This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/KGwwtGzR65TxQF-2vzhHlmHOTo8.roa File: KGwwtGzR65TxQF-2vzhHlmHOTo8.roa (raw, json) Hash identifier: o/WFBpe3yFcgt0UEYgNY9hSYO7UsE0F6pNNZUvTlLxk= Subject key identifier: 28:6C:30:B4:6C:D1:EB:94:F1:40:5F:B6:BF:38:47:96:61:CE:4E:8F Certificate issuer: /CN=cdfcbde632d106faad98c2c1895a877ca601521a Certificate serial: 019B7910B3ECF3C3D77485EA7038C60E7018 Authority key identifier: CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/KGwwtGzR65TxQF-2vzhHlmHOTo8.roa Signing time: Thu 01 Jan 2026 10:18:16 +0000 ROA not before: Thu 01 Jan 2026 10:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1103 IP address blocks: 137.120.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b3:ec:f3:c3:d7:74:85:ea:70:38:c6:0e:70:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdfcbde632d106faad98c2c1895a877ca601521a Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=286c30b46cd1eb94f1405fb6bf38479661ce4e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:61:48:fc:aa:42:4e:e1:24:9a:02:00:13:a2: fd:54:66:5c:92:9d:c8:e1:12:88:d0:de:b4:51:f9: e2:0d:51:69:16:08:28:5d:b3:b9:80:1d:4e:43:19: 80:79:08:a6:a4:1e:12:1d:54:82:55:cd:36:d7:7f: 9f:38:2a:5d:26:95:a8:6a:ea:77:87:08:17:21:4a: a7:6e:01:56:e8:8b:14:a6:4a:aa:b6:85:bb:15:1c: 5d:ca:e9:45:3c:c7:4c:0b:a6:d6:51:e7:99:f4:2d: 77:63:f4:43:80:23:e6:7b:2a:17:71:f3:1c:63:e9: b2:11:8e:fe:68:54:38:09:a0:63:1c:52:eb:91:28: 4b:f6:5a:9c:ef:17:67:f6:03:c4:6b:a7:c9:92:6b: e6:1e:fc:d3:6e:67:2b:e7:ad:44:cc:12:4b:71:3d: 0c:c1:0d:1d:7c:32:be:a9:05:25:9e:bf:0e:71:6a: 9d:a0:9d:0f:19:99:2a:70:f9:67:32:47:8b:73:b8: b0:c4:b8:18:cc:4d:9e:7f:fd:d2:6d:95:5f:04:60: 0d:f5:1e:09:2e:e3:6b:12:5a:7f:bc:e7:99:2c:9f: 3b:85:72:d2:f7:ce:d9:d2:24:6d:ce:c7:e8:c0:4a: 70:60:a6:42:5e:cb:61:f3:a6:a9:35:d4:00:56:f0: f6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6C:30:B4:6C:D1:EB:94:F1:40:5F:B6:BF:38:47:96:61:CE:4E:8F X509v3 Authority Key Identifier: keyid:CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/KGwwtGzR65TxQF-2vzhHlmHOTo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.120.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:99:67:e7:a5:9e:1b:91:a9:0d:c7:e9:b3:b1:b3:fd:5a:31: 2b:ab:0a:12:dd:26:74:02:8a:f2:84:dc:6f:74:70:49:1c:bc: 11:8a:44:a7:0a:50:e4:b3:19:ab:02:37:6b:03:ae:1e:8e:3a: bb:96:9e:f5:92:88:7a:3b:86:a2:9a:ab:a1:c2:24:ac:7b:3c: 75:ba:dd:38:16:f5:27:00:71:83:ca:44:f6:f4:48:bc:7e:30: d1:92:1d:f2:7d:32:9d:7d:02:a1:38:04:2d:bb:76:cd:03:13: 2c:0d:73:b8:31:83:31:78:96:77:e6:2f:41:b1:90:0c:d1:3e: cc:18:01:d9:a6:8f:c8:a5:7c:2a:cb:79:87:c0:de:55:f3:b3: 0e:05:83:8d:da:90:20:35:ad:47:61:dc:1f:58:cd:0c:77:55: 91:4d:a4:6a:fd:20:dc:9b:88:de:d0:63:36:0b:f3:9f:19:98: b8:fe:5e:ee:ae:e7:d1:a6:30:f2:1d:27:97:b7:17:1a:25:67: 00:eb:cb:05:e3:9a:9e:cd:3c:86:6b:a7:99:51:28:5c:25:c3: 4a:8d:7d:10:b7:93:01:b5:dc:ba:70:10:e9:09:88:92:19:2c: b7:53:1d:21:fd:61:32:44:de:36:51:0f:bf:f9:7b:51:ce:52: 82:25:90:13 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt5ELPs88PXdIXqcDjGDnAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZmNiZGU2MzJkMTA2ZmFhZDk4YzJjMTg5NWE4NzdjYTYw MTUyMWEwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODZjMzBiNDZjZDFlYjk0ZjE0MDVmYjZiZjM4NDc5NjYxY2U0ZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GFI/KpCTuEkmgIAE6L9VGZckp3I 4RKI0N60UfniDVFpFggoXbO5gB1OQxmAeQimpB4SHVSCVc0213+fOCpdJpWoaup3 hwgXIUqnbgFW6IsUpkqqtoW7FRxdyulFPMdMC6bWUeeZ9C13Y/RDgCPmeyoXcfMc Y+myEY7+aFQ4CaBjHFLrkShL9lqc7xdn9gPEa6fJkmvmHvzTbmcr561EzBJLcT0M wQ0dfDK+qQUlnr8OcWqdoJ0PGZkqcPlnMkeLc7iwxLgYzE2ef/3SbZVfBGAN9R4J LuNrElp/vOeZLJ87hXLS987Z0iRtzsfowEpwYKZCXsth86apNdQAVvD2CQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFChsMLRs0euU8UBftr84R5Zhzk6PMB8GA1UdIwQY MBaAFM38veYy0Qb6rZjCwYlah3ymAVIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZ5OTVqTFJCdnF0bU1MQmlWcUhmS1lCVWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mZTQ1Y2YtNGFkMi00MWQ5LWJiY2Et MjAzY2ZhMjM4Njk2LzEvS0d3d3RHelI2NVR4UUYtMnZ6aEhsbUhPVG84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9mZTQ1Y2YtNGFkMi00MWQ5LWJiY2EtMjAzY2ZhMjM4Njk2 LzEvemZ5OTVqTFJCdnF0bU1MQmlWcUhmS1lCVWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiXgwDQYJ KoZIhvcNAQELBQADggEBAEOZZ+elnhuRqQ3H6bOxs/1aMSurChLdJnQCivKE3G90 cEkcvBGKRKcKUOSzGasCN2sDrh6OOruWnvWSiHo7hqKaq6HCJKx7PHW63TgW9ScA cYPKRPb0SLx+MNGSHfJ9Mp19AqE4BC27ds0DEywNc7gxgzF4lnfmL0GxkAzRPswY Admmj8ilfCrLeYfA3lXzsw4Fg43akCA1rUdh3B9YzQx3VZFNpGr9INybiN7QYzYL 858ZmLj+Xu6u59GmMPIdJ5e3FxolZwDrywXjmp7NPIZrp5lRKFwlw0qNfRC3kwG1 3LpwEOkJiJIZLLdTHSH9YTJE3jZRD7/5e1HOUoIlkBM= -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:20 2026 by rpki-client