This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/krwQ_58rpuR7vh46Z5jxUh2os1c.roa File: krwQ_58rpuR7vh46Z5jxUh2os1c.roa (raw, json) Hash identifier: aD7W1qZcEisQdWcAvIDFWWzHQesvPWcQVTbTh9Rofrs= Subject key identifier: 92:BC:10:FF:9F:2B:A6:E4:7B:BE:1E:3A:67:98:F1:52:1D:A8:B3:57 Certificate issuer: /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824 Certificate serial: 019B7DCA6B7959E3F6EB7767B745DF680D10 Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/krwQ_58rpuR7vh46Z5jxUh2os1c.roa Signing time: Fri 02 Jan 2026 08:19:36 +0000 ROA not before: Fri 02 Jan 2026 08:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15600 IP address blocks: 5.149.32.0/19 maxlen: 24 185.74.132.0/22 maxlen: 24 2a00:d360::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:6b:79:59:e3:f6:eb:77:67:b7:45:df:68:0d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824 Validity Not Before: Jan 2 08:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92bc10ff9f2ba6e47bbe1e3a6798f1521da8b357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:f1:9e:16:87:41:ef:65:31:98:d2:b1:c5: 11:bb:09:41:ff:58:6c:68:3d:c9:7d:f3:9f:97:d0: a4:9b:55:36:ba:15:f5:ae:ac:d5:1e:06:21:0d:a0: 43:60:a8:10:c4:e6:12:8c:ba:f2:26:e3:c4:7a:6f: f4:52:10:2d:c2:98:a7:83:0a:3d:85:c2:53:9c:29: 20:d0:9d:68:44:ed:b3:19:d5:d1:1c:b3:37:85:a1: ec:42:46:d5:1f:47:d5:4d:5f:72:9b:d3:a5:64:78: 17:78:0e:eb:14:9e:65:6b:96:b6:9c:3a:23:49:2f: 27:66:69:ff:e9:24:d9:d1:91:f8:d8:d9:93:d3:9d: 1c:a1:51:7c:69:d0:9a:ff:f2:6f:9a:6e:23:e2:4e: f4:e4:a7:03:26:8f:d4:20:2d:f6:63:c0:31:33:2e: df:86:45:e8:9a:7a:8a:4d:da:4e:16:5c:9f:a2:86: b3:c1:6b:07:ce:e0:a4:3b:9a:4e:93:de:ec:4b:19: bb:db:ca:1c:b5:3b:8b:45:91:8b:6d:7f:ed:e8:b2: 0c:86:87:53:e0:72:b0:4d:74:e8:f4:20:6a:6c:3b: c5:a5:bf:7b:2e:d2:dd:6f:b1:60:f8:0b:ed:43:7d: 19:a9:64:8d:26:af:af:47:7f:eb:28:32:2b:c1:1a: 2b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BC:10:FF:9F:2B:A6:E4:7B:BE:1E:3A:67:98:F1:52:1D:A8:B3:57 X509v3 Authority Key Identifier: keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/krwQ_58rpuR7vh46Z5jxUh2os1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.32.0/19 185.74.132.0/22 IPv6: 2a00:d360::/29 Signature Algorithm: sha256WithRSAEncryption 1a:54:84:5e:15:30:0c:97:6b:73:3c:30:37:5f:d6:6f:9d:74: 2b:65:c0:19:5d:08:86:c4:79:03:2b:cc:86:bd:05:68:fd:54: db:aa:05:33:59:5d:20:19:4a:b5:83:df:c6:6f:05:18:f7:b0: 92:d3:12:ec:2f:ec:42:d3:5d:d0:be:9b:38:a8:f8:38:14:5b: 74:7d:92:ab:8a:ed:c9:7a:05:fd:b5:7b:ca:14:a1:43:1b:5c: 5e:be:8f:c2:24:dc:81:ac:c2:40:e4:e1:f6:4c:b7:dc:c5:c8: b1:b3:c7:d4:82:0d:ef:50:76:c5:a2:de:1c:d4:98:10:02:62: 1e:a5:0f:07:db:98:17:f1:95:26:2e:61:32:5d:e3:bf:fd:5f: ea:22:12:02:02:02:5a:65:73:ff:d6:1b:82:91:5b:32:be:12: 65:21:05:6f:0d:90:0d:c5:04:11:18:7b:3f:7c:dd:35:b4:96: 70:20:e1:91:31:b7:44:f1:a3:57:2b:84:93:8b:11:42:f7:f6: aa:a9:c9:a5:7a:84:0f:4e:b5:77:0d:03:18:d1:2e:c5:bb:a3: 2d:a2:27:e6:0b:42:4c:a1:1b:85:e9:05:73:58:36:37:cc:61: 0a:59:86:cf:6f:de:f8:ea:6e:2d:af:06:f0:c0:2c:9c:86:c0: 49:73:96:0f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9ymt5WeP263dnt0XfaA0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZDFlOTE4NWVhYThiNWM3MWM4OWZhYmU2ZmJlMmFjZjdl YTk4MjQwHhcNMjYwMTAyMDgxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmJjMTBmZjlmMmJhNmU0N2JiZTFlM2E2Nzk4ZjE1MjFkYThiMzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocrxnhaHQe9lMZjSscURuwlB/1hs aD3JffOfl9Ckm1U2uhX1rqzVHgYhDaBDYKgQxOYSjLryJuPEem/0UhAtwpingwo9 hcJTnCkg0J1oRO2zGdXRHLM3haHsQkbVH0fVTV9ym9OlZHgXeA7rFJ5la5a2nDoj SS8nZmn/6STZ0ZH42NmT050coVF8adCa//Jvmm4j4k705KcDJo/UIC32Y8AxMy7f hkXomnqKTdpOFlyfooazwWsHzuCkO5pOk97sSxm728octTuLRZGLbX/t6LIMhodT 4HKwTXTo9CBqbDvFpb97LtLdb7Fg+AvtQ30ZqWSNJq+vR3/rKDIrwRorpwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJK8EP+fK6bke74eOmeY8VIdqLNXMB8GA1UdIwQY MBaAFErR6Rheqotcccifq+b74qz36pgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zYjFjYjQtOTZhOS00ZWQyLWJkOTMt YzM4NjY5YjM3YjllLzEva3J3UV81OHJwdVI3dmg0Nlo1anhVaDJvczFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zYjFjYjQtOTZhOS00ZWQyLWJkOTMtYzM4NjY5YjM3Yjll LzEvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFBZUgAwQC uUqEMA0EAgACMAcDBQMqANNgMA0GCSqGSIb3DQEBCwUAA4IBAQAaVIReFTAMl2tz PDA3X9ZvnXQrZcAZXQiGxHkDK8yGvQVo/VTbqgUzWV0gGUq1g9/GbwUY97CS0xLs L+xC013Qvps4qPg4FFt0fZKriu3JegX9tXvKFKFDG1xevo/CJNyBrMJA5OH2TLfc xcixs8fUgg3vUHbFot4c1JgQAmIepQ8H25gX8ZUmLmEyXeO//V/qIhICAgJaZXP/ 1huCkVsyvhJlIQVvDZANxQQRGHs/fN01tJZwIOGRMbdE8aNXK4STixFC9/aqqcml eoQPTrV3DQMY0S7Fu6MtoifmC0JMoRuF6QVzWDY3zGEKWYbPb9746m4trwbwwCyc hsBJc5YP -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:29 2026 by rpki-client