8:80: 56:42:41:70:03:3b:da:a0:09:e0:82:02:ae:d8:5c:8e:62:66: 11:32:81:3d:e7:cc:85:a4:11:c3:fb:13:a7:e3:f0:6d:c1:cb: 55:6b:82:9a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gIJ1Hifz5+hUamy350PyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmY4NTY0YThmZjFmN2E1N2JjZDkwYmZhZDUwZjYzMWE2YmM4YjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjG9en6sz5FjdpK0/Ip9nswXFvtv cPF956fApX/Wat7ygWNmmGhjEPuTLfHOsykFYls2vBM8uqxelgdtpho1gzJIsmHb u0+6cvbiDLhEKeGbE9hdk+thcuDXnpIUb4PwwpOA7Hxs4jd36Wx2IRgUc7N9p3YX K6srWXaXsra1024qhB3y+u1JoLasozUGc971GvY8J6Px0EE2WbEBbD12IyRz5C+f B8JofprNAiwIiOhwxPvwX9p/xBkCFgAeMfjq3BzqllNJSPvt/1wyvrPoYvXakedS SFel7JqFdtELWuUVmXks3hHgW2b425jrO4rqTEB02j8XnVwydZBxhnuYcwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJL4VkqP8fele82Qv61Q9jGmvIueMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEva3ZoV1NvX3g5NlY3elpDX3JWRDJNYWE4aTU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX1FcAwQA X1F1MA0GCSqGSIb3DQEBCwUAA4IBAQBf3Plqjd0TlSalfZXb1YpqDe5oGP+X6n47 qVLsflAIXfiZGZZrrczblrCujz++/pBpN5suQLdmUyjoPLQuX6DxpdnkFSzO5uyd Te6iVOAdzswcJCez14imtUUl+EWyCVWl8Ja8CPvg22G5Fo2/wtLC+YonB3pvXLBp 2YPW92taCB4jfRewMw5eN8PjGr9b40+DmzpNhBj1gxBu26kfwKqf46coeqoX12X5 0zUZ3XT7mcsfSCABXZQ+r8nsDopZiLp7wiEk423tkG4fzsvw7hfDAGys+jM/qIBW QkFwAzvaoAngggKu2FyOYmYRMoE958yFpBHD+xOn4/BtwctVa4Ka -----END CERTIFICATE-----Generated at Wed Jan 21 08:06:29 2026 by rpki-client