This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/KAwmeFKkJNecLC_dhlCgmutRBdg.roa File: KAwmeFKkJNecLC_dhlCgmutRBdg.roa (raw, json) Hash identifier: 4iHI08OHJ2NSksCBP3bSg9muJPVbkbXbMCBVzC/LIqU= Subject key identifier: 28:0C:26:78:52:A4:24:D7:9C:2C:2F:DD:86:50:A0:9A:EB:51:05:D8 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B76EB56A16F2DC03FA151CFDB2A66E874 Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/KAwmeFKkJNecLC_dhlCgmutRBdg.roa Signing time: Thu 01 Jan 2026 00:18:13 +0000 ROA not before: Thu 01 Jan 2026 00:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202735 IP address blocks: 195.146.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:56:a1:6f:2d:c0:3f:a1:51:cf:db:2a:66:e8:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jan 1 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=280c267852a424d79c2c2fdd8650a09aeb5105d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:df:c9:c0:37:b7:b3:ff:c6:ab:a5:25:7d:05: 5e:c3:62:0d:a2:14:75:c7:18:00:e0:e7:d7:f0:02: be:50:34:f8:cf:50:cb:05:ae:66:a0:94:71:03:2b: 67:95:af:7f:9e:50:04:dc:2c:fd:62:3e:39:a2:4f: f0:7f:9e:28:ef:8a:8b:7a:44:54:ee:b1:2d:01:4a: 59:e0:b8:97:1b:f7:49:19:8b:60:14:e9:82:58:7a: 60:0c:6d:63:21:95:8b:62:7e:0a:e4:bc:f4:d4:3a: 27:23:b4:df:b0:3e:57:0d:08:ba:09:07:4e:c0:e1: bc:ed:54:65:a5:a6:74:a7:07:9b:2f:e1:ab:35:e8: a6:c2:36:5e:26:de:64:1e:fe:bd:46:b7:e0:29:27: 1c:57:04:43:f0:4f:ba:74:d9:18:35:d0:b4:31:fa: 00:31:76:f5:47:2f:f5:ac:01:69:47:98:05:9e:2a: 15:0e:f2:0c:c7:04:1d:b9:f0:fc:37:3a:eb:c1:29: c6:bd:1f:f3:15:f2:45:58:21:a8:e7:17:8c:50:52: e9:6f:08:44:37:5e:81:11:b6:16:f7:37:84:f6:8e: f6:d2:09:94:56:31:8d:83:3b:c4:47:6b:b0:f0:cd: 5e:8d:8a:bb:bd:c5:ec:98:bc:36:c1:03:53:8b:96: b8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0C:26:78:52:A4:24:D7:9C:2C:2F:DD:86:50:A0:9A:EB:51:05:D8 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/KAwmeFKkJNecLC_dhlCgmutRBdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.146.60.0/24 Signature Algorithm: sha256WithRSAEncryption 70:1e:f5:e1:40:cb:0b:b2:88:2e:b2:f4:43:d5:9d:4b:07:00: a7:1d:b5:3f:55:6c:8e:4a:79:4b:61:51:12:5b:6b:bd:d8:af: fa:41:36:8a:5b:25:41:c5:42:4c:15:83:48:4e:72:b2:11:c7: 6b:6f:34:1b:26:51:5d:ea:72:23:74:d0:34:2f:43:dc:b3:a9: 3b:f8:c4:7c:d8:22:69:f4:0d:b5:fd:2a:6d:0e:f6:80:7f:1f: be:88:f6:43:05:a5:a8:c6:84:19:6c:57:a2:ff:09:04:db:f7: 0a:a6:2a:89:ef:69:50:5c:bc:16:d6:ff:9d:79:bb:08:f8:8f: 6b:17:26:dd:09:8a:3e:1d:97:0f:30:5f:e0:84:e7:ed:14:d1: 3a:d1:af:03:0f:55:b4:9c:95:43:e5:4e:df:ed:6a:1b:52:b1: 94:4a:2f:ca:8f:bc:50:8e:23:5f:d0:c1:c1:71:b4:31:d2:c8: 2b:53:9a:22:eb:49:9e:76:16:82:0c:b9:bc:50:ba:ea:72:c5: 94:04:eb:3c:b3:66:8c:05:09:e7:45:fc:eb:5f:f7:74:25:6a: 3a:9d:ac:9c:7c:c3:6e:6a:4a:e3:60:08:38:97:e3:21:b7:72: 39:0d:1b:41:fc:b7:14:02:a4:af:56:ab:06:60:3b:5a:98:b2: 1b:b2:f0:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt261ahby3AP6FRz9sqZuh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwMTAxMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODBjMjY3ODUyYTQyNGQ3OWMyYzJmZGQ4NjUwYTA5YWViNTEwNWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN/JwDe3s//Gq6UlfQVew2INohR1 xxgA4OfX8AK+UDT4z1DLBa5moJRxAytnla9/nlAE3Cz9Yj45ok/wf54o74qLekRU 7rEtAUpZ4LiXG/dJGYtgFOmCWHpgDG1jIZWLYn4K5Lz01DonI7TfsD5XDQi6CQdO wOG87VRlpaZ0pwebL+GrNeimwjZeJt5kHv69RrfgKSccVwRD8E+6dNkYNdC0MfoA MXb1Ry/1rAFpR5gFnioVDvIMxwQdufD8NzrrwSnGvR/zFfJFWCGo5xeMUFLpbwhE N16BEbYW9zeE9o720gmUVjGNgzvER2uw8M1ejYq7vcXsmLw2wQNTi5a4xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCgMJnhSpCTXnCwv3YZQoJrrUQXYMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvS0F3bWVGS2tKTmVjTENfZGhsQ2dtdXRSQmRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5I8MA0G CSqGSIb3DQEBCwUAA4IBAQBwHvXhQMsLsogusvRD1Z1LBwCnHbU/VWyOSnlLYVES W2u92K/6QTaKWyVBxUJMFYNITnKyEcdrbzQbJlFd6nIjdNA0L0Pcs6k7+MR82CJp 9A21/SptDvaAfx++iPZDBaWoxoQZbFei/wkE2/cKpiqJ72lQXLwW1v+debsI+I9r FybdCYo+HZcPMF/ghOftFNE60a8DD1W0nJVD5U7f7WobUrGUSi/Kj7xQjiNf0MHB cbQx0sgrU5oi60medhaCDLm8ULrqcsWUBOs8s2aMBQnnRfzrX/d0JWo6naycfMNu akrjYAg4l+Mht3I5DRtB/LcUAqSvVqsGYDtamLIbsvDf -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:57 2026 by rpki-client