This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/KwvgmxkuN2Vb_g5rfP-r60wn56s.roa File: KwvgmxkuN2Vb_g5rfP-r60wn56s.roa (raw, json) Hash identifier: pRgKb7xCV6ebEVi6C792sZZDSzLwlu0u5goqcmXhzF8= Subject key identifier: 2B:0B:E0:9B:19:2E:37:65:5B:FE:0E:6B:7C:FF:AB:EB:4C:27:E7:AB Certificate issuer: /CN=df512010611f91b16296728a94d1a665b4ab7570 Certificate serial: 019B7AC7A159800BDA14A971BE7353C54E09 Authority key identifier: DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/KwvgmxkuN2Vb_g5rfP-r60wn56s.roa Signing time: Thu 01 Jan 2026 18:17:41 +0000 ROA not before: Thu 01 Jan 2026 18:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24961 IP address blocks: 91.194.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a1:59:80:0b:da:14:a9:71:be:73:53:c5:4e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df512010611f91b16296728a94d1a665b4ab7570 Validity Not Before: Jan 1 18:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b0be09b192e37655bfe0e6b7cffabeb4c27e7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:c2:64:2c:fd:fc:e3:43:f9:96:0f:49:6c: c4:36:46:bb:ae:7e:1c:20:04:50:d5:89:57:f1:20: 44:b2:86:d2:7a:d9:1b:6d:8c:d1:c2:a8:ea:17:96: eb:a1:78:24:98:85:9f:5f:c8:1c:e1:a6:e7:fd:f9: 4f:2b:64:19:6c:80:00:81:19:52:82:75:ba:e6:ba: f4:6b:61:f0:d0:06:15:27:73:fa:54:74:e4:02:08: 63:40:b7:54:28:80:e3:af:ae:bc:6b:e9:dc:60:f4: ae:38:26:ac:5a:3c:23:d7:57:ba:39:b6:b5:f0:5f: b8:24:f8:83:28:d4:01:c3:ca:83:f5:75:04:38:bb: fc:d2:74:ac:7d:d0:fe:f2:f1:a9:c1:16:42:be:14: 80:b6:e0:37:e7:dd:1e:c9:8e:5e:39:d8:47:33:ac: 32:8c:69:34:84:45:b5:c8:89:3b:cf:b8:6c:31:ed: 15:b9:14:54:5c:c2:bb:d8:b2:ff:6c:e5:9c:ed:36: ca:ca:1a:e5:5b:cf:f3:5c:05:8e:ad:3a:84:47:d6: 42:a4:77:6c:44:4b:f2:ff:1c:1d:a5:b7:26:d3:50: ab:03:87:4a:bd:d3:14:66:ab:c9:11:92:27:da:34: ba:84:b0:05:3a:7c:5b:5c:45:fe:64:c3:5b:a9:23: 39:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0B:E0:9B:19:2E:37:65:5B:FE:0E:6B:7C:FF:AB:EB:4C:27:E7:AB X509v3 Authority Key Identifier: keyid:DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/KwvgmxkuN2Vb_g5rfP-r60wn56s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.85.0/24 Signature Algorithm: sha256WithRSAEncryption 10:e4:72:ef:04:37:65:0d:5e:c5:9f:06:bf:98:06:4f:da:82: 29:b6:c8:36:e3:bc:ce:bf:8b:f4:7d:d7:9e:46:32:a0:a9:f2: f2:4b:03:1e:b3:7f:10:c7:15:5d:61:91:98:35:be:57:6b:c6: f0:7a:33:37:7c:8e:2e:c2:28:9d:11:11:09:30:9b:e7:ad:a9: ec:d6:18:50:19:b3:c7:a9:bd:c0:37:32:c3:ea:19:8f:d6:69: c9:da:ad:0c:8f:14:f7:13:b9:9c:cd:40:56:14:35:01:b1:b6: c3:8f:73:f2:b6:c9:93:98:11:4d:22:33:ec:d0:32:e3:67:23: fd:e6:0c:cc:9f:4c:18:2f:df:41:9c:35:f3:53:05:30:6a:d9: 52:d2:10:7e:60:99:63:f9:48:65:7d:3d:96:6c:c4:e7:47:e9: e5:5a:5a:8a:5c:be:a5:7b:cd:23:b0:ca:47:86:60:41:e6:e7: 41:9f:d4:4d:29:6b:11:89:66:7f:90:25:77:6f:90:c3:e4:d2: 11:cb:3d:03:14:ce:45:5e:ec:f2:34:e6:43:d9:fa:9b:01:a6: dc:2b:65:b1:2d:66:8b:b0:a2:12:e2:53:c1:e6:eb:8f:93:c0: 4c:27:51:ac:19:2a:18:33:ee:6c:a6:3d:09:d1:0e:68:dd:fc: e9:1d:1b:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6FZgAvaFKlxvnNTxU4JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNTEyMDEwNjExZjkxYjE2Mjk2NzI4YTk0ZDFhNjY1YjRh Yjc1NzAwHhcNMjYwMTAxMTgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjBiZTA5YjE5MmUzNzY1NWJmZTBlNmI3Y2ZmYWJlYjRjMjdlN2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6HCZCz9/OND+ZYPSWzENka7rn4c IARQ1YlX8SBEsobSetkbbYzRwqjqF5broXgkmIWfX8gc4abn/flPK2QZbIAAgRlS gnW65rr0a2Hw0AYVJ3P6VHTkAghjQLdUKIDjr668a+ncYPSuOCasWjwj11e6Oba1 8F+4JPiDKNQBw8qD9XUEOLv80nSsfdD+8vGpwRZCvhSAtuA3590eyY5eOdhHM6wy jGk0hEW1yIk7z7hsMe0VuRRUXMK72LL/bOWc7TbKyhrlW8/zXAWOrTqER9ZCpHds REvy/xwdpbcm01CrA4dKvdMUZqvJEZIn2jS6hLAFOnxbXEX+ZMNbqSM5JQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCsL4JsZLjdlW/4Oa3z/q+tMJ+erMB8GA1UdIwQY MBaAFN9RIBBhH5GxYpZyipTRpmW0q3VwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWIt YjA2MmU5NzI1YjFkLzEvS3d2Z214a3VOMlZiX2c1cmZQLXI2MHduNTZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWItYjA2MmU5NzI1YjFk LzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8JVMA0G CSqGSIb3DQEBCwUAA4IBAQAQ5HLvBDdlDV7Fnwa/mAZP2oIptsg247zOv4v0fdee RjKgqfLySwMes38QxxVdYZGYNb5Xa8bwejM3fI4uwiidEREJMJvnrans1hhQGbPH qb3ANzLD6hmP1mnJ2q0MjxT3E7mczUBWFDUBsbbDj3PytsmTmBFNIjPs0DLjZyP9 5gzMn0wYL99BnDXzUwUwatlS0hB+YJlj+UhlfT2WbMTnR+nlWlqKXL6le80jsMpH hmBB5udBn9RNKWsRiWZ/kCV3b5DD5NIRyz0DFM5FXuzyNOZD2fqbAabcK2WxLWaL sKIS4lPB5uuPk8BMJ1GsGSoYM+5spj0J0Q5o3fzpHRvi -----END CERTIFICATE-----Generated at Sun Jan 25 10:19:55 2026 by rpki-client