This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KZ7bDRNwTfIEQWY_jhARUR9DHxI.roa File: KZ7bDRNwTfIEQWY_jhARUR9DHxI.roa (raw, json) Hash identifier: eyE+qcEsEBDUoKEFoqctNchUZLkDzCl+DcFXWEI/yFY= Subject key identifier: 29:9E:DB:0D:13:70:4D:F2:04:41:66:3F:8E:10:11:51:1F:43:1F:12 Certificate issuer: /CN=2b003e583bdb2511ff57ab7a32fce741334b343b Certificate serial: 019B76EB8C5F11A28EAC79C2891CB6653AD8 Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KZ7bDRNwTfIEQWY_jhARUR9DHxI.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200989 IP address blocks: 185.83.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8c:5f:11:a2:8e:ac:79:c2:89:1c:b6:65:3a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=299edb0d13704df20441663f8e1011511f431f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:fc:c4:4f:7b:c8:60:b1:65:5e:68:77:45: d0:53:c2:b2:9e:3a:b5:51:74:07:04:1c:bf:80:9e: d1:6a:bf:3f:de:7f:d7:2b:1f:8c:25:76:7d:7a:ff: d9:5e:30:f3:33:d0:b1:3d:a1:3c:3b:57:73:c9:45: 8a:ca:08:95:b2:82:84:72:9d:84:e7:4e:4d:eb:95: f7:4d:5d:25:f6:22:5a:df:32:6f:ba:8c:68:fb:a4: 92:de:8f:c1:00:5a:f4:bc:eb:08:e1:3e:c0:4d:a5: 2e:ff:39:0e:06:24:ee:bd:b0:4d:cd:38:e8:b7:e5: cf:6a:02:fc:e7:77:55:a6:39:94:b9:c8:96:02:91: 34:6e:1c:1c:3e:54:1a:b5:34:9c:41:55:f2:44:b0: 5c:d2:d8:ce:f1:2d:c6:90:92:14:d4:8b:08:fe:41: 32:5a:bf:3e:c8:8b:88:4d:e8:75:1a:e9:fb:90:73: 40:f2:a7:f0:43:2f:3f:d8:f9:ee:da:ec:9c:d9:ae: 37:99:57:71:cf:61:89:9d:ba:08:55:2b:4f:1c:11: 7f:fc:db:40:20:a8:57:43:b8:1b:0d:78:d7:42:cb: 10:23:9c:b6:93:07:76:62:45:9e:ea:b3:77:bf:2b: d8:91:a0:63:5d:f2:27:0a:aa:99:6f:02:63:0d:85: 2b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9E:DB:0D:13:70:4D:F2:04:41:66:3F:8E:10:11:51:1F:43:1F:12 X509v3 Authority Key Identifier: keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KZ7bDRNwTfIEQWY_jhARUR9DHxI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.5.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:28:0b:ed:81:a7:ef:b3:70:fa:f5:d7:4a:8f:05:7a:c2:8a: 11:82:04:82:aa:15:5a:9c:9f:92:b5:4f:8e:1d:57:ba:ff:b8: 28:e3:8b:0d:e3:04:47:73:48:bf:ea:bd:b1:67:22:dd:20:b5: fd:22:35:9d:ae:f6:cf:bc:c2:69:41:8f:61:bb:74:d6:2f:8a: 88:dc:d6:b8:b2:b0:c8:f3:a8:2e:3d:54:d9:c1:47:90:43:8e: af:f6:5e:a0:e4:83:3d:ae:e1:ba:31:e3:07:a3:4c:9d:db:f3: b6:73:c6:29:7b:fc:61:63:2c:73:03:de:73:b0:ac:4a:37:26: 66:87:71:29:b1:e5:b9:ae:e0:98:8f:8c:3c:17:c9:2e:40:1c: 7f:bf:8c:52:0d:e5:c5:f0:b6:dc:3c:d9:3a:22:80:be:cc:1a: 8a:23:71:da:8e:3e:8c:6b:d2:93:2e:03:4c:9e:ea:12:7a:a6: e5:39:8e:d9:8c:9a:08:1e:eb:fe:39:a2:5e:6f:0d:67:b2:59: 00:52:d9:dd:d8:92:e6:db:25:79:7e:01:48:45:73:fe:ca:ce: 94:47:ca:d4:5d:ce:42:2b:cb:41:ab:78:19:06:06:9d:e6:2c: 33:ed:60:53:ed:dc:dd:b0:3e:13:42:1a:35:df:86:a6:64:e5: 1f:7a:4a:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264xfEaKOrHnCiRy2ZTrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMDAzZTU4M2JkYjI1MTFmZjU3YWI3YTMyZmNlNzQxMzM0 YjM0M2IwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTllZGIwZDEzNzA0ZGYyMDQ0MTY2M2Y4ZTEwMTE1MTFmNDMxZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyL8xE97yGCxZV5od0XQU8Kynjq1 UXQHBBy/gJ7Rar8/3n/XKx+MJXZ9ev/ZXjDzM9CxPaE8O1dzyUWKygiVsoKEcp2E 505N65X3TV0l9iJa3zJvuoxo+6SS3o/BAFr0vOsI4T7ATaUu/zkOBiTuvbBNzTjo t+XPagL853dVpjmUuciWApE0bhwcPlQatTScQVXyRLBc0tjO8S3GkJIU1IsI/kEy Wr8+yIuITeh1Gun7kHNA8qfwQy8/2Pnu2uyc2a43mVdxz2GJnboIVStPHBF//NtA IKhXQ7gbDXjXQssQI5y2kwd2YkWe6rN3vyvYkaBjXfInCqqZbwJjDYUrmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCme2w0TcE3yBEFmP44QEVEfQx8SMB8GA1UdIwQY MBaAFCsAPlg72yUR/1erejL850EzSzQ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3dBLVdEdmJKUkhfVjZ0Nk12em5RVE5MTkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8xOTRmMjItODY4OS00ZmRiLTljNDEt MDU4YmJmOWQ1ZTI3LzEvS1o3YkRSTndUZklFUVdZX2poQVJVUjlESHhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8xOTRmMjItODY4OS00ZmRiLTljNDEtMDU4YmJmOWQ1ZTI3 LzEvS3dBLVdEdmJKUkhfVjZ0Nk12em5RVE5MTkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVMFMA0G CSqGSIb3DQEBCwUAA4IBAQCKKAvtgafvs3D69ddKjwV6wooRggSCqhVanJ+StU+O HVe6/7go44sN4wRHc0i/6r2xZyLdILX9IjWdrvbPvMJpQY9hu3TWL4qI3Na4srDI 86guPVTZwUeQQ46v9l6g5IM9ruG6MeMHo0yd2/O2c8Ype/xhYyxzA95zsKxKNyZm h3EpseW5ruCYj4w8F8kuQBx/v4xSDeXF8LbcPNk6IoC+zBqKI3Hajj6Ma9KTLgNM nuoSeqblOY7ZjJoIHuv+OaJebw1nslkAUtnd2JLm2yV5fgFIRXP+ys6UR8rUXc5C K8tBq3gZBgad5iwz7WBT7dzdsD4TQho134amZOUfekp6 -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:37 2026 by rpki-client