This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa File: kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa (raw, json) Hash identifier: fIncvrx8pskfVUirWFyGF8SlrzYaWbNWYQWFbpi3LtU= Subject key identifier: 93:3C:31:29:07:C2:17:7C:57:E2:CC:14:EF:E8:CE:CF:D6:64:7F:3B Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c Certificate serial: 019B7CED0A4750159A6C65F65A4BE0B19AF4 Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa Signing time: Fri 02 Jan 2026 04:17:47 +0000 ROA not before: Fri 02 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33821 IP address blocks: 195.28.176.0/24 maxlen: 24 195.28.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:0a:47:50:15:9a:6c:65:f6:5a:4b:e0:b1:9a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c Validity Not Before: Jan 2 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=933c312907c2177c57e2cc14efe8cecfd6647f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:c5:7d:1d:16:af:ca:13:83:d0:16:cc:ea: c2:60:80:4d:b5:2a:de:f6:89:47:b6:2a:cf:70:1e: 80:b1:23:d4:90:3d:54:b1:80:15:ee:89:e5:93:91: 3e:47:99:dc:f2:25:c1:72:3c:a4:01:76:3c:a2:7e: b9:ad:c1:ea:b5:eb:5c:4e:37:0b:78:09:a7:a7:aa: bb:fa:7a:4b:96:d5:ea:9a:b1:f9:0d:82:28:2a:0a: de:46:07:3f:e1:a1:c6:88:c1:db:79:d7:c0:31:80: 65:9a:a0:27:ab:60:e7:99:c4:20:a6:90:9e:64:7a: 64:e2:45:d3:7a:0d:c6:14:11:93:87:8a:87:ba:88: 6e:e4:46:72:76:73:a8:c3:d8:86:2c:94:10:21:6c: d2:1b:d5:57:7a:f3:a3:a7:1b:97:ca:3f:c8:86:47: 21:34:ab:c8:77:47:46:d4:1d:64:c7:f4:90:66:69: ae:96:e0:8f:dd:a0:79:a3:d4:3e:5d:6b:94:2f:86: ba:ad:16:b8:db:26:38:34:91:92:d4:bb:9c:0f:42: 46:22:d1:fe:22:d5:ee:2f:82:2c:f1:80:44:40:fc: c8:76:09:3c:34:97:6d:7d:b8:b3:25:3b:12:f8:ff: c8:fd:66:07:46:49:90:8c:02:48:c0:cf:7e:47:f8: 58:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3C:31:29:07:C2:17:7C:57:E2:CC:14:EF:E8:CE:CF:D6:64:7F:3B X509v3 Authority Key Identifier: keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.28.176.0/23 Signature Algorithm: sha256WithRSAEncryption 13:4e:c5:c2:97:85:f5:99:5b:8e:4a:66:0e:cb:53:92:6a:0a: a7:8f:ca:d2:a9:c4:7f:9a:db:27:57:1f:13:be:b5:2d:f3:bb: 62:8c:8f:31:8a:10:16:77:96:40:85:7d:4e:da:98:0d:e3:05: 50:fd:88:1f:2d:7c:48:86:93:d7:37:4d:ce:a3:ba:fe:57:76: 68:70:13:ad:45:db:a3:36:2c:bf:8b:7e:b3:c9:f6:56:d8:f0: 5f:4c:11:a1:e3:43:ad:13:20:d3:2f:ef:01:bd:24:79:64:4d: 20:6a:59:b5:f5:e4:b8:56:24:b7:83:51:b7:6d:57:29:68:ed: 77:b2:41:ec:a3:ba:15:69:40:a9:b2:4c:44:1d:33:8e:cd:8a: 42:0d:2b:0b:72:9c:c6:4e:d0:93:ba:20:9d:1b:4d:38:b7:66: b4:92:b9:6e:04:eb:64:38:8a:d1:12:3a:e1:78:e8:e0:a6:df: c1:53:31:ca:17:87:04:16:ad:73:1d:21:65:e6:3c:93:bc:0f: 2d:dc:b0:4b:5c:59:3e:cf:cb:a3:ee:0e:02:16:73:a7:45:01: ab:43:9f:80:80:f5:6b:c7:35:f5:7f:d8:1c:de:0a:62:95:06: 9b:33:a2:b1:d8:44:dc:0b:21:9c:14:94:df:df:27:a4:9c:a3: 20:7b:b6:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87QpHUBWabGX2WkvgsZr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MWViNTNjYjU2NzE4ZGYwZDk0NzZjZDk4NGFhYzQ0MzJi OTBmNmMwHhcNMjYwMTAyMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzNjMzEyOTA3YzIxNzdjNTdlMmNjMTRlZmU4Y2VjZmQ2NjQ3ZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7fFfR0Wr8oTg9AWzOrCYIBNtSre 9olHtirPcB6AsSPUkD1UsYAV7onlk5E+R5nc8iXBcjykAXY8on65rcHqtetcTjcL eAmnp6q7+npLltXqmrH5DYIoKgreRgc/4aHGiMHbedfAMYBlmqAnq2DnmcQgppCe ZHpk4kXTeg3GFBGTh4qHuohu5EZydnOow9iGLJQQIWzSG9VXevOjpxuXyj/Ihkch NKvId0dG1B1kx/SQZmmuluCP3aB5o9Q+XWuUL4a6rRa42yY4NJGS1LucD0JGItH+ ItXuL4Is8YBEQPzIdgk8NJdtfbizJTsS+P/I/WYHRkmQjAJIwM9+R/hYSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJM8MSkHwhd8V+LMFO/ozs/WZH87MB8GA1UdIwQY MBaAFNYetTy1ZxjfDZR2zZhKrEQyuQ9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWg2MVBMVm5HTjhObEhiTm1FcXNSREs1RDJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zZGI5YTktYWJlZi00ZWQ3LWIzOTIt OWFlM2RmZTk3NDgxLzEva3p3eEtRZkNGM3hYNHN3VTctak96OVprZnpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zZGI5YTktYWJlZi00ZWQ3LWIzOTItOWFlM2RmZTk3NDgx LzEvMWg2MVBMVm5HTjhObEhiTm1FcXNSREs1RDJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwxywMA0G CSqGSIb3DQEBCwUAA4IBAQATTsXCl4X1mVuOSmYOy1OSagqnj8rSqcR/mtsnVx8T vrUt87tijI8xihAWd5ZAhX1O2pgN4wVQ/YgfLXxIhpPXN03Oo7r+V3ZocBOtRduj Niy/i36zyfZW2PBfTBGh40OtEyDTL+8BvSR5ZE0galm19eS4ViS3g1G3bVcpaO13 skHso7oVaUCpskxEHTOOzYpCDSsLcpzGTtCTuiCdG004t2a0krluBOtkOIrREjrh eOjgpt/BUzHKF4cEFq1zHSFl5jyTvA8t3LBLXFk+z8uj7g4CFnOnRQGrQ5+AgPVr xzX1f9gc3gpilQabM6Kx2ETcCyGcFJTf3yeknKMge7ZN -----END CERTIFICATE-----Generated at Tue Feb 10 01:23:46 2026 by rpki-client