This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/KywvzoRGSfaFf4crg97cyBzKoQg.roa File: KywvzoRGSfaFf4crg97cyBzKoQg.roa (raw, json) Hash identifier: +zmajVZk3ZJyJBrTV2gOa41M7zLT4z26iJSomfXlFX0= Subject key identifier: 2B:2C:2F:CE:84:46:49:F6:85:7F:87:2B:83:DE:DC:C8:1C:CA:A1:08 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019B775886F67BABB22112E0B16A591F78FF Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/KywvzoRGSfaFf4crg97cyBzKoQg.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2200 IP address blocks: 81.194.0.0/16 maxlen: 16 193.48.0.0/14 maxlen: 14 193.48.80.0/24 maxlen: 24 193.48.81.0/24 maxlen: 24 193.48.91.0/24 maxlen: 24 193.48.101.0/24 maxlen: 24 193.48.104.0/24 maxlen: 24 193.48.106.0/24 maxlen: 24 193.48.179.0/24 maxlen: 24 193.49.96.0/24 maxlen: 24 193.51.56.0/24 maxlen: 24 193.52.0.0/16 maxlen: 16 193.52.0.0/24 maxlen: 24 193.52.1.0/24 maxlen: 24 193.52.68.0/24 maxlen: 24 193.52.216.0/24 maxlen: 24 193.52.217.0/24 maxlen: 24 193.54.0.0/15 maxlen: 15 193.54.67.0/24 maxlen: 24 193.54.149.0/24 maxlen: 24 194.57.0.0/16 maxlen: 16 194.57.138.0/24 maxlen: 24 194.57.176.0/24 maxlen: 24 194.57.177.0/24 maxlen: 24 194.57.215.0/24 maxlen: 24 194.57.216.0/24 maxlen: 24 194.167.0.0/16 maxlen: 16 194.167.41.0/24 maxlen: 24 194.167.190.0/24 maxlen: 24 194.199.0.0/16 maxlen: 16 194.214.0.0/16 maxlen: 16 194.254.0.0/16 maxlen: 16 194.254.139.0/24 maxlen: 24 195.83.0.0/16 maxlen: 16 195.83.163.0/24 maxlen: 24 195.83.164.0/24 maxlen: 24 195.83.165.0/24 maxlen: 24 195.83.225.0/24 maxlen: 24 195.83.226.0/24 maxlen: 24 195.98.224.0/19 maxlen: 19 195.220.0.0/16 maxlen: 16 195.221.0.0/16 maxlen: 16 195.221.234.0/24 maxlen: 24 195.221.235.0/24 maxlen: 24 2001:660::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:86:f6:7b:ab:b2:21:12:e0:b1:6a:59:1f:78:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b2c2fce844649f6857f872b83dedcc81ccaa108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:06:6b:de:76:8e:fe:bc:e5:38:3d:1c:0d:56: a2:7d:bb:34:e9:84:46:46:d7:43:78:7d:a4:14:e4: 6f:a0:4e:fc:23:75:b4:3b:23:f6:c0:36:a3:27:8b: 47:65:1b:18:9e:d6:48:49:00:30:46:73:38:f5:33: 09:de:74:36:fe:9a:c5:8b:63:32:a1:a9:0b:bf:1e: 8d:01:2c:76:f6:0e:e8:96:21:d0:7b:37:45:38:5a: 52:1a:7a:5d:17:4d:64:8d:cd:3a:27:1f:6b:6f:28: aa:98:86:53:c9:de:85:29:ed:94:db:93:d8:b6:f7: 6b:cc:d6:af:23:fa:1a:ae:5c:43:72:0b:be:ea:d6: b9:c8:de:45:b8:92:06:b4:08:61:9b:3f:a2:63:1d: 3d:12:8c:9f:be:53:ac:5e:1d:10:dc:ee:32:fb:3e: 8e:33:8f:89:3f:93:ab:06:64:42:23:8f:f1:67:90: 8b:4f:0a:1b:42:a1:95:b5:89:bb:6d:09:3f:15:e0: 5a:18:ae:d0:46:8a:d0:4e:68:9d:cc:35:40:b4:d8: 12:72:70:f3:6f:e8:99:85:de:57:8a:ce:f0:e3:fd: ec:6f:d3:6c:47:59:ed:08:64:9f:28:91:98:e6:55: