This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/KVWGAtNaDYuCLBDqyjhmNTSUsco.roa File: KVWGAtNaDYuCLBDqyjhmNTSUsco.roa (raw, json) Hash identifier: I+mYgzLuOkLdrV2nmEsQLkeZAGwvKj2fiTFinUQhLus= Subject key identifier: 29:55:86:02:D3:5A:0D:8B:82:2C:10:EA:CA:38:66:35:34:94:B1:CA Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Certificate serial: 019B7E38817C47B414300AA9228D5E8A29ED Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/KVWGAtNaDYuCLBDqyjhmNTSUsco.roa Signing time: Fri 02 Jan 2026 10:19:50 +0000 ROA not before: Fri 02 Jan 2026 10:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8739 IP address blocks: 94.155.37.0/24 maxlen: 24 213.145.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:81:7c:47:b4:14:30:0a:a9:22:8d:5e:8a:29:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Validity Not Before: Jan 2 10:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29558602d35a0d8b822c10eaca3866353494b1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:1c:c6:59:d0:8f:c6:d0:c3:50:f4:4b:b6: 6a:bd:16:e5:14:a1:a5:49:9b:8f:0c:f8:18:3a:d7: 49:8d:5b:b7:40:40:1e:f1:08:b6:67:d4:c9:9d:ac: ef:e0:dd:87:47:66:f7:a2:a3:82:64:3b:4c:8f:9b: c3:c7:af:0e:b6:51:a6:bd:cf:d9:89:17:1e:e6:84: 62:02:99:1f:c3:49:4b:1a:3d:de:0e:9f:69:5e:f7: f9:eb:d9:91:63:de:d6:fc:a4:98:69:f6:63:a5:52: 78:28:84:e4:a4:f4:eb:2c:76:2e:c1:e7:c9:97:8b: e7:ed:b6:07:cc:40:76:7b:66:20:84:9f:6f:8c:cc: 10:bc:dc:6e:42:be:8d:1d:40:16:15:2a:af:32:ea: fe:86:12:40:f8:33:42:a8:69:a5:fb:b6:a6:f2:5a: d4:d0:3e:bb:43:ff:30:b7:c7:38:f8:d5:31:57:33: c2:bb:3a:9a:2d:78:b5:4f:0d:dd:00:ba:2a:1c:61: cc:5a:16:50:5b:fd:e6:67:ed:69:ff:84:6b:68:91: fd:c7:3c:92:49:3e:81:7b:14:cf:71:74:49:4b:ba: 8a:23:90:36:2b:50:f0:52:a7:2a:2c:e3:2b:e8:aa: d1:be:3f:56:76:78:59:c8:6c:19:54:2d:d5:bb:74: b4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:55:86:02:D3:5A:0D:8B:82:2C:10:EA:CA:38:66:35:34:94:B1:CA X509v3 Authority Key Identifier: keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/KVWGAtNaDYuCLBDqyjhmNTSUsco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.155.37.0/24 213.145.98.0/24 Signature Algorithm: sha256WithRSAEncryption bf:44:26:fa:ce:dd:70:a1:71:b8:6f:3d:c3:d6:09:0b:e6:74: 1f:51:eb:03:a9:5a:43:eb:dd:39:0f:89:27:f1:7b:30:37:df: c0:aa:b3:86:b5:27:1b:c5:56:0e:56:65:78:c7:a3:0d:76:f2: 09:3d:78:b4:66:4c:10:4c:1b:a5:a2:5d:b6:0d:1c:36:34:0c: 29:0e:a1:3f:4a:4b:6c:fb:d8:d1:28:25:9f:38:6c:e6:6d:72: 13:4b:e2:2a:a8:fe:3b:85:79:a0:79:a1:70:39:95:ed:ef:2b: 21:12:b6:9e:b2:28:bf:b5:f5:67:6e:3a:00:38:a7:0e:85:6f: f9:de:c4:dd:7b:5f:4e:90:d0:a4:ca:b6:6c:f8:2b:c6:9d:88: 5a:d5:64:b8:f8:31:71:ad:29:20:0d:07:74:47:b4:71:19:e4: 65:df:99:c4:f9:f9:47:1b:08:35:1d:ee:6a:d3:4b:b0:37:eb: b0:cc:82:78:20:df:82:7d:d5:c2:9b:be:71:96:d4:40:81:0e: ee:bf:a1:cb:0d:8b:a6:82:74:28:6d:9d:a6:d7:7c:17:9c:be: 49:89:de:f9:64:4b:58:e2:32:41:d2:f6:2a:67:4a:9c:8b:75: 87:0c:38:aa:eb:33:30:31:3e:43:17:1c:55:42:ce:ea:25:2b: bf:f3:2f:47 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OIF8R7QUMAqpIo1eiintMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw MWFiNDEwHhcNMjYwMTAyMTAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTU1ODYwMmQzNWEwZDhiODIyYzEwZWFjYTM4NjYzNTM0OTRiMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqAcxlnQj8bQw1D0S7ZqvRblFKGl SZuPDPgYOtdJjVu3QEAe8Qi2Z9TJnazv4N2HR2b3oqOCZDtMj5vDx68OtlGmvc/Z iRce5oRiApkfw0lLGj3eDp9pXvf569mRY97W/KSYafZjpVJ4KITkpPTrLHYuwefJ l4vn7bYHzEB2e2YghJ9vjMwQvNxuQr6NHUAWFSqvMur+hhJA+DNCqGml+7am8lrU 0D67Q/8wt8c4+NUxVzPCuzqaLXi1Tw3dALoqHGHMWhZQW/3mZ+1p/4RraJH9xzyS ST6BexTPcXRJS7qKI5A2K1DwUqcqLOMr6KrRvj9WdnhZyGwZVC3Vu3S0SQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFClVhgLTWg2LgiwQ6so4ZjU0lLHKMB8GA1UdIwQY MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt Y2Y5ZGM1YmFhYTc5LzEvS1ZXR0F0TmFEWXVDTEJEcXlqaG1OVFNVc2NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5 LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXpslAwQA 1ZFiMA0GCSqGSIb3DQEBCwUAA4IBAQC/RCb6zt1woXG4bz3D1gkL5nQfUesDqVpD 6905D4kn8XswN9/AqrOGtScbxVYOVmV4x6MNdvIJPXi0ZkwQTBulol22DRw2NAwp DqE/Skts+9jRKCWfOGzmbXITS+IqqP47hXmgeaFwOZXt7yshEraesii/tfVnbjoA OKcOhW/53sTde19OkNCkyrZs+CvGnYha1WS4+DFxrSkgDQd0R7RxGeRl35nE+flH Gwg1He5q00uwN+uwzIJ4IN+CfdXCm75xltRAgQ7uv6HLDYumgnQobZ2m13wXnL5J id75ZEtY4jJB0vYqZ0qci3WHDDiq6zMwMT5DFxxVQs7qJSu/8y9H -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:08 2026 by rpki-client