This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/18d035-3494-4ab7-a5cb-9f788fd27520/1/KwW1m_TU_lvvFLbiPGoG7omszF0.roa File: KwW1m_TU_lvvFLbiPGoG7omszF0.roa (raw, json) Hash identifier: WLXCnKipjggD7aV7lsVpIwB0+MMzwHxcfHMGEgytPNc= Subject key identifier: 2B:05:B5:9B:F4:D4:FE:5B:EF:14:B6:E2:3C:6A:06:EE:89:AC:CC:5D Certificate issuer: /CN=b43d4e9fe3a5487d20f1000191629150f628f3a1 Certificate serial: 019B7F152A8357BFEDCF4F339FFA0CF03B31 Authority key identifier: B4:3D:4E:9F:E3:A5:48:7D:20:F1:00:01:91:62:91:50:F6:28:F3:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tD1On-OlSH0g8QABkWKRUPYo86E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/18d035-3494-4ab7-a5cb-9f788fd27520/1/KwW1m_TU_lvvFLbiPGoG7omszF0.roa Signing time: Fri 02 Jan 2026 14:20:52 +0000 ROA not before: Fri 02 Jan 2026 14:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208201 IP address blocks: 45.153.120.0/24 maxlen: 24 2a0f:af00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/18d035-3494-4ab7-a5cb-9f788fd27520/1/tD1On-OlSH0g8QABkWKRUPYo86E.crl rsync://rpki.ripe.net/repository/DEFAULT/06/18d035-3494-4ab7-a5cb-9f788fd27520/1/tD1On-OlSH0g8QABkWKRUPYo86E.mft rsync://rpki.ripe.net/repository/DEFAULT/tD1On-OlSH0g8QABkWKRUPYo86E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:2a:83:57:bf:ed:cf:4f:33:9f:fa:0c:f0:3b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43d4e9fe3a5487d20f1000191629150f628f3a1 Validity Not Before: Jan 2 14:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b05b59bf4d4fe5bef14b6e23c6a06ee89accc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:27:19:f5:44:11:5b:da:d9:83:8f:93:38:42: 8d:04:90:12:fb:aa:15:66:2d:5e:ce:fd:8f:9f:2a: 98:ec:a9:62:86:f7:19:30:dc:84:fc:57:05:2d:6f: 25:2e:b8:4e:b6:02:18:3b:64:dc:32:e6:f2:b2:09: 09:f4:9a:b7:18:88:45:1c:be:53:65:25:40:08:0f: 78:fd:67:d8:cc:74:ae:fe:cd:31:f6:35:05:1e:51: 55:7a:fe:1c:e9:b6:4e:8a:73:e6:35:2f:79:14:e1: 7d:cf:3a:54:b8:bd:b3:2f:cc:b8:49:9e:74:91:e5: 08:aa:b5:43:16:c1:54:d2:e6:02:db:0a:59:17:6c: ba:63:02:e1:eb:ae:fc:ee:6a:8d:30:08:c8:ca:d1: 08:6e:66:26:8b:cb:84:4b:86:43:4e:c9:63:8f:52: a2:c1:43:dc:16:de:62:19:e6:81:86:2c:4f:0d:dc: 6a:c1:6b:ef:3b:27:ca:7a:a3:ec:31:78:fb:41:ef: a8:f7:09:45:2f:61:1a:06:9d:17:d0:e6:82:99:a5: e8:7c:2e:98:ce:b0:c4:9d:59:ea:38:3f:ff:59:52: 3a:70:1e:ed:fb:27:3f:18:c9:14:5f:69:f0:ed:3f: bc:cc:a8:16:be:95:d8:3a:da:0f:0e:34:1d:05:b4: 87:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:05:B5:9B:F4:D4:FE:5B:EF:14:B6:E2:3C:6A:06:EE:89:AC:CC:5D X509v3 Authority Key Identifier: keyid:B4:3D:4E:9F:E3:A5:48:7D:20:F1:00:01:91:62:91:50:F6:28:F3:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tD1On-OlSH0g8QABkWKRUPYo86E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/18d035-3494-4ab7-a5cb-9f788fd27520/1/KwW1m_TU_lvvFLbiPGoG7omszF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/18d035-3494-4ab7-a5cb-9f788fd27520/1/tD1On-OlSH0g8QABkWKRUPYo86E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.120.0/24 