b8:3f:c0:ae:3b:87:eb:4c:64:be:c2:7d:ee:52:a7: 2d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2C:2F:CE:84:46:49:F6:85:7F:87:2B:83:DE:DC:C8:1C:CA:A1:08 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/KywvzoRGSfaFf4crg97cyBzKoQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.194.0.0/16 193.48.0.0-193.52.255.255 193.54.0.0/15 194.57.0.0/16 194.167.0.0/16 194.199.0.0/16 194.214.0.0/16 194.254.0.0/16 195.83.0.0/16 195.98.224.0/19 195.220.0.0/15 IPv6: 2001:660::/32 Signature Algorithm: sha256WithRSAEncryption 7e:0b:80:e5:6e:26:c8:ef:40:cc:fb:21:a8:bf:81:89:c9:76: ea:76:1a:c1:34:c8:58:81:01:9e:1f:94:51:1e:05:0c:f7:62: 59:8f:0e:36:b1:27:65:43:33:bc:75:20:2b:af:5c:56:5c:77: 67:12:0c:01:c5:a8:e9:e2:cb:37:cc:c5:7b:33:8e:25:d1:97: 3b:d1:87:13:c8:35:3c:46:9d:17:fd:32:ac:86:8b:46:fe:fd: 35:1a:da:d8:c2:d5:b8:15:c6:2e:fe:11:09:68:de:b3:86:f1: ae:e1:bf:57:82:21:7a:f6:bf:be:e2:d5:66:4e:49:b4:ca:14: 89:2c:30:92:bd:f6:bc:17:9a:c4:f2:5c:4a:b3:15:51:01:8c: 30:bf:4f:ba:12:15:3f:07:0d:6b:e8:80:a5:f6:b9:7f:3d:e3: f3:89:df:15:59:ff:6b:3f:34:d8:a1:c8:3a:26:76:6a:4d:b6: 82:a4:1f:4c:db:e3:32:e1:9d:99:1c:6e:0f:41:20:77:f8:05: 46:b4:0a:05:21:6a:05:c1:b2:1e:36:16:5a:ed:5f:17:9d:56: 5e:d8:d5:00:19:4d:94:05:4b:29:af:c2:c5:0e:23:e3:96:fe: 18:e8:4a:12:3e:e6:df:c2:d4:f2:d1:16:32:26:19:63:d4:b7: 1c:92:19:e0 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt3WIb2e6uyIRLgsWpZH3j/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjJjMmZjZTg0NDY0OWY2ODU3Zjg3MmI4M2RlZGNjODFjY2FhMTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgZr3naO/rzlOD0cDVaifbs06YRG RtdDeH2kFORvoE78I3W0OyP2wDajJ4tHZRsYntZISQAwRnM49TMJ3nQ2/prFi2My oakLvx6NASx29g7oliHQezdFOFpSGnpdF01kjc06Jx9rbyiqmIZTyd6FKe2U25PY tvdrzNavI/oarlxDcgu+6ta5yN5FuJIGtAhhmz+iYx09EoyfvlOsXh0Q3O4y+z6O M4+JP5OrBmRCI4/xZ5CLTwobQqGVtYm7bQk/FeBaGK7QRorQTmidzDVAtNgScnDz b+iZhd5Xis7w4/3sb9NsR1ntCGSfKJGY5lW4P8CuO4frTGS+wn3uUqctkwIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFCssL86ERkn2hX+HK4Pe3MgcyqEIMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvS3l3dnpvUkdTZmFGZjRjcmc5N2N5QnpLb1FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBFBAIAATA/AwMAUcIwCgMD BMEwAwMAwTQDAwHBNgMDAMI5AwMAwqcDAwDCxwMDAMLWAwMAwv4DAwDDUwMEBcNi 4AMDAcPcMA0EAgACMAcDBQAgAQZgMA0GCSqGSIb3DQEBCwUAA4IBAQB+C4DlbibI 70DM+yGov4GJyXbqdhrBNMhYgQGeH5RRHgUM92JZjw42sSdlQzO8dSArr1xWXHdn EgwBxajp4ss3zMV7M44l0Zc70YcTyDU8Rp0X/TKshotG/v01GtrYwtW4FcYu/hEJ aN6zhvGu4b9XgiF69r++4tVmTkm0yhSJLDCSvfa8F5rE8lxKsxVRAYwwv0+6EhU/ Bw1r6ICl9rl/PePzid8VWf9rPzTYocg6JnZqTbaCpB9M2+My4Z2ZHG4PQSB3+AVG tAoFIWoFwbIeNhZa7V8XnVZe2NUAGU2UBUspr8LFDiPjlv4Y6EoSPubfwtTy0RYy Jhlj1Lcckhng -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:28 2026 by rpki-client