This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/KWyOaYXmmuGpMkmFhWfxqNZLpEQ.roa File: KWyOaYXmmuGpMkmFhWfxqNZLpEQ.roa (raw, json) Hash identifier: 6Db2CprWj64Ewe8dVzSinC3cNdAaSLoS6Dq+erianYM= Subject key identifier: 29:6C:8E:69:85:E6:9A:E1:A9:32:49:85:85:67:F1:A8:D6:4B:A4:44 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019B797E460921457F0B9648FCA1309DF021 Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/KWyOaYXmmuGpMkmFhWfxqNZLpEQ.roa Signing time: Thu 01 Jan 2026 12:17:57 +0000 ROA not before: Thu 01 Jan 2026 12:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206270 IP address blocks: 185.188.100.0/22 maxlen: 32 185.188.103.0/24 maxlen: 24 2a0a:10c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:46:09:21:45:7f:0b:96:48:fc:a1:30:9d:f0:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Jan 1 12:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=296c8e6985e69ae1a93249858567f1a8d64ba444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2f:7b:8f:ab:65:c7:19:f7:03:60:37:07:dc: 93:c1:b3:68:dc:e9:e1:8b:ce:96:30:b6:d6:cc:f1: e8:c3:da:1a:02:79:61:0b:07:7a:3b:8e:de:03:a7: c1:a7:82:f0:16:6a:ba:5c:4d:05:c5:e9:48:02:e4: 0f:71:a7:b6:b2:86:5f:83:ee:9f:8d:35:a3:bf:99: d3:2f:fc:a3:28:77:6a:1e:00:f3:01:34:95:b2:05: 52:c4:22:2f:d0:7c:16:a2:12:52:e9:00:cd:6f:6f: d3:e6:95:8a:1b:c2:98:d8:71:a5:69:49:03:9a:2f: e9:be:2c:3c:b2:d4:8a:f6:4c:49:e5:ab:49:b7:45: 9a:cf:01:f5:8e:2a:72:c0:53:b8:12:1b:9e:84:7b: 3f:0e:30:2f:a9:8d:5f:f3:f1:48:cd:39:13:b4:20: b1:04:a5:03:e3:ba:c4:06:f4:60:14:b9:49:ab:60: e2:a3:4b:bc:cd:17:24:64:2f:0e:15:56:61:61:6d: 5b:c8:ed:39:ec:21:fb:17:6d:a0:1e:35:35:f2:7b: a2:37:6d:e8:8f:78:16:6d:b3:c6:c5:bf:26:87:69: a8:21:78:b1:38:82:92:53:dc:fa:2e:32:16:a8:5b: 39:e0:ba:d4:12:7c:9f:e8:57:71:9c:e7:06:1e:49: 63:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6C:8E:69:85:E6:9A:E1:A9:32:49:85:85:67:F1:A8:D6:4B:A4:44 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/KWyOaYXmmuGpMkmFhWfxqNZLpEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.100.0/22 IPv6: 2a0a:10c0::/29 Signature Algorithm: sha256WithRSAEncryption 7a:00:19:79:8f:fe:6f:7d:26:d0:4d:bd:d0:03:f1:4e:6d:2c: 63:51:42:68:e9:fa:b5:4f:ab:03:aa:7a:eb:a3:97:a4:0c:40: a9:0b:e9:03:b5:92:16:f0:8c:95:56:f2:5b:6a:cf:b0:d2:17: 30:f6:7e:62:ef:ba:23:38:13:94:0f:72:4b:d6:88:3f:f1:5f: 44:49:d6:e2:f3:56:56:d8:f9:2d:fe:45:7b:23:e8:0c:c1:a8: de:77:ff:82:0d:f2:3d:ac:da:c9:98:f0:7c:ca:36:3d:2b:e0: 69:33:71:6b:4d:aa:f4:05:0b:9c:44:0b:c5:f1:ff:c7:79:1e: ec:f3:a7:98:79:8c:64:7f:bf:fc:a3:3f:10:76:db:83:1a:86: a7:89:89:7f:3d:aa:7d:85:05:77:ab:45:8e:a2:30:9d:6a:20: 5d:c7:8a:b2:a5:48:13:5a:e2:47:72:54:92:7b:3c:9e:82:8c: 82:27:27:7b:5e:fe:01:71:bd:18:2c:cc:8a:a8:1c:4d:44:0e: d5:8f:3a:26:4f:ec:4b:4e:b7:a0:2a:26:17:62:5e:bd:e5:0b: a7:00:43:51:ee:63:79:45:16:cd:67:3f:36:1e:c0:b1:a3:c4: 1e:36:49:44:38:41:8d:9f:32:cb:09:15:b5:44:bf:69:59:50: 1c:e0:9d:9f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fkYJIUV/C5ZI/KEwnfAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjYwMTAxMTIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTZjOGU2OTg1ZTY5YWUxYTkzMjQ5ODU4NTY3ZjFhOGQ2NGJhNDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy97j6tlxxn3A2A3B9yTwbNo3Onh i86WMLbWzPHow9oaAnlhCwd6O47eA6fBp4LwFmq6XE0FxelIAuQPcae2soZfg+6f jTWjv5nTL/yjKHdqHgDzATSVsgVSxCIv0HwWohJS6QDNb2/T5pWKG8KY2HGlaUkD mi/pviw8stSK9kxJ5atJt0WazwH1jipywFO4EhuehHs/DjAvqY1f8/FIzTkTtCCx BKUD47rEBvRgFLlJq2Dio0u8zRckZC8OFVZhYW1byO057CH7F22gHjU18nuiN23o j3gWbbPGxb8mh2moIXixOIKSU9z6LjIWqFs54LrUEnyf6FdxnOcGHkljVQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFClsjmmF5prhqTJJhYVn8ajWS6REMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvS1d5T2FZWG1tdUdwTWttRmhXZnhxTlpMcEVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubxkMA0E AgACMAcDBQMqChDAMA0GCSqGSIb3DQEBCwUAA4IBAQB6ABl5j/5vfSbQTb3QA/FO bSxjUUJo6fq1T6sDqnrro5ekDECpC+kDtZIW8IyVVvJbas+w0hcw9n5i77ojOBOU D3JL1og/8V9ESdbi81ZW2Pkt/kV7I+gMwajed/+CDfI9rNrJmPB8yjY9K+BpM3Fr Tar0BQucRAvF8f/HeR7s86eYeYxkf7/8oz8QdtuDGoaniYl/Pap9hQV3q0WOojCd aiBdx4qypUgTWuJHclSSezyegoyCJyd7Xv4Bcb0YLMyKqBxNRA7VjzomT+xLTreg KiYXYl695QunAENR7mN5RRbNZz82HsCxo8QeNklEOEGNnzLLCRW1RL9pWVAc4J2f -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:25 2026 by rpki-client