This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/kuWO3UDifrZzCfC3CKNLSU2oGZ0.roa File: kuWO3UDifrZzCfC3CKNLSU2oGZ0.roa (raw, json) Hash identifier: woEwD4aK5vmEAsvtUFsMtH0Vvs264WAeMxmjqmjfCh0= Subject key identifier: 92:E5:8E:DD:40:E2:7E:B6:73:09:F0:B7:08:A3:4B:49:4D:A8:19:9D Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661 Certificate serial: 019C4363B3414CF4B6BB04DA0FBB2BC7894A Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/kuWO3UDifrZzCfC3CKNLSU2oGZ0.roa Signing time: Mon 09 Feb 2026 17:12:13 +0000 ROA not before: Mon 09 Feb 2026 17:12:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56400 IP address blocks: 91.225.160.0/22 maxlen: 22 91.225.160.0/23 maxlen: 23 91.225.160.0/24 maxlen: 24 91.225.161.0/24 maxlen: 24 91.225.162.0/23 maxlen: 23 91.225.162.0/24 maxlen: 24 91.225.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:63:b3:41:4c:f4:b6:bb:04:da:0f:bb:2b:c7:89:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661 Validity Not Before: Feb 9 17:12:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92e58edd40e27eb67309f0b708a34b494da8199d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:56:ac:78:aa:29:43:5f:ab:46:8b:c2:83:2c: a3:9c:67:64:90:e0:45:de:65:d5:1c:ed:6a:47:57: da:a9:3b:79:7f:57:6b:1c:fa:86:7b:b8:fe:9e:e2: 28:ed:6f:b1:64:2f:ec:9e:fb:c5:f6:f6:ce:6c:16: 34:7a:7b:b0:b2:e7:36:f7:32:fd:70:10:dc:96:ff: 0e:51:ec:eb:b4:8e:a6:79:03:f2:41:34:dc:0a:90: 36:f9:0e:bd:a1:78:af:ef:85:7b:1a:14:bc:38:12: d7:2f:24:78:80:d7:c1:01:15:ce:85:1d:cb:3b:66: dc:4b:27:c4:89:08:5a:c0:98:29:04:98:8c:15:ee: 64:2e:21:9d:d6:e5:fc:9a:49:e6:73:12:88:b4:13: 08:9b:41:3e:8d:b5:c7:f9:72:aa:b5:f5:8d:dc:ef: eb:65:d2:0e:66:52:da:0e:53:ae:54:4e:b9:a5:35: 96:6f:07:61:e6:a5:73:5c:bf:ee:7f:26:12:be:81: a1:6d:63:45:87:8c:85:83:f8:3e:fc:d0:55:6c:97: da:36:82:46:27:85:47:6f:30:37:93:42:c8:a9:21: 4a:3a:f9:62:1d:cb:b7:e4:44:dc:ed:71:5e:e5:f2: c7:3b:95:32:2c:be:23:98:e6:c1:b9:cd:ed:6a:28: 0b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E5:8E:DD:40:E2:7E:B6:73:09:F0:B7:08:A3:4B:49:4D:A8:19:9D X509v3 Authority Key Identifier: keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/kuWO3UDifrZzCfC3CKNLSU2oGZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.160.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:4d:a2:42:c3:5f:d6:62:ea:b9:86:ad:cc:b8:e2:27:be:27: 78:9b:f5:d0:32:d2:f1:3c:26:2f:df:5f:88:53:34:b9:01:cb: 02:79:92:2f:bb:6b:ca:62:1e:d0:2b:8d:b8:af:3e:22:23:c3: 18:90:c1:0f:6d:36:cc:61:7f:a3:9e:d9:30:e5:61:87:9d:00: 9f:2f:5e:f5:8d:b1:8d:9b:e9:95:11:54:12:41:25:05:7a:1b: db:c8:c4:68:b8:52:3d:eb:e6:7a:e4:e8:3a:4d:9b:a7:fa:ef: 7d:24:3a:62:e8:66:b3:39:ee:b4:50:4c:7d:b4:9d:89:31:fe: b9:73:46:c6:25:69:1f:39:d1:3a:a3:ee:25:ab:d9:10:1b:ef: 4a:d1:6d:1a:b9:82:22:a9:39:2e:f3:91:77:23:1b:f9:1f:7f: 07:35:41:af:2b:b0:6f:77:6d:c2:8c:e0:ca:b0:70:8e:50:96: 3f:58:e0:63:c5:03:73:f9:03:e5:c5:1b:8e:cb:c6:63:7e:65: 41:db:a8:77:e0:9c:76:d1:43:f7:68:10:02:86:33:c1:37:7c: 78:aa:f7:f3:d5:9a:1d:bc:2c:f2:9a:16:42:fc:cf:54:b8:f7: 90:ec:68:bb:f4:d0:a5:10:31:95:53:dc:44:f5:9f:11:ee:3e: 42:65:f5:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZxDY7NBTPS2uwTaD7srx4lKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYjM0MjA2MjU3NzE2OWE2MzU5N2U5ZTNhNjQyNWZjZGU2 YzE2NjEwHhcNMjYwMjA5MTcxMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmU1OGVkZDQwZTI3ZWI2NzMwOWYwYjcwOGEzNGI0OTRkYTgxOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVaseKopQ1+rRovCgyyjnGdkkOBF 3mXVHO1qR1faqTt5f1drHPqGe7j+nuIo7W+xZC/snvvF9vbObBY0enuwsuc29zL9 cBDclv8OUezrtI6meQPyQTTcCpA2+Q69oXiv74V7GhS8OBLXLyR4gNfBARXOhR3L O2bcSyfEiQhawJgpBJiMFe5kLiGd1uX8mknmcxKItBMIm0E+jbXH+XKqtfWN3O/r ZdIOZlLaDlOuVE65pTWWbwdh5qVzXL/ufyYSvoGhbWNFh4yFg/g+/NBVbJfaNoJG J4VHbzA3k0LIqSFKOvliHcu35ETc7XFe5fLHO5UyLL4jmObBuc3taigL9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJLljt1A4n62cwnwtwijS0lNqBmdMB8GA1UdIwQY MBaAFD2zQgYldxaaY1l+njpkJfzebBZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGJOQ0JpVjNGcHBqV1g2ZU9tUWxfTjVzRm1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81MTAwNjYtNDcxZS00NzJhLTg5Nzgt NDk3Mjc3YWZiYWE1LzEva3VXTzNVRGlmclp6Q2ZDM0NLTkxTVTJvR1owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC81MTAwNjYtNDcxZS00NzJhLTg5NzgtNDk3Mjc3YWZiYWE1 LzEvUGJOQ0JpVjNGcHBqV1g2ZU9tUWxfTjVzRm1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+GgMA0G CSqGSIb3DQEBCwUAA4IBAQB6TaJCw1/WYuq5hq3MuOInvid4m/XQMtLxPCYv31+I UzS5AcsCeZIvu2vKYh7QK424rz4iI8MYkMEPbTbMYX+jntkw5WGHnQCfL171jbGN m+mVEVQSQSUFehvbyMRouFI96+Z65Og6TZun+u99JDpi6GazOe60UEx9tJ2JMf65 c0bGJWkfOdE6o+4lq9kQG+9K0W0auYIiqTku85F3Ixv5H38HNUGvK7Bvd23CjODK sHCOUJY/WOBjxQNz+QPlxRuOy8ZjfmVB26h34Jx20UP3aBAChjPBN3x4qvfz1Zod vCzymhZC/M9UuPeQ7Gi79NClEDGVU9xE9Z8R7j5CZfVR -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:53 2026 by rpki-client