This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/KWrcvpROrYGOwG3-oqsXPNMfFDk.roa File: KWrcvpROrYGOwG3-oqsXPNMfFDk.roa (raw, json) Hash identifier: UFnDH1kBqyWioGuvQqX1adr28AYT6aanInwk+hkuyEE= Subject key identifier: 29:6A:DC:BE:94:4E:AD:81:8E:C0:6D:FE:A2:AB:17:3C:D3:1F:14:39 Certificate issuer: /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6 Certificate serial: 019B1C85BDE2C40E72439B60D0F1EC757868 Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/KWrcvpROrYGOwG3-oqsXPNMfFDk.roa Signing time: Sun 14 Dec 2025 11:01:25 +0000 ROA not before: Sun 14 Dec 2025 11:01:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50281 IP address blocks: 193.46.89.0/24 maxlen: 24 193.106.60.0/22 maxlen: 24 193.106.60.0/24 maxlen: 24 193.106.61.0/24 maxlen: 24 193.106.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:bd:e2:c4:0e:72:43:9b:60:d0:f1:ec:75:78:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6 Validity Not Before: Dec 14 11:01:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=296adcbe944ead818ec06dfea2ab173cd31f1439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:1c:62:50:16:85:55:e3:32:5d:81:bf:56: a4:11:98:65:f7:7d:94:cd:5d:99:c9:0c:63:bf:24: 4f:ea:a8:05:45:57:38:2b:3b:e7:0c:e1:bf:56:9b: c7:44:8a:05:e0:ca:37:59:2f:8c:a3:86:22:40:e1: 5e:e0:16:f7:22:82:16:e6:2c:10:72:de:55:cd:e4: 32:22:80:57:7d:41:eb:3b:2d:c9:f6:35:2f:be:f3: c0:2c:32:f7:04:78:16:9c:a7:cd:6b:8d:0c:a8:77: f7:61:df:3b:a1:a6:8c:07:bd:b5:e0:44:32:84:e2: 89:e5:f7:a3:97:62:40:52:9b:e6:38:c2:23:f1:91: 6f:35:f9:09:2f:0a:3d:27:d2:1c:c9:d7:a7:49:db: d8:aa:42:5c:ca:84:d0:77:97:83:a8:ff:26:ea:40: ca:70:5f:35:4e:a3:14:e9:91:bf:c7:f8:be:8b:74: fe:16:8c:9c:35:df:01:86:74:af:bb:7e:d0:52:79: 69:2a:a4:d5:a7:69:7c:b4:d5:0e:b3:1e:73:8a:8f: b5:a9:ee:cb:c2:87:5a:54:fe:99:d7:88:d3:78:8d: 66:f3:df:d5:15:f8:ed:ee:b0:6e:78:98:4f:f1:fc: eb:db:b2:16:68:f4:ba:6f:15:75:e6:eb:11:0f:54: 5e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6A:DC:BE:94:4E:AD:81:8E:C0:6D:FE:A2:AB:17:3C:D3:1F:14:39 X509v3 Authority Key Identifier: keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/KWrcvpROrYGOwG3-oqsXPNMfFDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.89.0/24 193.106.60.0/22 Signature Algorithm: sha256WithRSAEncryption 33:6d:10:28:61:67:40:3b:32:eb:7c:a2:fe:10:a5:60:81:33: b1:b9:cb:28:e0:75:18:ce:23:0c:b1:82:9d:96:3c:76:3b:6e: 43:7b:c9:af:c1:38:24:db:08:3e:b5:d4:07:bd:11:db:62:58: 86:76:a1:08:44:d5:40:f5:ce:11:ef:0f:10:06:71:68:87:ea: 94:78:12:b3:a1:e5:a4:ba:95:85:78:f3:0d:1c:1d:74:27:5d: c8:36:54:bb:e3:9c:1b:23:62:42:02:b5:4b:3f:36:91:d1:b8: f2:b9:7f:d4:04:39:05:eb:a9:16:1c:f1:92:c3:ba:38:6e:1b: 6b:6f:b7:a2:ff:f4:d2:2e:4a:82:b2:44:fa:db:12:b9:df:fb: cc:84:e3:68:38:da:cd:07:9b:13:b5:cf:d4:bb:33:3a:63:1f: 96:90:83:a7:e8:3e:a2:db:64:e4:51:4e:99:50:2d:1e:54:39: 57:ab:23:23:66:45:34:df:8f:25:e6:a0:85:87:e1:86:ac:4d: 08:d1:42:fd:c3:c5:89:79:33:b0:76:59:ea:8f:70:c6:df:e0: 53:c2:88:32:21:86:31:ce:60:a0:45:be:77:ac:18:72:17:32: 0e:48:78:58:bc:e0:f5:71:d0:8a:6e:87:da:45:0b:48:4d:a7: c9:59:5b:5a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZschb3ixA5yQ5tg0PHsdXhoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMmJjYzEwZDE2YjBmZWQyODU1ZTkyOTVmYzQwOWQ2NTA3 YjQzZDYwHhcNMjUxMjE0MTEwMTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTZhZGNiZTk0NGVhZDgxOGVjMDZkZmVhMmFiMTczY2QzMWYxNDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHQcYlAWhVXjMl2Bv1akEZhl932U zV2ZyQxjvyRP6qgFRVc4KzvnDOG/VpvHRIoF4Mo3WS+Mo4YiQOFe4Bb3IoIW5iwQ ct5VzeQyIoBXfUHrOy3J9jUvvvPALDL3BHgWnKfNa40MqHf3Yd87oaaMB7214EQy hOKJ5fejl2JAUpvmOMIj8ZFvNfkJLwo9J9IcydenSdvYqkJcyoTQd5eDqP8m6kDK cF81TqMU6ZG/x/i+i3T+FoycNd8BhnSvu37QUnlpKqTVp2l8tNUOsx5zio+1qe7L wodaVP6Z14jTeI1m89/VFfjt7rBueJhP8fzr27IWaPS6bxV15usRD1ReIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFClq3L6UTq2BjsBt/qKrFzzTHxQ5MB8GA1UdIwQY MBaAFM4rzBDRaw/tKFXpKV/ECdZQe0PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveml2TUVORnJELTBvVmVrcFg4UUoxbEI3UTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjc1N2MtNDk5ZC00MDIwLWE1YzMt NjExNjFhNjVkM2Q2LzEvS1dyY3ZwUk9yWUdPd0czLW9xc1hQTk1mRkRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kZjc1N2MtNDk5ZC00MDIwLWE1YzMtNjExNjFhNjVkM2Q2 LzEveml2TUVORnJELTBvVmVrcFg4UUoxbEI3UTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwS5ZAwQC wWo8MA0GCSqGSIb3DQEBCwUAA4IBAQAzbRAoYWdAOzLrfKL+EKVggTOxucso4HUY ziMMsYKdljx2O25De8mvwTgk2wg+tdQHvRHbYliGdqEIRNVA9c4R7w8QBnFoh+qU eBKzoeWkupWFePMNHB10J13INlS745wbI2JCArVLPzaR0bjyuX/UBDkF66kWHPGS w7o4bhtrb7ei//TSLkqCskT62xK53/vMhONoONrNB5sTtc/UuzM6Yx+WkIOn6D6i 22TkUU6ZUC0eVDlXqyMjZkU0348l5qCFh+GGrE0I0UL9w8WJeTOwdlnqj3DG3+BT wogyIYYxzmCgRb53rBhyFzIOSHhYvOD1cdCKbofaRQtITafJWVta -----END CERTIFICATE-----Generated at Wed Dec 17 18:07:10 2025 by rpki-client