This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/kWCTgWZt28p39DxdSCAtv_HwK2c.roa File: kWCTgWZt28p39DxdSCAtv_HwK2c.roa (raw, json) Hash identifier: 6Pr8hVCpj9ARKpg6hJBVs5kjCmMHYsPhDj8rNCbBx5s= Subject key identifier: 91:60:93:81:66:6D:DB:CA:77:F4:3C:5D:48:20:2D:BF:F1:F0:2B:67 Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 019B7758925222B171ACF6B26429B469DD0E Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/kWCTgWZt28p39DxdSCAtv_HwK2c.roa Signing time: Thu 01 Jan 2026 02:17:31 +0000 ROA not before: Thu 01 Jan 2026 02:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8311 IP address blocks: 93.177.114.0/23 maxlen: 24 185.212.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:92:52:22:b1:71:ac:f6:b2:64:29:b4:69:dd:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Jan 1 02:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91609381666ddbca77f43c5d48202dbff1f02b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8a:f0:05:8f:25:3f:e0:17:22:77:97:dd:19: b0:23:6f:47:4b:e2:ac:90:84:c5:f6:0f:6f:15:24: 7f:05:33:30:2a:b6:90:0c:25:bf:12:d1:1c:91:f7: cc:93:fc:78:9c:23:44:8d:e9:8d:68:a4:2a:ae:29: 29:fa:59:44:41:ba:5a:45:30:ef:e3:29:f1:cd:c1: 7a:5f:9c:fa:40:ef:d3:be:a0:eb:c2:f5:ba:10:24: 72:24:08:59:b1:73:b7:69:9c:de:a0:4b:02:7d:80: fb:3a:62:31:c2:36:aa:68:8b:b1:b2:90:6c:bf:d7: 80:70:7f:15:18:0f:54:e0:05:13:03:e0:f0:1f:aa: 0e:e8:05:29:8c:e1:7b:25:42:36:03:7b:53:69:53: 2f:44:b0:b1:9a:f4:55:a8:83:6e:fd:1c:b7:e5:25: d7:34:c5:b1:41:2b:14:c5:6f:37:fc:7a:32:23:5d: cb:fe:0b:1d:31:c7:70:28:e8:ab:71:87:a5:ee:6a: 85:b0:f0:2a:5b:4d:6e:ea:b2:6a:39:c0:7c:99:c2: d3:03:6e:dd:de:e3:eb:a9:3f:31:e0:d5:62:82:64: 3c:c9:42:31:f3:62:a7:b4:4b:00:3d:ac:f1:bd:9a: 94:ab:6b:66:b4:16:78:59:e5:22:7f:45:2c:de:45: 30:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:60:93:81:66:6D:DB:CA:77:F4:3C:5D:48:20:2D:BF:F1:F0:2B:67 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/kWCTgWZt28p39DxdSCAtv_HwK2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.177.114.0/23 185.212.204.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:94:cc:e6:7e:8b:ea:53:0b:d8:ad:38:2b:ef:b1:d2:2f:d3: 47:c2:b8:3b:f5:74:0a:9e:c7:fa:ff:79:0f:4b:d4:cc:45:40: 14:e6:75:6c:66:62:97:60:9a:00:07:d8:ae:53:e4:c1:02:e4: 17:ff:5e:4e:74:c1:80:50:88:f3:b1:9b:69:77:23:c0:a8:ac: 24:38:ef:5f:bb:69:fa:d7:f3:7a:79:84:82:5a:04:c9:d9:b2: 18:75:a1:9d:58:b0:0d:13:5a:88:16:1c:e4:40:46:ac:09:2d: 20:1c:21:59:b0:25:91:9f:e4:1e:cc:d5:5a:b9:c2:e6:61:82: 86:4d:45:26:76:1b:16:7a:0d:d9:7e:33:25:29:46:fd:a4:96: bd:d7:87:63:f0:c9:86:de:f1:d6:9d:9d:6c:f5:8b:7f:05:f5: 6c:46:c1:79:37:d1:a8:71:36:1f:58:d7:77:41:1a:a5:c3:a6: b0:28:ce:5e:fa:f3:d7:ca:0f:87:a5:57:4b:11:30:2e:c8:83: 1a:b4:35:a6:15:06:21:bd:20:f9:a0:6e:0d:92:70:1f:78:46: d2:6d:21:97:23:1c:65:8e:90:02:6b:fd:cb:bb:79:c6:ce:47: 48:1e:52:68:cb:73:07:48:c2:43:b9:a6:45:57:f1:2f:0c:42: 58:77:a3:81 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WJJSIrFxrPayZCm0ad0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjYwMTAxMDIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTYwOTM4MTY2NmRkYmNhNzdmNDNjNWQ0ODIwMmRiZmYxZjAyYjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4rwBY8lP+AXIneX3RmwI29HS+Ks kITF9g9vFSR/BTMwKraQDCW/EtEckffMk/x4nCNEjemNaKQqrikp+llEQbpaRTDv 4ynxzcF6X5z6QO/TvqDrwvW6ECRyJAhZsXO3aZzeoEsCfYD7OmIxwjaqaIuxspBs v9eAcH8VGA9U4AUTA+DwH6oO6AUpjOF7JUI2A3tTaVMvRLCxmvRVqINu/Ry35SXX NMWxQSsUxW83/HoyI13L/gsdMcdwKOircYel7mqFsPAqW01u6rJqOcB8mcLTA27d 3uPrqT8x4NVigmQ8yUIx82KntEsAPazxvZqUq2tmtBZ4WeUif0Us3kUw+QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJFgk4FmbdvKd/Q8XUggLb/x8CtnMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEva1dDVGdXWnQyOHAzOUR4ZFNDQXR2X0h3SzJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXbFyAwQC udTMMA0GCSqGSIb3DQEBCwUAA4IBAQAPlMzmfovqUwvYrTgr77HSL9NHwrg79XQK nsf6/3kPS9TMRUAU5nVsZmKXYJoAB9iuU+TBAuQX/15OdMGAUIjzsZtpdyPAqKwk OO9fu2n61/N6eYSCWgTJ2bIYdaGdWLANE1qIFhzkQEasCS0gHCFZsCWRn+QezNVa ucLmYYKGTUUmdhsWeg3ZfjMlKUb9pJa914dj8MmG3vHWnZ1s9Yt/BfVsRsF5N9Go cTYfWNd3QRqlw6awKM5e+vPXyg+HpVdLETAuyIMatDWmFQYhvSD5oG4NknAfeEbS bSGXIxxljpACa/3Lu3nGzkdIHlJoy3MHSMJDuaZFV/EvDEJYd6OB -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:20 2026 by rpki-client