This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/KWWCvx9kekM7FeIEbE7lIebMHVc.roa File: KWWCvx9kekM7FeIEbE7lIebMHVc.roa (raw, json) Hash identifier: 9Dpo1+qV8mkvAoqKRDgytwIHoWKT608tmrG/XnX2mUg= Subject key identifier: 29:65:82:BF:1F:64:7A:43:3B:15:E2:04:6C:4E:E5:21:E6:CC:1D:57 Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019B7F14628D9A88A6A3052ADE4BB481A68F Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/KWWCvx9kekM7FeIEbE7lIebMHVc.roa Signing time: Fri 02 Jan 2026 14:20:00 +0000 ROA not before: Fri 02 Jan 2026 14:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142113 IP address blocks: 176.98.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:62:8d:9a:88:a6:a3:05:2a:de:4b:b4:81:a6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Jan 2 14:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=296582bf1f647a433b15e2046c4ee521e6cc1d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:04:f3:bb:36:5a:1f:f1:6c:97:0f:3c:48:1c: 81:8b:16:d2:81:2b:ab:a5:de:69:56:55:a3:a5:85: 5f:2f:84:3f:b4:3c:50:e9:1c:b9:08:77:a3:10:16: 9f:52:43:38:a8:1a:cf:3d:a9:e0:b2:72:76:ae:4c: 1b:71:58:41:85:dd:3c:58:0c:71:e0:34:5c:8c:61: f2:86:4a:fb:af:5e:d2:dd:15:8c:cc:d4:76:df:34: c9:eb:43:3c:76:a7:5c:4c:91:d9:04:d6:e0:d7:5e: 3a:2e:39:af:f1:20:9b:ea:36:05:a2:0e:ef:08:f7: 1b:93:00:4c:b2:31:ca:1a:2d:4e:cf:b5:29:e2:12: 59:5d:ba:97:9e:06:3f:73:dd:77:1f:77:5c:b3:3a: 60:07:b8:64:d1:ef:0b:62:46:b8:07:c7:9a:1a:9e: 3a:f3:4b:42:dd:76:94:60:81:5a:e7:b9:f8:21:db: ab:9a:2d:4b:68:43:6e:b9:4c:d8:f2:66:87:b2:01: 8d:c0:7c:d7:ef:e3:f4:e0:df:0a:21:89:a2:39:fd: 71:7c:4c:e8:41:ee:10:be:80:6d:fe:81:45:4a:0f: ef:11:22:c8:90:fd:f9:6d:da:3e:fb:5e:53:5c:f8: 18:ea:60:8d:0d:4d:ee:b4:53:34:3d:61:dd:10:90: 1f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:65:82:BF:1F:64:7A:43:3B:15:E2:04:6C:4E:E5:21:E6:CC:1D:57 X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/KWWCvx9kekM7FeIEbE7lIebMHVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.98.181.0/24 Signature Algorithm: sha256WithRSAEncryption 01:cf:09:9f:6d:5d:95:89:6a:da:0b:b5:8f:3b:0a:f9:9a:09: 57:4f:54:9f:c7:c4:d3:e9:43:bb:0a:6c:f0:a9:ac:91:be:c0: 3b:05:20:8d:59:4b:32:e6:82:39:cf:4a:90:9b:2c:ad:25:35: 42:5b:55:08:c3:1d:4e:37:04:fb:71:2a:78:3f:a0:12:1e:54: 29:5e:18:e0:c2:cb:0b:42:ac:f0:92:33:da:28:6a:13:ad:14: 4a:dc:3f:56:e1:dd:7e:1a:d2:04:db:16:8e:2d:5b:ce:dc:b3: ba:c3:94:5b:e1:7d:f2:c5:fb:12:13:7b:79:4d:ce:dc:70:c8: e9:72:93:11:5f:39:fa:0e:f0:78:97:73:a9:3f:4b:cb:22:7e: ce:42:e2:ba:32:0f:b1:91:02:86:af:30:22:2a:2e:1f:30:27: 9c:0b:bb:8a:87:b8:69:7f:eb:27:fb:ee:fb:1d:f8:32:ee:fd: 45:b3:24:a3:1c:98:b0:29:e6:69:94:96:c7:06:c1:26:b2:41: c6:5e:00:e2:05:d7:2f:d2:bb:0c:1d:a9:c1:3d:96:0d:70:38: da:3f:d4:41:0c:ce:61:a7:de:f6:d0:ab:ae:ba:97:a9:aa:b7: 36:2c:71:61:1f:62:5c:19:be:ec:1d:20:38:6e:95:c7:6a:13: 8e:8e:10:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FGKNmoimowUq3ku0gaaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjYwMTAyMTQyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTY1ODJiZjFmNjQ3YTQzM2IxNWUyMDQ2YzRlZTUyMWU2Y2MxZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmATzuzZaH/Fslw88SByBixbSgSur pd5pVlWjpYVfL4Q/tDxQ6Ry5CHejEBafUkM4qBrPPangsnJ2rkwbcVhBhd08WAxx 4DRcjGHyhkr7r17S3RWMzNR23zTJ60M8dqdcTJHZBNbg1146Ljmv8SCb6jYFog7v CPcbkwBMsjHKGi1Oz7Up4hJZXbqXngY/c913H3dcszpgB7hk0e8LYka4B8eaGp46 80tC3XaUYIFa57n4Idurmi1LaENuuUzY8maHsgGNwHzX7+P04N8KIYmiOf1xfEzo Qe4QvoBt/oFFSg/vESLIkP35bdo++15TXPgY6mCNDU3utFM0PWHdEJAfTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCllgr8fZHpDOxXiBGxO5SHmzB1XMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvS1dXQ3Z4OWtla003RmVJRWJFN2xJZWJNSFZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGK1MA0G CSqGSIb3DQEBCwUAA4IBAQABzwmfbV2ViWraC7WPOwr5mglXT1Sfx8TT6UO7Cmzw qayRvsA7BSCNWUsy5oI5z0qQmyytJTVCW1UIwx1ONwT7cSp4P6ASHlQpXhjgwssL QqzwkjPaKGoTrRRK3D9W4d1+GtIE2xaOLVvO3LO6w5Rb4X3yxfsSE3t5Tc7ccMjp cpMRXzn6DvB4l3OpP0vLIn7OQuK6Mg+xkQKGrzAiKi4fMCecC7uKh7hpf+sn++77 Hfgy7v1FsySjHJiwKeZplJbHBsEmskHGXgDiBdcv0rsMHanBPZYNcDjaP9RBDM5h p9720Kuuupepqrc2LHFhH2JcGb7sHSA4bpXHahOOjhCa -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:22 2026 by rpki-client