This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/KtwjJxqN8UH08FldgJvcpESkUzQ.roa File: KtwjJxqN8UH08FldgJvcpESkUzQ.roa (raw, json) Hash identifier: VQpQKrducwAP8Rpog43Qsa4SpXdFqCQ1EvVdnE9AdDY= Subject key identifier: 2A:DC:23:27:1A:8D:F1:41:F4:F0:59:5D:80:9B:DC:A4:44:A4:53:34 Certificate issuer: /CN=582ac3589fc539ab852690f85d9f3f7f234ec39b Certificate serial: 019B7C8071C80166395B2D837E8C0FED6C50 Authority key identifier: 58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/KtwjJxqN8UH08FldgJvcpESkUzQ.roa Signing time: Fri 02 Jan 2026 02:19:11 +0000 ROA not before: Fri 02 Jan 2026 02:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28952 IP address blocks: 91.191.69.0/24 maxlen: 24 91.191.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:71:c8:01:66:39:5b:2d:83:7e:8c:0f:ed:6c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=582ac3589fc539ab852690f85d9f3f7f234ec39b Validity Not Before: Jan 2 02:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2adc23271a8df141f4f0595d809bdca444a45334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2e:02:62:30:bb:e6:1d:fb:25:32:c3:bb:c4: 82:dc:a2:77:63:00:69:35:80:3e:9e:5c:5f:b5:51: fd:5b:c8:44:0f:c7:4e:97:87:8e:bf:b5:cb:ea:80: 63:86:b0:7c:ed:31:09:0f:1a:f2:e3:39:79:32:12: 82:b7:97:1b:69:34:3e:e2:e2:ca:21:e0:3f:e7:cd: 6e:f2:e6:3d:9d:f2:1a:a8:d7:9c:fb:36:02:34:c8: d6:f2:a3:b1:9b:01:ca:4f:ad:af:b8:ef:62:09:fd: f3:39:02:6b:66:d0:ab:23:25:7e:3b:17:70:a7:31: c4:64:26:03:d0:0f:23:e8:18:99:da:78:9b:4c:78: 5d:95:a8:9a:a5:45:74:c1:f2:2c:4e:0d:aa:f1:4b: a7:41:30:4a:7f:f0:c9:0b:46:e6:ea:d9:98:eb:f2: 6a:e6:70:50:02:f5:71:ef:61:db:73:e5:ca:e6:ce: 43:03:92:36:4f:01:1a:60:70:e6:e6:8f:ad:28:ab: 1c:29:67:aa:54:42:8b:ea:47:02:d1:f6:f7:66:98: 46:66:ee:39:38:0c:09:45:0f:4b:df:1a:04:76:73: 53:13:06:ee:d9:19:30:b5:f3:3d:74:39:72:a3:0f: b1:53:11:87:cf:b2:44:91:d8:a9:15:ec:5e:3d:70: 24:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DC:23:27:1A:8D:F1:41:F4:F0:59:5D:80:9B:DC:A4:44:A4:53:34 X509v3 Authority Key Identifier: keyid:58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/KtwjJxqN8UH08FldgJvcpESkUzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.191.69.0/24 91.191.80.0/22 Signature Algorithm: sha256WithRSAEncryption 03:b4:2c:13:d6:33:e2:99:fb:df:ff:d0:d8:76:16:11:b3:cd: 4c:c8:22:c1:42:ee:6b:b3:53:dd:8a:8c:2b:65:e6:bd:b2:c0: 3b:4e:d5:11:22:d9:c8:2e:b6:2d:3c:a6:72:92:37:f1:75:85: c0:59:89:f8:a3:e8:2b:3b:7e:bc:19:42:02:1c:39:57:34:8c: 0a:44:c5:e1:b8:34:f4:18:c1:38:70:05:bf:5c:74:fe:85:8e: 26:af:d1:02:85:83:46:65:74:a2:26:95:b4:00:a4:55:f3:83: bb:6f:d9:59:0b:52:57:5f:eb:15:fc:47:77:c0:c5:33:22:9e: 26:aa:8e:1a:a0:4e:fa:f2:c8:19:5d:f5:1d:74:6b:c9:6d:40: 77:56:c0:0a:66:13:99:e4:98:0e:9c:d9:23:d7:bf:0c:33:7d: 16:c5:24:f5:8b:89:a2:0f:49:4f:e8:2c:b0:a3:30:71:90:15: ba:d9:18:45:f9:59:68:f5:5f:a8:9c:3b:f8:32:99:29:bb:9c: 63:5f:9d:22:28:75:e1:e3:eb:09:e2:24:c2:b0:40:00:f9:97: 10:a1:04:d7:bc:6c:73:d2:c8:4d:01:e3:02:df:0e:f5:fc:0b: 9d:a9:4e:66:a2:49:e2:f0:c6:3d:0e:38:c0:c7:89:3a:0c:97: b1:73:5f:8c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gHHIAWY5Wy2DfowP7WxQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MmFjMzU4OWZjNTM5YWI4NTI2OTBmODVkOWYzZjdmMjM0 ZWMzOWIwHhcNMjYwMTAyMDIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWRjMjMyNzFhOGRmMTQxZjRmMDU5NWQ4MDliZGNhNDQ0YTQ1MzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC4CYjC75h37JTLDu8SC3KJ3YwBp NYA+nlxftVH9W8hED8dOl4eOv7XL6oBjhrB87TEJDxry4zl5MhKCt5cbaTQ+4uLK IeA/581u8uY9nfIaqNec+zYCNMjW8qOxmwHKT62vuO9iCf3zOQJrZtCrIyV+Oxdw pzHEZCYD0A8j6BiZ2nibTHhdlaiapUV0wfIsTg2q8UunQTBKf/DJC0bm6tmY6/Jq 5nBQAvVx72Hbc+XK5s5DA5I2TwEaYHDm5o+tKKscKWeqVEKL6kcC0fb3ZphGZu45 OAwJRQ9L3xoEdnNTEwbu2RkwtfM9dDlyow+xUxGHz7JEkdipFexePXAkFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCrcIycajfFB9PBZXYCb3KREpFM0MB8GA1UdIwQY MBaAFFgqw1ifxTmrhSaQ+F2fP38jTsObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0NyRFdKX0ZPYXVGSnBENFhaOF9meU5PdzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wMDE1ZDMtMWIyMS00ZTU1LTg1MGIt Njc0MzI4ZDUyYmQ3LzEvS3R3akp4cU44VUgwOEZsZGdKdmNwRVNrVXpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8wMDE1ZDMtMWIyMS00ZTU1LTg1MGItNjc0MzI4ZDUyYmQ3 LzEvV0NyRFdKX0ZPYXVGSnBENFhaOF9meU5PdzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW79FAwQC W79QMA0GCSqGSIb3DQEBCwUAA4IBAQADtCwT1jPimfvf/9DYdhYRs81MyCLBQu5r s1PdiowrZea9ssA7TtURItnILrYtPKZykjfxdYXAWYn4o+grO368GUICHDlXNIwK RMXhuDT0GME4cAW/XHT+hY4mr9EChYNGZXSiJpW0AKRV84O7b9lZC1JXX+sV/Ed3 wMUzIp4mqo4aoE768sgZXfUddGvJbUB3VsAKZhOZ5JgOnNkj178MM30WxST1i4mi D0lP6CywozBxkBW62RhF+Vlo9V+onDv4Mpkpu5xjX50iKHXh4+sJ4iTCsEAA+ZcQ oQTXvGxz0shNAeMC3w71/AudqU5mokni8MY9DjjAx4k6DJexc1+M -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:34 2026 by rpki-client