This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/KmzjptRoJ7fRzVMuAbPyGaNlK4U.roa File: KmzjptRoJ7fRzVMuAbPyGaNlK4U.roa (raw, json) Hash identifier: HTQ4SqU1gbnyzbZ9VFLXWOk6V34twlkajlodOkPujZU= Subject key identifier: 2A:6C:E3:A6:D4:68:27:B7:D1:CD:53:2E:01:B3:F2:19:A3:65:2B:85 Certificate issuer: /CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c Certificate serial: 019B77591DA81424FBC52B1F3A52DC93B56C Authority key identifier: 6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/KmzjptRoJ7fRzVMuAbPyGaNlK4U.roa Signing time: Thu 01 Jan 2026 02:18:07 +0000 ROA not before: Thu 01 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57862 IP address blocks: 37.122.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1d:a8:14:24:fb:c5:2b:1f:3a:52:dc:93:b5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a6ce3a6d46827b7d1cd532e01b3f219a3652b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a9:7d:53:4d:ea:3c:e7:e7:b2:1a:6f:8b:5d: f5:65:ed:f9:9e:0e:76:f1:7c:e1:cd:72:d5:a3:f9: 04:c9:c5:1f:34:cf:df:e6:9f:f9:8c:5a:34:03:29: 7d:1b:e6:0c:ed:9f:a1:28:a0:bd:d2:b1:70:f3:13: 40:0c:e2:77:68:97:cb:ab:f1:bf:fc:a1:d3:f9:19: 04:b9:85:07:86:0d:6a:b5:0c:78:b2:a6:31:2e:36: 60:1f:38:57:f1:92:5b:8a:fc:e2:9c:b2:88:f0:e3: 02:80:e8:2f:35:52:e8:b7:a4:52:7c:a5:59:31:74: 5e:2f:ef:fc:0d:61:49:da:b7:05:d3:a4:9e:8e:5e: 05:ec:58:e3:f5:b5:8d:2d:96:b5:f3:35:e3:7f:c5: b7:e1:eb:b8:66:b5:29:1c:73:54:a9:90:b2:b6:70: 83:40:a1:4d:9d:cc:da:c6:aa:ca:92:e7:1a:3e:e4: 79:7f:b5:98:9c:93:13:d5:85:6d:3a:7d:b9:4f:59: 63:b0:7b:70:51:14:c7:a1:00:25:ca:32:f8:f0:27: e9:cf:62:f1:4f:ff:05:17:38:64:03:da:d7:a1:68: a1:35:37:5a:d3:51:97:3b:71:d0:1e:ed:c7:87:57: 39:16:67:b5:84:07:4c:04:74:8f:db:7d:24:03:a8: 3b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6C:E3:A6:D4:68:27:B7:D1:CD:53:2E:01:B3:F2:19:A3:65:2B:85 X509v3 Authority Key Identifier: keyid:6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/KmzjptRoJ7fRzVMuAbPyGaNlK4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.122.155.0/24 Signature Algorithm: sha256WithRSAEncryption 61:22:3d:cf:e5:c8:10:70:1a:86:7b:ed:b6:af:62:8b:cd:75: a7:66:d1:08:4f:12:17:25:83:b4:e6:cc:ed:eb:f2:85:dd:4c: 3b:25:c5:0c:b7:dc:c8:a7:8c:6c:f7:67:b9:38:59:0f:59:c8: be:13:d5:b8:30:98:8e:c6:c7:17:ba:ca:3d:6c:c4:b3:0d:99: fe:94:16:b7:42:ca:22:2a:fc:08:51:f4:24:53:bd:d4:6b:21: d4:81:c5:f8:30:83:67:f7:d6:76:10:b2:84:2f:68:ab:c2:0d: ee:c9:15:57:da:1b:12:16:20:ba:71:9b:ca:b0:75:30:cd:5d: 04:14:22:cf:23:eb:fe:72:76:18:80:5d:24:db:91:53:48:31: cf:71:17:7c:2c:cd:9e:71:22:74:83:f8:d2:86:e8:7a:7a:5b: cc:3b:4f:27:4b:f5:4d:11:9c:8c:d5:c5:ab:eb:93:88:e7:34: 6c:b1:c6:77:b0:73:b5:67:e5:d8:a0:88:df:6f:24:e8:59:67: 0c:36:7b:77:8e:bd:85:a1:f2:30:a0:ee:c9:34:7e:58:6a:e4: a8:7e:4d:76:7a:67:2e:00:e9:af:e4:ac:44:a7:f5:7f:87:14: 5f:f3:20:7d:80:60:76:73:03:fa:49:5e:75:45:ec:6a:e5:21: 56:e2:82:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WR2oFCT7xSsfOlLck7VsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYjMwYTQxYTZhNmYyMWE5YjJkZDdlNTg1NmEyMGQ1YjVl ZmZlMWMwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTZjZTNhNmQ0NjgyN2I3ZDFjZDUzMmUwMWIzZjIxOWEzNjUyYjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKl9U03qPOfnshpvi131Ze35ng52 8XzhzXLVo/kEycUfNM/f5p/5jFo0Ayl9G+YM7Z+hKKC90rFw8xNADOJ3aJfLq/G/ /KHT+RkEuYUHhg1qtQx4sqYxLjZgHzhX8ZJbivzinLKI8OMCgOgvNVLot6RSfKVZ MXReL+/8DWFJ2rcF06Sejl4F7Fjj9bWNLZa18zXjf8W34eu4ZrUpHHNUqZCytnCD QKFNnczaxqrKkucaPuR5f7WYnJMT1YVtOn25T1ljsHtwURTHoQAlyjL48Cfpz2Lx T/8FFzhkA9rXoWihNTda01GXO3HQHu3Hh1c5Fme1hAdMBHSP230kA6g7VwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCps46bUaCe30c1TLgGz8hmjZSuFMB8GA1UdIwQY MBaAFG2zCkGmpvIamy3X5YVqINW17/4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmJNS1FhYW04aHFiTGRmbGhXb2cxYlh2X2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yYjkyOTYtNmJkMS00OWZiLWFlYTAt ZDg5MzIxMWU2NzE5LzEvS216anB0Um9KN2ZSelZNdUFiUHlHYU5sSzRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yYjkyOTYtNmJkMS00OWZiLWFlYTAtZDg5MzIxMWU2NzE5 LzEvYmJNS1FhYW04aHFiTGRmbGhXb2cxYlh2X2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJXqbMA0G CSqGSIb3DQEBCwUAA4IBAQBhIj3P5cgQcBqGe+22r2KLzXWnZtEITxIXJYO05szt 6/KF3Uw7JcUMt9zIp4xs92e5OFkPWci+E9W4MJiOxscXuso9bMSzDZn+lBa3Qsoi KvwIUfQkU73UayHUgcX4MINn99Z2ELKEL2irwg3uyRVX2hsSFiC6cZvKsHUwzV0E FCLPI+v+cnYYgF0k25FTSDHPcRd8LM2ecSJ0g/jShuh6elvMO08nS/VNEZyM1cWr 65OI5zRsscZ3sHO1Z+XYoIjfbyToWWcMNnt3jr2FofIwoO7JNH5YauSofk12emcu AOmv5KxEp/V/hxRf8yB9gGB2cwP6SV51Rexq5SFW4oLk -----END CERTIFICATE-----Generated at Thu Jan 1 14:05:34 2026 by rpki-client