This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/kv-wz_H1IkgiuMYCGj0bpRh0nLE.roa File: kv-wz_H1IkgiuMYCGj0bpRh0nLE.roa (raw, json) Hash identifier: Uy297jSuY0TxK5aeIM5g0jUPcIVpmb6oF+UG7zwW9lA= Subject key identifier: 92:FF:B0:CF:F1:F5:22:48:22:B8:C6:02:1A:3D:1B:A5:18:74:9C:B1 Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00 Certificate serial: 019B76EB313402B6E5802B3AD3423BB194AF Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/kv-wz_H1IkgiuMYCGj0bpRh0nLE.roa Signing time: Thu 01 Jan 2026 00:18:03 +0000 ROA not before: Thu 01 Jan 2026 00:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205122 IP address blocks: 45.92.52.0/22 maxlen: 24 45.92.52.0/24 maxlen: 24 45.92.53.0/24 maxlen: 24 45.92.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:31:34:02:b6:e5:80:2b:3a:d3:42:3b:b1:94:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=239c45e43625522080aec53952989a13a28abd00 Validity Not Before: Jan 1 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92ffb0cff1f5224822b8c6021a3d1ba518749cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:29:fa:b1:04:a5:64:18:78:c8:7f:8f:91:42: 16:a6:04:ed:a3:73:c7:cd:69:cd:c9:e5:88:3d:76: 98:46:80:70:1d:33:4c:e0:56:db:86:63:6b:bf:dd: 56:0e:f6:70:ed:7b:43:75:aa:ec:40:ef:29:4c:a5: a3:77:73:00:f1:91:95:56:c9:9f:af:88:3e:ab:ff: d9:3e:ec:55:b0:83:0f:60:b3:01:85:d7:dd:ac:b3: be:a5:ab:62:32:0a:36:a6:c4:39:cb:b2:c1:e4:b9: 3c:88:36:47:ed:e6:0f:2d:43:87:cb:82:3f:10:85: fa:76:91:e6:fd:cf:0c:b9:a0:70:f4:73:54:d8:36: 92:42:66:1c:0c:70:33:73:22:95:07:d7:65:6f:7a: 9d:2a:2e:8b:d3:b1:df:a8:86:67:17:9c:47:40:44: 7c:68:41:52:1c:fa:6f:5b:82:32:c6:b8:3e:91:2a: 4e:0d:ff:eb:d7:17:f4:ff:98:36:99:b1:d1:54:7a: 24:b9:c2:84:27:9c:f9:ed:3c:1b:0f:6c:af:2b:cb: 28:fc:e9:94:7c:ee:37:8c:0d:47:80:85:54:30:62: 34:41:5d:5c:c9:82:dc:db:fe:de:83:45:78:64:87: 50:f0:b4:be:b3:81:a9:15:f5:31:df:7e:05:45:0c: af:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FF:B0:CF:F1:F5:22:48:22:B8:C6:02:1A:3D:1B:A5:18:74:9C:B1 X509v3 Authority Key Identifier: keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/kv-wz_H1IkgiuMYCGj0bpRh0nLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.52.0/22 Signature Algorithm: sha256WithRSAEncryption 87:6e:3a:98:05:db:e5:5b:ac:07:f9:0c:e8:19:cf:71:ed:08: 33:f7:d5:ce:27:2d:8f:37:9e:b7:38:ef:dc:10:0d:17:18:6a: 87:e2:ef:95:66:cf:01:23:aa:59:2e:10:8a:81:69:4e:4d:1a: 9e:30:0b:39:6d:0e:79:70:c3:e8:8b:aa:50:1b:2f:14:4c:59: cb:8f:27:42:84:2c:2f:6f:17:b8:86:fa:1b:c8:84:b2:94:db: a5:cf:c7:ad:97:96:c4:21:da:d1:93:57:2d:da:cf:6d:53:c9: 28:bc:d1:f0:3d:f4:67:49:3a:7d:77:64:52:6c:0e:0f:b3:a5: d9:08:01:60:07:97:53:e2:5c:9d:24:89:73:ac:74:31:c0:81: 01:85:94:5b:f2:a4:bd:47:ce:e4:5e:d5:96:bc:db:d9:70:47: 65:2d:e9:8b:39:cc:9d:21:b8:cf:b9:d5:e8:9c:b2:14:31:02: f7:22:ce:96:89:7a:84:c2:34:7b:52:e6:45:34:3d:e8:09:91: 0d:48:91:cb:09:e4:24:3e:83:64:b7:36:84:c5:24:99:47:dc: fe:6a:4c:f0:05:ce:9e:a4:ca:17:39:49:0c:3e:41:0c:58:23: 21:91:e4:6e:f7:cd:a9:ad:8c:48:f1:5b:87:17:0b:dc:02:5d: 21:08:3b:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26zE0ArblgCs600I7sZSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzOWM0NWU0MzYyNTUyMjA4MGFlYzUzOTUyOTg5YTEzYTI4 YWJkMDAwHhcNMjYwMTAxMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmZmYjBjZmYxZjUyMjQ4MjJiOGM2MDIxYTNkMWJhNTE4NzQ5Y2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSn6sQSlZBh4yH+PkUIWpgTto3PH zWnNyeWIPXaYRoBwHTNM4FbbhmNrv91WDvZw7XtDdarsQO8pTKWjd3MA8ZGVVsmf r4g+q//ZPuxVsIMPYLMBhdfdrLO+patiMgo2psQ5y7LB5Lk8iDZH7eYPLUOHy4I/ EIX6dpHm/c8MuaBw9HNU2DaSQmYcDHAzcyKVB9dlb3qdKi6L07HfqIZnF5xHQER8 aEFSHPpvW4Iyxrg+kSpODf/r1xf0/5g2mbHRVHokucKEJ5z57TwbD2yvK8so/OmU fO43jA1HgIVUMGI0QV1cyYLc2/7eg0V4ZIdQ8LS+s4GpFfUx334FRQyvOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJL/sM/x9SJIIrjGAho9G6UYdJyxMB8GA1UdIwQY MBaAFCOcReQ2JVIggK7FOVKYmhOiir0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2Njgt OTc1YTIzN2VjZDA2LzEva3Ytd3pfSDFJa2dpdU1ZQ0dqMGJwUmgwbkxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2NjgtOTc1YTIzN2VjZDA2 LzEvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVw0MA0G CSqGSIb3DQEBCwUAA4IBAQCHbjqYBdvlW6wH+QzoGc9x7Qgz99XOJy2PN563OO/c EA0XGGqH4u+VZs8BI6pZLhCKgWlOTRqeMAs5bQ55cMPoi6pQGy8UTFnLjydChCwv bxe4hvobyISylNulz8etl5bEIdrRk1ct2s9tU8kovNHwPfRnSTp9d2RSbA4Ps6XZ CAFgB5dT4lydJIlzrHQxwIEBhZRb8qS9R87kXtWWvNvZcEdlLemLOcydIbjPudXo nLIUMQL3Is6WiXqEwjR7UuZFND3oCZENSJHLCeQkPoNktzaExSSZR9z+akzwBc6e pMoXOUkMPkEMWCMhkeRu982prYxI8VuHFwvcAl0hCDuj -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:37 2026 by rpki-client