IPv6: 2a0f:af00::/32 Signature Algorithm: sha256WithRSAEncryption b1:08:27:65:36:5e:57:44:02:56:16:db:f9:8d:bc:42:77:10: 16:68:42:80:ec:09:12:ab:e0:6e:8e:a5:83:9e:ea:f7:96:fc: 7d:de:42:12:5d:09:1d:00:ff:f1:a4:d9:9b:d5:87:04:a0:1b: 7e:37:f6:af:6d:51:00:3f:d7:06:64:a0:9e:6d:21:98:aa:4a: 81:e9:93:fe:70:50:8a:4a:3d:64:c3:24:30:7f:dd:ba:fe:e8: a0:94:42:b9:a8:b7:ad:99:19:87:84:4b:47:74:dc:83:87:21: c3:c8:21:12:63:ee:1a:4e:6e:a9:d3:db:46:38:cf:67:57:61: 42:9d:c9:f7:97:6d:89:6e:5b:de:8f:80:30:e8:af:87:12:63: ae:b6:bf:a3:e1:8a:09:e3:3e:23:a5:52:bf:e9:f3:bb:b5:76: 42:9a:49:65:26:65:c1:9e:3d:5a:18:ef:ab:51:8b:af:63:41: 10:62:6c:50:b5:f9:6f:0e:96:96:d0:1e:9c:0b:d9:07:a7:52: 73:19:b6:b8:29:61:5d:d1:73:ab:e0:74:c6:ad:da:2d:04:0d: d5:cd:d8:72:71:4f:1d:9f:c4:c6:96:91:c9:58:95:46:87:e9: f3:1f:03:71:cf:42:04:ee:32:40:3e:7a:cd:2a:d9:4f:ba:49: 9a:2e:6a:54 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FSqDV7/tz08zn/oM8DsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0M2Q0ZTlmZTNhNTQ4N2QyMGYxMDAwMTkxNjI5MTUwZjYy OGYzYTEwHhcNMjYwMTAyMTQyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjA1YjU5YmY0ZDRmZTViZWYxNGI2ZTIzYzZhMDZlZTg5YWNjYzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ycZ9UQRW9rZg4+TOEKNBJAS+6oV Zi1ezv2PnyqY7KlihvcZMNyE/FcFLW8lLrhOtgIYO2TcMubysgkJ9Jq3GIhFHL5T ZSVACA94/WfYzHSu/s0x9jUFHlFVev4c6bZOinPmNS95FOF9zzpUuL2zL8y4SZ50 keUIqrVDFsFU0uYC2wpZF2y6YwLh66787mqNMAjIytEIbmYmi8uES4ZDTsljj1Ki wUPcFt5iGeaBhixPDdxqwWvvOyfKeqPsMXj7Qe+o9wlFL2EaBp0X0OaCmaXofC6Y zrDEnVnqOD//WVI6cB7t+yc/GMkUX2nw7T+8zKgWvpXYOtoPDjQdBbSHDwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCsFtZv01P5b7xS24jxqBu6JrMxdMB8GA1UdIwQY MBaAFLQ9Tp/jpUh9IPEAAZFikVD2KPOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEQxT24tT2xTSDBnOFFBQmtXS1JVUFlvODZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xOGQwMzUtMzQ5NC00YWI3LWE1Y2It OWY3ODhmZDI3NTIwLzEvS3dXMW1fVFVfbHZ2RkxiaVBHb0c3b21zekYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8xOGQwMzUtMzQ5NC00YWI3LWE1Y2ItOWY3ODhmZDI3NTIw LzEvdEQxT24tT2xTSDBnOFFBQmtXS1JVUFlvODZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALZl4MA0E AgACMAcDBQAqD68AMA0GCSqGSIb3DQEBCwUAA4IBAQCxCCdlNl5XRAJWFtv5jbxC dxAWaEKA7AkSq+BujqWDnur3lvx93kISXQkdAP/xpNmb1YcEoBt+N/avbVEAP9cG ZKCebSGYqkqB6ZP+cFCKSj1kwyQwf926/uiglEK5qLetmRmHhEtHdNyDhyHDyCES Y+4aTm6p09tGOM9nV2FCncn3l22Jblvej4Aw6K+HEmOutr+j4YoJ4z4jpVK/6fO7 tXZCmkllJmXBnj1aGO+rUYuvY0EQYmxQtflvDpaW0B6cC9kHp1JzGba4KWFd0XOr 4HTGrdotBA3VzdhycU8dn8TGlpHJWJVGh+nzHwNxz0IE7jJAPnrNKtlPukmaLmpU -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:18 2026 by rpki-client