This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/kwKu8WNUJnczIU2a8LGFs7eArbM.roa File: kwKu8WNUJnczIU2a8LGFs7eArbM.roa (raw, json) Hash identifier: /1PW3txYeFmXRrusDGuyAEUwB+Whf+R1pF8Y6q4zLbw= Subject key identifier: 93:02:AE:F1:63:54:26:77:33:21:4D:9A:F0:B1:85:B3:B7:80:AD:B3 Certificate issuer: /CN=e857fab761632db3be781a5b9b48557089efd950 Certificate serial: 019AC1537BBE6EAC41EB2E0D8475A34FE3F2 Authority key identifier: E8:57:FA:B7:61:63:2D:B3:BE:78:1A:5B:9B:48:55:70:89:EF:D9:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ff6t2FjLbO-eBpbm0hVcInv2VA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/kwKu8WNUJnczIU2a8LGFs7eArbM.roa Signing time: Wed 26 Nov 2025 18:01:05 +0000 ROA not before: Wed 26 Nov 2025 18:01:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35629 IP address blocks: 185.133.228.0/24 maxlen: 24 185.133.229.0/24 maxlen: 24 185.133.230.0/24 maxlen: 24 185.133.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.mft rsync://rpki.ripe.net/repository/DEFAULT/6Ff6t2FjLbO-eBpbm0hVcInv2VA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:53:7b:be:6e:ac:41:eb:2e:0d:84:75:a3:4f:e3:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e857fab761632db3be781a5b9b48557089efd950 Validity Not Before: Nov 26 18:01:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9302aef16354267733214d9af0b185b3b780adb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:54:3d:2b:63:1d:5a:d0:1c:82:33:cb:69:d4: 76:c6:b2:d0:28:37:fa:71:b1:df:d5:84:4c:67:17: a0:1a:f9:57:a5:4e:f5:eb:c5:32:da:7c:3d:cd:82: 75:8c:72:1d:ef:b9:83:7e:53:80:7f:bf:2d:c7:99: df:2c:24:03:36:a2:69:ca:08:21:68:7c:ae:e3:eb: 85:5a:9f:b9:d1:1e:f6:5e:fb:11:7b:d7:00:31:4b: af:35:5e:07:5a:63:f0:5f:41:12:01:f8:9a:47:d2: 84:6e:68:10:51:83:ce:ab:a0:b8:f1:62:ac:6a:d6: 07:06:31:fc:eb:4d:dd:87:1d:89:eb:a2:8e:11:f6: 4b:5e:d4:17:7b:71:1e:8c:d8:58:41:3f:59:c1:67: de:83:e2:e7:13:0c:2d:55:f8:dd:37:e1:1c:45:cd: 92:24:a6:0e:56:0e:39:9b:cf:54:9c:cb:c0:d2:7d: f3:41:3d:a7:5b:39:c9:e1:4e:7a:56:e4:7b:ad:08: 1d:e1:80:de:aa:cd:3d:b9:49:4d:06:43:0d:6a:32: e9:53:f2:36:81:1f:ba:3c:cf:1d:c8:7b:e8:d9:75: 71:14:82:e6:38:79:66:ee:22:a9:85:ea:09:ba:b6: 51:c8:c7:7b:a9:0e:82:6a:e9:47:cd:94:b9:24:f5: 1f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:02:AE:F1:63:54:26:77:33:21:4D:9A:F0:B1:85:B3:B7:80:AD:B3 X509v3 Authority Key Identifier: keyid:E8:57:FA:B7:61:63:2D:B3:BE:78:1A:5B:9B:48:55:70:89:EF:D9:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ff6t2FjLbO-eBpbm0hVcInv2VA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/kwKu8WNUJnczIU2a8LGFs7eArbM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.228.