This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/KawQKerRnLSg-9MXoEcrOwPs9wU.roa File: KawQKerRnLSg-9MXoEcrOwPs9wU.roa (raw, json) Hash identifier: +E6KZIQ7SLUeT0O5kNeYWz0qH5MPXHCRadja6mwXsbU= Subject key identifier: 29:AC:10:29:EA:D1:9C:B4:A0:FB:D3:17:A0:47:2B:3B:03:EC:F7:05 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78348E2E753B58D2E26F71C91A2675F3 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/KawQKerRnLSg-9MXoEcrOwPs9wU.roa Signing time: Thu 01 Jan 2026 06:17:48 +0000 ROA not before: Thu 01 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209437 IP address blocks: 192.71.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8e:2e:75:3b:58:d2:e2:6f:71:c9:1a:26:75:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29ac1029ead19cb4a0fbd317a0472b3b03ecf705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bb:e9:09:3c:c4:df:5f:8b:c9:27:f4:d9:26: f0:67:68:20:2a:01:76:30:46:42:37:87:aa:28:1e: 87:36:f1:d5:63:18:8e:49:c6:aa:57:34:ec:e7:e5: 68:7f:25:ce:74:f6:e3:71:91:93:dd:20:60:d3:93: 55:b1:d0:f6:6c:88:b6:8e:3f:dc:b3:31:66:86:b6: 97:54:47:23:86:66:cb:1c:81:58:46:62:ab:d0:c1: 0c:69:d5:a8:a2:dd:1b:2f:cb:ce:03:5c:31:00:84: 2d:c6:c3:f4:a8:25:4b:f0:22:9f:39:ac:cb:a8:ca: e7:8a:57:32:89:02:ac:83:db:21:3c:41:4d:db:33: 13:4c:50:90:1c:ef:80:65:4c:90:3c:5a:62:7f:9d: b6:33:08:41:58:f4:53:38:57:52:d8:e0:5b:5d:eb: b6:fd:17:4b:20:1c:64:f9:34:57:04:56:6b:01:03: ab:31:29:06:88:30:7b:91:19:49:03:01:22:2e:86: bf:21:6a:d6:20:b4:6c:e6:e2:cb:5f:8c:93:71:79: 27:d5:37:70:46:bf:89:f5:79:09:38:fa:50:d8:2a: 7c:81:2a:fc:a2:80:bf:76:3e:aa:6b:bf:05:ce:1b: e8:af:ab:41:3b:c7:54:dc:33:7b:88:e6:cc:e7:78: d4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AC:10:29:EA:D1:9C:B4:A0:FB:D3:17:A0:47:2B:3B:03:EC:F7:05 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/KawQKerRnLSg-9MXoEcrOwPs9wU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.71.184.0/24 Signature Algorithm: sha256WithRSAEncryption c3:15:cf:7b:2e:5e:f0:6c:1d:5c:31:e1:d9:d0:17:9a:93:61: 5f:dd:d6:1b:ed:5f:7e:28:5e:78:e1:f8:d1:80:67:28:41:e9: 55:6a:1d:e2:ac:3e:8a:4d:e4:e1:9f:e7:f6:4e:aa:7f:0d:62: d9:c4:5d:e4:8d:e2:c5:20:4d:07:cc:b7:6b:9e:ad:74:8a:91: 3e:2a:dd:a3:df:51:51:7b:b8:5a:1b:55:0c:af:12:f9:32:19: 72:d2:6c:68:33:d4:07:5e:1a:07:d4:7d:b4:54:f5:11:10:11: 9e:75:08:95:4a:b7:5a:bc:54:e9:cf:21:1b:63:5f:96:6b:79: a0:61:64:56:99:08:9e:de:4f:2d:01:cc:3f:c9:6f:4c:a3:5b: 0f:72:87:f0:ed:f5:f3:04:d3:30:71:a8:73:56:71:0d:48:64: 29:6d:d7:d8:5b:8c:ed:02:1a:d6:12:0c:df:1c:2b:8a:2f:5f: b6:c5:c6:cf:ec:dc:b7:33:e3:c2:22:c6:a0:62:dc:e4:98:66: 8d:01:f9:4d:c1:f7:38:13:2c:0b:65:4e:b9:8f:93:93:ee:ba: 83:53:3f:58:40:7d:da:32:58:5f:35:80:dc:3b:28:0c:2a:27: d5:78:80:ca:78:70:a3:e0:9c:a1:df:19:b2:63:92:97:d6:74: 08:ff:b0:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NI4udTtY0uJvcckaJnXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWFjMTAyOWVhZDE5Y2I0YTBmYmQzMTdhMDQ3MmIzYjAzZWNmNzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7vpCTzE31+LySf02SbwZ2ggKgF2 MEZCN4eqKB6HNvHVYxiOScaqVzTs5+VofyXOdPbjcZGT3SBg05NVsdD2bIi2jj/c szFmhraXVEcjhmbLHIFYRmKr0MEMadWoot0bL8vOA1wxAIQtxsP0qCVL8CKfOazL qMrnilcyiQKsg9shPEFN2zMTTFCQHO+AZUyQPFpif522MwhBWPRTOFdS2OBbXeu2 /RdLIBxk+TRXBFZrAQOrMSkGiDB7kRlJAwEiLoa/IWrWILRs5uLLX4yTcXkn1Tdw Rr+J9XkJOPpQ2Cp8gSr8ooC/dj6qa78Fzhvor6tBO8dU3DN7iObM53jUuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCmsECnq0Zy0oPvTF6BHKzsD7PcFMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvS2F3UUtlclJuTFNnLTlNWG9FY3JPd1BzOXdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEe4MA0G CSqGSIb3DQEBCwUAA4IBAQDDFc97Ll7wbB1cMeHZ0Beak2Ff3dYb7V9+KF544fjR gGcoQelVah3irD6KTeThn+f2Tqp/DWLZxF3kjeLFIE0HzLdrnq10ipE+Kt2j31FR e7haG1UMrxL5Mhly0mxoM9QHXhoH1H20VPUREBGedQiVSrdavFTpzyEbY1+Wa3mg YWRWmQie3k8tAcw/yW9Mo1sPcofw7fXzBNMwcahzVnENSGQpbdfYW4ztAhrWEgzf HCuKL1+2xcbP7Ny3M+PCIsagYtzkmGaNAflNwfc4EywLZU65j5OT7rqDUz9YQH3a MlhfNYDcOygMKifVeIDKeHCj4Jyh3xmyY5KX1nQI/7Bp -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:03 2026 by rpki-client