This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/KWeVkIa_re5cBIGN-H8lHQ83Pek.roa File: KWeVkIa_re5cBIGN-H8lHQ83Pek.roa (raw, json) Hash identifier: YXKlClQCIhbjqag4FmDQaSxb20jtsIF58K9HDHM5ar0= Subject key identifier: 29:67:95:90:86:BF:AD:EE:5C:04:81:8D:F8:7F:25:1D:0F:37:3D:E9 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15EFBC671BE683D76CF935D91EF946 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/KWeVkIa_re5cBIGN-H8lHQ83Pek.roa Signing time: Fri 02 Jan 2026 14:21:42 +0000 ROA not before: Fri 02 Jan 2026 14:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208139 IP address blocks: 185.200.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ef:bc:67:1b:e6:83:d7:6c:f9:35:d9:1e:f9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2967959086bfadee5c04818df87f251d0f373de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3a:af:6b:e9:12:69:84:cd:0a:3b:a9:a7:07: 08:9c:7f:81:cd:72:5d:cd:3d:b7:9a:14:7d:cc:8f: a6:30:3d:c0:92:de:aa:a6:05:1b:ee:01:85:a8:1d: 6c:c7:1a:1e:cd:3d:e3:0b:05:3f:be:01:85:39:e3: 09:d7:9e:69:7b:5e:03:b5:1b:ed:44:42:a9:34:7b: 86:6a:67:0a:91:f3:92:5b:0c:19:64:d1:74:ac:35: 1e:86:77:c7:18:5f:84:cf:02:b4:00:b7:07:42:fe: 06:29:ba:e3:c6:b7:be:c7:c9:89:0a:4b:40:7b:20: e1:f9:0a:97:0f:92:f6:ef:a2:61:48:23:12:5f:01: d3:54:62:34:64:db:2f:57:9e:a0:1c:07:08:25:ea: 30:58:10:cc:93:a7:32:57:51:2a:02:55:89:3e:47: 6f:4c:95:86:b8:ad:f5:94:81:f1:1f:4e:a2:d0:b2: 67:1a:55:6b:4b:a9:e2:e6:65:17:1e:9d:bd:32:9f: ae:ea:95:93:f8:48:31:89:09:6d:29:20:a5:05:86: a4:4a:3c:1e:19:d1:97:27:a0:dc:29:70:9d:eb:79: 3c:1d:43:f6:20:3a:a4:69:ef:66:b3:26:bc:54:28: 41:81:74:81:0e:fb:36:e6:a8:20:31:b9:24:59:32: 24:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:67:95:90:86:BF:AD:EE:5C:04:81:8D:F8:7F:25:1D:0F:37:3D:E9 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/KWeVkIa_re5cBIGN-H8lHQ83Pek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.200.61.0/24 Signature Algorithm: sha256WithRSAEncryption bb:19:ad:92:2b:cb:ef:d2:4c:ac:31:cb:ce:05:81:8b:f9:17: f2:0f:e0:50:5c:a6:12:13:9a:54:e1:a5:be:c9:6a:70:9a:af: 40:ee:c0:20:bc:df:28:4d:e8:90:4d:d1:8b:f5:64:23:c6:16: cf:91:21:2f:c2:45:38:c9:cb:7f:27:1e:f8:1f:9e:c2:3e:91: 6c:a3:5d:59:27:74:83:24:fd:24:8e:0d:73:c9:ec:b5:c4:d2: 16:0e:45:21:08:db:8f:58:22:c7:88:eb:08:3c:e8:0e:c4:ca: f2:0c:0b:59:95:f2:4e:45:19:ef:67:16:8b:65:32:cd:f8:6d: fa:c7:58:c8:aa:c5:c2:e2:6b:bf:03:c4:17:d6:01:cf:73:07: 24:22:09:a6:58:34:ea:66:b2:2b:b4:13:a4:37:52:89:9b:93: 75:a3:cb:d7:7d:a3:ed:bc:c9:4e:c6:d5:d5:15:de:3f:95:22: 4e:55:e3:ee:21:d4:12:52:11:39:09:c2:00:3b:fb:53:75:79: 93:33:5e:c6:67:73:37:c7:57:0c:74:47:a0:87:58:3e:f8:ae: 74:50:57:44:59:63:cf:9a:5d:ff:3f:8a:84:21:33:5b:e9:f9: 53:54:d5:ed:7a:02:a7:8f:03:7e:ac:e5:4f:98:8c:83:3c:ae: 87:65:64:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fe+8Zxvmg9ds+TXZHvlGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTY3OTU5MDg2YmZhZGVlNWMwNDgxOGRmODdmMjUxZDBmMzczZGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTqva+kSaYTNCjuppwcInH+BzXJd zT23mhR9zI+mMD3Akt6qpgUb7gGFqB1sxxoezT3jCwU/vgGFOeMJ155pe14DtRvt REKpNHuGamcKkfOSWwwZZNF0rDUehnfHGF+EzwK0ALcHQv4GKbrjxre+x8mJCktA eyDh+QqXD5L276JhSCMSXwHTVGI0ZNsvV56gHAcIJeowWBDMk6cyV1EqAlWJPkdv TJWGuK31lIHxH06i0LJnGlVrS6ni5mUXHp29Mp+u6pWT+EgxiQltKSClBYakSjwe GdGXJ6DcKXCd63k8HUP2IDqkae9msya8VChBgXSBDvs25qggMbkkWTIklQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFClnlZCGv63uXASBjfh/JR0PNz3pMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvS1dlVmtJYV9yZTVjQklHTi1IOGxIUTgzUGVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucg9MA0G CSqGSIb3DQEBCwUAA4IBAQC7Ga2SK8vv0kysMcvOBYGL+RfyD+BQXKYSE5pU4aW+ yWpwmq9A7sAgvN8oTeiQTdGL9WQjxhbPkSEvwkU4yct/Jx74H57CPpFso11ZJ3SD JP0kjg1zyey1xNIWDkUhCNuPWCLHiOsIPOgOxMryDAtZlfJORRnvZxaLZTLN+G36 x1jIqsXC4mu/A8QX1gHPcwckIgmmWDTqZrIrtBOkN1KJm5N1o8vXfaPtvMlOxtXV Fd4/lSJOVePuIdQSUhE5CcIAO/tTdXmTM17GZ3M3x1cMdEegh1g++K50UFdEWWPP ml3/P4qEITNb6flTVNXtegKnjwN+rOVPmIyDPK6HZWSb -----END CERTIFICATE-----Generated at Tue Jan 6 20:51:25 2026 by rpki-client