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:6a:d7:87:1e:df:6e:7a:ab:9d:2f:2e:63:bd:dc:6a:7c:3d: 10:b2:87:dd:4c:34:fb:8f:af:4b:59:fc:8b:54:d3:6d:de:97: 73:25:c0:f1:c5:7c:1f:59:34:4f:a0:1b:37:b5:29:1a:2f:77: 72:d9:e4:ff:1a:a6:a3:3e:9d:e3:0d:4e:98:e5:9a:a1:c8:8d: 0e:dc:f4:ac:1a:60:ef:73:19:ed:69:d9:99:71:5c:35:ad:cc: b0:40:56:24:a4:35:b2:67:56:ca:53:a9:a8:05:42:e8:d1:07: e1:ac:e2:d4:de:67:06:30:dd:94:99:53:0e:1b:5b:b8:bf:65: f0:03:66:2d:35:69:d6:b8:ae:6b:2c:96:e2:d4:20:e6:a4:08: 0b:22:9a:a6:78:c6:85:9b:6b:d6:38:2a:b5:7a:3b:3d:6e:b7: d8:49:09:7c:3a:c7:49:d5:f9:3b:38:27:8e:60:a4:4b:18:41: 3a:74:25:4f:93:e2:69:0f:14:b7:67:2c:43:66:7d:f4:9d:28: fb:ff:7a:ad:67:35:11:89:d6:27:08:d2:98:98:fe:c9:25:50: 2f:b5:77:49:d5:13:f8:e8:09:95:11:2f:85:71:f7:b9:42:14: 12:15:e9:54:5f:fe:ee:16:79:96:78:ab:88:26:e0:b5:8d:30: d0:24:6a:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrBU3u+bqxB6y4NhHWjT+PyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NTdmYWI3NjE2MzJkYjNiZTc4MWE1YjliNDg1NTcwODll ZmQ5NTAwHhcNMjUxMTI2MTgwMTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzAyYWVmMTYzNTQyNjc3MzMyMTRkOWFmMGIxODViM2I3ODBhZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FQ9K2MdWtAcgjPLadR2xrLQKDf6 cbHf1YRMZxegGvlXpU7168Uy2nw9zYJ1jHId77mDflOAf78tx5nfLCQDNqJpyggh aHyu4+uFWp+50R72XvsRe9cAMUuvNV4HWmPwX0ESAfiaR9KEbmgQUYPOq6C48WKs atYHBjH8603dhx2J66KOEfZLXtQXe3EejNhYQT9ZwWfeg+LnEwwtVfjdN+EcRc2S JKYOVg45m89UnMvA0n3zQT2nWznJ4U56VuR7rQgd4YDeqs09uUlNBkMNajLpU/I2 gR+6PM8dyHvo2XVxFILmOHlm7iKpheoJurZRyMd7qQ6CaulHzZS5JPUf3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJMCrvFjVCZ3MyFNmvCxhbO3gK2zMB8GA1UdIwQY MBaAFOhX+rdhYy2zvngaW5tIVXCJ79lQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkZmNnQyRmpMYk8tZUJwYm0waFZjSW52MlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iMDgxZTMtODA5Ni00MzE4LWJlZGEt ODI1NTI2ZDYwN2M3LzEva3dLdThXTlVKbmN6SVUyYThMR0ZzN2VBcmJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iMDgxZTMtODA5Ni00MzE4LWJlZGEtODI1NTI2ZDYwN2M3 LzEvNkZmNnQyRmpMYk8tZUJwYm0waFZjSW52MlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYXkMA0G CSqGSIb3DQEBCwUAA4IBAQALateHHt9uequdLy5jvdxqfD0QsofdTDT7j69LWfyL VNNt3pdzJcDxxXwfWTRPoBs3tSkaL3dy2eT/GqajPp3jDU6Y5ZqhyI0O3PSsGmDv cxntadmZcVw1rcywQFYkpDWyZ1bKU6moBULo0QfhrOLU3mcGMN2UmVMOG1u4v2Xw A2YtNWnWuK5rLJbi1CDmpAgLIpqmeMaFm2vWOCq1ejs9brfYSQl8OsdJ1fk7OCeO YKRLGEE6dCVPk+JpDxS3ZyxDZn30nSj7/3qtZzURidYnCNKYmP7JJVAvtXdJ1RP4 6AmVES+Fcfe5QhQSFelUX/7uFnmWeKuIJuC1jTDQJGpe -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:06 2025 by rpki-client